Systems and methods for implementing and tracking identification tests

• US 9,946,864 B2
• Filed: 09/09/2014
• Issued: 04/17/2018
• Est. Priority Date: 04/01/2008
• Status: Active Grant

• Current Assignee: NuData Security Inc. (MasterCard Incorporated)
• Original Assignee: NuData Security Inc. (MasterCard Incorporated)
• Inventors: Bailey, Christopher Everett
• Primary Examiner(s): Gaffin, Jeffrey A
• Assistant Examiner(s): HUERTAS TORRES, AYESHA E
• Application Number:
  US14/481,698
• Publication Number:
  US 20140380448A1
• Time in Patent Office: 1,316 Days
• Field of Search: None
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0277 Online advertisement
• CPC Class Codes: G06T 13/80 2D [Two Dimensional] animation, e.g. using sprites
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

Systems and methods for providing identification tests. In some embodiments, a system and a method are provided for generating and serving to a user an animated challenge graphic comprising a challenge character set whose appearance may change over time. In some embodiments, marketing content may be incorporated into a challenge message for use in an identification test. The marketing content may be accompanied by randomly selected content to increase a level of security of the identification test, in some embodiments, a challenge message for use in an identification test may be provided based on information regarding a transaction for which the identification test is administered. For example, the transaction information may include a user identifier such as an IP address. In some embodiments, identification test results may be tracked and analyzed to identify a pattern of behavior associated with a user identifier. A score indicative of a level of trustworthiness may be computed for the user identifier.

Claims

1. A computer-implemented method for providing challenge graphics, the method comprising acts of:

receiving user behavior information indicative of a behavior of a user, wherein the user behavior information comprises user behavior information other than whether the user provided a correct response to a prior challenge graphic;

adjusting a level of trust worthiness assigned to the user, wherein the level of trustworthiness is adjusted at least in part by analyzing the user behavior information other than whether the user provided a correct response to a prior challenge graphic;

with at least one server, generating and serving to a user a present challenge graphic, wherein;

the present challenge graphic is selected based on the level of trust worthiness assigned to the user; and

the present challenge graphic is generated randomly and/or pseudo-randomly.

2. The method of claim 1, further comprising acts of:

at a first computer, displaying the present challenge graphic to the user, wherein the present challenge graphic comprises a first plurality of characters;

at a second computer, receiving from the user a second plurality of characters entered by the user in response to said server serving the present challenge graphic to the user; and

comparing the second plurality of characters against the first plurality of characters.

3. The method of claim 2, wherein the first plurality of characters, which are generated randomly and/or pseudo-randomly, comprise a character whose appearance changes over a time period during which the present challenge graphic is displayed to the user.

4. The method of claim 3, wherein the character'"'"'s appearance changes in at least one manner selected from a group consisting of:

distortion, movement, change in size, and change in orientation.

5. The method of claim 2, wherein the first plurality of characters are selected randomly and/or pseudo-randomly from existing content.

6. The method of claim 2, wherein the present challenge graphic further comprises a third plurality of characters, and wherein the third plurality of characters are adapted to convey a marketing message and comprise a character whose appearance changes over a time period during which the present challenge graphic is displayed to the user.

27. The method of claim 1, wherein the present challenge graphic is a second challenge graphic, and wherein the method further comprises:

generating and serving to the user a first challenge graphic, wherein the user behavior information is indicative of a behavior of the user in connection with the first challenge graphic.

28. The method of claim 27, wherein the first challenge graphic is served to the user in connection with a first electronic transaction, and wherein the second challenge graphic is served to the user in connection with a second electronic transaction different from the first electronic transaction.

29. The method of claim 27, wherein:

the second challenge graphic comprises a second plurality of characters; and

the first challenge graphic comprises a first plurality of characters different from the second plurality of characters, the first plurality of characters being adapted to convey a marketing message.

30. The method of claim 27, wherein the user behavior information indicates a response provided by the user to the first challenge graphic.

31. The method of claim 27, wherein the user behavior information indicates an amount of time that elapsed between the first challenge graphic being served to the user and the user providing a response.

32. The method of claim 27, wherein the user behavior information indicates a number of times the user issued a refresh command to request a new challenge graphic.

33. The method of claim 27, wherein the user behavior information further indicates whether the user provided a correct response to the first challenge graphic.

34. The method of claim 27, wherein the user behavior information indicates that the user provided an incorrect response to the first challenge graphic but the incorrect response is a putative typo.

35. The method of claim 1, wherein the user behavior information indicates a geographic location of the user.

36. The method of claim 1, wherein the user behavior information comprises information other than information relating to the user'"'"'s past interactions with challenge graphics.

