Abstract:
A method for communicating confidential data over a computer network, such as the Internet includes encrypting the confidential data while the confidential data is in the control of a sender. The step of encrypting includes mixing the confidential data with biometric data to produce encrypted data. The encrypted data is then sent over a communication link to a receiver. The encrypted data is de-encrypted while the encrypted data is in the control of the receiver by separating the biometric data from the confidential data. Voice signatures are convenient forms of biometric data and may be used for the dual purpose of encrypting the data to be sent and serving as a key to be matched by the second entity to gain access to the data, i.e., to allow de-encryption. The further step of converting the encrypted data from a first format to a second format, e.g., wave file format, may provide additional security and requires the reconversion by the second entity in order to de-encrypt. Additional key data may be generated and combined with the confidential data and/or biometric data in accordance with a predetermined algorithm to create a second level of encryption and which is de-encrypted by a reverse algorithm.

Description:
FIELD OF THE INVENTION  
         [0001]    The present invention relates to apparatus and method for encrypting data transmitted or accessible on computer networks to prevent unauthorized access to the data. More particularly, the present invention utilizes biometrics to limit user access to data transmitted and/or available on a network, such as the Internet.  
         BACKGROUND OF THE INVENTION  
         [0002]    The communication and availability of confidential information, such as credit card numbers, medical records, financial information, trade secrets, proposals, software source code, insurance claims, etc. on computer networks, in particular, the Internet, requires the prevention of unauthorized users from accessing and using the confidential information. In addition to the use of passwords and access codes to limit accessibility to data stored on host computers, various encryption techniques have been employed to prevent unauthorized access to data that is transmitted over the Internet from one computer to another. Encryption is required because hackers can monitor and redirect data transmitted over the Internet. Various encryption techniques are known and many have been cracked by hackers who discern methods for de-encryption.  
           [0003]    Controlling access to data by the provision of an access code or password is subject to hacking and is also inconvenient for users who are required to remember arbitrary passwords and access codes. In response to these limitations, biometrics are becoming increasingly popular tools for controlling access, both to information and/or to secured areas. Biometrics derive an “access code” from an individual&#39;s unique anatomical shape and dimensions, for example, with respect to the individual&#39;s fingerprints, iris or the frequency compositions and patterns of the voice. In biometrics, the “key” is inherent and unique to the individual, and is always with the individual, therefore memorization of a complex password is unnecessary. In addition, a fingerprint or voice is a source of a potentially unlimited number of reference points, depending upon the resolution with which it is inspected and measured. While the measurement of anatomical features, e.g., fingerprint scanning or iris scanning is technologically possible using personal computers and associated peripherals, the hardware implementation is complex and expensive. In contrast, the hardware utilized for voice analysis are common features on most modern personal computers, which include microphones, speakers and sound processing circuits. A number of methods have been developed for generation of speech samples/voiceprints (voice signatures) of speakers. A number of them are based on a single template, such as Dynamic Time Warping (DTW), Gaussian Mixture Models (GMM) or Hidden Markov Models (HMM). These are distortion/statistically-based pattern classifiers that take the measurements from the speaker only. Other methods use Neural Tree networks (NTN).  
           [0004]    An NTN is a hierarchical classifier that incorporates the characteristics of both decision trees and neural networks. Using discrimination training this method learns to contrast the voice of the speaker (member) from the voice of a pool of antispeakers (other members) with similar voice patterns.  
           [0005]    U.S. Pat. No. 4,957,961 describes a neural network, which can be rapidly trained to reliably, recognize connected words. A dynamic programming technique is used in which input neuron units of an input layer are grouped in a multi-layer neural network. For recognition of an input pattern, vector components of each feature vector are supplied to respective input neuron units on one of the input layers that is selected from three consecutively numbered input layer frames. An intermediate layer connects the input neuron units of at least two input layer frames. An output neuron unit is connected to the intermediate layer, An adjusting unit is connected to the intermediate layer for adjusting the input-intermediate and intermediate-output connections to make the output unit produce an output signal. The neural network recognizes the input pattern as a predetermined pattern when the adjusting unit maximizes the output signal. About forty times of training are used in connection with each speech pattern to train the dynamic neural network.  
