TWM615259U - Cryptographic processing system - Google Patents

Abstract

A cryptographic processing system includes a verification unit and a voice communication unit electrically connected to the verification unit. The voice communication unit is used for outputting a password-provided voice to the client-side communication device through the voice communication in the case of a voice communication with a client-side communication device after the verification unit receives a password-providing request. The password provided voice includes a key part, and the key part includes a password message indicating a one-time password, and a noise message overlapping the password message.

Description

Password Processing System

This new model relates to a cryptographic processing system, in particular to a cryptographic processing system involving voice communication.

In the modern society where the Internet is popular, businesses in many industries will build Internet platforms to provide Internet services to customers. Take financial institutions (such as banks) for example. The online services provided by financial institutions include account opening applications, loan applications, and the modification of basic personal information. In this way, users can complete various businesses on the Internet. You do not need to go to a financial institution to handle the application at the counter, so it can effectively save time.

Although network services are convenient, they are also easier to be used by people who intend to use false names. Therefore, in the prior art, a one-time password (OTP) mechanism is often used to verify applications for network services. However, the existing technology usually transmits the one-time password via SMS or email, and there is still the risk of being stolen from the remote by intentional persons. Therefore, how to further improve the security of the one-time password authentication mechanism becomes a worthy discussion issue.

The purpose of the present invention is to provide a password processing system that helps to improve information security.

The new cryptographic processing system includes a verification unit and a voice communication unit electrically connected to the verification unit. The voice communication unit is used for outputting a password-provided voice to the client-side communication device through the voice communication in the case of a voice communication with a client-side communication device after the verification unit receives a password-providing request. Wherein, the password provided voice includes a key part, and the key part includes a password message indicating a one-time password, and a noise message overlapping the password message.

In some implementation aspects of the new cryptographic processing system, the noise audio is white noise.

In some implementation aspects of the new cryptographic processing system, other parts of the cryptographic provided voice except the key part do not include the noise audio.

In some implementation aspects of the new cryptographic processing system, in the case that the voice communication between the cryptographic processing system and the client-side communication device is established, the cryptographic processing system is also based on a message from the client-side communication device The voice input determines whether the voice communication is transferred to the voice mailbox corresponding to the client's call device, and the password processing system ends the voice communication when it determines that the voice communication is transferred to the voice mailbox.

In some implementations of the new cryptographic processing system, the cryptographic processing system stores multiple customer identification data, and the password provision request corresponds to one of the customer identification data of the target customer identification data, and After the password processing system receives the password provision request, the password processing system first determines whether the target customer identification data meets a request frequency specification condition, and generates the password provision voice when the judgment result is yes, where the number of requests The standard condition means that the total number of password providing requests corresponding to the target customer identification data received by the password processing system during a historical period is less than or equal to a predetermined threshold.

The effect of the present invention is that the password processing system can provide a one-time password to the user through voice communication, instead of leaving a record in the client's account device like a text message or email, and by using the password The key part of the noise audio is included in the provided voice. The password processing system can also prevent the one-time password from being eavesdropped by eavesdropping software during the output process of the password providing voice, which helps to improve the information of the one-time password provision process Security, it can indeed improve the security of the one-time password verification mechanism.

Before the new model is described in detail, it should be noted that if there is no special definition, the "electrical connection" in this patent specification generally refers to the "wired connection" between multiple electronic devices/devices/components connected to each other through conductive materials. "Electrical connection" and "radio connection" for single/two-way wireless signal transmission through wireless communication technology. Moreover, if not specifically defined, the "electrical connection" in this patent specification also refers to the "direct electrical connection" formed by multiple electronic devices/devices/elements directly connected to each other, and multiple electronic devices/ Devices/components are also indirectly connected to each other through "indirect electrical connections".

1 and 2, an embodiment of the new cryptographic processing system 1 is, for example, managed by a financial institution (such as a bank), and the cryptographic processing system 1 is suitable for use with multiple clients via the Internet, for example 2 Electrical connection (Figure 1 only shows one of them), but not limited to this. Among them, each client 2 can be, for example, an electronic device possessed by a user and having a network connection function. More specifically, each user is, for example, a client of the financial institution, and each client The terminal 2 can be, for example, a mobile phone, a tablet computer, a notebook computer, or a desktop computer of the corresponding user.

For ease of understanding, the following description only uses the client terminal 2 shown in FIG. 1 to describe this embodiment, and the client terminal 2 shown in FIG. 1 also has, for example, voice communication functions for making and answering calls. At the same time, it is also used as a client-side communication device 3 in the application of this embodiment.

