As the use of biometrics becomes more wide-spread, the privacy concerns that stem from the use of biometrics are becoming more apparent. As the usage of mobile devices grows, so does the desire to implement biometric identification into such devices. A large majority of mobile devices being used are mobile phones. While work is being done to implement different types of biometrics into mobile phones, such as photo based biometrics, voice is a more natural choice. The idea of voice as a biometric identifier has been around a long time. One of the major concerns with using voice as an identifier is the instability of voice. We have developed a protocol that addresses those instabilities and preserves privacy. This paper describes a novel protocol that allows a user to authenticate using voice on a mobile/remote device without compromising their privacy. We first discuss the Vaulted Verification protocol, which has recently been introduced in research literature, and then describe its limitations. We then introduce a novel adaptation and extension of the Vaulted Verification protocol to voice, dubbed Vaulted Voice Verification (V 3 ). Following that we show a performance evaluation and then conclude with a discussion of security and future work.

No abstract

Those who handle sensitive information from time to time need a device that can communicate securely. They also need the ability to verify the recipient of the information. For such secure communication to take place, they must securely exchange a key, often with someone they do not already know.Biometrics have been gaining widespread adoption in an effort to verify the end users identity. We extend this to key exchange. Vaulted Voice Verification, a recently introduced voice-based biometric protocol, has been shown to securely and remotely verify a user while also maintaining the privacy of the user. However Vaulted Voice Verification as originally proposed was not well suited for the exchange of larger keys. We present an index-based Vaulted Voice Verification which significantly reduces communication overhead and allows the transmission of keys that are suitable for biometrically authenticated secure communication.

No abstract