Interactive video captcha

• US 8,850,556 B2
• Filed: 07/21/2009
• Issued: 09/30/2014
• Est. Priority Date: 07/21/2009
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Freund, Thomas J., Grisby, Travis M., Lamb, Albert A., Surprenant, Lee M.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Tran, Tongoc
• Application Number:
  US12/506,281
• Publication Number:
  US 20110023110A1
• Time in Patent Office: 1,897 Days
• Field of Search: 726/2, 726/5, 726/16, 726/7, 726/19, 726/28, 726/29, 705/14.54, 705/14.41, 705/10, 705/14, 713/168, 713/176, 382/103
• US Class Current: 726/16
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 3/048 Interaction techniques based on graphical user interfaces [GUI]
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

Provided is a Captcha Access Control System (CACS) for generating an improved captcha that are based, in one described embodiment, upon a command in one format and a response in a different format, one or both of which are rendered in a format that is difficult for an automated system to interpret. A computer system or program to which a user is requesting access generates a textual or audible command. A video device captures the user'"'"'s response and transmits the response to a response evaluation device. Based upon an analysis of the transmitted video and a comparison between the analyzed video and the command, the computer or program either enables access or denies access.

Claims

1. A method for providing access control for a computing resource, comprising:

defining a command and an action corresponding to the command, wherein the action is a physical movement of a user;

defining a minimum requirement of correspondence between the action and a response to the command, wherein the response is in a video format and the correspondence is not based upon a previous pre-recorded response by the user;

receiving a request to access a computing system;

transmitting the command to a computing system from which the request originated;

receiving the response to the command;

comparing the response and the action to determine whether or not the response meets the minimum requirement; and

enabling access to the computing resource if the response meets the minimum requirement.

2. The method of claim 1, further comprising denying access to the computing resource if the response fails to meet the minimum requirement.

3. The method of claim 1, wherein the command is defined in a rich media format.

4. The method of claim 1, wherein the command and the response are in different media formats.

5. The method of claim 1, further comprising:

capturing the response with a video device; and

converting the response into a digitally encoded video format.

6. A system for providing access control for a computing resource, comprising:

a processor;

a computer readable storage medium coupled to the processor; and

logic, stored on the computer readable storage medium and executed on the processor, for;

defining a command and an action corresponding to the command, wherein the action is a physical movement of a user;

defining a minimum requirement of correspondence between the action and a response to the command, wherein the response is in a video format and the correspondence is not based upon a previous pre-recorded response by the user;

receiving a request to access a computing system;

transmitting the command to a computing system from which the request originated;

receiving the response to the command;

comparing the response and the action to determine whether or not the response meets the minimum requirement; and

enabling access to the computing resource if the response meets the minimum requirement.

7. The system of claim 6, the logic further comprising logic for denying access to the computing resource if the response fails to meet the minimum requirement.

8. The system of claim 6, wherein the command is defined in a rich media format.

9. The system of claim 6, the logic further comprising logic for:

capturing the response with a video device; and

converting the response into a digitally encoded video format.

10. A computer programming product for providing access control to a computing resource, comprising;

a computer readable storage medium; and

logic, stored on the computer readable storage medium for execution on a processor, for;

defining a command and an action corresponding to the command, wherein the action is a physical movement of a user;

defining a minimum requirement of correspondence between the action and a response to the command, wherein;

the response is in a video format; and

the correspondence is not based upon a previous pre-recorded response by the user;

receiving a request to access a computing system;

transmitting the command to a computing system from which the request originated;

receiving the response to the command;

comparing the response and the action to determine whether or not the response meets the minimum requirement; and

enabling access to the computing resource if the response meets the minimum requirement.

11. The computer programming product of claim 10, the logic further comprising logic for denying access to the computing resource if the response fails to meet the minimum requirement.

12. The computer programming product of claim 10, the logic further comprising logic for:

capturing the response with a video device; and

converting the response into a digitally encoded video format.