System and method for human identification proof for use in virtual environments

• US 8,316,310 B2
• Filed: 08/05/2008
• Issued: 11/20/2012
• Est. Priority Date: 08/05/2008
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Champion, David F., Smith, Jeffrey J., Smith, Kevin J., Windell, David T.
• Primary Examiner(s): SALOMON, PHENUEL S
• Application Number:
  US12/186,330
• Publication Number:
  US 20100037147A1
• Time in Patent Office: 1,568 Days
• Field of Search: 715/751, 715/757, 715/848, 726/2, 726/14, 726/22, 713/96, 713/182, 709/203
• US Class Current: 715/757
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2109 Game systems

Abstract

A system, method and computer program product for verifying an avatar owner as a human user of an avatar in a virtual world environment in which users interact through avatars via client devices in network communication with a server device. A request for challenging an avatar in the virtual world environment is received to determine whether that avatar is controlled by an application program user (bot). A user client device associated with a challenged avatar is identified and a Human Identification Proof (HIP) message for detecting a human user versus a bot controlling the challenged avatar is generated and communicated, for receipt at the identified user client device. It is determined from the response, whether the user is a bot or a human user. If a challenged avatar is determined to be a bot, then the server device prevents the challenged avatar from further interaction in the virtual world environment.

Claims

1. A method for verifying an avatar owner as a human user of an avatar in a virtual world, comprising:

providing, by a server device, a communication system for establishing a virtual world environment in which users may interact through avatars, representing each one or more users visually, in said virtual world environment;

enabling, via client devices associated with one or more users, said users to interact through their said representing avatars via an interface operable by a corresponding user, said client devices and server device communicating over a network;

detecting, by a first human user while interacting through said representative avatar in said virtual world environment, an avatar suspected by that first human user of exhibiting non-human behavior in said virtual world;

initiating, by said first human user, a request to challenge said suspect avatar to determine whether said suspect avatar is controlled by an automated application program (bot);

receiving, at said server device, said request for challenging said suspect avatar in said virtual world environment;

identifying, in response to said received challenging request, a user client device associated with the suspect challenged avatar;

generating, for display at a user client device, a Human Identification Proof (HIP) surface challenge directed at said suspect avatar in said virtual world to detect a human user versus an application program user controlling said suspect avatar, said HIP surface challenge communicated to said suspect avatar via a network connection for receipt at an interface of that user'"'"'s corresponding client device and requiring a response from said avatar;

determining, from said response, whether said user is an application program user (bot) or a human user;

preventing, at said server device, said suspect avatar from further interaction in said virtual world environment, or performing any other punitive action, when said challenged avatar is determined to be a bot;

wherein said HIP surface challenge communicated to a user client device of a suspect avatar is a Completely Automated Public Turing tests to tell Computers and Humans Apart (CAPTCHA) message, said CAPTCHA message generated for display via said interface of said suspect avatar'"'"'s controlling user client device; and

said CAPTCHA message generated for receipt by a second challenged avatar at a corresponding user client device associated with said challenged second avatar; and

prior to surfacing said HIP challenge in said virtual world, further verifying whether said initiator of said HIP is a bot, said further verifying comprising;

initiating, by said server device, a CAPTCHA message to a user device associated with said first avatar,

receiving, at said server device, a response from said first avatar, said response submitted via that user'"'"'s client device;

determining, from said response provided, whether said initiator is a bot or a human user; and

,

preventing, via said server device, said first avatar from initiating a challenge in said virtual world environment when a bot initiator is determined.

2. The method for verifying as claimed in claim 1, wherein said generating a HIP surface challenge is performed at said server device establishing said virtual environment, or provided by a 3^rd party server device in communication with said server device via said network.

3. The method for verifying as claimed in claim 2, wherein said generating a HIP surface challenge is initiated by said server device establishing said virtual world environment, said CAPTCHA message generated for receipt at a user device associated with a challenged avatar.

4. The method for verifying as claimed in claim 1, further comprising:

limiting, by said server device, a number of HIP challenges (HIP surfaces) before a challenged avatar is determined as a bot.

