Copyright © 2017 Accenture  All rights reserved. Non binding proposal.

MULTI-FACTOR AUTHENTIFICATION

WITH AMAZON ALEXAKeep your customers secure in a voice-enabled future

Get creative in verifying a user

Higher level of security needed for voice?

Is the Alexa Voice Pin enough?

How about looking at the next level of authentication.

The ability to authorise a user based on previous

locations or through Audio or other means

Some skills may require a higher level of security to ensure the user is who is

they say are.

E.g. Banking Skills, Product purchasing Skills, Health and

Medical Skills + other Sensitive data Skills

The Alexa voice pin is handy, especially for false positives

when ordering (Alexa TV Adverts!)

However it is still a static code, and once its heard by

others, is it still secure?

PREPARING FOR THE FUTURE OF VOICE APPLICATIONS

HOW/WHY WE USED MULTI-FACTOR AUTHENTICATION

The skill we were creating allows users to purchase products. Future implementations would also allow you to hear a customers purchase history.

We felt this was enough to enable additional security for the user and looked at some providers who could help.

A push notification system service that lets you send messages. Powerful and cost-effective

AWS SNS (SIMPLE NOTIFICATION SERVICE)

Voice, Video, Messaging and Authentication APIs for a variety of applications

TWILIO

Set of cloud based communication APIs, including SMS, Voice, Chat and Verification

NEXMO

USING NEXMO FOR MULTI-FACTOR AUTHENTICATION

First we need to sign up to get our API Key, Secret Key and Brand Name in order to be able to use the Verify

API calls

To implement Nexmo using Node JS there is a very handy Nexmo node package which

simplifies making calls to the Verify API

We need to implement the API calls and setup the credentials for calls

correctly

Build the solution to call the verify API at

the correct time. Once to send the code to the user, second to check the user has provided

the code correctly

Test the skill on a real Alexa device or the

online simulator

SIGN UP TO NEXMO

INSTALL NODE PACKAGE

IMPLEMENT CREDENTIALS &

API CALLS

IMPLEMENT CALLS INTO YOUR

INTENTS

TEST YOUR SOLUTION

1 2 3 4 5

OTHER CREATIVE AUTHENTICATION METHODS CURRENTLY EXPERIMENTING

LOCATION BASED AUTHENTICATION AUDIO AUTHENTICATION FACIAL & VOICE RECOGNITION

AUTHENTICATION

Location based authentication is something we’ve looked into for some

clients.

The user is asked where they were on a specific date and time range. Follow up

questions may be asked to ensure validity.

One example is to let the user hear an audio snippet of a song/audio book they have been listening to over the past few

days.

The user is then required to say the artist/author/title plus any other uniquely

identifiable information

Some companies may wish to use an Alexa device within their store/branch.

Somewhat futuristic for Alexa, the idea is to have a camera identify the user and let Alexa know if the person is indeed who

they claim to be.

https://goo.gl/dXlbSC

https://goo.gl/OgSZWY

6

CONTACT

FAISAL VALLIWORK E-MAIL: FAISAL.A.VALLI@ACCENTURE.COMPERSONAL E-MAIL: FAISALVALLI9@GMAIL.COMLINKEDIN: HTTPS://WWW.LINKEDIN.COM/IN/FAISAL-VALLI-63B21537TWITTER: @FAISALVALLI9