System and method for human identification proof for use in virtual environments

• US 8,543,930 B2
• Filed: 09/12/2012
• Issued: 09/24/2013
• Est. Priority Date: 08/05/2008
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation, ServiceNow Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Champion, David F., Smith, Jeffrey J., Smith, Kevin J., Windell, David T.
• Primary Examiner(s): SALOMON, PHENUEL S
• Application Number:
  US13/612,422
• Publication Number:
  US 20130067573A1
• Time in Patent Office: 377 Days
• Field of Search: 715/751, 715/757, 715/848, 726/2, 726/14, 726/22, 713/96, 713/182, 709/203
• US Class Current: 715/757
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2109 Game systems

Abstract

System, method and computer program product for verifying an avatar owner as a human user of an avatar in a virtual world environment in which humans interact through avatars via client devices in network communication with a server device. A request for challenging an avatar in the virtual world environment is received to determine whether that avatar is controlled by an application program user (bot). A user client device associated with a challenged avatar is identified and a Human Identification Proof (HIP) message for detecting a human user versus a bot controlling the challenged avatar is generated and communicated, for receipt at the identified user client device. It is determined from the response, whether the user is a bot or a human user. If a challenged avatar is determined to be a bot, then the server device prevents the challenged avatar from further interaction in the virtual world environment.

Claims

1. A method for verifying an avatar owner as a human user of an avatar in a virtual world, said method comprising:

providing, by a server device, a communication system for establishing a virtual world environment in which users may interact through avatars, representing each one or more users visually, in said virtual world environment;

enabling, via client devices associated with one or more users, said users to interact through their said representing avatars, said client devices and server device communicating over a network;

detecting, by a first human user while interacting through said representative avatar in said virtual world environment, an avatar suspected by that first human user of exhibiting non-human behavior in said virtual world;

initiating, by said first human user, a request to challenge said suspect avatar to determine whether said suspect avatar is controlled by an automated application program (bot);

receiving, at said server device, said request for challenging said suspect avatar in said virtual world environment;

identifying, in response to said received challenging request, a user client device associated with the suspect challenged avatar;

generating, for display at a user client device, a Human Identification Proof (HIP) surface challenge directed at said suspect avatar in said virtual world to detect a human user versus an application program user controlling said suspect avatar, said HIP surface challenge requiring a response from said avatar;

determining, from said response, whether said user is an application program user (bot) or a human user; and

,

preventing, at said server device, said suspect avatar from further interaction in said virtual world environment, or performing any other punitive action, when said challenged avatar is determined to be a bot.

2. The method for verifying as claimed in claim 1, further comprising:

providing, at each client device, an interface, operable by a corresponding user, for enabling users to control their representing avatar on said corresponding client device; and

,

communicating said HIP surface challenge to said suspect avatar via a network connection for receipt at a interface of that user'"'"'s corresponding client device.

3. The method for verifying as claimed in claim 2, wherein said HIP surface challenge communicated to a user client device of a suspect avatar is a Completely Automated Public Turing tests to tell Computers and Humans Apart (CAPTCHA) message, said CAPTCHA message generated for display via said interface of said suspect avatar'"'"'s controlling user client device.

4. The method for verifying as claimed in claim 3, wherein said generating a HIP surface challenge is performed at said server device establishing said virtual environment, or provided by a 3^rd party server device in communication with said server device via said network.

5. The method for verifying as claimed in claim 4, wherein said generating a HIP surface challenge is initiated by said server device establishing said virtual world environment, said CAPTCHA message generated for receipt at a user device associated with a challenged avatar.

6. The method for verifying as claimed in claim 4, further comprising:

wherein said generating a HIP surface challenge is initiated by a user represented by a first avatar in said virtual world environment, said CAPTCHA message generated for receipt by a second challenged avatar at a corresponding user client device associated with said challenged second avatar.

7. The method for verifying as claimed in claim 6, further comprising:

prior to surfacing said HIP challenge in said virtual world, further verifying whether said initiator of said HIP is a bot, said further verifying comprising;

initiating, by said server device, a CAPTCHA message to a user device associated with said first avatar;

receiving, at said server device, an response from said first avatar, said response submitted via that user'"'"'s client device;

determining, from said response provided, whether said initiator is a bot or a human user; and

,

preventing, via said server device, said first avatar from initiating a challenge in said virtual world environment when a bot initiator is determined.

8. The method for verifying as claimed in claim 1, further comprising:

limiting, by said server device, a number of HIP challenges (HIP surfaces) before a challenged avatar is determined as a bot.

9. The method for verifying as claimed in claim 6, wherein said step of determining, from said response, whether said user or initiator is a bot or a human user comprises:

evaluating said response according to criterion upon which automated program behavior (botting) behavior is determined, said method further comprising;

varying, by either of said server device or said 3^rd party server device in communication with said server device via said network, the criterion to thereby control an occurrence of false alarms to human users and an occurrence of bots that go undetermined.

10. The method for verifying as claimed in claim 9, further comprising:

determining, by a system of users, from an avatar'"'"'s interactions in said virtual world environment, and HIP challenge responses from a user or initiator, whether said avatar is a bot, said system of users comprising said first avatar, or an administrator user that who confront said second avatar if CAPTCHA is not correctly responsed.

