Systems and methods for distinguishing among human users and software robots

• US 10,007,776 B1
• Filed: 05/05/2017
• Issued: 06/26/2018
• Est. Priority Date: 05/05/2017
• Status: Active Grant

• Current Assignee: NuData Security Inc. (MasterCard Incorporated)
• Original Assignee: Mastercard Technologies Canada ULC (MasterCard Incorporated)
• Inventors: Bailey, Christopher Everett, Lukashuk, Randy, Cunningham, Jonathan
• Primary Examiner(s): Gracia, Gary S
• Application Number:
  US15/588,244
• Time in Patent Office: 417 Days
• Field of Search: 726 5, 726 7, 726 25, 715764
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: G06T 11/001 Texturing; Colouring; Generation of texture or colour inpainting G06T5/77
• CPC Class Codes: G06T 11/203 Drawing of straight lines or curves
• CPC Class Codes: G06T 2210/32 Image data format
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A technique for distinguishing between a human user and a software robot. The technique includes: receiving a first communication from a device different from the at least one computer; identifying, from the first communication, a request to access a web resource; transmitting software code and location information to the device, wherein the location information specifies a plurality of locations encoding a visual representation of a challenge text, and wherein the software code, when executed by an Internet browser, causes a plurality of graphical elements to be displayed at the plurality of locations in a webpage so that the webpage displays the challenge text; receiving a second communication from the device; identifying, from the second communication, a response text; and providing the device with access to the web resource based on a comparison between the challenge text and the response text.

Claims

1. A system, comprising:

at least one computer; and

at least one non-transitory computer-readable storage medium storing processor-executable instructions that, when executed by the at least one computer, cause the at least one computer to perform;

receiving, via at least one network, a first communication from a device different from the at least one computer;

identifying, from the first communication, a request to access a web resource;

generating a webpage comprising;

location information representing a challenge text, the location information identifying a plurality of webpage locations at which to display a plurality of graphical elements having a different visual appearance from a background of the webpage in order to display a visual representation of the challenge text, the location information comprising coordinates for at least some of the plurality of webpage locations; and

software code that, when executed by an Internet browser, causes the Internet browser, when rendering the webpage, to display the visual representation of the challenge text at least in part by displaying the plurality of graphical elements at the plurality of webpage locations, wherein the plurality of graphical elements comprises HTML elements and/or OpenGL elements;

transmitting, via the at least one network, the webpage to the device;

receiving, via the at least one network, a second communication from the device;

identifying, from the second communication, a response text; and

providing the device with access to the web resource when a number of errors between the challenge text and the response text is less than a threshold number of errors.

2. The system of claim 1, wherein the location information does not include an image.

3. The system of claim 1, wherein the processor-executable instructions, when executed, further cause the at least one computer to perform:

generating the software code and the location information.

4. The system of claim 1, wherein the software code, when executed by the Internet browser, causes the Internet browser to display the visual representation at least in part by displaying a plurality of span elements at the plurality of webpage locations.

5. The system of claim 1, wherein the software code, when executed by the Internet browser, causes the Internet browser to display the visual representation at least in part by displaying a plurality of HTML canvas elements at the plurality of webpage locations.

6. The system of claim 1, wherein the software code includes OpenGL instructions, and wherein the software code, when executed by the Internet browser, causes the Internet browser to display the visual representation at least in part by using at least one graphical processing unit (GPU) to execute the OpenGL instructions to render the plurality of graphical elements.

7. The system of claim 1, wherein the software code, when executed by the Internet browser, sets a color of at least one of the plurality of graphical elements to a color different from a background color of the webpage.

8. The system of claim 1, wherein the software code, when executed by the Internet browser, sets a color of at least one of the plurality of graphical elements to a first color at a first time and sets the color of the at least one of the plurality of graphical elements to a second color at a second time different from the first time, wherein the first color is different from the second color.

9. The system of claim 1, wherein the software code, when executed by the Internet browser, causes a first text to be displayed and subsequently causes the challenge text to be displayed after a threshold amount of time, wherein the first text is different from the challenge text.

10. The system of claim 1, wherein the processor-executable instructions further cause the at least one computer to perform:

identifying a challenge token from the second communication; and

validating the second communication using the challenge token.