           [0006]    It has been found that a reduced set of cepstral coefficients can be used for synthesizing or recognizing speech. U.S. Pat. No. 5,165,008 describes a method for synthesizing speech in which five cepstral coefficients are used for each segment of speaker independent data. The set of five cepstral coefficients is determined by linear predictive analysis in order to determine a coefficient weighing. The coefficient-weighing factor minimizes a non-squared prediction error of each element of a vector in the vocal tract resource space. The same coefficient weighing factors are applied to each frame of speech and do not account for the spectral variations resulting from the effect of non-format components.  
           [0007]    As per S. Furui, “Cepstral Analysis Technique For Automatic Speaker Verification” IEEE Transactions On Acoustics, Speech, and Signal processing, ASSP-29: 254-272, April 1981, a reference template is generated from several utterances of a password during testing. A decision to accept or reject the speaker claimed identity is made by whether or not the distortion of the speaker&#39;s utterances falls below a predetermined threshold. This is the DTW technique. Another technique using Hidden Markov Models (HMM) is described in J.J. Naik “Speaker verification over long distance telephone lines”, Proceeding ICASSP 1989. As outlined above, a variety of speech analysis and differentiation techniques are known. In addition, the computer hardware for utilizing those techniques is common and relatively inexpensive. Accordingly, improved encryption techniques and data access based upon voice biometrics would be desirable.  
         SUMMARY OF THE INVENTION  
         [0008]    The problems and disadvantages associated with the conventional techniques and apparatus utilized to communicate confidential data are overcome by the present invention which includes a method for communicating confidential data from a sender to a receiver wherein the confidential data is encrypted while in the control of the sender. The step of encrypting includes mixing the confidential data with biometric data to produce encrypted data. The encrypted data is then sent over a communication link to the receiver. The encrypted data is de-encrypted while the encrypted data is in the control of the receiver by separating the biometric data from the confidential data. 
       
    
    
     BRIEF DESCRIPTION OF THE FIGURES  
       [0009]    For a better understanding of the present invention, reference is made to the following detailed description of an exemplary embodiment considered in conjunction with the accompanying drawings, in which:  
         [0010]    [0010]FIG. 1 is diagrammatic view of a computer network and associated computer system configurations on which the present invention may be practiced;  
         [0011]    [0011]FIGS. 2A through 2H are flow charts illustrating the processing utilized in the present invention;  
         [0012]    [0012]FIG. 3 is a diagrammatic depiction of the processing performed by the embedding step of the present invention; and  
         [0013]    [0013]FIG. 4 is a diagrammatic view of the de-embedding process performed by the present invention. 
     
    
     DESCRIPTION OF THE PREFERRED EMBODIMENTS  
       [0014]    [0014]FIG. 1 shows a computer/network system  10  which will support the apparatus and method of the present invention and includes a network  12  for connecting various individual computers  14 ,  20 ,  26  for communication therebetween. While the Internet is an exemplary network  12 , the present invention is applicable for use on any sort of computer network, such as a computer network  12  that is resident within a private corporation or a governmental entity. A web server  14  is programmed with system software  16  and has system data base  18  available to it as further described below. The data base  18  has various files, e.g., for storing voice signatures and for storing data files to be communicated between users  21 ,  27 . A plurality of user PCs  20 ,  26  are connected to the network  12  and each has locally resident system software  22 ,  28  and system data  24 ,  30  for performing the processes of the present invention. The web server  14  serves as a central administrator that provides access to and maintains the system software  16  and data base  18 ,serving a plurality of registrant PC&#39;s, for example,  20 ,  26 .  
