METHOD FOR GENERATING A HUMAN LIKENESS SCORE

• US 20150271166A1
• Filed: 06/09/2015
• Published: 09/24/2015
• Est. Priority Date: 03/24/2011
• Status: Active Grant

• Current Assignee: Imperva Incorporated (Thales SA)
• Original Assignee: Ayah LLC (Thales SA)
• Inventors: Paxton, Tyler James, Tatoris, Reid Michael, Trenda, Benjamin, Elvis, Jakupovic, Burkett, Steven P., Janower, Adam Michael
• Granted Patent: US 10,068,075 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/24578 using ranking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

One embodiment of the invention is a method utilizing a CAPTCHA to generate a human likeness score including blocks: a) receiving a user solution to the CAPTCHA; b) receiving a user interaction pattern descriptive of an interaction undertaken by the user, through a graphical interface of the CAPTCHA, to achieve the user solution; c) determining the accuracy of the user solution; d) comparing the user interaction pattern against an interaction model generated from interaction patterns of previous users; e) calculating the human likeness score based upon the determination of block c) and the comparison of block d), wherein the human likeness score lies within a continuum of human likeness scores.

Claims

1. A method for distinguishing a human user from automated software, the method comprising:

receiving a request from a publisher for a human likeness score of a user accessing a web page through a web browser executing on a computing device;

based on the request, collecting identification data of the user;

collecting a cursor motion entered by the user into the web browser;

extracting a noise component from the cursor motion;

identifying a motion geometry in the cursor motion;

accessing a noise model defining input noise characteristics of cursor inputs previously entered into graphical user interfaces by known humans;

accessing a motion model characterizing cursor motion geometries previously entered into graphical user interfaces by known humans;

calculating a human likeness score of the user based on a comparison of the noise component to the noise model and based on a comparison of the motion geometry to the motion model, the human likeness score lying within a continuum of human likeness scores; and

associating the identification data of the user with a human determination based on the human likeness score falling within a range of human likeness scores corresponding to humans.

2. The method of claim 1, wherein collecting identification data of the user comprises collecting an Internet Protocol address of the computing device;

and further comprising, in response to the human likeness score falling within the range of human likeness scores corresponding to humans, storing the Internet Protocol address of the user in a database of Internet Protocols addresses of other users associated with human determinations.

3. The method of claim 2, wherein storing the Internet Protocol address of the user in the database comprises storing the human likeness score of the user with the Internet Protocol address of the user in the database;

and further comprising retrieving the human likeness score of the user from the database in response to receipt of a request from a second publisher for the human likeness score associated with the Internet Protocol address of the user.

4. The method of claim 1, further comprising:

collecting a second cursor motion entered by the user into the web browser over a second web page distinct from the web page;

extracting a second noise component from the second cursor motion;

identifying a second motion geometry in the second cursor motion;

calculating a second human likeness score of the user based on a comparison of the second noise component to the noise model and based on a comparison of the second motion geometry to the motion model;

combining the human likeness score and the second human likeness score into an aggregate human likeness score; and

reassessing the human determination based on the aggregate human likeness score.

5. The method of claim 1, wherein collecting the cursor motion comprises recording a set of discrete cursor motions input into the web browser;

wherein extracting the noise component from the cursor motion comprises generating a characterization of noise across the set of discrete cursor motions; and

wherein calculating the human likeness score of the user comprises calculating the human likeness score of the user based on a comparison of the characterization of the noise component to the noise model and based on a comparison of motion geometries for discrete cursor motions, in the set of discrete cursor motions, to the motion model.

6. The method of claim 1, further comprising transmitting the human determination of the user to the publisher.

7. The method of claim 1, wherein collecting the cursor motion entered by the user into the web browser comprises recording the cursor motion entered by the user through the web browser in response to access of the web page by the computing device through the web browser.

8. The method of claim 1, wherein accessing the motion model comprises accessing the noise model comprising a characterization of cursor motion geometries previously entered into graphical user interfaces by known humans.

9. The method of claim 8, wherein accessing the noise model comprises accessing the noise model comprising a signal-to-noise ratio pattern of cursor motion geometries previously entered into graphical user interfaces by known humans.

10. The method of claim 1, further comprising associating the identification data of the user with an automated software determination based on the human likeness score falling outside the range of human likeness scores corresponding to humans.

11. The method of claim 1, wherein collecting the cursor motion entered by the user into the web browser comprises recording at least one of a cursor path, a gesture, a keystroke, and a cursor selection entered into the web browser over the web page at the computing device.

