Method of providing completely automated public turing test to tell computer and human apart based on image

• US 8,352,598 B2
• Filed: 12/23/2007
• Issued: 01/08/2013
• Est. Priority Date: 11/27/2007
• Status: Active Grant

• Current Assignee: INHA Industry Partnership Institute
• Original Assignee: INHA Industry Partnership Institute
• Inventors: NYANG, DeaHun, Kang, JeonIl
• Primary Examiner(s): Flynn, Nathan
• Assistant Examiner(s): WRIGHT, BRYAN F
• Application Number:
  US11/963,844
• Publication Number:
  US 20090138723A1
• Time in Patent Office: 1,843 Days
• Field of Search: 726/3
• US Class Current: 709/225
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha

Abstract

Disclosed is a method of providing a completely automated public turing test to tell a computer and a human apart (CAPTCHA) based on image. The method comprises the steps of: storing a plurality of randomly-selected images by session when a request for a web page is received from a user client; providing the web page and a session ID to the user client; generating a test image by mixing the plurality of images when a request for a test image corresponding to the session ID is received from the user client; transmitting the generated test image to the user client; receiving at least one of first identification information inputted by the user about the test image from the user client; and comparing the first identification information with second identification information included in Meta information of the test image.

Claims

1. A method of providing an image-based completely automated public turing test to tell computer and humans apart (CAPTCHA), the method comprising the steps of:

storing a plurality of randomly-selected images by session when a request for a web page is received from a user client;

providing the web page and a session ID to the user client;

generating a test image by mixing the plurality of images together as one image when a request for a test image corresponding to the session ID is received from the user client;

transmitting the generated test image to the user client;

receiving first identification information inputted by the user client about the test image; and

comparing the first identification information with second identification information included in Meta information of the test image,

wherein the session ID is provided along with the session start time information, hash values of the second identification information produced by a hash function, salt information for producing the hash values of the second identification, and signature value generated by signing the session start time information, the hash values of the second identification information, and the salt information using a secret key in the step of providing the web page.

2. The method of claim 1, further comprising the step of allowing user access when more than a predetermined number of the first identification information coincide with the second identification information.

3. The method of claim 1, wherein the mixing of the plurality of images in the step of generating the test image is performed by overlaying or substituting the images.

4. The method of claim 1, wherein at least one of the plurality of images is modified by image rotation, noise addition, erasure, distortion, brightness change, contrast change, blur, softness, image magnification, image reduction, image color replacement, or combination thereof in the step of generating the test image.

5. The method of claim 1, wherein the generating of the test image in the step of generating the test image comprises the steps of:

mixing the plurality of images; and

modifying at least one portion of the mixed image by image rotation, noise addition, erasure, distortion, brightness change, contrast change, blur, softness, image magnification, image reduction, image color replacement, or combination thereof.

6. The method of claim 1, wherein the plurality of images include a three-dimensional object.

7. The method of claim 1, wherein the plurality of images are photographed by an image-photographing means.

8. The method of claim 1, further comprising the step of determining the validity of the session using validity determination information before the step of comparing, wherein the validity determination information includes the session start time information, the hash values of the second identification information, the salt information, and the signature value received in the step of receiving the first identification information.

9. The method of claim 8, wherein the step of determining the validity of the session is performed by determining at least one of:

whether the difference between the session start time information and a current time information is less than a first predetermined value;

whether there is the first identification information received from the user client in the list of first identification information inputted by the user whose access is allowed; and

whether the signature value generated by signing the session start time, the hash values of the second identification information, and the salt information using the secret key coincide with the signature values received from the user client.

10. The method of claim 1, wherein when the number of the second identification information is less than a second predetermined value, random numbers are added so that the number of the second identification information becomes the second predetermined value.

11. The method of claim 1, further comprising the step of terminating the session by deleting the session-related information after the step of providing the test image.

12. A method of providing an image-based CAPTCHA, the method comprising the steps of:

storing a plurality of randomly-selected images by session when a request for a web page is received from a user client;

providing the web page, a session ID, session start time information, hash values of first identification information for each of the plurality of images, salt information for producing the hash values of the first identification, and signature value generated by signing the session start time information, the hash values of the first identification information, and the salt information using a secret key to the user client;

generating a test image by mixing the plurality of images when a request for the test image corresponding to the session ID is received from the user client; and

transmitting the generated test image to the user client.

13. The method of claim 12, wherein the mixing of the plurality of images in the step of generating the test image is performed by overlaying or substituting the images.

14. The method of claim 12, wherein at least one of the plurality of images is modified by image rotation, noise addition, erasure, distortion, brightness change, contrast change, blur, softness, image magnification, image reduction, image color replacement, or combination thereof.

15. The method of claim 12, the generating of the test image in the step of generating the test image comprises the steps of:

mixing the plurality of images; and

modifying at least one portion of the mixed image by image rotation, noise addition, erasure, distortion, brightness change, contrast change, blur, softness, image magnification, image reduction, image color replacement, or combination thereof.

18. The method of claim 12, further comprising:

allowing user access when it is determined by the user client that more than a predetermined number of second identification information inputted by the user client about test image coincides with the first identification information.

16. A method of providing an image-based CAPTCHA, the method comprising the steps of:

generating a test image by mixing a plurality of images;

providing the test image to a user client, the test image generated by mixing the plurality of images together as one image in response to a previous request from the user client;

receiving first identification information for identifying the test image from the user client; and

comparing the received first identification information with second identification information included in Meta information of the test image,

wherein the test image is provided along with hash values of the second identification information produced by a hash function, salt information for producing the hash values of the second identification, and signature value generated by signing the hash values of the second identification information, and the salt information using a secret key in the step of providing the test image.

17. The method of claim 16, wherein the generating the test image in the step of generating the test image comprises the steps of:

mixing the plurality of images by overlaying or substituting the images; and

modifying at least one portion of the mixed image by image rotation, noise addition, erasure, distortion, brightness change, contrast change, image magnification, image reduction, image color replacement, or combination thereof.