24. A user authentication method, comprising: prompting, by a processor of a secure access control system, a user with multiple, selectable pass-phrases which are formed by selecting one or more pass-phrases from a set of pass-phrases satisfying a rule associated with the user and selecting one or more pass-phrases from a set of pass-phrases that do not satisfy the rule, where the rule associated with the user is determined prior to authentication and is not suggested to the user during authentication; receiving at least one user selection input and recognizing user selection of at least one of the pass-phrases based on the user selection input; making, by the processor of the secure access control system, a match based on biometrics of enrolled users and a user biometric input to yield biometric match result; analyzing, by the processor of the secure access control system, at least one potential user identity based on the match between the pass-phrases in the user selection and the rule associated with the user; recursively prompting, by the processor of the secure access control system, the user with new sets of multiple, selectable pass-phrases randomly assembled from a pass-phrase corpus over multiple dialogue turns; combining, by the processor of the secure access control system, the biometric match results with the selection results from each dialogue turn to yield dialogue turn results; combining, by the processor of the secure access control system, the dialogue turn results over the multiple dialogue turns to form a cumulative result and authorizing the user when the cumulative result exceeds a threshold.
24. A user authentication method, comprising: prompting, by a processor of a secure access control system, a user with multiple, selectable pass-phrases which are formed by selecting one or more pass-phrases from a set of pass-phrases satisfying a rule associated with the user and selecting one or more pass-phrases from a set of pass-phrases that do not satisfy the rule, where the rule associated with the user is determined prior to authentication and is not suggested to the user during authentication; receiving at least one user selection input and recognizing user selection of at least one of the pass-phrases based on the user selection input; making, by the processor of the secure access control system, a match based on biometrics of enrolled users and a user biometric input to yield biometric match result; analyzing, by the processor of the secure access control system, at least one potential user identity based on the match between the pass-phrases in the user selection and the rule associated with the user; recursively prompting, by the processor of the secure access control system, the user with new sets of multiple, selectable pass-phrases randomly assembled from a pass-phrase corpus over multiple dialogue turns; combining, by the processor of the secure access control system, the biometric match results with the selection results from each dialogue turn to yield dialogue turn results; combining, by the processor of the secure access control system, the dialogue turn results over the multiple dialogue turns to form a cumulative result and authorizing the user when the cumulative result exceeds a threshold. 27. The method of claim 24 , further comprising confirming the user identity based on non-adherence of user selection of the pass-phrase to predetermined pass-phrase selection criteria assigned to the user on at least one of a previous dialogue turn or a subsequent dialogue turn.