SAFE AUTHENTICATION FROM AN AUTOMOBILE

Abstract

A biometric corroborator receives an enhanced sound file, a vehicular data provided by a vehicle, and telemetry data provided by the vehicle to a telematics server. It then uses these to corroborate each other before deciding whether to authenticate a proposed transaction.

Claims

1. An apparatus comprising a biometric corroborator that is in communication with a telematics server that is in communication with a plurality of vehicles, among which is a first vehicle, wherein said biometric corroborator comprises a decoder that receives corroboration data from said first vehicle, said corroboration data comprising a sound file, first vehicular information, and a sound watermark and that extracts therefrom said voice print and said first vehicular information, a communication channel that receives first telemetry data from a telematics server, said first telemetry data having been provided to said telematics server by said first vehicle, a library of voice prints, and a matching engine that carries out voice biometry on said voice print using said library and determines that said first vehicular information and said first telemetry data are consistent, wherein, in response to identifying consistency between said telemetry data and said first vehicular information, said biometric corroborator transmits a signal authenticating a proposed transaction.

2. The apparatus of claim 1, wherein said decoder is configured to decode corroboration data in which said first vehicular information and said first telemetry data comprise GPS information indicative of said first vehicle's position.

3. The apparatus of claim 1, wherein said decoder is configured to decode corroboration data in which said first vehicular information and said first telemetry data comprise a location of said first vehicle.

4. The apparatus of claim 1, wherein said decoder is configured to decode corroboration data in which said first vehicular information comprises an identity of said first vehicle.

5. The apparatus of claim 1, wherein said decoder is configured to decode corroboration data in which said first vehicular information and said first telemetry data comprise a location of said first vehicle and an identity of said first vehicle.

6. The apparatus of claim 1, wherein said decoder is configured to decode corroboration data in which said first vehicular information and said first telemetry data comprise a time-varying operational parameter of said first vehicle.

7. The apparatus of claim 1, wherein said first vehicular information and said first telemetry data comprise first and second time-varying operational parameters of said first vehicle and wherein said biometric corroborator is configured to inspect said first and second time-varying operational parameters for consistency.

8. The apparatus of claim 1, wherein said proposed transaction is a credit-card transaction.

9. The apparatus of claim 1, wherein said first vehicular information and said first telemetry data comprise information provided by an on-board diagnostic system of said first vehicle.

10. The apparatus of claim 1, wherein said biometric corroborator is configured to, prior to receiving said first telemetry data, identify said telematics server from plural telematics servers, each of which receives telemetry data from corresponding plural vehicles.

11. The apparatus of claim 1, wherein said biometric corroborator is further configured to receive, from a second vehicle, second corroboration data from a telematics server to which said second vehicle sends telemetry data and, based on said second corroboration data and said second telemetry data, to determine that said second corroboration data and said second telemetry data are inconsistent, and to provide information indicative of said inconsistency.

12. The apparatus of claim 1, wherein said corroboration data has been encoded and wherein said decoder is configured to decode said encoded data to retrieve said voice print and said first vehicular information.

13. The apparatus of claim 1, wherein said matching engine is configured to determine that said voice print matches a voice print from a voice-print library.

14. The apparatus of claim 1, wherein said first vehicular information comprises first and second time-varying operational parameters of said first vehicle and wherein said matching engine is configured to identify an inconsistency between said first and second time-varying operational parameters.

15. The apparatus of claim 1, wherein said biometric corroborator is configured to cease reception of said first telemetry data and to commence receipt of second telemetry data, said second telemetry being associated with a second vehicle.

16. The apparatus of claim 1, wherein said decoder is configured to identify a watermark has been steganographically incorporated into said sound file.

17. The apparatus of claim 1, wherein said decoder is configured to identify an encrypted watermark that has been associated with said sound file.

18. The apparatus of claim 1, wherein said sound file comprises non-audible data.

19. The apparatus of claim 1, further comprising a multiplexer for causing said corroboration channel to transition between receiving telemetry data from a first telematics server and receiving telemetry data from a second telematics server.

20. A method executed by a biometric corroborator that is in communication with a telematics server that is in communication with a plurality of vehicles, among which is a first vehicle, said method comprising receiving corroboration data from said first vehicle, said corroboration data comprising a sound file, first vehicular information, and a sound watermark; extracting said voice print and said first vehicular information; carrying out voice biometry on said voice print; based on a result of having carried out said voice biometry, receiving first telemetry data from said telematics server, said first telemetry data having been provided to said telematics server by said first vehicle; determining that said first vehicular information and said first telemetry data are consistent; and authenticating a proposed transaction.

Description

BRIEF DESCRIPTION OF THE FIGURE

[0040] FIG. 1 shows a vehicle that transport an occupant who initiates a secure transaction;

[0041] FIG. 2 shows communication between the vehicle of FIG. 1, a telematics server, and a corroboration server; and

[0042] FIG. 3 shows a method carried out by the corroboration server of FIG. 2.

