VBG

Helpful Resources

Articles, Demos, FAQs, Integration Examples and more to help you get started.


Explore

Helpful Resources

Check back frequently as we continually update this section

Articles of Interest

Aug 26

Considering Voice Biometrics for Your Business?

by VBG Staff

Here we cover a number of important topics as you evaluate adding Voice Biometrics to your enterprise. Lengthy, but highly recommended.

Read More ⟶
Aug 20

Multi-Factor Authentication and Voice Biometrics

by VBG Staff

With rampant fraud, more and more companies are adding Voice Biometrics to their MFA suite. Find out why.

Read More ⟶
Aug 25

What Are Deepfakes and Can We Stop Them?

by VBG Staff

Deepfakes have quickly become a significant issue in our society. Find out what we're doing to help businesses combat deepfakes.

Read More ⟶
Oct 15

Adding Voice Biometrics to Your Mobile Applications

by VBG Staff

In this article we consider several ways that you can add voice biometric functionality to your mobile applications.

Read More ⟶
Oct 12

Is It Expensive to Deploy Voice Biometrics?

by VBG Staff

Deploying voice biometrics is not as expensive as you think -- especially if you are armed with all the facts. We provide key insights here.

Read More ⟶

Demos of Key Elements of the VBG Platform

RandomPIN™ Enrollment in IVR

Here we demonstrate the user experience while enrolling with VBG's RandomPIN™ use case. In this demo, we are using our Twilio plug-in and built-in dialogs to prompt for speech samples and send them to the VBG Platform.

RandomPIN™ Verification in IVR

Here we demonstrate the user experience while enrolling with VBG's RandomPIN™ use case. In this demo, we are using our Twilio plug-in and built-in dialogs to prompt for speech samples and send them to the VBG Platform.

Frequently Asked Questions

How accurate are voice biometrics?

The accuracy of voiceprints is comparable to that of fingerprints and other commonly used biometrics. VBG regularly tunes production verification systems to 97-99% accuracy levels, depending on the usage environment and quality of the microphone/device among other factors.

Our voice biometric engine uses both physiological and behavioral characteristics of your voice to create a unique voiceprint. And since a majority of these characteristics tend to be consistent over time, they can be accurately measured under varying conditions.

Can mimicing, recordings, or a "deepfake" of my voice get a passing score?

This is extremely unlikely, as a person’s voice is unique to them. And while some professional mimics seem to sound like their targets, our technology measures and scores vocal characteristics that a human being cannot hear (or recreate).

We feature random and conversational speech collection approaches and recorded playback detection to greatly minimize recorded playback attacks. And, we also feature deepfake detection algorithms that work silently in the background to identify any synthetically created speech samples.

How does background noise affect performance?

In most cases VBG's audio analysis and filtering tools can handle background noise, allowing our voice biometric engine to process speech samples without issue. When noise levels are too high however, the VBG System responds back to the client application so that it can re-prompt the user accordingly.

As a general rule, users should be able to speak comfortably from a location with typical noise. Users should avoid loud and noisy areas that are crowded (sporting events, bars, concerts, etc.), as there will likely be too much audio information for the VBG System to reliably process.

How do you protect the personal data of end users?

The only personal data sent to our system are speech samples, and these are sent to the system via VBG's secure APIs, which require an account code and API access token. We further require all clients and partners to use HTTPS to transmit data to us. Once speech samples are received in the VBG System, they are either discarded from memory or written to our secure database.

Speech samples and voiceprints we create from them are encrypted using AES-256 encryption under FIPS 140-2 guidance.

Do you license the core technology for your voice biometric engine?

All of our voice biometric technology is either fully developed and maintained by VBG's team of voice biometric engineers, or is available to us under exclusive worldwide license terms. We use no 3rd party, commercial technology in our core delivery platform.

What happens if my voiceprint is stolen?

Due to VBG's comprehensive security protocols, it is extremely unlikely that any voiceprint will ever be stolen or hijacked. However, if a voiceprint were to find its way outside of the VBG Platform, absolutely nothing would happen! There are a several important reasons why.

To begin with, VBG's voiceprints are essentially mathematical models of how a person speaks. They are not files that can be played or turned into intelligible speech. Next, VBG uses a proprietary format, so only VBG's system can interpret and use them. And finally, voice biometric systems work by submitting speech samples to them, extracting features, and then comparing these extracted features to a reference voiceprint. Simply put, a voiceprint cannot be submitted directly to VBG's system, nor to any competitor's system for that matter.

We don't have an IVR system, can we still use the VBG service?