37. The method of claim 1, wherein the user behavior information indicates a purpose for which the present challenge graphic is served to the user, the purpose being selected from a group consisting of:

creating an account, posting a comment, viewing content, performing a transaction, and establishing a connection.

7. A computer system for providing challenge graphics, the computer system comprising at least one server configured to:

receive user behavior information indicative of a behavior of a user, wherein the user behavior information comprises user behavior information other than whether the user provided a correct response to a prior challenge graphic;

adjust a level of trust worthiness assigned to the user, wherein the level of trustworthiness is adjusted at least in part by analyzing the user behavior information other than whether the user provided a correct response to a prior challenge graphic;

generate and serve, via a computer network, to a user'"'"'s browser a present challenge graphic for display to the user by said browser, wherein;

the present challenge graphic is selected based on the level of trust worthiness assigned to the user; and

the present challenge graphic is generated randomly and/or pseudo-randomly.

8. The computer system of claim 7, wherein:

the present challenge graphic comprises a first plurality of characters; and

the present challenge graphic further comprises an obscuring feature that at least partially obscures at least one first character of the first plurality of characters during at least a portion of a time period during which the present challenge graphic is displayed.

9. The computer system of claim 8, wherein the obscuring feature obscures at least parts of multiple characters of the first plurality of characters.

10. The computer system of claim 8, wherein a degree to which the obscuring feature obscures the at least one first character changes over the time period.

11. The computer system of claim 8, wherein the present challenge graphic further comprises a second plurality of characters, and wherein the second plurality of characters are adapted to convey a marketing message and comprise a character whose appearance changes over a time period during which the present challenge graphic is displayed to the user.

12. The computer system of claim 7, wherein the at least one server is programmed to generate the present challenge graphic at least in part by selecting a first plurality of characters randomly and/or pseudo-randomly from existing content.

13. The computer system of claim 12, wherein the present challenge graphic further comprises a second plurality of characters, and wherein the second plurality of characters is adapted to convey a marketing message and comprises a character whose appearance changes over a time period during which the present challenge graphic is displayed to the user.

14. The computer system of claim 12, wherein the first plurality of characters, which are generated randomly and/or pseudo-randomly, comprise a character whose appearance changes over a time period during which the present challenge graphic is displayed to the user.

15. The computer system of claim 7, wherein the present challenge graphic comprises a character whose appearance changes over a time period during which the present challenge graphic is displayed to the user.

16. The computer system of claim 15, wherein a change in the appearance of the character comprises a rotation, a swivel, a rock and/or a flip.

17. The computer system of claim 7, wherein:

the present challenge graphic comprises a first plurality of characters which are generated randomly and/or pseudo-randomly; and

the present challenge graphic further comprises a second plurality of characters adapted to convey a marketing message and at least one non-character marketing feature adapted to convey the marketing message in conjunction with the second plurality of characters.

18. The computer system of claim 17, wherein the at least one non-character marketing feature comprises a non-character marketing feature whose appearance changes over a time period during which the present challenge graphic is displayed to the user.

19. The computer system of claim 17, wherein:

the first plurality of characters comprises at least one first character; and

the at least one server is programmed to generate the present challenge graphic at least in part by applying a first technique to change an appearance of the at least one first character so as to increase a difficulty for a non-human agent to obtain a correct response to the present challenge graphic.

20. The computer system of claim 19, wherein:

the second plurality of characters comprise at least one second character; and

the at least one server is programmed to generate the present challenge graphic at least in part by applying a second technique different from the first technique to change an appearance of the at least one second character.

21. The computer system of claim 17, wherein at least a portion of the at least one non-character marketing feature at least partially obscures the first plurality of characters.

22. The computer system of claim 7, wherein the present challenge graphic comprises a plurality of characters adapted to convey a marketing message, and wherein at least a portion of the plurality of characters is not visible during at least a portion of the time period.

38. The computer system of claim 7, wherein the present challenge graphic is a second challenge graphic, and wherein the at least one server is further configured to:

generate and serve to the user a first challenge graphic, wherein the user behavior information is indicative of a behavior of the user in connection with the first challenge graphic.

39. The computer system of claim 38, wherein the first challenge graphic is served to the user in connection with a first electronic transaction, and wherein the second challenge graphic is served to the user in connection with a second electronic transaction different from the first electronic transaction.

40. The computer system of claim 38, wherein:

the second challenge graphic comprises a second plurality of characters; and

the first challenge graphic comprises a first plurality of characters different from the second plurality of characters, the first plurality of characters being adapted to convey a marketing message.

