No-CAPTCHA CAPTCHA

• US 9,465,928 B2
• Filed: 12/31/2014
• Issued: 10/11/2016
• Est. Priority Date: 12/31/2014
• Status: Active Grant

• Current Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Original Assignee: Verizon Patent and Licensing Incorporated (Verizon Communications Inc.)
• Inventors: Limbasia, Sunil D., Khalil, Manah M., Devaki, Venkata
• Primary Examiner(s): Brown, Christopher
• Assistant Examiner(s): JACKSON, JENISE E
• Application Number:
  US14/587,206
• Publication Number:
  US 20160188850A1
• Time in Patent Office: 650 Days
• Field of Search: 726/7
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha

Abstract

A device generates parameters identifying selectively revealed un-obfuscated information associated with administering and assessing a Turing test. The device provides, to a client device, a challenge based on the parameters. The challenge directs the client device to selectively reveal the un-obfuscated information for presentation to a user associated with the client device. The device receives a response, to the challenge, from the client device and determines, based on the response and the parameters, whether the user associated with the client device is human. The device selectively performs an action based on determining whether the user associated with the client device is human.

Claims

1. A device, comprising:

one or more processors, implemented at least partially in hardware, to;

receive a request from a client device;

identify a session identifier associated with the request;

generate, based on the request and the session identifier, a challenge associated with a Turing test,

the challenge directing the client device to reveal a first group of information and obscure a second group of information;

generate, based on the request and the session identifier, a metric associated with the challenge,

the metric identifying the first group of information;

provide, to the client device and based on the request, the challenge;

receive a response, to the challenge, from the client device;

determine, based on the metric, whether the response satisfies the challenge,

the response not satisfying the challenge when the response is not associated with the session identifier; and

selectively perform an action based on determining whether the response satisfies the challenge.

2. The device of claim 1, where the request is associated with a page,

the page including a set of input fields associated with providing user input,

the first group of information corresponding to a first quantity of a set of alternative input fields that correspond to the set of input fields,

each input field, of the set of input fields, corresponding to a single randomly generated field identifier of the first group of information,

the second group of information corresponding to a second quantity of the set of alternative input fields,

each input field, of the set of input fields, corresponding to one or more randomly generated field identifiers of the second group of information, and

the challenge including the first group of information and the second group of information.

3. The device of claim 1, where the one or more processors, when determining whether the response satisfies the challenge, are to:

determine that the response satisfies the challenge based on the response including information associated with user input to the second group of information.

4. The device of claim 1, where the challenge directs the client device to display an image of a set of keys and to highlight a particular sequence of keys of the set of keys, and

where the one or more processors, when determining whether the response satisfies the challenge, are to:

determine that the response satisfies the challenge based on the response identifying the particular sequence of keys.

5. The device of claim 1, where the challenge directs the client device to display a plurality of characters and to highlight a particular sequence of characters of the plurality of characters, and

where the one or more processors, when determining whether the response satisfies the challenge, are to:

determine that the response satisfies the challenge based on the response identifying the particular sequence of characters.

6. The device of claim 1, where the challenge directs the client device to obfuscate a plurality of characters and to reveal the first group of information by identifying a particular sequence of characters of the plurality of obfuscated characters, and

where the one or more processors, when determining whether the response satisfies the challenge, are to:

determine that the response satisfies the challenge based on the response identifying the particular sequence of characters.

7. The device of claim 1, where the challenge directs the client device to display a first sequence of characters and to selectively reveal the first group of information by highlighting characters, from the first sequence of characters, to identify a second sequence of characters, and

where the one or more processors, when determining whether the response satisfies the challenge, are to:

determine that the response satisfies the challenge based on the response identifying the second sequence of characters and not the first sequence of characters.