It is supplemented that in practical applications, the password processing system 1 can also be applied to operating organizations operating various network services such as social media and shopping platforms, and is not limited to the financial institutions exemplified in this embodiment.

In this embodiment, the cryptographic processing system 1 includes, for example, a verification unit 11 and a voice communication unit 12 electrically connected to the verification unit 11. The verification unit 11 can be implemented as a servo device, for example, and the The voice communication unit 12 can be implemented as a telephone banking service system independent of the verification unit 11, for example. Further, the verification unit 11, for example, stores multiple pieces of unique customer identification data, and each customer identification data corresponds to, for example, a customer of the financial institution. More specifically, for example, each customer identification data For example, it can be implemented as the ID number or customer number of the corresponding customer, but it is not limited to this. On the other hand, the voice communication unit 12 stores, for example, a voice processing model implemented by natural language processing technology, and the voice communication unit 12 can perform voice recognition and semantic analysis on voice input, for example, by running the voice processing model. However, in other embodiments, the voice processing model can also be used, for example, for the voice communication unit 12 according to one or more preset keywords (such as "busy", "forwarding" and "voice mailbox". ”Etc., but not limited to this) to perform keyword detection on voice input. Therefore, the implementation of the voice processing model is not limited to this embodiment.

It is supplemented that in other embodiments, the verification unit 11 may also include multiple servo devices electrically connected to each other, and the voice communication unit 12 may also be integrated in the verification unit 11, for example. The implementation of the verification unit 11 and the voice communication unit 12 in this embodiment is only an exemplary aspect, and is not intended to limit the scope of implementation of the present invention.

Referring to FIGS. 1 and 2 at the same time, the following takes the client 2 shown in FIG. 1 as an example to illustrate how the cryptographic processing system 1 of this embodiment implements a cryptographic processing method.

First, in step S1, when the verification unit 11 receives a password provision request from the client 2 that includes a client identification code, the verification unit 11 provides the requested client identification code, for example, according to the password, and from Among the customer identification data, one of the target customer identification data corresponding to the password provision request is selected. In more detail, the password provision request may be, for example, generated and transmitted by the client 2 according to a user's operation, and the password provision request is, for example, used for the user to process the password through the client 2 System 1 asks for a one-time password (that is, OTP) for verification. Further, the client identification code of the password provision request may be, for example, the user's ID number, or other data used to indicate the user's identity, so that the verification unit 11 can identify the client On the premise that the code is valid, the customer identification code is used to identify which customer the password provision request corresponds to.

After the verification unit 11 selects the target customer identification data corresponding to the password provision request, the flow proceeds to step S2.

In step S2, the verification unit 11 determines whether the target customer identification data meets a request frequency specification condition, and in this embodiment, the request frequency specification condition represents, for example, that the verification unit 11 has been in a historical period (for example, Within the same day, but not limited to this) The total number of all password provision requests corresponding to the target customer identification data received is less than or equal to a predetermined threshold (such as "5", but not limited to this). In other words, in this embodiment, the specification condition for the number of requests, for example, represents that of all the password provision requests received by the verification unit 11 during the historical period, all password provision corresponding to the target customer identification data The total number of requests does not exceed the predetermined threshold.

If the result of the verification by the verification unit 11 is no, the flow proceeds to step S3. On the other hand, if the result of the verification by the verification unit 11 is yes, the flow proceeds to step S4.

In step S3 following step S2, once the verification unit 11 determines that the target customer identification data does not meet the request frequency specification condition, the verification unit 11, for example, rejects the password provision request to generate and transmit a request number exceeding the standard The client 2 is notified, and the password processing method of this embodiment ends. In this way, the password processing system 1 of this embodiment can control the number of times that each customer requests a one-time password within a period of time (for example, each day), so as to avoid abuse of network services.

In step S4 following step S2, once the verification unit 11 determines that the target customer identification data meets the request frequency specification condition, the verification unit 11 determines a one-time password corresponding to the password provision request, and The one-time password is provided to the voice communication unit 12. Wherein, the verification unit 11 may determine the one-time password in a random manner, for example, however, the verification unit 11 may also determine the one-time password in any other existing manner, instead of the original one. The embodiment is limited.

After the verification unit 11 provides the one-time password to the voice communication unit 12, the flow proceeds to step S5.

In step S5, when the voice communication unit 12 receives the one-time password provided by the verification unit 11, it generates a password to provide voice according to the one-time password.

It is worth noting that, in this embodiment, the password providing voice includes a key part, and the key part includes a password message indicating the one-time password by computer voice, and a noise message overlapping the password message. Moreover, in this embodiment, the noise audio is, for example, white noise, but it is not limited to this. Further, in this embodiment, other parts of the password provided by the voice except the key part do not include the noise audio, for example, but it is not limited to this.

