Browse Prior Art Database

Subscription-Based Single Sign-On Service

IP.com Disclosure Number: IPCOM000178307D
Original Publication Date: 2009-Jan-22
Included in the Prior Art Database: 2009-Jan-22
Document File: 2 page(s) / 37K

Publishing Venue

IBM

Abstract

Managing user/account ids and passwords is extremely complex. Each service provider requires a form of identification/verification and the format and rules vary from provider to provider. Single sign-on for web applications is usually limited within a specific scope, such as a provider that offers bundled services and requires a single sign-on to have access to their different services. On phone systems there is an additional issue when handling passwords: touch tone systems will accept only numeric entries and speech recognition systems have problems recognizing alpha-numeric passwords and depend on additional supporting mechnisms to complete authentication.

This text was extracted from a PDF file.
At least one non-text object (such as an image or picture) has been suppressed.
This is the abbreviated version, containing approximately 55% of the total text.

Page 1 of 2

Subscription-Based Single Sign-On Service

This invention provides a subscription-based authentication service offered by a 3rd party that provides single sign-on to several providers using speech verification as a primary identification/verification method. The service provider can optionally store user preferences, such as language or payment information and interface with other 3rd party applications (such as social networks) that also store user profile/preferences.

The advantages of this idea are:
- single sign on for applications accessed throughout voice channel, such as Interactive Voice Response (IVR) apps, using speech identification as the primary authentication method
- repository to store pairs of ids (account id, user id, etc) and passwords
- repository to store user preferences such as language, payment information, etc
- the same Authentication Service Broker can provide services to other channels such as Web

In this invention, the caller dials the provider's number as it is done today. The provider IVR then determines if authentication is required based on the caller's selection/request. If so, the provider's IVR accesses the authentication service provider and proceeds with authentication. Authentication is done primarily using speech identification. Once successfully authenticated, the provider serves peferences and id/passwords i...