Method and system for persons/speaker verification via communication systems

The invention relates to a system and a method of People / speaker verification of subscribers via different Communication systems is used, according to the preamble of the first claim.

it, a telecommunication connection via the various known is Telecommunications networks transmitted line identification CLI (Calling Line Identification), ANI (Automatic Number Identification), IP address (Internet Protocol Address) or the HLR (Home Location Register to identify).

The distinction between individual users of a telecommunication connection by retrieving a-personal identifier, such as a PIN, possible. The PIN is a personal identification code, with which a user over a system identifies.

Furthermore, speech recognition systems and speaker recognition systems are known. In the speech recognition systems, the content of a spoken utterance is recognized. The generally known speech recognition systems are based on the basis of nuance of speech recognition algorithms, such as the system supplier communications, or Temic which has a larger number of words in real time can recognize.

If such algorithms for voice-controlled operation, for example, the Functions of a telecommunication terminal is used, the problem of Recognition / identification of a specific user. This problem is Speaker recognition systems solved. This group includes in particular Speaker verification systems. When is speaker verification systems from a Person claimed identity by analyzing a sample of that person's voice checked. The principle of speaker verification based on the assumption that each person can be uniquely identified by their voice. The safety standard of such a solution depends on how well the verification algorithm, the voice can distinguish an authorized user from all unauthorized users. However, this principle requires a significant investment in time and effort to Performing a required with this approach the training process concerned verification system. More known biometric People / speaker verification systems are based for example on the comparison a finger imprint, the comparison of hand-geometry, the comparison of the Retina, the comparison of the face or a comparison of the signature.

Another known approach for determining a person's identity based on the art of verification using verbal information (VIV). These by information that is only known by you to be verified subscriber and their content regarding question and answer between the service provider and the upstream to be verified participant in the actual verification Process has been set. This can, for example, a personal legitimacy sentence, be a PIN, a birth, a maiden name or a residential address.

For example, from DE 195 27 022 C2 a method for authenticating Service users, in particular for the authentication of users of a value-added voice services, Virtual Card Calling (VCC), and authentication card to known wherein for each service user a user individually determined Amount of information, consisting of a corresponding number of requests, and an amount Answers will be saved. From interrogation amount to one or more Visits to selected and sent to the user to answer. Only at Agreement of the input by the customer replies to the respective central to questions stored responses from the user access to the desired service enabled. This solution is an out of questions and the associated responses existing, self-contained quantity of information basis, which was agreed upon in advance with the users.

D698 00 320 T2 describes a method and apparatus for speech recognition by examination of oral information by means of coercive decoding. This solution also based on the examination of the verbal information content, which in a is the speaker emitted utterance. The speaker verification takes place while on the basis of a forced decoding the spoken utterance that based on a special pass-phrase, which a given speaker assigned. This solution is also on an already with the users agreed text resorted.

In DE 698 14 195 T2 is an apparatus for speaker recognition or a described speaker recognition method in which the speaker verification on the Query an identifier, a preset text and a password from to verified subscriber occurs.

From DE.1981 2897 is a method of providing known telecommunications-based services, in which a dialogue a customer from a variety of possible services a variant available is provided, which he for the solution to his problem or his Service desire required. The system checks whether the customer in question for the Variant required terminal configuration has access, or that the Terminal configuration of the client to the variant underlying service or the service combination supported.

In all known solutions for personal identification are mostly to Individual solutions. This is in particular also in the verification systems the case, the based on the evaluation of personal biometric data. these Systems, after a successful verification access to a by this System granted protected area or service. not Runs the verification successful, access is denied, or there will be an additional Verification test, preferably on the principle of verification using verbal Information performed. This applies in particular to service offers Services / providers to which an access to their services by means biometric process limit. Within the "mobile society" accepts the need for more and more, at each Place and at any time, preferably over the Internet, access to databases of To access services or services by providers / providers in to take advantage of. but is for mobile access to these services special safety management requires that or to access internal data protected areas and services with the necessary safety guarantees. The object of the invention is directed to a solution in a customer If necessary, a variety of ways for people / speaker verification in to make available part of a complex security management. The object is achieved by a method and a system that in particular the mobile access of customers to preferably biometric Security systems protected database areas or services of a Service provider / provider supports.

The invention relates to a system and method for People / speaker verification. Significant components of the system are a Control logic SL with access to<ul><li>a voice-controlled dialog system DS with stored for polling Verification dialogues (verification query module V).</li><li>a module for determining the telecommunication terminal TA</li><li>a database for biometrics customer profiles BD in which the biometrics customer profiles BK are stored and</li><li>a provider database PD</li></ul>

