Skip to main content

Implementation Options

Self-service password reset, self-service RSA SecurID token management and automated registration of biometric voice print samples can all be implemented by integrating Bravura Pass with an IVR system.

Bravura Pass licensees may choose to purchase a dedicated IVR system from Bravura Security, specifically for these applications, or to extend an existing IVR system to include new call logic. Integration is available for every kind of existing IVR system, through multiple language and platform bindings of a powerful Bravura Pass API.

User identification can be implemented using speech-to-text technology, or user input of unique numeric identifiers or numeric-mapped network login IDs.

User authentication can be implemented using either text prompts for personal information, followed by touch-tone input of responses, or using biometric voice print verification technology.

System integration for a telephony-enabled password management system can range from one or two days of effort to activate a turn-key, touch-tone enabled IVR system up to two or three weeks to extend an existing biometric system.

Buying a new IVR system vs. extending an existing system

Bravura Security offers two options to customers who wish to enable telephone access to Bravura Pass :

  1. Purchase a turn-key IVR system, designed specifically for authenticating callers and providing self-service password resets, from Bravura Security.

    Turn-key system options are described in Turn-key IVR options offered by Bravura Security .

    If an existing Automatic Call Direction (ACD) system is in place, then it must be configured to forward relevant calls to the Bravura Pass IVR system.

  2. Extend the existing IVR system to provide front end password reset functionality (and potentially, biometric voice print authentication) using Bravura Pass as a "back end" to provide user authentication and general password management services.

    In this case, the call flow logic on the existing IVR system is modified to prompt the user for identification and authentication information. The IVR is programmed to verify user authentication by calling either:

    1. Bravura Pass (if using keypad PIN authentication), or

    2. An external voice print biometric system (if using voice prints) implemented by the customer (eg, Nuance, Speechworks).

    Once the IVR has authenticated the user, it can make calls to the Bravura Pass server to request various password reset services.

    Bravura Pass can be integrated with almost any existing IVR system, as described in the Connector Pack Documentation .

    The software required to integrate Bravura Pass with any existing IVR system is included at no additional charge. Particular IVR systems may also require software extensions as available from the IVR vendor; for example, XML over HTTPS.

Turn-key IVR options offered by Bravura Security

Bravura Security offers a turn-key IVR option, Phone Password Manager , which uses touch-tone caller authentication, and leverages the Web-based Bravura Pass registration process to build user profiles for numeric security question authentication. This solution is tightly integrated with Bravura Pass, using the secure API.

Bravura Pass has an open interface specification, which allows other IVR biometric voice print authentication systems, such as Vocent, to leverage Bravura Pass for general enterprise password management.

See Phone Password Manager to learn how to set up Bravura Pass to work with the Phone Password Manager and voice print authentication systems such as Vocent.

Leveraging an existing authentication process

Organizations with an existing IVR system may choose to continue to use an existing caller authentication process, or to strengthen it prior to activating self-service password reset.

The existing identification and authentication process may have to be replaced because it is not secure enough and would weaken password security if it enables self-service password reset.

In this section: