Method and system for monitoring user interaction with a computer

• US 7,139,916 B2
• Filed: 06/28/2002
• Issued: 11/21/2006
• Est. Priority Date: 06/28/2002
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: eBay Inc.
• Inventors: Billingsley, Eric N., Monier, Louis M.
• Primary Examiner(s): NGUYEN BA, HOANG VU A
• Application Number:
  US10/186,637
• Publication Number:
  US 20040003258A1
• Time in Patent Office: 1,607 Days
• Field of Search: 717100-106, 717/109, 714/38, 715/848, 345/667
• US Class Current: 713/182
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 99/00 Subject matter not provided for in other groups of this subclass
• CPC Class Codes: G09C 5/00 Ciphering apparatus or methods not provided for in the preceding groups, e.g. involving the concealment or deformation of graphic data such as designs, written or printed messages
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A method of, and system for, monitoring interaction between a user and a computer is provided. The method includes generating an image including random reference data readable by the user, and communicating the image to the computer for display to the user. User input data is then received and a comparison between the random reference data and the user input data is performed to determine if the user is interacting with the computer.

Claims

1. A method to monitor interaction between a user and a computer, the method including:

generating an image including, in a random fashion, a random reference data readable by the user, the random reference data comprising a random reference string, the random reference string comprising a plurality of numerical digits;

communicating the image to the computer for display to the user;

receiving user input data; and

comparing the random reference data and the user input data to determine if the user is interacting with the computer, wherein the including of the random reference data includes one of randomly off-centering each digit of the random reference string, providing each digit of the random reference string in a font which is randomly selected, providing each digit of the random reference string in a color which is randomly selected, and adding noise to the image.

2. The method of claim 1, in which including the random reference data in the random fashion includes:

generating an image modification random number; and

including a reference number in the image dependent upon the image modification random number.

3. The method of claim 1, which includes:

generating the random reference string at an application server;

including the random reference string in the random reference data;

encrypting the random reference data; and

communicating the encrypted random reference data to the computer via the Internet in one of a web form, a Uniform Resource Locator (URL) and a cookie.

4. The method of claim 3, which includes communicating the encrypted random reference data to the computer during a registration process, the user input data being required to correspond to the random reference string in order to effect registration.

5. The method of claim 4, which includes Base64 encoding the encrypted random reference data prior to communicating the encrypted random reference data to the computer.

6. The method of claim 3, in which a time stamp is included in the random reference data prior to encrypting the random reference data.

7. The method of claim 6, which includes:

generating a checksum from the random reference string and the time stamp; and

encrypting the random reference string, time stamp and checksum to define the random reference data that is communicated to the computer.

8. The method of claim 3, in which the random reference string is included in the image at an image server far serving HTML pages, the method including:

receiving the encrypted random reference data together with an HTML request for serving an image to a web browser; and

decrypting the encrypted random reference data to obtain the random reference string.

9. The method of claim 8, which includes Base64 decoding the decrypted random reference data to obtain the random reference data.

10. The method of claim 9, which includes extracting the random reference string from the random reference data to generate the image.

11. A method of generating a random image, the method including:

receiving encrypted random reference data;

decrypting the encrypted random reference data to obtain a random reference string;

including the random reference string in the random image in a random fashion; and

communicating the random image to a recipient computer, wherein

the including of the random reference string in the random fashion includes one of randomly off-centering each digit of the random reference string, providing the random reference string in a font which is randomly selected, providing the random reference string in a color which is randomly selected, and adding noise to the random image.

12. The method of claim 11, in which the encrypted random reference data is Base64 encoded, the method including Base64 decoding the encrypted random reference data prior to decryption of the encrypted random reference string.

13. The method of claim 11, in which including the random reference string in the random fashion includes:

generating an image modification random number; and

including the random reference string in the random image dependent upon the image modification random number.

14. The method of claim 11, which includes receiving the encrypted random reference data via the Internet in the form of an HTML image call.

15. A machine-readable medium embodying a sequence of instructions that, when executed by a machine, cause the machine to:

generate an image including, in a random fashion, a random reference data readable by a user,

communicate the image to a computer for display to the user;

receive user input data; and

compare the random reference data and the user input data to determine if the user is interacting with the computer, wherein

random the reference data is included by one of randomly off-centering each digit from random the reference data, providing each digit from the random reference data in a font which is randomly selected, providing each digit from the random reference data in a color which is randomly selected, and adding noise to the image.

16. The machine-readable medium of claim 15, in which the random reference data includes a random reference string.

17. The machine-readable medium of claim 15, in which the random reference data is included by:

generating an image modification random number; and

including a reference number in the image dependent upon the image modification random number.

18. The machine-readable medium of claim 15, in which the machine:

receives the random reference data as encrypted reference data together with an HTML request for serving an image to a web browser; and

decrypts the encrypted reference data to obtain the random reference data.

19. A computer system for monitoring user interaction with a computer, the system including at least one server to:

generate an image including, in a random fashion, random reference data readable by a user, wherein the random reference data includes a random reference string including a plurality of numerical digits;

communicate the image to the computer for display to the user;

receive user input data; and

compare the random reference data and the user input data to determine if the user is interacting with the computer, wherein

including the random reference data in the random fashion includes one of randomly off-centering each digit from the random reference string, providing each digit from the random reference string in a font which is randomly selected, providing each digit from the random reference string in a color which is randomly selected,, and adding noise to the image.

20. The computer system of claim 19, in which including the random reference data in the random fashion includes:

generating an image modification random number; and

including a reference number in the image dependent upon the image modification random number.

21. The computer system of claim 19, in which the random reference data is communicated to the computer during a registration process, the user input data being required to correspond to the random reference data in order to effect registration.

22. The computer system of claim 19, in which a time stamp is included in the random reference data prior to encrypting the random reference data.

23. The computer system of claim 19, in which the computer system:

receives the random reference data together with an HTML request for serving an image to a web browser; and

decrypts the random reference data to obtain reference data.

24. A computer system for generating a random image, the system including at least one server to:

receive encrypted random reference data;

decrypt the encrypted random reference data to obtain a random reference string;

include the random reference string in the random image in a random fashion; and

communicate the random image to a recipient computer, wherein

the random reference string is included by one of randomly off-centering each digit of the random reference string, providing the random reference string in a font which is randomly selected, providing the random reference string in a color which is randomly selected, and adding noise to the random image.

25. The computer system of claim 24, in which the server:

generates an image modification random number; and

includes the random reference string in the random image dependent upon the image modification random number.

26. The computer system of claim 24, wherein the encrypted random reference data is received via the Internet in the form of an HTML image call.

27. A computer system for monitoring user interaction with a computer, the system including:

means to generate an image including random reference data readable by a user, wherein the random reference data includes a random reference string including a plurality of numerical digits;

means to communicate the image to the computer for display to the user;

means to receive user input data; and

means to compare the random reference data and the user input data to determine if the user is interacting with the computer, wherein the random reference string is included by one of randomly off-centering each digit of the random reference string, providing the random reference string in a font which is randomly selected, providing the random reference string in a color which is randomly selected, and adding noise to the image.