For example, the password providing voice can be implemented as "Your verification password is ABC123, please verify within three minutes", and the "ABC123" includes the key part of the noise audio, for example, except The parts other than "ABC123" do not include noise audio, for example.

For another example, the password providing voice can also be implemented as "Your verification password is capital letters ABC and Arabic numerals 123, please verify within three minutes", and "ABC" and "123" For example, it is collectively regarded as the key part including noise audio, and other parts except "ABC" and "123" do not include noise audio, for example.

Furthermore, in this embodiment, the voice communication unit 12 stores, for example, a noise audio library containing one or more noise sources, and after the voice communication unit 12 receives the one-time password, the voice communication unit 12 12 can, for example, first select one of the noise sources as the noise audio, or extract a part from one of the noise sources as the noise audio, and then, the voice communication unit 12 according to the one-time The password and the noise audio are used to generate the password to provide the voice. In more detail, in the process of generating the password to provide voice, the voice communication unit 12 may, for example, first generate the password message indicating the one-time password by computer voice according to the one-time password, and then the noise message Mix with the cipher audio in a superimposed manner. In other words, in this embodiment, the key part of the password provided by the voice is equivalent to the result of the voice communication unit 12 mixing the noise audio with the cryptographic audio, but it is not limited to this.

It is supplemented that in other embodiments, the noise audio can also be implemented as other colored noises (such as pink noise, red noise, or gray noise) other than white noise, or a combination of multiple colored noises. Moreover, the noise audio can be implemented as environmental noises such as wind, rain, and car sounds. However, since white noise and other colored noises are relatively less likely to interfere with human hearing, the noise audio is implemented as white noise And/or other colored noises belong to the preferred embodiments of the present invention. In addition, preferably, each time the voice communication unit 12 generates a password to provide a voice, the noise audio used is not exactly the same as the noise used to generate a password to provide a voice before, but it is not limited to this.

After the voice communication unit 12 generates the password to provide voice, the process proceeds to step S6.

In step S6, the voice communication unit 12, for example, transmits a voice call request to the client-side communication device 3 through the public switched telephone network (ie PSTN) (the client-side communication device 3 in this embodiment is the client 2), that is, make a call to the client's communication device 3.

It is supplemented that the voice communication unit 12 may obtain the telephone number of the client-side communication device 3 from the verification unit 11, or may obtain the target customer identification data from the verification unit 11 first, and then obtain the target client identification data from the verification unit 11. The customer identification data queries a customer database to obtain the phone number of the customer-side communication device 3, but it is not limited to this.

On the other hand, in other embodiments, the voice communication unit 12 may also transmit the voice call request to the client side communication device 3 via the Internet, that is, make a VoIP call to the client side communication device 3 3. Therefore, the manner in which the voice communication unit 12 transmits the voice call request to the client-side communication device 3 is not limited to this embodiment.

On the other hand, in the application of this embodiment, the client 2 and the client-side calling device 3 are essentially the same device. However, in other application scenarios, the client-side 2 and the client-side calling device 3 are essentially the same device. It may also be two independent devices. For example, the client 2 may be a desktop computer of the user, and the client-side communication device 3 may be a mobile phone of the user, for example.

After the voice communication unit 12 transmits the voice call request to the client-side communication device 3, the flow proceeds to step S7.

In step S7, when the voice call request is approved by the client-side communication device 3 (that is, the user answers the call), a voice communication between the voice communication unit 12 and the client-side communication device 3 When established, the voice communication unit 12 continuously receives a voice input from the client-side communication device 3, and analyzes the voice input, for example, by running the voice processing model, and determines whether the voice communication is transferred. Connect to the voice mailbox corresponding to the client's communication device 3. For example, if the voice communication unit 12 recognizes through the voice processing model that the voice input includes "the number you dialed is in a call", "your call will be transferred to the voice mailbox", etc., then the voice The communication unit 12 can then determine that the voice communication is transferred to the voice mailbox, but it is not limited to this.

If the voice communication unit 12 determines that the voice communication has been transferred to the voice mailbox, the voice communication unit 12, for example, automatically ends the voice communication between itself and the client-side communication device 3, and in this embodiment The password processing method ends. On the other hand, if the voice communication unit 12 determines that the voice communication has not been transferred to the voice mailbox, the process proceeds to step S8.

In step S8, in the case that the voice communication continues and is not transferred to the voice mailbox by the client-side communication device 3, the voice communication unit 12 provides voice to the password through the voice communication and broadcasts it to the voice mailbox. The client-side communication device 3 outputs, thereby providing the one-time password to the user in the form of computer voice.

