16. A non-transitory computer-readable medium having stored thereon a plurality of instructions, the plurality of instructions when executed by a computer, cause the computer to perform: intercepting, by a gateway, an access request sent to a network address of a resource server from a user using a user device the access request comprising a unique user record identifier; identifying a specific user device used by the user to send the access request based on a cookie or an identifier stored in the specific user device by the gateway; selecting a voice biometrics record of the user recorded using the specific user device used by the user to send the access request from among a plurality of voice biometrics records stored for the user during an enrollment period; placing a call to the user device based on information from the cookie or the identifier; sending, to the user device, a challenge message prompting the user to respond by voice, wherein the challenge message corresponds to the selected voice biometrics record; receiving, from the user device, a voice sample of the user; comparing the voice sample of the user against the selected voice biometrics record; converting the voice sample into a speech-to-text phrase; and comparing the speech-to-text phrase against a stored secret text phrase to verify the speech-to-text phrase matches the stored secret text phrase.
16. A non-transitory computer-readable medium having stored thereon a plurality of instructions, the plurality of instructions when executed by a computer, cause the computer to perform: intercepting, by a gateway, an access request sent to a network address of a resource server from a user using a user device the access request comprising a unique user record identifier; identifying a specific user device used by the user to send the access request based on a cookie or an identifier stored in the specific user device by the gateway; selecting a voice biometrics record of the user recorded using the specific user device used by the user to send the access request from among a plurality of voice biometrics records stored for the user during an enrollment period; placing a call to the user device based on information from the cookie or the identifier; sending, to the user device, a challenge message prompting the user to respond by voice, wherein the challenge message corresponds to the selected voice biometrics record; receiving, from the user device, a voice sample of the user; comparing the voice sample of the user against the selected voice biometrics record; converting the voice sample into a speech-to-text phrase; and comparing the speech-to-text phrase against a stored secret text phrase to verify the speech-to-text phrase matches the stored secret text phrase. 22. The non-transitory computer-readable medium of claim 16 , further comprising: storing the unique user record identifier; storing the voice sample of the user; storing an address of resource server that is accessed; and recording an access time stamp for the resource server.