聲紋:你的新密碼
????要登記使用該技術(shù),客戶(hù)先要致電巴克萊銀行,在通話期間他們要重復(fù)一個(gè)短語(yǔ)進(jìn)行樣本錄制。之后客戶(hù)還要打第二個(gè)電話,以驗(yàn)證該技術(shù)能否正確識(shí)別他們。在隨后的通話中,客戶(hù)可以將自己的身份識(shí)別號(hào)碼告訴話務(wù)員,然后進(jìn)行一段簡(jiǎn)短的語(yǔ)音驗(yàn)證。這種技術(shù)能夠自動(dòng)判定電話線另一頭的聲音是否跟樣本匹配。斯摩曼表示,這個(gè)驗(yàn)證過(guò)程平均算來(lái)要花費(fèi)40-60秒的時(shí)間。到目前為止,該服務(wù)運(yùn)轉(zhuǎn)良好,在所有聲紋驗(yàn)證電話中,遇到問(wèn)題的比例不足1%。 ????在巴克萊銀行邀請(qǐng)加入這項(xiàng)聲紋驗(yàn)證計(jì)劃的客戶(hù)中,并不是每個(gè)人都進(jìn)行了登記。一些人擔(dān)心錄制自己聲音可能帶來(lái)隱私問(wèn)題——的確,很多公司都對(duì)客戶(hù)服務(wù)電話進(jìn)行了錄音——或者是,他們害怕安全漏洞。斯摩曼稱(chēng),巴克萊銀行有5%左右的客戶(hù)拒絕加入。在這種情況下,那些客戶(hù)可以繼續(xù)讓呼叫中心的話務(wù)員通過(guò)提問(wèn)驗(yàn)證身份。 ????顧問(wèn)奧斯汀表示,在使用聲紋驗(yàn)證技術(shù)前首先征得客戶(hù)同意,這對(duì)公司來(lái)說(shuō)很重要。公司可能在沒(méi)有提醒的情況下記錄客戶(hù)跟客服代表進(jìn)行正常通話時(shí)的語(yǔ)音,然后在往后的通話中使用它進(jìn)行比較。奧斯汀說(shuō),參與焦點(diǎn)小組訪談的成員告訴她,他們感到被這樣一種計(jì)劃出賣(mài)了。毫無(wú)疑問(wèn),隱私權(quán)倡導(dǎo)者也會(huì)抱怨。 ????大衛(wèi)?波里諾說(shuō),聲紋驗(yàn)證技術(shù)有一些潛在的缺點(diǎn)——波里諾是法國(guó)巴黎銀行(BNP Paribas)旗下美西銀行(Bank of the West)防欺詐部門(mén)的主管。公司賬戶(hù)可能無(wú)法正常工作,因?yàn)檫@種賬戶(hù)通常有數(shù)名員工有權(quán)登錄,多種多樣的語(yǔ)音可能會(huì)讓該技術(shù)產(chǎn)生混淆。 ????另外,問(wèn)題還有:如果欺詐行為得逞,誰(shuí)來(lái)負(fù)責(zé)?銀行嗎?還是客戶(hù)?抑或是提供這種技術(shù)的公司? ????客戶(hù)心理同樣可能是一個(gè)問(wèn)題,波里諾說(shuō)道,他任職的銀行并未使用聲紋驗(yàn)證技術(shù)。他表示,銀行客戶(hù)更喜歡顯而易見(jiàn)的安全技術(shù)而非不易察覺(jué)的——即使它們的保護(hù)作用同樣有效。波里諾說(shuō),提問(wèn)這種方式讓客戶(hù)感到銀行是在認(rèn)真對(duì)待安全問(wèn)題,而將提問(wèn)換成聲紋驗(yàn)證,客戶(hù)可能開(kāi)始認(rèn)為安全系統(tǒng)很松懈?!叭绻阕哌M(jìn)一家銀行,你會(huì)希望看到保險(xiǎn)庫(kù)?!辈ɡ镏Z如是說(shuō)。 ????有決心的黑客能夠攻克聲紋驗(yàn)證技術(shù),就像其他任何一種安全措施一樣。其帶來(lái)的危險(xiǎn)是否大于身份盜用、支票失竊或信用卡信息被篡改,這還不清楚。從理論上說(shuō),一些人可以欺騙性地登記使用聲紋驗(yàn)證技術(shù),以進(jìn)入其他人的銀行賬戶(hù),他們可以提供大量個(gè)人信息來(lái)通過(guò)第一關(guān)。他們同樣可以錄制受害者的語(yǔ)音,然后試圖進(jìn)行回放——盡管銀行可以通過(guò)讓客戶(hù)重復(fù)隨機(jī)語(yǔ)句來(lái)驗(yàn)證身份,從而打擊這種做法。就目前而言,傳統(tǒng)保護(hù)措施已經(jīng)千瘡百孔,而聲紋驗(yàn)證技術(shù)才嶄露頭角,以至于黑客們幾乎沒(méi)有費(fèi)心去改變自己的策略。(財(cái)富中文網(wǎng)) ????譯者:王燦均 |
????To enroll, customers make an initial call to Barclay's during which they are recorded while repeating a phrase. A second call is required to verify that the technology recognizes them. In subsequent calls, customers give their I.D. number to an agent and then go through a brief voice verification process. The technology automatically determines whether the voice on the other end of the line is a close enough match. On average, the process takes 40 to 60 seconds, Smallman said. So far, the service has worked well, with less than 1% of all voice print calls experiencing problems. ????Not every customer who is offered the opportunity to enroll in the voice print program at Barclay's does so. Some are concerned about the privacy implications of having their voice recorded -- granted, many businesses already record customer service calls -- or they fear security breaches. Around 5% of the bank's customers have objected, Smallman said. In such cases, clients can continue to have call center representatives questioning them to verify their identity. ????Austin, the consultant, said that it's important for companies using voice print technology to first get customer consent. Companies could, without warning, record their customers' voices during normal conversations with customer service agents and then use that for comparison for future calls. Austin said that members of focus groups have told her that they feel betrayed by such a program. Privacy advocates, no doubt, would also complain. ????David Pollino, who handles fraud prevention for Bank of the West, part of BNP Paribas, said that voice print technology has several potential shortcomings. Business accounts may not work because several employees typically have access. The variety of voices could confuse the technology. ????There's also the question of who's liable if there's fraud. Is it the bank? The customer? Or the company that supplies the technology? ????Consumer psychology may also be a problem, said Pollino, whose bank does not use voice print technology. Bank customers, he said, prefer conspicuous security rather than subtle -- even if their protections are equally effective. Asking questions reassures people that the bank takes security seriously, he said. Replace questions with voice print technology, and customers may start to think that security is lax. "If you walk into a bank, you like to see a vault," Pollino said. ????Determined hackers can overcome voice print technology, like any other security measure. Whether the danger is any greater than identity theft, stolen checks, or tampered credit cards is unclear. In theory, someone could fraudulently enroll for voice print access to someone else's bank account, providing they have a raft of personal information about them to get past the first step. They could also record a victim's voice and try to play it back, although banks can combat that tactic by making customers repeat random phrases to verify their identities. For the moment, traditional protections are so porous and voice print technology so new that hackers have hardly bothered to change their strategies. |