The foregoing is an example of how the cryptographic processing system 1 of this embodiment implements the cryptographic processing method. It should be understood that the foregoing description of steps S1 to S8 and the flowchart of FIG. 2 are only used to illustrate one of the possible implementations of the cryptographic processing method, and even if steps S1 to S8 are combined or sequenced As long as the adjustment can achieve the same effect as this embodiment, it belongs to the implementable aspect of the cryptographic processing method. Therefore, the sequence of step S1 to step S8 is not used to limit the implementable scope of the present invention.

By implementing the cipher processing method, the cipher processing system 1 of this embodiment allows the user to operate the client-side communication device 3 to agree to the voice call request output by the voice communication unit 12 before the user can access the voice communication through the voice communication. The voice communication unit 12 obtains the one-time password, and by outputting the voice provided by the password to the client-side communication device 3 through the voice communication, the one-time password can be prevented from being recorded as a short message or email. The password was stolen remotely by someone who wanted to.

It is particularly worth mentioning that the key part of the noise audio provided by the password is a strong noise for the automatic speech recognition (Automatic Speech Recognition, ASR for short) technology. Therefore, the key part of the noise audio will be It causes serious interference to the speech recognition process of the automatic speech recognition technology, and reduces the accuracy of its recognition. Therefore, by the voice communication unit 12 generating and outputting the key part indicating the one-time password and including the noise audio, this embodiment can prevent the one-time password without preventing the user from listening to the voice provided by the password. The security password was successfully tapped by eavesdropping software with automatic voice recognition function, which helped to improve the information security of the one-time password provision process.

It is supplemented that the one-time password is, for example, used by the user to input it into the client terminal 2, the client-side communication device 3 or other electronic devices, and then be transmitted to the verification unit 11 for verification. However, it should be understood that the verification process of the verification unit 11 according to the one-time password belongs to the prior art and is not the technical focus of this patent specification, so its details are not described in detail here.

In summary, by implementing the password processing method, the password processing system 1 can provide a one-time password to the user through voice communication, instead of leaving it in the client’s account device like a text message or email. Records, and by the key part of the noise audio included in the voice provided by the password, the password processing system 1 can also prevent the one-time password from being intercepted by eavesdropping software during the output process of the voice provided by the password, which helps In order to improve the information security of the one-time password provision process, it can indeed achieve the new purpose of the cost.

However, the above are only examples of the present model, and should not be used to limit the scope of implementation of the present model, all simple equivalent changes and modifications made in accordance with the patent scope of the present model application and the contents of the patent specification still belong to This new patent covers the scope.

1: Password processing system 11: Verification unit 12: Voice communication unit 2: client 3: Customer-side communication device S1~S8: steps

Other features and effects of the present invention will be clearly presented in the embodiments with reference to the drawings, in which: Fig. 1 is a block diagram of an embodiment of the present invention cryptographic processing system applied to a client (client-side communication device) Schematic diagram; and Figure 2 is a flowchart for exemplarily explaining how this embodiment implements a cryptographic processing method.

1: Password processing system

11: Verification unit

12: Voice communication unit

2: client

3: Customer-side communication device

Claims (5)

A cryptographic processing system, including: A verification unit; and A voice communication unit is electrically connected to the verification unit, and is used to provide a password to the verification unit through the voice communication when a voice communication is performed with a client-side communication device after the verification unit receives a password provision request The client-side communication device outputs, wherein the password provided voice includes a key part, and the key part includes a password message indicating a one-time password, and a noise message overlapping the password message. The cryptographic processing system according to claim 1, wherein the noise audio is white noise. The cryptographic processing system according to claim 1, wherein other parts of the cryptographic provided voice except for the key part do not include the noise audio. The cryptographic processing system according to claim 1, wherein, in the case that the voice communication between the cryptographic processing system and the client-side communication device is established, the cryptographic processing system is further based on a message from the client-side communication device The voice input determines whether the voice communication is transferred to the voice mailbox corresponding to the client's call device, and the password processing system ends the voice communication when it determines that the voice communication is transferred to the voice mailbox. The password processing system according to claim 1, wherein the password processing system stores multiple pieces of customer identification data, and the password provision request corresponds to one piece of target customer identification data in the customer identification data, and After the password processing system receives the password provision request, the password processing system first determines whether the target customer identification data meets a request frequency specification condition, and generates the password provision voice when the judgment result is yes, where the number of requests The standard condition means that the total number of password providing requests corresponding to the target customer identification data received by the password processing system during a historical period is less than or equal to a predetermined threshold.

Images