A system for facilitating secure network communications includes a
security computer system and corresponding software. The security system
is utilized in conjunction with a voice browser residing on a server
system. A user accesses the network by placing a call to the voice
browser system. The voice browser includes a software module that creates
a secure connection to the security system. The user provides an
identification to the voice browser system that is transferred to and
verified by the security system. Once the identification is verified, the
user is prompted by the voice browser system to speak a phrase for voice
verification. The verification speech signals are transferred from the
voice browser system to the security system to verify those speech
signals against speech signals of a particular authorized user associated
with the identification and stored in a database. When the user is
verified, the security system retrieves a user private key and
certificate from the database. In response to the user subsequently
accessing a web site residing on a secure server, the secure server and
voice browser system initiate a secure key exchange. During the key
exchange, data packets containing security information are transferred
from the voice browser system to the security system for processing,
while security information from the security system is transferred to the
secure server via the voice browser system. The resulting session key is
securely transferred to the voice browser system to facilitate secure
communications between the voice browser system and secure server.