         [0015]    [0015]FIGS. 2A through 2H illustrate the processing flow and functionality of the system  10 , primarily from the viewpoint of a user  21 ,  27 , but also from the perspective of the web server  14  as it interacts with the users  21 ,  27  over the network  12 . After the start point  32 , all users, e.g.,  21 ,  27 , will each purchase and install  34  the software  22 ,  28  for running on the registrant&#39;s PCs  20 ,  26 . The users  21 ,  27  log  36  onto the web server  14  and provide  38  the user registration information requested by the web server  14 . Exemplary information would include: (1) user name; (2) email address; (3) password (which is retyped for verification); (4) first name; (5) last name; (6) a secret question to be posed by the system to the user; and (7) the corresponding secret answer that the user would utilize in responding to the secret question. The secret answer is effectively a second password but also functions as a speech sample as described below. The user/registrant is queried as to whether he wishes to make his voice signature available to other registered users (public). As will be described below, the selection of making a voice signature public will enable any member of the registered public to email the registrant secure, encrypted data. By selecting a private voice signature, only those persons who receive specific approval from the intended recipient (by emailing the intended recipient&#39;s voice signature to the proposed sender) will be able to transmit the secured data through the web server  14  to the intended recipient. This will be explained further below.  
         [0016]    Assuming the registrant has provided the information required by the registration process  38  conducted on the web server  14 , the web server  14  then displays  40  a main operational menu. The operational menu has selections  42 ,  44 ,  46 ,  48 ,  50 ,  52 ,  54  which are listed sequentially in an order which mimics the typical chronological flow of processing encountered when using the system for transmitting data in a secure manner over the network  12 . More particularly, the main menu includes the following selections: “Home page”  42 , “Generate your voice signature”  44 , “Download member&#39;s voice signature”  46 , “Upload a document”  48 , “Inbox”  50 , “Open an embedded document”  52 , and “Exit”  54 . Selection of “Home page”  42  returns  56  the user to the home page present on the web server  14 . Selection of “Exit”  54  from the main menu will cause the program to end  58 . The basic processing utilized for transmitting data from a first registered user, e.g.,  21 , to a second registered user, e.g.  27 , starts with the selection “Generate your voice signature”  44 . This is a preliminary step but it can be repeated subsequent to registration if the resultant voice signature is anomalous or otherwise proves to create an impediment or inconvenience. One of the purposes of generating the user&#39;s voice signature  44  is to provide the special biometric key that the user must reproduce at the time of opening a secure document (or gaining access to the system for performing some other function) as shall be seen below. The system  10  requires each user to generate their own voice signature and to store their voice signature on the system data base  18 . When a secure document is transmitted from a first user to a second, the second user&#39;s voice signature is retrieved by the first user from the system data base  18  and incorporated into the transmitted document to encrypt it. The encrypted document is then forwarded to the second user. In order to de-encrypt the document, the second user must dynamically supply his voice signature which is compared to the voice signature embedded in the document transmitted by the first user. If a match occurs, the document is de-encrypted to allow the second user, the recipient, to view the document. If there is no match, then the document remains encrypted. In this manner, the recipient&#39;s voice signature is a biometric key. In order for all users to have the capacity to send and receive data, the system requires all users to generate their voice signatures. In the example to follow, the first user is the sender of the document and the second user is the receiver. However, as stated above, both users can send and receive.  
         [0017]    Further in overview, after a user, e.g.,  27  registers and generates their voice signature which is uploaded to the web server  14  and stored on the system data base  18 , another user, for example  21 , may select “Download member&#39;s voice signature”  46  in order for the PC resident software  22  to mix it or embed it in a document to be transmitted over the Internet  12  in a secure fashion. The system software  22  on the user&#39;s PC  20  enables the user  21  to mix the downloaded voice signature with the confidential data and then the resultant mixed file is uploaded  48  to the web server  14  where it is stored in the system data base  18  in the form of email with or without attachments. When the second registered user  27  (the intended recipient) checks his Inbox  50  he can observe the existence of the encrypted file therein. The recipient user can then retrieve the email from the Inbox and then proceed to de-encrypt (de-embed) the encrypted document  52  to read the confidential data transmission. Reviewing the foregoing process then, one can see that the start of the basic processing flow is to register, (to purchase and install the software on the user PC  34 , log on to the web site  36  and provide the user registration information, passwords, etc.  38 ). Upon display  40  of the operational main menu, the user generates  44  his voice signature and then may proceed to utilize the voice signatures of others to transmit documents to then by downloading  46  the intended recipient&#39;s voice signature. The recipient&#39;s voice signature is mixed with the confidential data using the system software, for example  22 , resident on PC  20  and then uploaded  48  to the web server  14  for storage in the email system of the system data base  18 . Upon checking  50  his Inbox, the recipient  27  downloads the encrypted document to his PC  26 , and utilizing the user software  28  resident thereon opens  52  the embedded document and stores the de-encrypted data.  
