如何从Google Home的语音匹配配置文件中获取用户的唯一身份？ [英] How to get user's unique identity from google home's voice match profile?

问题描述

我想在Google Home上开发一个应用程序（操作），它将向用户返回一些机密信息。因此，我无法基于帐户链接对用户进行身份验证，因为该设备可以被会议室中的任何人使用。如何从语音匹配配置文件中获取用户的唯一身份（可能是电子邮件ID）？

I want to develop an application(action) on Google Home, which will return some confidential information to user. So, I can't authenticate the user based on account linking as that device can be used by any person in the room. How can I get user's unique identity(may be email id) from voice match profile?

推荐答案

帐户链接已绑定到特定帐户说 Ok Google或 Hey Google以调用您的操作的用户。如果说出来的用户在他们使用的设备上没有注册的语音（他们是匿名用户），则他们将无法进行帐户链接。这听起来像您想要达到的安全级别，但不清楚您为什么会这样认为。

Account Linking is tied to the specific user that says "Ok Google" or "Hey Google" to invoke your Action. If the user that says it does not have a registered voice on the device they use (they are an "anonymous" user), then they cannot do Account Linking. This sounds like the level of security you're aiming for and it isn't clear why you think otherwise.

您可以获取用户的唯一身份（无论是否具有帐户如果您使用的是node.js库，请使用 app.getUser（）。userId 进行链接）。但是，如果用户匿名在设备上（尚未完成语音注册，或者他们与注册的语音不匹配），则此身份将更改每个会话，因为无法确定用户是谁。

You can get a user's unique identity (with or without Account Linking) by using app.getUser().userId if you're using the node.js library. However, if the user is "anonymously" on a device (no voice registration has been done, or they do not match a registered voice), this identity will change each session because there is no way to determine who the user is.

您无法获取用户的电子邮件ID。 （而且，即使您可以，也希望它遵循与上面处理匿名用户类似的规则。）

You cannot get the user's email ID. (And, even if you could, one would hope that it follows similar rules to handling anonymous users above.)

更新以阐明我的意思表示匿名请求：

Update to clarify what I mean by an "anonymous" request:

当用户首次设置Google Home设备时，系统会提示他们在该设备上注册语音匹配。注册他们的声音要求他们说几次 Ok Google和 Hey Google，以便建立声音模式。然后，此人说出的这些触发词将使其余的对帐单与其Google Assistant帐户相关联。如果他们已经完成了帐户关联到您的服务，则他们的Google助理帐户（与调用短语的语音匹配）将被关联到您的服务。

When a user first sets up a Google Home device, they're prompted to register for Voice Match on that device. Registering their voice requires them to say "Ok Google" and "Hey Google" a few times so a voice pattern can be established. Afterwards, these trigger words spoken by this person will have the rest of the statement associated with their Google Assistant account. If they have done Account Linking to your service, their Google Assistant account (which is matched to their voice for the invocation phrase) is linked to your service.

其他用户可以允许注册设备的语音匹配。这样会将他们的调用短语语音与他们的Google Assistant帐户相关联。如果该用户完成了与您的服务的帐户链接，则触发调用短语的语音将具有与其链接的帐户相关联的内容。

Other users can be permitted to register for Voice Match for a device. This will associate their voice for the invocation phrases with their Google Assistant account. If that user has done Account Linking with your service, then their voice triggering the invocation phrase will have things associated with their linked account.

但是使用房屋的人该怎么办没有为该设备设置语音匹配？调用短语仍然有效。他们仍然可以调用您的操作。但是，与该助手帐户关联的是什么？

But what about someone who uses the Home without having setup Voice Match for that device? The invocation phrases still work. They can still invoke your Action. But what Assistant account is associated with it?

由于特定的家用设备不知道调用它并提出请求的人，因此该用户是匿名用户。匿名用户无法进行帐户关联，因为没有与该请求相关联的助手帐户。尽管提供了一个用户ID，但该ID对于每次会话都会更改，因为设备无法知道这次发出请求的匿名人员与上次发出请求的匿名人员相同。

Since the specific Home device doesn't know the person invoking it and making the request, this is an "anonymous" user. Anonymous users can't do Account Linking, since there is no Assistant account that is associated with the request. Although there is a userID provided - this ID will change for every conversation since the device has no way to know that the anonymous person making the request this time was the same anonymous person making it last time.

但是，如果用户设置了家用设备，但根本没有设置语音匹配，会发生什么？出于安全原因，系统必须假定这实际上是共享设备，并且所有请求都必须匿名处理。

But what happens if the user has setup a Home device, but has not setup Voice Match on it at all? For security reasons, the system has to assume that this is really a shared device and that all requests have to be handled anonymously.

其他更新

上面提到的匿名用户ID已被弃用，并将于2019年5月删除。

The "anonymous UserID" that is talked about above has been deprecated and will be removed in May 2019.

现在可以通过使用具有Google登录功能的帐户链接来获取用户的电子邮件地址（假设他们已将其注册为Google个人资料的一部分）。

It is now possible to get the user's email address, assuming they have registered it as part of their Google profile, by using Account Linking with Google Sign-In.

，虽然某些详细信息可能已更改，但答案的其他部分可能仍然有效。

Conceptually, may other parts of the answer remain valid, although some details may have changed.

这篇关于如何从Google Home的语音匹配配置文件中获取用户的唯一身份？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！