1. SIV Applications Claudia Daboul (IBP) Martin Eckert (T-Systems) Judith Markowitz (J. Markowitz, Consultants) 08. Aug 2006

2. The SBC SIV-Applications Collection Purpose of the document Project of VoiceXML Forum Speaker Biometrics Committee (SBC) Provide a representative set of sample SIV applications from a technical perspective Complement the SIV-requirements document by the same working group Serve as a test-set for the development of an SIV-extension for VoiceXML Sample applications should cover the most important markets/industries and the most important application categories Main parts of the document Overview about markets and existing applications Future applications based on voice authentication

3. The SBC SIV-Applications Collection Existing SIV applications in the document Examples for transaction authentication Access to mobile phone contract details Authentication for direct banking service Automated password reset Examples for access control SIV controlled door locks Voice-coded car-theft protection Personal computer access control PC-access 2: multi-biometric authentication with usb-camera Border control Airborne interactive response system (AIRS) Examples for audio mining Forensics: SIV on intercepted calls

4. The SBC SIV-Applications Collection Future SIV applications in the document Examples for Personalization of IVR dialogue E-Mail sending service Examples for Information Retrieval Voice-mail tagging Caller-identification for call-center: caller-black-list Speech-skimming: automatic meeting transcription Examples for access control Voice-only-access control for ATM Multi-modal access control for ATM with vendor independent biometric data PIN-less call-center authentication

5. The SBC SIV-Applications Collection Classification of applications industry: telecom, financial services, government, military, health care... type: authentication for self administration, access control, audio mining … security level: low, medium, high scale of deployment: national/international, small/medium/large groups, customers... VoiceXML-Relevance: low, medium, high VoiceXML-Relevance Main focus of the document are VoiceXML applications and applications that could conceivably be implemented using voice XML Main indications for VoiceXML-relevance: SIV done over a phone SIV embedded in an IVR dialog SIV used with concurrent ASR, e.g. for challenge response Application has been implemented using VoiceXML with a vendor-specific SIV- extension. VoiceXML Relevance Scoring: High: two or more of above criteria Medium: one of above criteria Low: none of above criteria

6. The SBC SIV-Applications Collection Example 1: Access To Mobile Phone Contract Details Authentication for self-administration of mobile phone accounts (pilot implementation) Implementer: T-Systems VoiceXML-Platform: Unisys Verifier (text dependent) +ASR: Nuance 8.5 Authentication-Phases: Designation A: Mobile phone number transmitted Designation B:Mobile phone number spoken Identification: Caller repeats up to three random digit sequences Enrollment: On six fixed digit sequences Adaptation: If verification score exceeds threshold in more than one utterance Benefits: Higher security compared to CLI-Only-Authentication. Higher flexibility compared to CLI-Only-Authentication (call in also from land line). Higher convenience compared to Two-Factor-Authentication with PIN or TAN.

7. The SBC SIV-Applications Collection Example 2: First Direct Bank of Israel Leumi Call-Center Authentication for Direct Banking Service. Implementer: Persay Verifier: FreeSpeech (text independent) from Persay Authentication Phases: Designation:ID entered through DTMF Authentication:Background speaker verification on live conversation Authentication Alternative: Knowledge-based questions Enrollment:Data collected on three subsequent calls Adaptation:Offline reject analysis Benefits: Higher security compared to PIN-Code-Only-Authentication. Higher convenience compared to Two-Factor-Authentication with mandatory knowledge based question. Shorter verification process compared to Two-Factor-Authentication

8. The SBC SIV-Applications Collection Technical Features Example 1: Small group identification Concurrent processing by co-located SIV+ASR resources Text-prompted SIV-mode on random digit sequences Access to enrollment and authentication fallback: TANs Enrollment on a fixed number of fixed phrases Variable length identification-session Detection of replay attack through challenge response Combination of SIV and N-Best-Processing (LSIC) on designation utterance Supervised adaptation Technical Features Example 2: Verification (single voice) Background SIV processing on bridged transfer Text-independent SIV-mode on live free speech Access to enrollment and authentication fallback: Knowledge-based question Enrollment distributed on several calls Intermediate verification scores requested by operator when needed Detection of replay attack through human operator Language independent system

9. The SBC SIV-Applications Collection Next steps Document will be reviewed by several companies with SIV background Check requirements document against applications document to verify all requirements are collected Delivery to the W3C Voice Browser group (subgroup Speaker Authentication) You are interested to review the document or want to provide input to your SIV application? Any feedback would be appreciated. http://www.voicexml.org/resources/biometrics.html

11. Thank you