         [0018]    [0018]FIG. 2B shows the more specific processing which occurs in the process of generating a voice signature. More specifically, the user selects  60  “Generate your voice signature” and provides  62  their user name and password. The user then specifies  64  the path and file name to store the voice signature on their PC. The software used in the process of generating a voice signature may be resident on the user PC, for example  20  or on the web server  14 . The resultant voice signature will be stored on the user PC  20  in data base  24 . The user may specify  66  a question to answer. This may be the same question specified  38  during the process of registration. The question and answer can be of a type that is not readily known or could not be guessed by an unauthorized user. The software then poses  68  the question selected  66  to the user. As noted above, the PCs  20 ,  26 , have sound processing circuitry and peripherals (multimedia equipment), e.g., microphones and speakers that permit the user PC to hear an audible question and to enunciate a verbal response which is captured by the computer. Accordingly, the user speaks  70  into the microphone of the PC the answer to the question posed in step  68 . The specific answer generated at step  70  is going to be used as the speech sample that is processed by the system software, either  16  or  22 , and from which a voice signature will be generated. The software  16  or  22  analyzes  72  the speech sample provided at step  70  to determine if it is of sufficiently long duration or if it is too long and/or whether it is of at the appropriate volume. If any of this checking  72  indicates that the speech sample is outside acceptable parameters for generating a voice signature, the user is notified  74  as to the specific problem and the program then proceeds to allow the user to either choose a question again at  66  or just cause the question to be re-asked  68 , allowing the user another opportunity to generate an appropriate voice sample. The software  22  then proceeds to generate  76  a voice signature from the speech sample resulting from the answer given at  70 .  
         [0019]    The generation of a voice signature from a speech sample and the verification of matching signatures in the present invention is preferably done in the following manner. The speech sample is generated by the speaker, by speaking a password/phrase in response to a specific question. The program for the generation and verification of voice signatures is preferably resident on the user&#39;s PC and uses a short-time average magnitude method to calculate Energy. The program then applies a Zero Crossing Rate. In this manner, the program detects beginning and end points of the given voice signal. The program normalizes the audio signal to avoid variation in the amplitude and then applies a Short Time Hamming window for smoothing frequency components.  
         [0020]    The voice signature is then generated in the following steps: (1) Auto correlation coefficients are taken for the full length of the speech sample; (2) Linear predictive coefficients; and (3) Cepstral coefficients are obtained. Using the above sets of three coefficients (4) static parameters are generated; (5) For every 10 ms of the speech sample, the above parameters are taken; and (6) Delta Coefficients are obtained. Thus, Dynamic parameters are taken and stored. The foregoing static and dynamic parameters are stored as the voice signature. To compare two independently generated voice signatures, the deviations between the two corresponding sets of static and dynamic parameters are computed and must be within a specified range for the voice signatures to be considered a match.  
         [0021]    Referring to FIG. 2C, the same question previously posed by the computer, e.g.,  20  at  68  is posed again  78  and the user answers the same question with the same answer by speaking  80  into the microphone of the PC  20 . The same preliminary analysis is performed  82  to determine whether the answer is a suitable speech sample. The user is notified  84  if it is not and given another opportunity to generate a suitable speech sample. As is conventional, this loop including decision  82  and function  84  will be monitored to ascertain if it has been traversed an excessive number of times and if so, will require the user to choose another question to answer at  66  and/or to exit the program. Assuming that the user has generated a suitable sample, a second voice signature is generated for the speech sample of the second answer and compared  86  to the first voice signature. Static distance is calculated from the first set of static parameters and those generated from the second speech sample. This process is repeated for the second set of parameters also. Dynamic Distances are calculated by applying the DTW (Dynamic Time Warping Algorithm) on both sets of dynamic parameters. Static and dynamic distances thus generated are compared and the deviation of the voice signatures is calculated  88  and compared with the respective predefined thresholds. If the deviations between the two voice signatures is excessive  90 , the user is notified  92  of this condition and asked  94  if he would like to try generating suitable speech samples again. If yes, he is returned to the original prompt to choose a question at  66  or if not he is directed back to the main menu  40  (See FIG. 2A) to allow the user to exit  54  the program. Alternatively, repeated failures can automatically trigger exiting the program or provide the user with the option of exiting the program without requiring a return to the main menu to select exit  54 . This is particularly appropriate in those situations where the software has determined that an unauthorized user is attempting to infiltrate the system.  