Yes. In fact, VBG does not have its own IVR system either. We instead have built plug-ins to support numerous IVR platforms. Thus, clients can directly incorporate standard enrollment and verification dialogs into their applications without the need for any IVR programming. VBG currently supports IVR integrations with Alvaria, Convergys, Intrado, PlumVoice, Telnyx, and Twilio. Other platforms are possible as well, so please inquire if interested.

It is also important to note that the VBG Platform can accept audio from almost any source. We have clients providing us with audio from IVR systems, call centers, mobile applications, WebRTC, Bluetooth speakers, traditional microphones, medical devices, and IoT devices. As long as you can provide speech samples to us via one of our supported audio file formats (or streaming), we should be able to process voice biometric requests for you.

Can I use the VBG Platform in my data center?

No. We no longer support the VBG Platform outside of our own managed datacenter. However, since 2021 we've licensed our platform technology to IngenID through a strategic alliance. IngenID makes their technology available to any private or public cloud, datacenter, etc.

Are we able to try VBG software before buying it?

Yes! We provide 60-day free trials of the VBG Platform. Free trials are hosted in our datacenter using a deployment that is identical to the one used by our production clients. So, you'll be assured that your intergration work, system performance, and results are consistent. You can also test optional telephony and IVR services, with both inbound and outbound calling.

How do you price your software?

We use a subscription pricing approach for our services, starting at just $250/month. Plans are available supporting volumes up to 2MM transactions per month. If volume requirements exceed 2MM transactions per month, VBG may require private instances within our Hosting System. It's important to note that VBG offers volume discounts; the higher the monthly transaction volume commitment, the lower the per-transaction price.

Integration Examples and Logic Flows

VBG Deployment Diagram

NOTES:

  • 1  Use one of our APIs to integrate with the VBG Platform, we support many protocols.
  • 2  Or, you can optionally use an authentication component, such as RADIUS. Note that you'll need to install a server-side component (we supply and help you configure).
  • 3  Or, use available pre-built components to leverage one of our 3rd party IVRs, or WebRTC via a supported browswer, or our mobile Authenticator app.
  • 4  We manage the entire backend regarding engine responses, data storage, logging, alerting and more.
  • 5  You focus on the user interface and managing your business -- we take care of the rest!

IVR Authentication Hand-Off to Call Center Agent

Key Steps:

  • 1  Caller calls over PSTN to IVR System running in Client data center or cloud
  • 2  IVR System checks internal database or system for Caller info, then creates transaction in VBG Platform.
  • 3  IVR System prompts Caller using VBG's built-in IVR dialogs and records sample.
  • 4  IVR System RESTfully POSTs sample to VBG Platform which performs verification scoring; transaction is then closed. Streaming API could also be used for Steps 3 and 4.
  • 5  IVR System sends result to Call Center Agent indicating pass/fail status.
  • 6  With passing result, Call Center Agent initiates 2-way authenticated communications with Caller and engages as usual.
  • ** In this situation, VBG's IVR Dialogs help to greatly simplify the integration.

Passive Caller Authentication within Call Center

Key Steps:

  • 1  Caller calls over PSTN to IVR System running in Client environment.
  • 2  IVR System creates transaction in VBG Platform.
  • 3  IVR System sends transaction ID to Call Center System in Client environment.
  • 4  IVR System connects Caller with Call Center Agent.
  • 5  Caller and Call Center Agent engage in conversation as normal.
  • 6  Call Center System monitors transaction within VBG Platform.
  • 7  IVR or Call Center is streaming audio to VBG Platform throughout call (or can send periodic recordings).
  • 8  Call Center Agent can refer to Call Center System to determine pass/fail status.
  • ** This configuration requires some setup of Media Streaming between Client and VBG environments.

Inbound IVR Only Authentication (Client Premise or Cloud)

Key Steps:

  • 1  Caller calls over PSTN to IVR System running in Client data center or cloud.
  • 2  IVR System checks internal database or system for Caller info.
  • 3  Internal database or system returns VBG UserID to IVR System.
  • 4  IVR System create transaction in VBG Platform and prompts Caller for speech sample using IVR dialog.
  • 5  IVR System records Caller's speech sample.
  • 6  IVR System RESTfully POSTs sample to VBG Platform which performs verification scoring; transaction is closed. VXML, SOAP, or Streaming APIs could also be used.
  • 7  IVR System makes pass/fail decision and initiates next steps as appropriate.
  • ** This configuration requires IVR developers to handle all audio prompting, capture, sending to VBG Platform, etc.

