Multi-variable challenge and response for content security

• US 8,365,260 B2
• Filed: 09/25/2009
• Issued: 01/29/2013
• Est. Priority Date: 09/25/2009
• Status: Active Grant

• Current Assignee: Arkose Labs Holdings Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Gabriel, Logan S., Hamilton, Jeffrey R., Russell, Jonathan B.
• Primary Examiner(s): Parthasarathy, Pramila
• Application Number:
  US12/567,260
• Publication Number:
  US 20110078778A1
• Time in Patent Office: 1,222 Days
• Field of Search: None
• US Class Current: 726/5
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Embodiments of the present invention provide a method, system and computer program product for multi-variable challenge-response. In an embodiment of the invention, a method for multi-variable challenge-response can include receiving a request to access content from an end user computing device from over a computer communications network. The method also can include selecting different objects for inclusion in an object set and applying a different characteristic to each of the different objects in the object set. A question and answer can be generated based upon each of the different characteristics. Further, a challenge-response prompt can be transmitted to the end user computing device such that the prompt includes the different objects with different characteristics applied, and also the generated question. A response to the challenge-response prompt can be received and compared the response to the computed answer. Finally, access to the content can be granted if the response and computed answer match, but otherwise access to the content can be denied.

Claims

1. A method for multi-variable challenge-response comprising:

receiving a request to access content from an end user computing device from over a computer communications network;

selecting multiple different objects for inclusion in an object set and applying multiple different variable characteristics to each of the selected multiple different objects in the object set;

generating a question to incorporate the multiple different variable characteristics and computing an answer to the question;

transmitting a challenge-response prompt to the end user computing device over the computer communications network including the different objects with different variable characteristics applied, and also the generated question;

receiving a response to the challenge-response prompt and comparing the response to the computed answer; and

,

granting access to the content if the response and computed answer match, but otherwise denying access to the content.

2. The method of claim 1, wherein selecting multiple different objects for inclusion in an object set and applying multiple different variable characteristics to each of the selected multiple different objects in the object set, comprises selecting a plurality of different shapes for inclusion in an object set and applying both a different color and also a different decorator to each of the different shapes.

3. The method of claim 1, wherein selecting multiple different objects for inclusion in an object set and applying multiple different variable characteristics to each of the selected multiple different objects in the object set, comprises selecting a plurality of different shapes for inclusion in an object set and applying both a different pattern and also a different decorator to each of the different shapes.

4. The method of claim 2, wherein each of the decorators is a decorator selected from the group consisting of text and an iconic image.

5. The method of claim 3, wherein each of the decorators is a decorator selected from the group consisting of text and an iconic image.

6. The method of claim 1, wherein at least two of the different objects with multiple different variable characteristics applied are arranged superimposed upon one another.

7. A content distribution data processing system configured for multi-variable challenge-response, the system comprising:

a host computing server with processor and memory configured for communicative coupling to a plurality of different end user computing devices over a computer communications network; and

,

a multi-variable challenge-response module executing by the processor in the memory of the host computing server, the module comprising code enabled upon execution by the processor to

select in response to a request for content from an end user computing device from amongst the end user computing devices, a plurality of different objects for inclusion in an object set and to apply multiple different variable characteristics to each of the multiple different objects in the object set,

generate a question to incorporate the multiple different variable characteristics and compute an answer to the question,

transmit to the end user computing device a challenge-response prompt including the different objects with different variable characteristics applied, and also the generated question,

compare a response to the challenge-response prompt to the computed answer, and

grant access to the content if the response and computed answer match, but otherwise deny access to the content.

8. The system of claim 7, wherein the different objects in the object set comprises a plurality of different shapes.

9. The system of claim 7, wherein the multiple different variable characteristics comprise different colors and different decorators.

10. The system of claim 7, wherein the multiple different variable characteristics comprise different patterns and different decorators.

11. A computer program product comprising a computer usable storage medium embodying computer usable program code for multi-variable challenge-response, the computer usable program code, when executed by a computer, causes the computer to perform:

receiving a request to access content from an end user computing device from over a computer communications network;

selecting different objects for inclusion in an object set and applying multiple different variable characteristics to each of the selected different objects in the object set;

generating a question to incorporate the multiple different variable characteristics and computing an answer to the question;

transmitting a challenge-response prompt to the end user computing device over the computer communications network including the different objects each with multiple different variable characteristics applied, and also the generated question;

receiving a response to the challenge-response prompt and comparing the response to the computed answer; and

,

granting access to the content if the response and computed answer match, but otherwise denying access to the content.

12. The computer program product of claim 11, wherein selecting different objects for inclusion in an object set and applying multiple different variable characteristics to each of the selected different objects in the object set, comprises selecting a plurality of different shapes for inclusion in an object set and applying both a different color and also a different decorator to each of the different shapes.

13. The computer program product of claim 11, wherein selecting different objects for inclusion in an object set and applying multiple different variable characteristics to each of the selected different objects in the object set, comprises selecting a plurality of different shapes for inclusion in an object set and applying both a different pattern and also a different decorator to each of the different shapes.

14. The computer program product of claim 12, wherein each of the decorators is a decorator selected from the group consisting of text and an iconic image.

15. The computer program product of claim 13, wherein each of the decorators is a decorator selected from the group consisting of text and an iconic image.

16. The computer program product of claim 11, wherein at least two of the different objects with multiple different variable characteristics applied are arranged superimposed upon one another.