         [0022]    Assuming that the voice samples generated have corresponding voice signatures without excessive deviations, the processing continues on FIG. 2D by enabling  98  the upload of the voice signature (either the first or the second one generated or an amalgam) and querying  98  the user to upload, exit or return to the main menu. If upload is selected  99 , the voice signature is sent  100  via the Internet to the web server  14 . The web server  14  upon receiving the uploaded voice signature, checks  102  the data base  18  to determine if a voice signature already exists for this particular user. If the voice signature does not exist  104 , the new voice signature is simply saved  106  in the data base  18 . An exemplary file structure for storing voice signatures includes the fields: (1) email address; (2) password; (3) voice signature data field; and (4) public or private email indicator. In the event that the voice signature is determined at  104  to already exist in the data base  18 , then the existing voice signature in the data base  18  is downloaded  107  to the PC, e.g.,  20  and the user is queried to determine if he can match the existing voice signature by way of a spoken response to a predetermined question. If the user can match  110  the existing voice signature, then the new voice signature can be saved  106  in the data base  18 , overwriting the existing voice signature. If the registrant cannot match  110  the existing voice signature, then the user is redirected back to the main menu  40  or the program or the program automatically terminates.  
         [0023]    In order to exercise the next logical function of the system  10  it has to be assumed that at least two individuals have registered with the system  10  and have uploaded their voice signatures. In this context, if one registered user seeks to send data to another registered user in a secure manner over the network  12 , the sender selects “Download member&#39;s voice signature” at the main menu  40  at step  114  (See FIG. 2E). It should be appreciated that the individual member whose voice signature is downloaded is the intended recipient. In order to download the voice signature of the intended recipient, the sender must provide their name and password to the system web server  14  at step  116 . Assuming that the sender provides the correct name and password, he is then allowed to specify  118  the intended recipient&#39;s email address which is then utilized as the key for searching for the intended recipient&#39;s voice signature in the data base  18  of the web server  14 . The recipient&#39;s record in the data base  18  is located  120  based upon the email address. At the time of obtaining the correct record, namely for the intended recipient, the record is checked  122  to see if the public or private field indicates privacy. If the intended recipient has not indicated privacy, then the intended recipient&#39;s voice signature is downloaded  124  to the sender&#39;s PC. In the event that the intended recipient has elected privacy  122 , the system software  16  automatically prepares  126  an email request to the recipient to send his voice signature to the sender i.e., by providing authorization to the web server  14  or by emailing a copy stored on his PC. Regardless whether the recipient sends  128  the voice signature or declines to send it, control returns to the main menu  40  to allow the sender to exit or select another function. Once the sender comes to possess the voice signature of the recipient, the sender can display  40  the main operational menu and select “Upload a document”  48  from the main menu.  
         [0024]    [0024]FIG. 2F illustrates the processing associated with selection  130  of option  48 . Upon selecting  130  “Upload a document” from the main menu, the PC resident software, e.g.,  22  requests  132 : (1) the file identification of the data to be sent, i.e., the file name and its location on the sender&#39;s PC  20 ; (2) the email address of the recipient; (3) the file name for the recipient&#39;s voice signature; (4) the file name for the sender&#39;s voice signature; and (5) the file name for the resultant embedded/encrypted file. The user may also indicate whether he wishes to receive a receipt from the intended recipient upon receipt of the encrypted document. Having provided the foregoing information, the system software  22  on the user&#39;s PC  20  then proceeds to mix or embed  134  the data file to be transferred with the recipient&#39;s voice signature, as well as, the voice signature of the sender to create a composite encrypted data file. This mixing/embedding step  134  may be compound to increase the difficulty of unauthorized de-encryption. For example, each data component, i.e., the data file and the voice signatures, may be pre-processed by shifting, adding a key code, etc., prior to being mixed together in a predetermined manner to create an encrypted file. This process of mixing/embedding is described further below. After mixing the data to create the encrypted data file at  134 , the encrypted data file is then converted  136  to a wave file. The wave file is uploaded  138  to the web server  14 . The web server  14  then stores  140  the wave file in the system data base  18 .  