11. The method for verifying as claimed in claim 10, further comprising:

communicating, by said server, an escalation of HIP surface challenges or CAPTCHA messages to a user device associated with a challenged avatar, and receiving a succession of responses to verify human versus application program user, said escalation comprising issuing one or more of;

issuing avatar-issued CAPTCHAs, administrator-issued CAPTCHAs, algorithms requiring avatar responses, or automated CAPTCHAs, or combinations thereof, to the challenged avatar.

12. The method for verifying as claimed in claim 11, wherein said varying a criterion comprises one or more of:

varying the types of HIPs, varying a number of HIPs before initiating said escalation of HIP surface challenges or CAPTCHA messages, varying an accuracy criterion to determine when to pass an avatar challenge request, said criterion incorporating factors comprising one or more of;

an amount of risk imposed by bots, a frequency upon which a user can be challenged to provide proof of ‘

humanness’

, a number of incorrect responses provided by a user of a challenged avatar, and an amount of time required to provide proof of ‘

humanness’

in said response, or combinations thereof.

13. The method for verifying as claimed in claim 1, further comprising:

providing a recording device operable in conjunction with a client device;

presenting, via a interface at a client device, a CAPTCHA comprising a series of words that requiring recital from a human user into said recording device; and

,

determining from said recorded user recital, presence of a human user.

14. The method for verifying as claimed in claim 13, wherein said series of words comprises words arranged within a sentence structure, a line of poetry, or lyrics from a song, a user required to recite said words via each respective client device.

15. A system for verifying an avatar owner as a human user of an avatar in a virtual world, said system comprising:

a server device for establishing a virtual world environment in which users may interact through avatars, representing each one or more users visually, in said virtual world environment

a plurality of client devices, each of said plurality corresponding to an avatar present in the virtual world environment and representing a user, each client device having an interface means operable by users, for enabling said users to interact through their said representing avatars in said virtual world environment, said client devices and server device communicating over a network connection;

said server device maintaining a list of present avatars interacting in said virtual world environment and corresponding information for identifying client computing devices operating to control said present avatars; and

wherein

a human user detects, while interacting through said representative avatar in said virtual world environment, an avatar suspected by that human user of exhibiting non-human behavior in said virtual world;

said human user initiating a request to challenge said suspect avatar to determine whether said suspect avatar is controlled by an automated application program (bot);

said server device for providing computer-implemented functions for receiving said request for challenging said suspect avatar in said virtual world environment, said server device identifying, in response to said received challenging request, a user client device associated with a challenged avatar;

said server device providing computer-implemented functions for generating, for display at said user client device over a network connection, a Human Identification Proof, (HIP) surface challenge directed at said suspect avatar in said virtual world to detect a human user versus an application program user controlling said suspect avatar, said HIP surface challenge requiring a response from said avatar;

said server device receiving said response from said user client device and providing computer-implemented functions to determine, from said response provided, whether said user is an application program user (bot) or a human user; and

,

said server device providing computer-implemented functions for preventing, at said server device, said suspect avatar from further interaction in said virtual world environment, or performing any other punitive action, when a bot is determined to control said challenged avatar.

16. The system for verifying as claimed in claim 15, wherein each client device is provided with an interface, operable by a corresponding user, for enabling users to control their representing avatar on said corresponding client device;

and,

wherein said HIP surface challenge is communicated to said challenged avatar via a network connection for receipt at an interface of that avatar user'"'"'s corresponding client device.

17. The system for verifying as claimed in claim 16, wherein said HIP surface challenge communicated to a user client device of a challenged avatar is a Completely Automated Public Turing tests to tell Computers and Humans Apart (CAPTCHA) message, said CAPTCHA message generated for display via said interface of said challenged avatar'"'"'s controlling user client device.

18. The system for verifying as claimed in claim 17, further comprising:

wherein said generating a HIP surface challenge is performed at said server device establishing said virtual environment, or a 3^rd party server device in communication with said server device via said network.

19. The system for verifying as claimed in claim 15, further comprising:

a recording device, wherein a CAPTCHA presented via an interface at a client device, comprises a series of words requiring recital from a human user into said recording device; and

,

determining from a recorded user recital presence of human user.

20. A non-transitory program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform method steps for verifying an avatar interacting in a virtual world environment represents a human user, said method steps comprising:

providing, by a server device, a communication system for establishing a virtual world environment in which users may interact through avatars, representing each one or more users visually, in said virtual world environment;

enabling, via client devices associated with one or more users, said users to interact through their said representing avatars, said client devices and server device communicating over a network; and

wherein,

a human user detects, while interacting through said representative avatar in said virtual world environment, an avatar suspected by that human user of exhibiting non-human behavior in said virtual world;

said human user initiating a request to challenge said suspect avatar to determine whether said suspect avatar is controlled by an automated application program (bot);

receiving, at said server device, said request for challenging an avatar in said virtual world environment;

identifying, in response to said challenging, a user client device associated with the suspect challenged avatar;

generating, for display at a user client device, a Human Identification Proof (HIP) surface challenge directed at said suspect avatar in said virtual world to detect a human user versus an application program user controlling said suspect avatar, said HIP surface challenge requiring a response from said avatar;

determining, from said response, whether said user is an application program user (bot) or a human user; and

,

preventing, at said server device, said suspect avatar from further interaction in said virtual world environment, or performing any other punitive action, when said challenged avatar is determined to be a bot.