12. The method of claim 1, wherein identifying the motion geometry in the cursor motion comprises extracting a speed of a cursor movement within the web browser, a direction of the cursor motion within the web browser, and a change of direction of the cursor motion within the web browser;

and wherein calculating the human likeness score of the user comprises calculating the human likeness score of the user based on a degree of similarity of the speed of the cursor movement, the direction of the cursor motion, and the change of direction of the cursor motion to a model human cursor movement, a model human direction of the cursor motion, and a model human cursor direction change, respectively, defined in the motion model.

13. The method of claim 1, further comprising setting a custom range of human likeness scores corresponding to humans for the user based on web traffic history of user;

and wherein associating the identification data of the user with the human determination comprises associating the identification data of the user with the human determination based on the human likeness score falling within the custom range of human likeness scores corresponding to humans.

14. The method of claim 1:

further comprising, in response to receiving the request from the publisher, generating a CAPTCHA comprising a graphical interface and a first object and a second object depicted within the graphical interface;

further comprising assigning a visual characteristic of the first object within the graphical interface to differentiate the CAPTCHA from a previously-generated CAPTCHA, the first object distinct from the second object by the visual characteristic;

further comprising assigning an instruction for solving the CAPTCHA based on the visual characteristic of the first object;

further comprising submitting the CAPTCHA to the publisher for delivery to the user through the web page;

wherein collecting the cursor motion comprises receiving a cursor input provided by the user, through the graphical interface presented through the web page accessed within the web browser, to solve the CAPTCHA;

further comprising determining an accuracy of the cursor input in satisfying the instruction for solving the CAPTCHA;

wherein identifying the motion geometry in the cursor motion comprises extracting an interaction pattern from the cursor motion; and

wherein calculating the human likeness score of the user comprises calculating the human likeness score of the user based on a comparison of the interaction pattern to an interaction pattern model generated from interaction patterns of previous users and based on the accuracy of the cursor input in satisfying the instruction for solving the CAPTCHA.

15. A method for distinguishing a human user from automated software, the method comprising:

receiving a request from a publisher for a human likeness score of users accessing a web page affiliated with the publisher;

in response access of the web page by a user through a web browser executing on a computing device, collecting a cursor motion entered by the user into the web browser;

extracting a noise component from the cursor motion;

accessing a noise model defining input noise characteristics of cursor inputs previously entered into graphical user interfaces by known humans;

calculating a human likeness score of the user based on a comparison of the noise component to the noise model, the human likeness score lying within a continuum of human likeness scores; and

transmitting a human determination of the user to the publisher based on the human likeness score of the user falling within a range of human likeness scores corresponding to humans.

16. The method of claim 15, further comprising collecting identification data of the user and storing the identification data of the user and the human determination of the user in a database.

17. The method of claim 16, wherein storing the identification data of the user and the human determination of the user in the database comprises, the human likeness score of the user falling within a range of human likeness scores corresponding to humans, storing the identification data of the user and the human likeness score of the user in a database of identification information of other users associated with human determinations.

18. The method of claim 16, further comprising:

collecting a second cursor motion entered by the user into the web browser over a second web page distinct from the web page;

extracting a second noise component from the second cursor motion;

calculating a second human likeness score of the user based on a comparison of the second noise component to the noise model;

combining the human likeness score and the second human likeness score into an aggregate human likeness score;

reassessing the human determination based on the aggregate human likeness score; and

updating the database with the human determination based on the aggregate human likeness score.

19. The method of claim 16, further comprising retrieving the human likeness score of the user from the database in response to receipt of a request from a second publisher for the human likeness score of the user.

20. The method of claim 15, wherein extracting the noise component from the cursor motion comprises characterizing a signal-to-noise ratio pattern of the cursor motion;

wherein accessing the noise model comprises accessing the noise model comprising a model signal-to-noise ratio pattern based on cursor motions previously entered into graphical user interfaces by known humans; and

wherein calculating the human likeness score of the user comprises calculating the human likeness score of the user based on a degree of similarity between the signal-to-noise ratio pattern of the cursor motion and the model signal-to-noise ratio pattern.

21. The method of claim 15, further comprising transmitting an automated software determination with the identification data of the user to the publisher based on the human likeness score falling within a range of human likeness scores corresponding to automated software, the range of human likeness scores corresponding to automated software substantially distinct from the range of human likeness scores corresponding to humans.