41. The computer system of claim 38, wherein the user behavior information indicates a response provided by the user to the first challenge graphic.

42. The computer system of claim 38, wherein the user behavior information indicates an amount of time that elapsed between the first challenge graphic being served to the user and the user providing a response.

43. The computer system of claim 38, wherein the user behavior information indicates a number of times the user issued a refresh command to request a new challenge graphic.

44. The computer system of claim 38, wherein the user behavior information further indicates whether the user provided a correct response to the first challenge graphic.

45. The computer system of claim 38, wherein the user behavior information indicates that the user provided an incorrect response to the first challenge graphic but the incorrect response is a putative typo.

46. The computer system of claim 7, wherein the user behavior information indicates a geographic location of the user.

47. The computer system of claim 7, wherein the user behavior information comprises information other than information relating to the user'"'"'s past interactions with challenge graphics.

48. The computer system of claim 7, wherein the user behavior information indicates a purpose for which the present challenge graphic is served to the user, the purpose being selected from a group consisting of:

creating an account, posting a comment, viewing content, performing a transaction, and establishing a connection.

23. At least one non-transitory computer readable medium having encoded thereon instructions that, when executed by at least one processor, perform a method for providing challenge graphics, the method comprising:

receiving user behavior information indicative of a behavior of a user, wherein the user behavior information comprises user behavior information other than whether the user provided a correct response to a prior challenge graphic;

adjusting a level of trust worthiness assigned to the user, wherein the level of trustworthiness is adjusted at least in part by analyzing the user behavior information other than whether the user provided a correct response to a prior challenge graphic;

with at least one server, generating and serving to a user a present challenge graphic, wherein;

the present challenge graphic is selected based on the level of trust worthiness assigned to the user; and

the present challenge graphic is generated randomly and/or pseudo-randomly.

24. The at least one non-transitory computer readable medium of claim 23, wherein the method further comprises:

at a first computer, displaying the present challenge graphic to the user, wherein the present challenge graphic comprises a first plurality of characters;

at a second computer, receiving from the user a second plurality of characters entered by the user in response to said server serving the present challenge graphic to the user; and

comparing the second plurality of characters against the first plurality of characters.

25. The at least one non-transitory computer readable medium of claim 24, wherein the first plurality of characters comprises a character whose appearance changes over a time period during which the present challenge graphic is displayed to the user.

26. The at least one non-transitory computer readable medium of claim 23, wherein:

the present challenge graphic comprises a first plurality of characters; and

the present challenge graphic further comprises an obscuring feature that at least partially obscures at least one first character of the first plurality of characters during at least a portion of a time period during which the present challenge graphic is displayed.

49. The at least one non-transitory computer readable medium of claim 23, wherein the present challenge graphic is a second challenge graphic, and wherein the method further comprises:

generating and serving to the user a first challenge graphic, wherein the user behavior information is indicative of a behavior of the user in connection with the first challenge graphic.

50. The at least one non-transitory computer readable medium of claim 49, wherein the first challenge graphic is served to the user in connection with a first electronic transaction, and wherein the second challenge graphic is served to the user in connection with a second electronic transaction different from the first electronic transaction.

51. The at least one non-transitory computer readable medium of claim 49, wherein the first challenge graphic comprises a first plurality of characters adapted to convey a marketing message.

52. The at least one non-transitory computer readable medium of claim 49, wherein the user behavior information indicates a response provided by the user to the first challenge graphic.

53. The at least one non-transitory computer readable medium of claim 49, wherein the user behavior information indicates an amount of time that elapsed between the first challenge graphic being served to the user and the user providing a response.

54. The at least one non-transitory computer readable medium of claim 49, wherein the user behavior information indicates a number of times the user issued a refresh command to request a new challenge graphic.

55. The at least one non-transitory computer readable medium of claim 49, wherein the user behavior information further indicates whether the user provided a correct response to the first challenge graphic.

56. The at least one non-transitory computer readable medium of claim 49, wherein the user behavior information indicates that the user provided an incorrect response to the first challenge graphic but the incorrect response is a putative typo.

57. The at least one non-transitory computer readable medium of claim 23, wherein the user behavior information indicates a geographic location of the user.

58. The at least one non-transitory computer readable medium of claim 23, wherein the user behavior information comprises information other than information relating to the user'"'"'s past interactions with challenge graphics.

59. The at least one non-transitory computer readable medium of claim 23, wherein the user behavior information indicates a purpose for which the present challenge graphic is served to the user, the purpose being selected from a group consisting of:

creating an account, posting a comment, viewing content, performing a transaction, and establishing a connection.