DETAILED DESCRIPTION

[0043] FIG. 1 shows a vehicle 10 transporting an occupant 12 who initiates a secure transaction by forming an utterance 14 that includes a spoken passphrase 16.

[0044] The vehicle 10 includes an in-car communication system 18 that is equipped with a microphone 20 and a loudspeaker 22. The microphone 20 receives the utterance 14 and generates a corresponding electrical waveform 24. The in-car communication system 18 receives the waveform 24 and, after some further processing steps, causes corroboration data 25 to be transmitted via an antenna 26 to a biometric corroborator 28. This corroboration data 25 includes enhanced watermark sound data consistent with the occupant's voice, thus permitting identification of the occupant 12.

[0045] In a preferred embodiment, transmission to the biometric corroborator 28 includes passing information, including the utterance 14, to an encoder 30. The encoder 30 encodes, onto this information, a sound watermark 32.

[0046] Referring now to FIG. 2, the biometric corroborator 28 is one that provides voice-biometric services. To provide such services, the biometric corroborator 28 includes a decoder 34, a matching engine 40, and a voice-print library 36. The decoder 34 is one that is configured to decode information provided by the encoder 30. The matching engine 40 confirms the authenticity of the speaker's voice based in part on the library 36.

[0047] Additionally, the biometric corroborator 28 features a corroboration channel 38 and a matching engine 40. The corroboration channel 38 connects to a telematics server 42 that receives telemetry data 50 from the vehicle 10. The matching engine 40 that carries out comparisons between information provided by the vehicle 10, information provided by the telematics server 42, and information present in the voice-print library 36.

[0048] In some embodiments, the biometric corroborator 28 connects to one or more additional telematics servers 66. In such embodiments, the biometric corroborator 28 further includes a multiplexer 68 to select which telematics server 66, 42 should be connected to the corroboration channel 38. Such a selection is made based on the vehicular information 46, which was transmitted from the vehicle 10 as part of the corroboration data 25.

[0049] Referring back to FIG. 1, the vehicle 10 further includes a sensor 44 that provides the vehicular information 46 to a telematics transmitter 48. The telematics transmitter 48 converts this information into telemetry data 50, which it then transmits to the telematics server 42. The telematics server 42 routinely receives telemetry data 50 from many vehicles 10 via a cellular network. This vehicular information 46 is also provided to the encoder 30 for eventual transmission to the biometric corroborator 28.

[0050] In some embodiments, the vehicle 10 comprises an on-board diagnostic system 52. In such embodiments, the sensor 44 includes one or more sensing elements associated with the on-board diagnostic system 52.

[0051] As used herein, the sensor's output includes vehicular information 46 gathered by one or more sensing elements distributed throughout the vehicle 10, including those associated with the onboard diagnostic system 52. Embodiments include those in which the sensor 44 comprises one or more sensing elements selected from the group consisting of a geolocation device 54, an accelerometer 56, a velocimeter 58, a fuel-level sensor 60, a thermometer 62, and a pressure sensor 64.

[0052] Examples of vehicular information 46 include the vehicle's instantaneous position, a track of its position as a function of time, or any kinematic parameter, such as acceleration or velocity. This type of vehicular information 46 can be obtained from one or more of the geolocation device 54, the accelerometer 56, and the velocimeter 58.

[0053] Other examples of vehicular information 46 include time-varying operational parameters such as fuel level, as provided by the fuel-level sensor 60, temperature within the vehicle's cabin and exterior temperature, as provided by the thermometer 62, and tire pressures, as measured by the pressure sensor 64.

[0054] The vehicular information 46 need not be limited to information gathered by the sensor 44. For example, in some embodiments, vehicular information 46 includes such information as the frequency to which the vehicle's radio is tuned or the vehicle's vehicle identification number (VIN).

[0055] Referring now to FIG. 3, the corroboration server carries out a corroboration process 65 that begins with receiving the corroboration data 25 from the encoder 30. (step 66).

[0056] The decoder 34 decodes the corroboration data 25 to extract the sound watermark 32, the vehicular information 46, and the spoken passphrase 16 (step 68). The matching engine 40 then attempts to match the occupant's voice with a voice print from the voice-print library 36 (step 70).

[0057] The decoder 34 also extracts the vehicular information 46 that came from the vehicle 10 (step 72) and identifies a telematics server 42 that is in communication with that vehicle 10. The biometric corroborator 28 then establishes communication with the identified telematics server (step 74) after which the matching engine 40 compares the vehicular information 46 received from the vehicle 10 with corresponding telemetry data 50 that the vehicle 10 independently sent to the telematics server 42 (step 76).

[0058] If the comparison is favorable, the biometric corroborator 28 provides a signal indicating that the proposed transaction appears authentic (step 80). On the other hand, if the comparison is unfavorable, the biometric corroborator 28 provides a single indicating that the proposed transaction appears to not be authentic (step 82).

[0059] In some embodiments, the vehicular information 46 includes several operational parameters that can be checked against each other for consistency. For example, an outside temperature below freezing and spatial coordinates placing the vehicle 10 in a tropical region would be regarded with some suspicion by the biometric corroborator 28.