基于指令合规分析的语音接口权限控制  

Voice Interface Permission Control Based on Command Compliance Analysis

作　　者：陈哲轩 刘发中 孟岩 朱浩瑾[1] Chen Zhexuan;Liu Fazhong;Meng Yan;Zhu Haojin(School of Electronics Information and Electrical Engineering,Shanghai Jiao Tong University,Shanghai 200240)

机构地区：[1]上海交通大学电子信息与电气工程学院,上海200240

出　　处：《信息安全研究》2024年第12期1144-1152,共9页Journal of Information Security Research

基　　金：国家自然科学基金项目(62302298,62325207)。

摘　　要：语音接口作为重要的人机交互手段,由于其允许用户远程交互的特性,已经被广泛部署在智能家居、智能制造等物联网场景中.然而,指令欺骗攻击对语音接口造成巨大威胁,且随着人工智能技术的发展,其攻击性能逐渐提升.回顾了针对语音接口的攻击方式,并指出现有的权限控制手段主要聚焦在对用户身份的认证,缺乏对于语音指令内容分析的考虑.为此,提出了结合身份认证与内容合规分析的安全机制VoDet.VoDet一方面利用麦克风阵列收集语音信号以增强活体检测与身份识别的性能;另一方面针对音频信号的语义信息制定了基于时间与位置的权限控制机制,最终实现对语音指令内容的合规性审计.在6409个语音命令样本的数据集上进行测试,证明与仅考虑身份认证的方案相比,VoDet将权限控制准确率从35.73%提升至93.52%,从而提供了更好的合规性检测能力.Voice interfaces have been widely deployed in IoT scenarios such as smart homes and smart manufacturing due to their characteristics of allowing remote interaction.However,instruction spoofing attacks pose a huge threat to voice interfaces,and with the development of artificial intelligence technology,their attack performance has gradually improved.This paper reviews the attack methods against voice interfaces and points out that existing access control methods mainly focus on user authentication,lacking consideration for the analysis of voice command content.This paper proposes VoDet,a security mechanism combining identity authentication and content compliance analysis.VoDet enhances liveness detection and identity recognition with microphone arraybased voice signal collection.It also conducts semantic analysis of audio signals and implements permission control based on time and location.Testing on a dataset of over 6409 voice commands shows VoDet significantly improves permission control accuracy from 35.73%to 93.52%,offering better compliance detection.

关 键 词：语音控制 身份识别 音频分析 合规性检测 时空权限控制 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]