11. A method, performed by at least one computer, the method comprising:

receiving, via at least one network, a first communication from a device different from the at least one computer;

identifying, from the first communication, a request to access a web resource;

generating a webpage comprising;

location information representing a challenge text, the location information identifying a plurality of webpage locations at which to display a plurality of graphical elements having a different visual appearance from a background of the webpage in order to display a visual representation of the challenge text, the location information comprising coordinates for at least some of the plurality of webpage locations; and

software code that, when executed by an Internet browser, causes the Internet browser, when rendering the webpage, to display the visual representation of the challenge text at least in part by displaying the plurality of graphical elements at the plurality of webpage locations, wherein the plurality of graphical elements comprises HTML elements and/or OpenGL elements;

transmitting, via the at least one network, the webpage to the device;

receiving, via the at least one network, a second communication from the device;

identifying, from the second communication, a response text; and

providing the device with access to the web resource when a number of errors between the challenge text and the response text is less than a threshold number of errors.

12. The method of claim 11, further comprising:

generating the software code and the location information.

13. The method of claim 11, wherein the software code, when executed by the Internet browser, causes the Internet browser to display the visual representation at least in part by displaying a plurality of span elements at the plurality of webpage locations.

14. The method of claim 11, wherein the software code, when executed by the Internet browser, causes the Internet browser to display the visual representation at least in part by displaying a plurality of HTML canvas elements at the plurality of webpage locations.

15. The method of claim 11, wherein the software code includes OpenGL instructions, and wherein the software code, when executed by the Internet browser, causes the Internet browser to display the visual representation at least in part by using at least one graphical processing unit (GPU) to execute the OpenGL instructions to render the plurality of graphical elements.

16. The method of claim 11, wherein the software code, when executed by the Internet browser, causes the webpage to initially display a first text and subsequently display the challenge text after a threshold amount of time, wherein the first text is different from the challenge text.

17. At least one non-transitory computer-readable storage medium storing processor-executable instructions that, when executed by at least one computer, cause the at least one computer to perform:

receiving, via at least one network, a first communication from a device different from the at least one computer;

identifying, from the first communication, a request to access a web resource;

generating a webpage comprising;

location information representing a challenge text, the location information identifying a plurality of webpage locations at which to display a plurality of graphical elements having a different visual appearance from a background of the webpage in order to display a visual representation of the challenge text, the location information comprising coordinates for at least some of the plurality of webpage locations; and

software code that, when executed by an Internet browser, causes the Internet browser, when rendering the webpage, to display the visual representation of the challenge text at least in part by displaying the plurality of graphical elements at the plurality of webpage locations, wherein the plurality of graphical elements comprises HTML elements and/or OpenGL elements;

transmitting, via the at least one network, the webpage to the device

receiving, via the at least one network, a second communication from the device;

identifying, from the second communication, a response text; and

providing the device with access to the web resource when a number of errors between the challenge text and the response text is less than a threshold number of errors.

18. The at least one non-transitory computer readable storage medium of claim 17, wherein the processor-executable instructions, when executed, further cause the at least one computer to perform:

generating the software code and the location information.

19. The at least one non-transitory computer readable storage medium of claim 17, wherein the software code, when executed by the Internet browser, causes the Internet browser to display the visual representation at least in part by displaying a plurality of span elements at the plurality of webpage locations.

20. The at least one non-transitory computer readable storage medium of claim 17, wherein the software code, when executed by the Internet browser, causes the Internet browser to display the visual representation at least in part by displaying a plurality of HTML canvas elements at the plurality of webpage locations.

21. The at least one non-transitory computer readable storage medium of claim 17, wherein the software code includes OpenGL instructions, and wherein the software code, when executed by the Internet browser, causes the Internet browser to display the visual representation at least in part by using at least one graphical processing unit (GPU) to execute the OpenGL instructions to render the plurality of graphical elements.

22. The at least one non-transitory computer readable storage medium of claim 17, wherein the software code, when executed by the Internet browser, sets a color of at least one of the plurality of graphical elements to a color different from a background color of the webpage.

23. The at least one non-transitory computer readable storage medium of claim 17, wherein the software code, when executed by the Internet browser, sets a color of at least one of the plurality of graphical elements to a first color at a first time and sets the color of the at least one of the plurality of graphical elements to a second color at a second time different from the first time, wherein the first color is different from the second color.

24. The at least one non-transitory computer readable storage medium of claim 17, wherein the software code, when executed by the Internet browser, causes a first text to be displayed and subsequently causes the challenge text to be displayed after a threshold amount of time, wherein the first text is different from the challenge text.

25. The at least one non-transitory computer readable storage medium of claim 17, wherein the processor-executable instructions further cause the at least one computer to perform:

identifying a challenge token from the second communication; and

validating the second communication using the challenge token.