| With the rapid development of the mobile Internet,information is expanding quickly,which cause information security and personal privacy protection getting increasingly attention.Identity authentication technology can effectively restrict the access of illegal users to various resources and services,which is one of the key mechanisms of network security and resource protection.Nowadays,a very common way for user authentication is based on the match of a user ID and/or its password with the registered ones.However,with the increasing services that a user accesses,it is more and more difficult for the user to remember all related credentials,which make this method inconvenient.At the same time,with the large number of network attacks,user names and passwords are often faced with the risk of loss.Identity authentication based on biometric recognition technology is considered to be more convenient and safe,which verifies the identity based on the characteristics of an individual person.With each person’s biological features of uniqueness and stability constant in a certain period of time,to a certain extent,this method is not easy to be forged and fake.Fingerprint identification is one of the most widely used biometric systems,which has low recognition rate and rejection rate reaching commercial standards.But it requires a user hand for authentication,which is not convenient to support authentication at any time and in any place or be applied in wearable devices.Although the biometric authentication system solves the problem of traditional authentication methods to some extent,the attacker still can find some weak points in the system to attack.During the biometric acquisition,feature transfer or authentication,there still exist kinds of security problems.Based on the study of identity management systems,we selected voice as biometrics and designed an identity authentication system based on voiceprint challenge.The system used the challenge response mode,so there is no need for the user to remember complex passwords,they just need to response according to the system prompts by voice and can be automatically certified.Authentication security is enhanced by using different verification codes(randomly generated)to challenge the user.The verification code is different in each time,thus there is no way for an attacker to use recorded user verification code input to pass authentication.In this paper,the system structure is designed to support multiple services at the same time by sharing the identity provider,which can realize federated identity management easily.At the same time,we combine speech recognition and speech synthesis technology in human-computer interaction and design a pure voice interactive mode,which improves the usability of voiceprint authentication system.What’s more,we made an innovation focusing on the system security.Since there may exist spoofing attacks during the voiceprint recording,we designed a user aliveness authentication method that can effectively recognize the fake ones,which can prevent playback,speech synthesis machine forgery attack.Finally,we use JAVA language to develop the identity authentication system based on voiceprint challenge,and evaluated the accuracy and efficiency of our system and conducted a small scale user study with 30 participants to test its social acceptance.We also designed some user questionnaires and sorted out participant feedback.The experimental result shows that the identity management system based on voiceprint challenge works effectively and has good user acceptance. |