More secure image-based “CAPTCHA” technique

• US 9,075,983 B2
• Filed: 05/26/2011
• Issued: 07/07/2015
• Est. Priority Date: 05/26/2011
• Status: Active Grant

• Current Assignee: Thomson Licensing (Vantiva SA)
• Original Assignee: Thomson Licensing (Vantiva SA)
• Inventors: Foote, Evan Michael
• Primary Examiner(s): MOORTHY, ARAVIND K
• Application Number:
  US14/003,814
• Publication Number:
  US 20130347090A1
• Time in Patent Office: 1,503 Days
• Field of Search: 726/7, 726/5, 726/22, 713/168, 713/183, 713/184
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

A more secure CAPTCHA makes use of a distorted alphanumeric character string or strings that include one or more glyphs, pictures or symbols foreign to a target audience. Adding at least one of a glyph, picture or symbol makes recognition of the distorted string trivial since humans who would know which of the character set to expect, but a very difficult decision for a computer already struggling to decide where a character begins and ends, let alone identifying the character as being valid.

Claims

1. A method for authorizing access, comprising the step of:

generating for display at least one distorted string of alphanumeric characters, in combination with at least one of a glyph, picture or symbol, the glyph, picture or symbol being foreign to a target audience, wherein the generating includes separating the at least one distorted string of alphanumeric characters into two or more strings, and adding the at least one glyph, picture or symbol to one or more ends of the two or more strings to form at least one string of random alphanumeric characters that includes at least one of the glyph, picture or symbol; and

comparing a response of a user entered in reaction to the distorted string of alphanumeric characters to a reference string of characters to determine whether to grant access.

2. The method according to claim 1 wherein the generating for display step further comprises the steps of:

generating a random background; and

combining the random background with the at least one string of random alphanumeric characters that includes at least one of the glyph, picture or symbol, using a random template.

3. The method according to claim 2 wherein the random background has one or more randomly selected colors, shapes, features and/or textures.

4. The method according to claim 2 further including the step of obfuscating the at least one string of random alphanumeric characters that includes at least one of the glyph, picture or symbol, using a random template.

5. The method according to claim 4 wherein the obfuscating step includes mixing the background and the at least one random alphanumeric string.

6. The method according to claim 1 wherein the at least one string of random alphanumeric characters comprises at least one word.

7. A method for authorizing access, comprising the step of:

generating for display at least one distorted string of alphanumeric characters, in combination with at least one of a glyph, picture or symbol, the glyph, picture or symbol being foreign to a target audience, the generating step including;

generating a random background;

separating the at least one distorted string of alphanumeric characters into two or more strings, and adding at least one of the glyph, picture or symbol to one or more ends of the two or more strings to form at least one string of random alphanumeric characters that includes at least one of the glyph, picture or symbol; and

combining the random background with the at least one string of random alphanumeric characters that includes at least one of the glyph, picture or symbol, using a random template; and

comparing a response of a user entered in reaction to the distorted string of alphanumeric characters to a reference string of characters to determine whether to grant access.

8. The method according to claim 7 wherein the at least one string of random alphanumeric characters comprises at least one word.

9. The method according to claim 7 wherein the random background has one or more randomly selected colors, shapes, features and/or textures.

10. The method according to claim 7 further including the step of obfuscating the at least one string of random alphanumeric characters that includes at least one of the glyph, picture or symbol, using a random template.

11. The method according to claim 10 wherein the obfuscating step includes mixing the background and the at least one random alphanumeric string.