         [0025]    The intended recipient will check his Inbox (which is part of the data base  18 ) periodically by signing on to the web server  14  and selecting  142  “Inbox” from the operational menu as illustrated in FIG. 2G. Upon selection  142  of “Inbox”, the intended recipient provides  144  his name and password. This permits the recipient to review  146  his Inbox and to select any files in the Inbox to download. Upon selecting a file to download, the web server  14  downloads  148  that wave file to the recipient&#39;s PC, e.g.,  26 . The intended recipient  27 , having the encrypted file in wave file format present on the PC  26 , can then select  150  “Open an embedded document” from the main menu. The recipient identifies  152  the file on his PC to de-embed, that is to convert from wave file format to encrypted file to an unmixed file and further provides the name for the resultant file and then selects de-embed from the de-embed screen. To repeat, the de-embed screen queries the recipient with three fields to be filled, namely, (1) the data file to be de-embedded; (2) the path to that data file; and (3) the name of the resultant de-encrypted file. Having provided that information at step  152 , the program can then proceed to convert the wave file into an encrypted data file at step  154  (FIG. 2H). The encrypted data file is then processed to extract  156  the recipient&#39;s voice signature which was previously mixed into the file before it was uploaded by the sender, i.e., by reversing the encryption processes performed at step  134  relative to the recipient&#39;s voice signature. Having extracted  156  the recipient&#39;s voice signature, the program (either  22  and/or  16 ) then verifies that the recipient can extemporaneously match  160  the extracted voice signature. This process of verification is just like that which was described previously, e.g., at step  110 . The question previously specified by the recipient  27  is posed to the recipient  27  and he responds with a spoken answer generating a speech sample that is then converted to a voice signature. The dynamically produced voice signature at step  158  is compared at step  160  to the voice signature extracted from the encrypted data file produced by step  156 . If the voice signatures match, then the confidential data in the encrypted data file is fully de-embedded or unmixed  162  such that the data file which was intended to be sent by the sender is readable by the intended recipient and is stored in the location specified by the recipient when filling out the de-embed screen. It should be appreciated that all the various screens requiring the location of data files and the naming of the files provide the commonly used Browse function to assist the users in naming and storing files. In the event that the recipient cannot match the voice signature provided in the encrypted data file at step  160 , he is allowed to retry the process of answering the posed question and comparing  158  the resultant voice signature generated from the answer to the voice signature present in the encrypted data file. This process is repeated for a predetermined number of times which are counted at step  163  until the retries are found to be excessive, whereupon the intended recipient, is notified  165  as to his failure to match the voice signature in the encrypted file. In that case, the data will not be released to that user. The program then returns to the main menu  40  or automatically exits. Assuming that the confidential data was successfully de-embedded at step  162  and that the sender indicated that he desired to receive a receipt upon the successful de-embedding of the file, a certified receipt is generated  164  by the web server  14  and is placed in the sender&#39;s Inbox. The certified receipt may be in the form of a simple email or may be in the form of an encrypted data transmission which includes the voice signature of the sender, thereby requiring the sender to provide a voice sample to de-encrypt the certified receipt. The program may contain additional security measures, such as, periodic checking of time stamped secure emails for purging or an automatic file delete that deletes a secure email from a user&#39;s PC upon the user failing to provide successful voice verification after a predetermined number of tries (self destructive files).  
         [0026]    [0026]FIG. 3 diagrammatically illustrates the process of mixing/embedding  165  the voice signatures of the sender  166 , the data to be sent  168  and the recipient&#39;s voice signature  170 . This data is optionally embedded with a key code, shifted or otherwise pre-processed, then mixed  172  to produce a mixed encrypted data file  174 . Data file  174  is converted to a wave file format  176  prior to transmission over the Internet.  