The process for individuals / speaker verification is aimed different personal biometric data, which are suitable for the clearly determine access authorization by a customer on to identify telecommunications systems transmit, analyze and . Rate This makes it possible, under the required compliance for access Safety requirements, all a customer available exploit verification ways to access a legitimate request Customers to a protected database field or to a protected to enable service offer of a service provider / provider. According to the invention, for each customer, according to its communication data and his communication skills, an individual biometrics customer profile BK created and stored in a database for biometrics customer profiles BD. there the communication data relating to the customer available Terminals or terminal configurations. The communication behavior refers the commonly used by the customer claim Communication deals, for example, on databases, database fields and services of service providers / providers offered. In the present invention Biometrics customer profile BK are also all the customers available contain terminals and terminal configurations, based on a verification biometric data are suitable. Here, each terminal or each Terminal configuration linked to the corresponding port identifier. The Connection Label allows a terminal or a terminal configuration<sl><li>a) clearly identify and assign clearly b) the owner of the terminal. At the same time is / are each terminal and each terminal configuration and thus each connection identifier that biometrics or biometrics assigned, an over the middle of the terminal or the terminal configuration Verification process can be technically realized.</li></sl>To prepare its individual biometrics customer profile BK, the customer must register before using. In a registration process all basic biometric data of the customer, or vehicle due to its terminals Terminal configuration are possible, and determined in his individual biometrics Customer profile BK deposited. As a result, the registration process is part of a database for Biometrics customer profiles BD for each customer an individual biometrics Customer profile BK before that allows the customer in accordance with the technical possibilities of his terminals or terminal configurations If necessary, automatically one after all verification options available can be provided that for the access to a protected database space or services are allowed.

When a customer calls, for a biometrics customer profile BK has already been created, to a portal on which the solution of the invention as a system solution E is implemented, and expresses the access request to a biometrically protected Database space or service D, then by a matrix-like structured control logic SL, the access to a module for determining the telecommunication connection TA and the database for biometrics customer profiles BD has, on the basis of Line identification of the terminal used by the customer for the call and the Terminal configuration in comparison with the data of biometrics customer profile BK recognized the terminals or terminal configurations to the customer for a Verification available based biometric method. By the Customers dialed destination number can be seen which service request the customer has, or at what protected database space or on which by biometric verification process backed service D of the customer desires access. Using a provider database PD, in which all the portal Dbspaces or services offered in conjunction with the corresponding Access address / access numbers and access conditions are stored, be the matrix-like structured control logic SL access conditions determines that the customer's access to the required database space or service D rules. Under conditions of access for the purposes of the invention is the collection of understand biometric verification methods for governing access desired service are D approved. The control logic SL to the customer are available Terminals and terminal configurations with the desired service for the D fixed access requirements matched. is This comparison determined which approved for the respective Service D Verification options to the customer due to its terminals or Terminal configuration are available. The data thus obtained is a voice-controlled dialog system DS provided on the further carried interaction for realizing the access desire of the customer. The dialog system DS provides the customer with corresponding preprogrammed Dialogues in succession by all the concerned service D approved Verification options at successively verification options that the Customers are technically accessible. The via the control logic unit SL in conjunction with the voice-controlled dialog system DS controlled dialogue between the dialog system DS and the client is continued until such time as by a successful Verification attempt of access to the desired service D is released, or until all eligible for the service D and by the terminal configuration of the customer assisted verification options have been exhausted. The solution provides course the possibility of access to a secured area or service D of the Verification of at least two different verification method depends to make.

The inventive process is with reference to an embodiment explained.<sl><li>Fig. 1 shows by block diagram a for the realization of the service possible architecture.</li><li>In FIG. 2 a possible flow chart for the verification process is shown</li></sl>

The inventive method is explained with an example in which the Customer via a PC with scanner A, a cell phone with built-in camera and a B Facsimile C features (see Fig.1). The customer chooses on his PC with scanner A Portal to that on the Inventive solution is implemented as a system E and expresses its Access request to the desired, using biometric verification methods, secured service D. The access request of the client or the Destination number / destination address of the desired service D is either under a voice application, the customer with a dialog system DS of the portal or by the data entered by the customer acquired. Simultaneously, the detection is performed the terminal identifier of the terminal from which the customer calls. The detection of the Line identification of the caller and the selected caller Destination number / destination address takes place via a module for determining the Telecommunications terminal TA. About the database for biometrics customer profiles BD, of all biometrics customer profile BK of customers involved in the system are assigned, are about the connection identifier in the biometrics customer profile associated BK custom data contained of the line identification Customers detected and forwarded to the to the control logic SL. Of the matrix design control logic SL is a connection to the provider built database PD. By comparing the in the provider database PD stored data with the destination number / destination address to which the customer the wants access, the desired by the customer service and the D for the service D detected authorized biometric verification method by the control logic SL and evaluated. Under the embodiment, the following biometric Verification procedures for the customer's requested service D approved:<sl><li>1. verification based on the speaker recognition based on the comparison of the Speech parameters of a password,</li><li>2. verification on the basis of face recognition,</li><li>3. Verification on the basis of the comparison of a fingerprint.</li></sl>Based on data from the provider database PD builds the control logic SL a Connection to the database for biometrics customer profiles to BD in which the individual biometrics customer profile BK for authorized service D customers stored. The relationship between customer and the customer desired service results from the terminal identifier of the terminal of Customer and the customer-selected destination number / address of the desired destination Service. About the line identification of the customer terminal via which the customer on the portal accessed, here the PC with Scanner A with the IP address as a connection identifier, determines the control logic SL individual biometrics customer profile BK of Client in question and hence also the verification options that the customer As part of its terminals or its terminal configuration available. In the embodiment, the customer has in addition to the PC with scanner A, an Mobile Phone with Camera B and a fax machine C. Due to these terminals or Terminal configurations are available to the customers the following procedures for the verification based biometrics for access to the service D are available:<dl tsize="20" compact="compact"><dt>PC, A:</dt><dd>Signature, finger / hand print (PC with scanner)</dd><dt>Mobile Phone with Camera, B:</dt><dd>Facial recognition, retinal scan, voice recognition</dd><dt>Fax machine, C:</dt><dd>Signature, finger / hand Footprint</dd></dl>