5. The method for verifying as claimed in claim 1, wherein said step of determining, from said response, whether said user or initiator is a bot or a human user comprises:

evaluating said response according to criterion upon which automated program behavior (botting) is determined, said method further comprising;

varying, by either of said server device or said 3^rd party server device in communication with said server device via said network, the criterion to thereby control an occurrence of false alarms to human users and an occurrence of bots that go undetermined.

6. The method for verifying as claimed in claim 5, further comprising:

determining, from an avatar'"'"'s interactions in said virtual world environment and HIP challenge responses from said user or initiator, whether said avatar is a bot, of said determining performed by users comprising said first avatar, or an administrator user that confronts said second avatar if said CAPTCHA message is not correctly responded to.

7. The method for verifying as claimed in claim 6, further comprising:

communicating, by said server, an escalation of HIP surface challenges or CAPTCHA messages to a user device associated with a challenged avatar, and receiving a succession of responses to verify human versus application program user, said escalation comprising issuing one or more of;

issuing avatar-issued CAPTCHAs, administrator-issued CAPTCHAs, algorithms requiring avatar responses, or automated CAPTCHAs, or combinations thereof, to the challenged avatar.

8. The method for verifying as claimed in claim 7, wherein said varying a criterion comprises one or more of:

varying the types of HIPs or varying a number of HIPs before initiating said escalation of HIP surface challenges or CAPTCHA messages.

9. The method for verifying as claimed in claim 7, further comprising:

varying an accuracy criterion to determine when to pass an avatar challenge request, said criterion incorporating factors comprising one or more of;

an amount of risk imposed by bots, and an amount of time required to provide proof of ‘

humanness’

in said response, or combinations thereof.

10. The method for verifying as claimed in claim 1, further comprising:

providing a recording device operable in conjunction with a client device;

presenting, via an interface at a client device, a CAPTCHA comprising a series of words that requiring recital from a human user into said recording device; and

,

determining from said recorded user recital, presence of a human user.

11. The method for verifying as claimed in claim 10, wherein said series of words comprises words arranged within a sentence structure, a line of poetry, or lyrics from a song, a user required to recite said words via each respective client device.

12. The method for verifying as claimed in claim 1, wherein said first human user detects said suspected avatar of exhibiting non-human behavior in said virtual world that is not detectable by an automated rule-based behavior detection system.

13. A system for verifying an avatar owner as a human user of an avatar in a virtual world, said system comprising:

a server device for establishing a virtual world environment in which users may interact through avatars, representing each one or more users visually, in said virtual world environment;

a plurality of client devices, each of said plurality corresponding to an avatar present in the virtual world environment and representing a user, each client device having an interface means operable by users, for enabling said users to interact through their said representing avatars in said virtual world environment, said client devices and server device communicating over a network connection;

said server device maintaining a list of present avatars interacting in said virtual world environment and corresponding information for identifying client computing devices operating to control said present avatars; and

, wherein

a human user detecting, while interacting through said representative avatar in said virtual world environment, an avatar suspected by that human user of exhibiting non-human behavior in said virtual world;

said human user initiating a request to challenge said suspect avatar to determine whether said suspect avatar is controlled by an automated application program;

said server device for providing computer-implemented functions for receiving said request for challenging said suspect avatar in said virtual world environment, said server device identifying, in response to said received challenging request, a user client device associated with the suspect challenged avatar;

said server device providing computer-implemented functions for generating, for display at said user client device over a network connection, a Human Identification Proof (HIP) surface challenge directed at said suspect avatar in said virtual world to detect a human user versus an application program user controlling said suspect avatar, said HIP surface challenge communicated to said challenged avatar via a network connection for receipt at an interface of that avatar user'"'"'s corresponding client device and requiring a response from said avatar;

said server device receiving said response from said user client device and providing computer-implemented functions to determine, from said response provided, whether said user is an application program user (bot) or a human user; and

