Non-verbal sensitive data authentication

Patent metadata

Field	Value
Publication number	US-11818282-B2
Application number	US-202117170966-A
Country	US
Kind code	B2
Filing date	Feb 9, 2021
Priority date	Nov 20, 2017
Publication date	Nov 14, 2023
Grant date	Nov 14, 2023

Abstract

A method, computer system, and computer program product for processing a secure data phone request are provided. The embodiment may include receiving a plurality of user responses to one or more security questions. The embodiment may also include identifying, during a phone call, a request for sensitive information by a call participant. The embodiment may further include identifying a response within the plurality of received user responses that satisfies the identified request. The embodiment may also include transmitting the identified response to the call participant.

First claim

What is claimed is:

1. A processor-implemented method for processing a secure data request via a mobile device, the method comprising:
identifying a user participating in a voice call by a user voice signature using sensors associated with the mobile device;
identifying a verbal request, received during the voice call, for the identified user to provide sensitive information; and
identifying and transmitting, upon authorization by the identified user, at the time of the request to provide the sensitive information, a response from a repository of stored, prerecorded responses associated with the identified user that satisfies the request, wherein the stored, prerecorded responses are stored as a pre-recorded voice clip on a client computing device, a pre-recorded number sequence on the client computing device, or a pre-recorded voice clip on a cloud-based service.

2. The method of claim 1 , further comprises:
determining a user has authorized the identified response be transmitted to a call participant.

3. The method of claim 2 , wherein determining the user has authorized the identified response be transmitted to the call participant further comprises:
receiving an authorization from the user, through a graphical user interface, to transmit the identified response.

4. The method of claim 3 , wherein receiving the authorization further comprises:
displaying, in the graphical user interface, two or more responses within the stored responses that satisfy the identified request; and
receiving a selection of a response of the two or more displayed responses.

5. The method of claim 1 , wherein the sensitive information comprises personal identifying information, and wherein the personal identifying information is selected from a group consisting of a telephone number, a social security number, a driver's license number, a pin, a birth date, a credit card number, an address, a password, an account number, a security question answer, a nickname, a mother's maiden name, a child name, a pet name, an educational institution attended, a place of residence, a currently owned item, or a previously owned item.

6. The method of claim 5 , further comprising:
in response to a user answering a request for sensitive information a first time, prompting the user to save a user answer to the request for sensitive information as a pre-recorded answer.

7. A computer system for processing a secure data request via a mobile device, the computer system comprising:
one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage media, and program instructions stored on at least one of the one or more tangible storage media for execution by at least one of the one or more processors via at least one of the one or more memories, wherein the computer system is capable of performing a method comprising:
identifying a user participating in a voice call by a user voice signature using sensors associated with the mobile device;
identifying a verbal request, received during the voice call, for the identified user to provide sensitive information; and
identifying and transmitting, upon authorization by the identified user, at the time of the request to provide the sensitive information, a response from a repository of stored, prerecorded responses associated with the identified user that satisfies the request.

8. The computer system of claim 7 , further comprises:
determining a user has authorized the identified response be transmitted to a call participant.

9. The computer system of claim 8 , wherein determining the user has authorized the identified response be transmitted to the call participant further comprises:
receiving an authorization from the user, through a graphical user interface, to transmit the identified response.

10. The computer system of claim 9 , wherein receiving the authorization further comprises:
displaying, in the graphical user interface, two or more responses within the stored responses that satisfy the identified request; and
receiving a selection of a response of the two or more displayed responses.

11. The computer system of claim 7 , wherein the stored responses are stored as a pre-recorded voice clip on a client computing device, a pre-recorded number sequence on the client computing device, or a pre-recorded voice clip on a cloud-based service.

12. The computer system of claim 7 , wherein the sensitive information comprises personal identifying information, and wherein the personal identifying information is selected from a group consisting of a telephone number, a social security number, a driver's license number, a pin, a birth date, a credit card number, an address, a password, an account number, a security question answer, a nickname, a mother's maiden name, a child name, a pet name, an educational institution attended, a place of residence, a currently owned item, or a previously owned item.

13. The computer system of claim 12 , further comprising:
in response to a user answering a request for sensitive information a first time, prompting the user to save a user answer to the request for sensitive information as a pre-recorded answer.

14. A computer program product for processing a secure data request via a mobile device, the computer program product comprising:
one or more computer-readable tangible storage media and program instructions stored on at least one of the one or more tangible storage media, the program instructions executable by a processor of a computer to perform a method, the method comprising:
identifying a user participating in a voice call by a user voice signature using sensors associated with the mobile device;
identifying a verbal request, received during the voice call, for the identified user to provide sensitive information; and
identifying and transmitting, upon authorization by the identified user, at the time of the request to provide the sensitive information, a response from a repository of stored, prerecorded responses associated with the identified user that satisfies the request.

15. The computer program product of claim 14 , further comprises:
determining a user has authorized the identified response be transmitted to a call participant.

16. The computer program product of claim 15 , wherein determining the user has authorized the identified response be transmitted to the call participant further comprises:
receiving an authorization from the user, through a graphical user interface, to transmit the identified response.

17. The computer program product of claim 16 , wherein receiving the authorization further comprises:
displaying, in the graphical user interface, two or more responses within the stored responses that satisfy the identified request; and
receiving a selection of a response of the two or more displayed responses.

18. The computer program product of claim 14 , wherein the stored responses are stored as a pre-recorded voice clip on a client computing device, a pre-recorded number sequence on the client computing device, or a pre-recorded voice clip on a cloud-based service.

19. The computer program product of claim 14 , wherein the sensitive information comprises personal identifying information, and wherein the personal identifying information is selected from a group consisting of a telephone number, a social security number, a driver's license number, a pin, a birth date, a credit card number, an address, a password, an account number, a security question answer, a nickname, a mother's maiden name, a child

Assignees

• IBM

Inventors

• Deluca Lisa Seacat
• Greenberger Jeremy A
• Ogle David M

Classifications

• H04M3/2281 Primary

  Call monitoring, e.g. for law enforcement purposes; Call tracing; Detection or prevention of malicious calls · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04M3/5183

  Call or contact centers with computer-telephony arrangements · CPC title

• H04W12/06

  Authentication · CPC title

• H04M2203/256

  comprising a service specific user interface · CPC title