聲紋:你的新密碼
????要登記使用該技術(shù),客戶先要致電巴克萊銀行,在通話期間他們要重復(fù)一個(gè)短語(yǔ)進(jìn)行樣本錄制。之后客戶還要打第二個(gè)電話,以驗(yàn)證該技術(shù)能否正確識(shí)別他們。在隨后的通話中,客戶可以將自己的身份識(shí)別號(hào)碼告訴話務(wù)員,然后進(jìn)行一段簡(jiǎn)短的語(yǔ)音驗(yàn)證。這種技術(shù)能夠自動(dòng)判定電話線另一頭的聲音是否跟樣本匹配。斯摩曼表示,這個(gè)驗(yàn)證過(guò)程平均算來(lái)要花費(fèi)40-60秒的時(shí)間。到目前為止,該服務(wù)運(yùn)轉(zhuǎn)良好,在所有聲紋驗(yàn)證電話中,遇到問(wèn)題的比例不足1%。 ????在巴克萊銀行邀請(qǐng)加入這項(xiàng)聲紋驗(yàn)證計(jì)劃的客戶中,并不是每個(gè)人都進(jìn)行了登記。一些人擔(dān)心錄制自己聲音可能帶來(lái)隱私問(wèn)題——的確,很多公司都對(duì)客戶服務(wù)電話進(jìn)行了錄音——或者是,他們害怕安全漏洞。斯摩曼稱,巴克萊銀行有5%左右的客戶拒絕加入。在這種情況下,那些客戶可以繼續(xù)讓呼叫中心的話務(wù)員通過(guò)提問(wèn)驗(yàn)證身份。 ????顧問(wèn)奧斯汀表示,在使用聲紋驗(yàn)證技術(shù)前首先征得客戶同意,這對(duì)公司來(lái)說(shuō)很重要。公司可能在沒(méi)有提醒的情況下記錄客戶跟客服代表進(jìn)行正常通話時(shí)的語(yǔ)音,然后在往后的通話中使用它進(jìn)行比較。奧斯汀說(shuō),參與焦點(diǎn)小組訪談的成員告訴她,他們感到被這樣一種計(jì)劃出賣了。毫無(wú)疑問(wèn),隱私權(quán)倡導(dǎo)者也會(huì)抱怨。 ????大衛(wèi)?波里諾說(shuō),聲紋驗(yàn)證技術(shù)有一些潛在的缺點(diǎn)——波里諾是法國(guó)巴黎銀行(BNP Paribas)旗下美西銀行(Bank of the West)防欺詐部門的主管。公司賬戶可能無(wú)法正常工作,因?yàn)檫@種賬戶通常有數(shù)名員工有權(quán)登錄,多種多樣的語(yǔ)音可能會(huì)讓該技術(shù)產(chǎn)生混淆。 ????另外,問(wèn)題還有:如果欺詐行為得逞,誰(shuí)來(lái)負(fù)責(zé)?銀行嗎?還是客戶?抑或是提供這種技術(shù)的公司? ????客戶心理同樣可能是一個(gè)問(wèn)題,波里諾說(shuō)道,他任職的銀行并未使用聲紋驗(yàn)證技術(shù)。他表示,銀行客戶更喜歡顯而易見的安全技術(shù)而非不易察覺(jué)的——即使它們的保護(hù)作用同樣有效。波里諾說(shuō),提問(wèn)這種方式讓客戶感到銀行是在認(rèn)真對(duì)待安全問(wèn)題,而將提問(wèn)換成聲紋驗(yàn)證,客戶可能開始認(rèn)為安全系統(tǒng)很松懈?!叭绻阕哌M(jìn)一家銀行,你會(huì)希望看到保險(xiǎn)庫(kù)?!辈ɡ镏Z如是說(shuō)。 ????有決心的黑客能夠攻克聲紋驗(yàn)證技術(shù),就像其他任何一種安全措施一樣。其帶來(lái)的危險(xiǎn)是否大于身份盜用、支票失竊或信用卡信息被篡改,這還不清楚。從理論上說(shuō),一些人可以欺騙性地登記使用聲紋驗(yàn)證技術(shù),以進(jìn)入其他人的銀行賬戶,他們可以提供大量個(gè)人信息來(lái)通過(guò)第一關(guān)。他們同樣可以錄制受害者的語(yǔ)音,然后試圖進(jìn)行回放——盡管銀行可以通過(guò)讓客戶重復(fù)隨機(jī)語(yǔ)句來(lái)驗(yàn)證身份,從而打擊這種做法。就目前而言,傳統(tǒng)保護(hù)措施已經(jīng)千瘡百孔,而聲紋驗(yàn)證技術(shù)才嶄露頭角,以至于黑客們幾乎沒(méi)有費(fèi)心去改變自己的策略。(財(cái)富中文網(wǎng)) ????譯者:王燦均 |
????To enroll, customers make an initial call to Barclay's during which they are recorded while repeating a phrase. A second call is required to verify that the technology recognizes them. In subsequent calls, customers give their I.D. number to an agent and then go through a brief voice verification process. The technology automatically determines whether the voice on the other end of the line is a close enough match. On average, the process takes 40 to 60 seconds, Smallman said. So far, the service has worked well, with less than 1% of all voice print calls experiencing problems. ????Not every customer who is offered the opportunity to enroll in the voice print program at Barclay's does so. Some are concerned about the privacy implications of having their voice recorded -- granted, many businesses already record customer service calls -- or they fear security breaches. Around 5% of the bank's customers have objected, Smallman said. In such cases, clients can continue to have call center representatives questioning them to verify their identity. ????Austin, the consultant, said that it's important for companies using voice print technology to first get customer consent. Companies could, without warning, record their customers' voices during normal conversations with customer service agents and then use that for comparison for future calls. Austin said that members of focus groups have told her that they feel betrayed by such a program. Privacy advocates, no doubt, would also complain. ????David Pollino, who handles fraud prevention for Bank of the West, part of BNP Paribas, said that voice print technology has several potential shortcomings. Business accounts may not work because several employees typically have access. The variety of voices could confuse the technology. ????There's also the question of who's liable if there's fraud. Is it the bank? The customer? Or the company that supplies the technology? ????Consumer psychology may also be a problem, said Pollino, whose bank does not use voice print technology. Bank customers, he said, prefer conspicuous security rather than subtle -- even if their protections are equally effective. Asking questions reassures people that the bank takes security seriously, he said. Replace questions with voice print technology, and customers may start to think that security is lax. "If you walk into a bank, you like to see a vault," Pollino said. ????Determined hackers can overcome voice print technology, like any other security measure. Whether the danger is any greater than identity theft, stolen checks, or tampered credit cards is unclear. In theory, someone could fraudulently enroll for voice print access to someone else's bank account, providing they have a raft of personal information about them to get past the first step. They could also record a victim's voice and try to play it back, although banks can combat that tactic by making customers repeat random phrases to verify their identities. For the moment, traditional protections are so porous and voice print technology so new that hackers have hardly bothered to change their strategies. |