,

said server device providing computer-implemented functions for preventing, at said server device, said suspect avatar from further interaction in said virtual world environment, or performing any other punitive action, when a bot is determined to control said challenged avatar, wherein said HIP surface challenge communicated to a user client device of a suspect avatar is a Completely Automated Public Turing tests to tell Computers and Humans Apart (CAPTCHA) message, said CAPTCHA message generated for display via said interface of said suspect avatar'"'"'s controlling user client device; and

said CAPTCHA message generated for receipt by a second challenged avatar at a corresponding user client device associated with said challenged second avatar; and

wherein prior to surfacing said HIP challenge in said virtual world, said server device further performs verifying whether said initiator of said HIP is a bot, said verifying comprising;

initiating, by said server device, a CAPTCHA message to a user device associated with said first avatar,

receiving, at said server device, a response from said first avatar, said response submitted via that user'"'"'s client device;

determining, from said response provided, whether said initiator is a bot or a human user; and

preventing, via said server device, said first avatar from initiating a challenge in said virtual world environment when a bot initiator is determined.

14. The system for verifying as claimed in claim 13, further comprising:

wherein said generating a HIP surface challenge is performed at said server device establishing said virtual environment, or a 3^rd party server device in communication with said server device via said network.

15. The system for verifying as claimed in claim 13, further comprising:

a recording device, wherein a CAPTCHA presented via an interface at a client device, comprises a series of words requiring recital from a human user into said recording device; and

,

determining from a recorded user recital presence of human user.

16. The system for verifying as claimed in claim 13, wherein said first human user detects said suspected avatar of exhibiting non-human behavior in said virtual world that is not detectable by an automated rule-based behavior detection system.

17. An article of manufacture, comprising:

at least one non-transitory computer usable medium having a computer readable program code logic tangibly embodied therein to execute at least one machine instruction in a processing unit for verifying an avatar interacting in a virtual world environment represents a human user, the computer readable program code logic, when executing, performing the following steps;

establishing, by a server device, a virtual world environment in which users may interact through avatars, representing each one or more users visually, in said virtual world environment;

enabling, via client devices associated with one or more users, said users to interact through their said representing avatars via an interface operable by a corresponding user, said client devices and server device communicating over a network; and

wherein,

detecting, by a first human user while interacting through said representative avatar in said virtual world environment, an avatar suspected by that first human user of exhibiting non-human behavior in said virtual world;

initiating, by said first human user, a request to challenge said suspect avatar to determine whether said suspect avatar is controlled by an automated application program (bot), wherein said computer readable program code logic further performs;

receiving, at said server device, said request for challenging said suspect avatar in said virtual world environment;

identifying, in response to said received challenging request, a user client device associated with the suspect challenged avatar;

generating, for display at a user client device, a Human Identification Proof (HIP) surface challenge directed at said suspect avatar in said virtual world to detect a human user versus an application program user controlling said suspect avatar, said HIP surface challenge communicated to said suspect avatar via a network connection for receipt at an interface of that user'"'"'s corresponding client device and requiring a response from said avatar;

determining, from said response, whether said user is an application program user (bot) or a human user; and

,

preventing, at said server device, said suspect avatar from further interaction in said virtual world environment, or performing any other punitive action, when said challenged avatar is determined to be a bot;

wherein said HIP surface challenge communicated to a user client device of a suspect avatar is a Completely Automated Public Turing tests to tell Computers and Humans Apart (CAPTCHA) message, said CAPTCHA message generated for display via said interface of said suspect avatar'"'"'s controlling user client device; and

said CAPTCHA message generated for receipt by a second challenged avatar at a corresponding user client device associated with said challenged second avatar; and

prior to surfacing said HIP challenge in said virtual world, further verifying whether said initiator of said HIP is a bot, said further verifying comprising;

initiating, by said server device, a CAPTCHA message to a user device associated with said first avatar,

receiving, at said server device, a response from said first avatar, said response submitted via that user'"'"'s client device;

determining, from said response provided, whether said initiator is a bot or a human user; and

,

preventing, via said server device, said first avatar from initiating a challenge in said virtual world environment when a bot initiator is determined.

18. The article of manufacture as claimed in claim 17, wherein said first human user detects said suspected avatar of exhibiting non-human behavior in said virtual world that is not detectable by an automated rule-based behavior detection system.