Inbound IVR and System Authentication (Client Premise or Cloud)

Key Steps:

  • 1  User engages with Client Application or System.
  • 2  Client Application determines that User needs voice authentication and creates transaction in VBG Platform.
  • 3  Client Application instructs User to place call into IVR System running built-in VBG IVR Dialogs.
  • 4  User calls into IVR System and responds to prompt for speech sample.
  • 5  IVR System RESTfully POSTs sample to VBG Platform which performs verification scoring; transaction is closed. VXML, SOAP, or Streaming APIs could also be used.
  • 6  During IVR call, Client Application is periodically monitoring status of call.
  • 7  Client Application makes pass/fail decision and initiates next steps as appropriate.
  • ** This configuration saves developers significant time as VBG handles all IVR logic, speech capture and transmission, integration to platform, etc.

Outbound IVR Authentication (User Triggered)

Key Steps:

  • 1  User engages with Client Application or System.
  • 2  Client Application determines that User needs voice authentication and creates transaction in VBG Platform.
  • 3  VBG Platform takes instruction from Client Application and places outbound call to User. User responds to prompt which is RESTfully POSTed to VBG Platform. Verification sample is scored and transaction is closed. VXML, SOAP, or Streaming APIs could also be used.
  • 4  During IVR call, Client Application is periodically monitoring status of call.
  • 5  Client Application makes pass/fail decision and initiates next steps as appropriate.
  • ** This configuration saves developers significant time as VBG handles all IVR logic, speech capture and transmission, integration to platform, etc.

Outbound IVR Authentication (User Triggered)

Key Steps:

  • 1  Client Application determines that User needs voice authentication and creates transaction in VBG Platform.
  • 2  VBG Platform takes instruction from Client Application and places outbound call to User. User responds to prompt which is RESTfully POSTed to VBG Platform. Verification sample is scored and transaction is closed. VXML, SOAP, or Streaming APIs could also be used.
  • 3  During IVR call, Client Application is periodically monitoring status of call.
  • 4  Client Application makes pass/fail decision and initiates next steps as appropriate.
  • ** This configuration saves developers significant time as VBG handles all IVR logic, speech capture and transmission, integration to platform, etc.

Multi-Factor VPN Login Using VBG RADIUS Server

Key Steps:

  • 1  Computer User logs into VPN Server using appropriate client software and their UserID and Password as usual.
  • 2  VPN software for Computer User is configured for Multi-Factor Authentication, so VBG RADIUS Server is contacted.
  • 3  VBG RADIUS Server first performs LDAP authentication with User ID and Password.
  • 4  If successful, VBG RADIUS Server creates Transaction on VBG Platform to initiate voice biometric authentication.
  • 5  VBG Platform can trigger authentication using Mobile Push or Outbound IVR Call, depending on configuration. Mobile push via the VBG Authenticator™ is often preferred, as usage costs are lower and VBG's phone authentication provides an additional factor of security.
  • 6  VBG RADIUS Server monitors Computer User's authentication Transaction on VBG Platform.
  • 7  VBG RADIUS Server sends "pass" or "fail" result back to VPN Server as appropriate.
  • 8  VPN Server either logs Computer User into VPN or denies access.
  • ** This configuration requires NO development -- only installation of components and configuration!

Generic Mobile "Push" Authentication

Key Steps:

  • 1  User with Smartphone, and ideally the VBG Autenticator™ mobile app, logs into Computer System with multi-factor authentication (MFA). Note that VBG Authenticator™ users go through external, 3rd party phone validation and have a unique token assigned prior to usage, effectively adding another layer of security.
  • 2  Computer System determines User needs voice authentication as one of the security factors and sends request via RESTful API to VBG Platform.
  • 3  VBG Platform initiates mobile "push" to User's smartphone, which displays one-time passcode in VBG Authenticator™. Alternatively, in the absence of VBG Authenticator™, VBG Platform could initiate outbound phone call and use IVR Dialogs to achieve similar result.
  • 4  User repeats one-time passcode, which is then sent back via RESTful API to VBG Platform for content-checking and voice biometric analysis.
  • 5  VBG Platform communicates pass/fail result to Computer System.
  • 6  Authenticated User is allowed to proceed.

How We Secure Your Data

Multiple Layers of Protection

Nothing is more important to us than the security of your data. So, VBG takes a comprehensive approach to make sure we are doing everything we can to ensure your data remains private and secure at all times.

Physical Security
All hosting in SOC 2 datacenter
All PII is dual AES-256 encrypted
Servers are fully hardened
Your data is NEVER shared
Network Security
Hardware-based firewalls used
HTTPS with TLS 1.2+ required
24x365 network monitoring
DDoS and intrusion detection
Logical Security
Software firewalls fully enabled
Security tokens for API access
High quality SSL certificates
Client level data segmentation
Minimal Data
Speech samples are only PII
No names, credit cards, etc. ever
Unneeded data regularly purged
GDPR rights fully enabled

Ready to Get Started?

It's very easy to work with VBG! Just call us to discuss your needs. We'll show you live demos and can arrange for a free, 60-day trial of our complete system!
Contact Us Now