8. A non-transitory computer-readable medium storing instructions, the instructions comprising:

one or more instructions that, when executed by one or more processors, cause the one or more processors to;

receive a request from a client device;

identify a session identifier associated with the request;

generate, based on the request and the session identifier, a challenge associated with a Turing test,

the challenge directing the client device, to reveal a first group of information, and obscure a second group of information;

generate, based on the request and the session identifier, a metric associated with the challenge,

the metric identifying the first group of information;

provide, to the client device and based on the request, the challenge;

receive, from the client device, a response based on providing the challenge;

determine, based on the metric, whether the response satisfies the challenge,

the response not satisfying the challenge when the response is not associated with the session identifier; and

selectively perform an action based on determining whether the response satisfies the challenge.

9. The non-transitory computer-readable medium of claim 8, where the one or more instructions further cause the one or more processors to:

identify information associated with the request,

the identified information including an input field for user input; and

generate a plurality of input fields,

the first group of information including;

a portion of the identified information, and

a particular input field selected at random from the plurality of input fields, and

the second group of information including;

one or more other fields of the plurality of input fields.

10. The non-transitory computer-readable medium of claim 8, where the one or more instructions further cause the one or more processors to:

determine, based on the metric, a score associated with the response,

the metric including;

a first metric associated with identifying the first group of information, and

a second metric associated with distinguishing the first group of information from the second group of information, and

the score including;

a first score associated with assessing the response based on the first metric, and

a second score associated with assessing the response based on the second metric; and

determine, based on the first score and the second score, whether the response satisfies the challenge.

11. The non-transitory computer-readable medium of claim 8, where:

the second group of information includes a group of characters, and

the first group of information includes particular characters of the group of characters and a sequence associated with the particular characters.

12. The non-transitory computer-readable medium of claim 11, where the challenge directs the client device to:

progressively reposition a highlighted portion of the second group of information,

the highlighted portion revealing the particular characters, and

the repositioned highlighted portion revealing the sequence associated with the particular characters.

13. The non-transitory computer-readable medium of claim 8, where the second group of information includes the first group of information.

14. The non-transitory computer-readable medium of claim 8, where:

the request is associated with a page,

the page including a set of input fields associated with providing user input,

the first group of information corresponds to a first quantity of a set of alternative input fields corresponding to the set of input fields,

each input field, of the set of input fields, corresponding to a single randomly generated field identifier of the first group of information,

the second group of information corresponds to a second quantity of the set of alternative input fields,

each input field, of the set of input fields, corresponding to one or more randomly generated field identifiers of the second group of information, and

the challenge includes the first group of information and the second group of information.

15. A method, comprising:

receiving, by a device, a request from a client device;

identifying, by the device, a session identifier associated with the request;

generating, by the device and based on the request and the session identifier, a challenge associated with a Turing test,

the challenge directing the client device to reveal a first group of information and obscure a second group of information;

generating, by the device, a metric associated with the challenge,

the metric identifying the first group of information;

providing, by the device and based on the request, the challenge to the client device;

receiving, by the device, a response from the client device based on the providing the challenge to the client device;

determining, by the device and based on the metric, whether the response satisfies the challenge,

the response not satisfying the challenge when the response is not associated with the session identifier; and

selectively performing, by the device, an action based on determining whether the response satisfies the challenge.

16. The method of claim 15, further comprising:

determining whether the request includes an input associated with other information; and

determining that the response does not satisfy the challenge based on determining that the request includes the input associated with the other information.

17. The method of claim 15, further comprising:

determining whether the response includes the first group of information; and

determining that the response satisfies the challenge based on determining that the response includes the first group of information.

18. The method of claim 15, further comprising:

determining that the response identifies the first group of information; and

determining that the response does not identify the second group of information.

19. The method of claim 18, where the first group of information is associated with a sequence, and the method further comprises:

determining that the response identifies the sequence associated with the first group of information.

20. The method of claim 15, where:

the second group of information includes a group of characters;

the first group of information includes particular characters of the group of characters and a sequence associated with the particular characters; and

the challenge directs the client device to reposition a highlighted portion of the second group of information,

the highlighted portion revealing the particular characters, and

the repositioned highlighted portion revealing the sequence associated with the particular characters.