Patent ID: 7484102

Claim:
At a client device having an audio-based user-interface that is configured to submit audio-based commands, a method for obtaining authorization to access remote application data, the method comprising: an act of sending a request for audio-based access to application data to a server; an act of receiving a first audio challenge for a user credential from the server; an act of sending an entered user credential responsive to the first audio challenge to the server; an act of receiving a second audio challenge requesting an additional portion of data from the server, the second audio challenge including speech-based instructions requesting a responsive sequence of DTMF tones responsive to the second audio challenge, at least a portion of the second audio challenge configured in a manner that purposefully obscures to some extent that the sequence of responsive DTMF tones is being requested such that a human user of the client device can understand that the sequence of responsive DTMF tones is being requested but automated voice recognition techniques have increased difficultly recognizing that the sequence of response DTMF tones is being requested so as to reduce the likelihood of brute force attacks gaining access to the application data; an act of audibly outputting the second audio challenge at the client to request entry of the responsive sequence of DTMF tones, the second audio challenge output at the client device in a manner purposefully obscuring to some extent that the responsive sequence of DTMF tones is being requested; act of receiving an additional portion of data responsive to the second audio challenge at the client device; an act of sending the additional portion of data responsive to the second audio challenge to the server; and an act of receiving an authorization indication from the server, the authorization indication indicating if the client device can access the requested application data.