After comparing the desired for access to the service D in the provider database PD established biometric method with the data of the biometrics Customer profile BK of the calling customer, are the control logic SL, the determined biometric verification process, the customer due to its Terminals or terminal configurations are available. In the embodiment, the customer has access to all verification options, the approved alternative in the context of the desired service. For individual biometric verification process of the customers are mostly even several terminals available. For example, the verification on the basis of Finger footprint and on the basis of the customer's signature on the PC A customer be made because the PC A customer a scanner is connected. At the same time the customer but also a facsimile device C for the same is Verification options. The determined via the control logic SL possible verification procedures are an automatic evaluation with regard to the order of the customer in succession to be offered verification procedures subjected. The intelligent selection of the order in which the possible Verification procedures are offered to the customer, an effect is achieved the was not to be expected before. This effect also increases the safety of And verification is achieved by that in the transition from a Verification process for a different verification methods specifically the medium of a Media fraction is used. Among media fraction is understood to mean that at a change of the verification process, a change of The communication medium over which the verification is to be performed, is carried out. For the embodiment in which the access of customers to the portal via the Internet has taken place, it would mean that the customer first for his Verification experiment example, the verification is offered on his cell phone B. If the verification test on the cell phone B does not complete successfully can be, is the customer as a second verification possibility, for example, offered verification via the fixed network, including his fax machine C etc.

Following a successful means of the above-mentioned selection principle automatic determination of Order in which the verification options are offered to the customers, from the control logic SL via the dialog system DS in conjunction with a Verification query module V, the first connection to the terminal of the customer constructed over which the customer to carry out the verification procedure should be asked. In the exemplary embodiment, the control logic of the SL Cell B customer driven. If the customer accepts the call on his cell phone B contrary, it is the voice-controlled dialog system DS example asked verbally enter an agreed password for the voice recognition. After entering the password, the entered password via the control logic SL with the biometrics customer profile BK for the customer for the speaker recognition stored voice profile compared. is In accordance of the speech parameters via the control logic SL, the connection to the selected by the customer service D released and the customer will automatically with the desired service D connected. If the first verification test of the customer was not successful, The detected by the control logic unit SL. In this case, according to the previously fixed sequence, a second verification test of the control logic SL initiated. The second verification test can be offered to the customer via fax C will. the customer may be, for example, asked about the fax C, its Signature or a picture of his palm leave. If you return the Signature is by the customer received via fax with a signature of Customers in biometrics customer profile BK customer specimen signature is stored, are compared. In accordance to the customer is automatically by him released desired service.

According to the principles described above the customer are successively all Verification options offered which want to access the service allowed are. Here all possibilities are exhausted, the customer in the Setting his terminals or terminal configuration and the locations of the Communication systems are available. With the invention is a solution available to access a customer Databases and services that protected by biometric verification methods are much easier. A great advantage of this solution is that a made separation between verification process and service of the provider itself can be. In such a case the provider only determines the Verification procedures that it intends to grant the access to its service / services. The invention further provides the advantage that all the components for verification are necessary in the context of an autonomous unified solution, both can be arranged locally, as well as centrally. This makes the actual Verification process for all through the portal accessible database areas or Services whose access different biometric verification methods is secure, according to a single, complex in itself solution. The the Invention underlying control logic SL is due to their matrix-like structure expanded at any time and can therefore immediately to changing structures, both in Regards novel biometric verification process, as well as in relation to new terminals and terminal configurations are adjusted.

REFERENCE NUMBERS:

<dl tsize="6" compact="compact"><dt>SL</dt><dd>control logic</dd><dt>TA</dt><dd>Module for determining the telecommunication connection</dd><dt>DS</dt><dd>voice-controlled dialog system</dd><dt>V</dt><dd>Verification Query Engine</dd><dt>BK</dt><dd>Biometrics customer profile</dd><dt>PD</dt><dd>provider database</dd><dt>service</dt><dd>D</dd><dt>A</dt><dd>PC with Scanner</dd><dt>B</dt><dd>Mobile Phone with Camera</dd><dt>C</dt><dd>Fax machine</dd><dt>N</dt><dd>telecommunications network</dd><dt>e</dt><dd>inventive system</dd><dt>BD</dt><dd>Database biometrics customer profile</dd></dl>