         [0027]    [0027]FIG. 4 shows the de-embedding process wherein the wave file format  176  is downloaded from the Internet to the recipient&#39;s PC, e.g.  26 , and converted  178  from a wave file  176  to an encrypted data file. The encrypted data file is subjected to unmixing  180  to produce two components, namely, a hidden component  182  including the data  168  and the voice signature of the sender  170  which is optionally embedded with a key code or otherwise encrypted. The recipient&#39;s voice signature is de-embedded  181  and then verified  183  by comparison to a voice signature generated from a speech sample provided by the recipient. If the previously recorded reference voice signature  170  and the extemporaneously generated voice signature successfully compare  160  then the data is unmixed and de-embedded  185 , as is the voice signature of the sender  187 , such that the data  168  is visible to the recipient whereby the recipient receives the intended transmission. If the compare  160  is not successful, than de-embedding is not allowed  184  and the data remains mixed with the sender&#39;s voice signature  166  in a hidden encrypted file component  182 .  
         [0028]    The process of embedding  134  and de-embedding  156 ,  162  may be carried out in an unlimited number of ways. An exemplary methodology in accordance with the present invention is shown in the following examples.  
       EXAMPLE NO. 1  
     Embedding Data (Text File)  
       [0029]    Step 1  
         [0030]    Data=A=01000001  
         [0031]    Step 2  
         [0032]    Receivers Voice Signature (RVS)=B=01000010  
         [0033]    Senders Voice Signature (SVS)=C=01000011  
         [0034]    Step 3 
                                                                     Calculate the embedding code, for example:                username   sm@hotmail.com           password   abc            Calculation for embedding code:                ASCII Code for s   115           ASCII Code for m   109           ASCII Code for a   97           ASCII Code for b   98           ASCII Code for c   99           Total   518                      
 
         [0035]    Total of numeric figures will be 5+1+8=14  
         [0036]    Again the Total of numeric figures will be=1+4=5  
         [0037]    Do this calculation until the result is a numeral from 1 to 9  
         [0038]    In this example, 5 is the embedding code.  
         [0039]    Step 4  
         [0040]    After applying (adding) embedding code  
         [0041]    Data=A=01000001  
         [0042]    will be converted to  
         [0043]    Data=F=01000110  
         [0044]    and  
         [0045]    RVS=B=01000010  
         [0046]    will be converted to  
         [0047]    Embedded RVS=G=01000111  
         [0048]    and  
         [0049]    SVS=C=01000011  
         [0050]    will be converted to  
         [0051]    Embedded SVS=H=01001000  
         [0052]    Step 5  
         [0053]    Secure Data File (.wav) will be:  
                                           Voice Header   Embedded RVS   Embedded SVS   Embedded Data                   44 Bytes   01000111   01001000   01000110                  
 
         [0054]    Step 6  
         [0055]    If you open this Secure Data File in Windows you will get a Sound wave form.  
       EXAMPLE NO. 2  
     De-Embedding Data  
       [0056]    Step 1  
         [0057]    First remove the voice header.  
                                                         Embedded RVS   Embedded SVS   Embedded Data                   44 Bytes   01000111   01001000   01000110                  
 
         [0058]    Step 2  
         [0059]    Apply (subtract) de-embedding code (which is same as embedding code generated earlier-in this case 5) to get both(RVS SVS).  
         [0060]    Embedded RVS=G=01000111  
         [0061]    will be converted to  
         [0062]    RVS=B=01000010  
         [0063]    and  
         [0064]    Embedded SVS=H=01001000  
         [0065]    will be converted to  
         [0066]    SVS=C=01000011  
         [0067]    Step 3  
         [0068]    Voice verification of RVS (Receiver&#39;s voice signatures) for de-embedding data by voice verification software.  
         [0069]    Step 4  
         [0070]    Apply de-embedding code to get data after voice verification  
         [0071]    After applying embedding code  
         [0072]    Embedded Data=F=01000110  
         [0073]    will be converted to  
         [0074]    Data=A=01000001  
         [0075]    Step 5  
         [0076]    Data is available for the user.