Systems and methods for distinguishing among human users and software robots

• US 9,990,487 B1
• Filed: 05/05/2017
• Issued: 06/05/2018
• Est. Priority Date: 05/05/2017
• Status: Active Grant

• Current Assignee: NuData Security Inc. (MasterCard Incorporated)
• Original Assignee: Mastercard Technologies Canada ULC (MasterCard Incorporated)
• Inventors: Bailey, Christopher Everett, Lukashuk, Randy, Cunningham, Jonathan
• Primary Examiner(s): Moorthy, Aravind K
• Application Number:
  US15/588,189
• Time in Patent Office: 396 Days
• Field of Search: 726 4, 726 5, 726 7, 713168, 713182, 713184
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A technique for distinguishing between a human user and a software robot. The technique includes: receiving a first communication from a device different from the at least one computer; identifying, from the first communication, a request to access a web resource; generating an image that encodes a challenge text, the image comprising data stored in a plurality of channels including a transparency channel, the generating comprising: generating decoding information representing the challenge text; and storing the decoding information in the transparency channel of the image; transmitting, via the at least one network, the generated image to the device; receiving a second communication from the device; identifying, from the second communication, a response text; and providing the device with access to the web resource based on a comparison between the challenge text and the response text.

Claims

1. A system, comprising:

at least one computer; and

at least one non-transitory computer-readable storage medium storing processor-executable instructions that, when executed by the at least one computer, cause the at least one computer to perform;

receiving, via at least one network, a first communication from a device different from the at least one computer;

identifying, from the first communication, a request to access a web resource;

generating an image comprising pixel values in a plurality of channels including a transparency channel, the generating comprising encoding a challenge text in the image at least in part by;

generating decoding information for displaying the challenge text, the decoding information including a plurality of saturation values for a respective plurality of pixels in the image; and

storing the decoding information, including the plurality of saturation values, in the transparency channel of the image;

transmitting, to the device and via the at least one network, the generated image and software code that, when executed by the device, uses the decoding information to facilitate displaying of the challenge text by the device;

receiving, via the at least one network, a second communication from the device;

identifying, from the second communication, a response text; and

providing the device with access to the web resource based on a comparison between the challenge text and the response text.

2. The system of claim 1, wherein the software code comprises JAVASCRIPT software code for execution by an Internet browser executing on the device.

3. The system of claim 1, wherein the software code, when executed by an Internet browser, uses the decoding information to cause a plurality of graphical elements to be displayed in a webpage so that the webpage displays the challenge text.

4. The system of claim 3, wherein the plurality of graphical elements includes one or more HTML elements and/or one or more OpenGL elements.

5. The system of claim 3, wherein the software code includes OpenGL instructions, and wherein the software code, when executed by the Internet browser, causes the plurality of graphical elements to be displayed by using at least one graphical processing unit (GPU) to execute the OpenGL instructions to render the plurality of graphical elements.

6. The system of claim 1, wherein the image encodes other text that is displayed to a user when the image is displayed by the device against a white background, wherein the other text is different from the challenge text.

7. The system of claim 6, wherein the other text is encoded in data stored in at least one channel of the plurality of channels, the at least one channel not including the transparency channel.

8. The system of claim 1, wherein the software code, when executed by the device, uses the decoding information to generate graphical elements based on the plurality of saturation values in the decoding information.

9. The system of claim 8, wherein the software code, when executed by the device, uses the decoding information to generate an HTML element for a pixel and set the color of the HTML element based on a saturation value for the pixel specified in the decoding information.

10. A method, comprising:

receiving, via at least one network, a first communication from a device;

identifying, from the first communication, a request to access a web resource;

generating an image comprising pixel values in a plurality of channels including a transparency channel, the generating comprising encoding a challenge text in the image at least in part by;

generating decoding information for displaying the challenge text, the decoding information including a plurality of saturation values for a respective plurality of pixels in the image; and

storing the decoding information, including the plurality of saturation values, in the transparency channel of the image;

transmitting, to the device and via the at least one network, the generated image and software code that, when executed by the device, uses the decoding information to facilitate displaying of the challenge text by the device;

receiving, via the at least one network, a second communication from the device;

identifying, from the second communication, a response text; and

providing the device with access to the web resource based on a comparison between the challenge text and the response text.

11. The method of claim 10, wherein the software code comprises JAVASCRIPT software code for execution by an Internet browser executing on the device.

12. The method of claim 10, wherein the software code, when executed by an Internet browser, uses the decoding information to cause a plurality of graphical elements to be displayed in a webpage so that the webpage displays the challenge text.

13. The method of claim 12, wherein the plurality of graphical elements includes one or more HTML elements and/or one or more OpenGL elements.

14. The method of claim 12, wherein the software code includes OpenGL instructions, and wherein the software code, when executed by the Internet browser, causes the plurality of graphical elements to be displayed by using at least one graphical processing unit (GPU) to execute the OpenGL instructions to render the plurality of graphical elements.

15. The method of claim 10, wherein the image encodes other text that is displayed to a user when the image is displayed by the device against a white background, wherein the other text is different from the challenge text.

16. The method of claim 15, wherein the other text is encoded in data stored in at least one channel of the plurality of channels, the at least one channel not including the transparency channel.

17. The method of claim 10, wherein the software code, when executed by the device, uses the decoding information to generate graphical elements based on the plurality of saturation values in the decoding information.

18. The method of claim 17, wherein the software code, when executed by the device, uses the decoding information to generate an HTML element for a pixel and set the color of the HTML element based on a saturation value for the pixel specified in the decoding information.

19. At least one non-transitory computer-readable storage medium storing processor-executable instructions that, when executed by at least one computer, cause the at least one computer to perform:

receiving, via at least one network, a first communication from a device different from the at least one computer;

identifying, from the first communication, a request to access a web resource;

generating an image comprising pixel values in a plurality of channels including a transparency channel, the generating comprising encoding a challenge text in the image at least in part by;

generating decoding information for displaying the challenge text, the decoding information including a plurality of saturation values for a respective plurality of pixels in the image; and

storing the decoding information, including the plurality of saturation values, in the transparency channel of the image;

transmitting, to the device and via the at least one network, the generated image and software code that, when executed by the device, uses the decoding information to facilitate displaying of the challenge text by the device;

receiving, via the at least one network, a second communication from the device;

identifying, from the second communication, a response text; and

providing the device with access to the web resource based on a comparison between the challenge text and the response text.

20. The at least one non-transitory computer readable storage medium of claim 19, wherein the software code comprises JAVASCRIPT software code for execution by an Internet browser executing on the device.

21. The at least one non-transitory computer readable storage medium of claim 19, wherein the software code, when executed by an Internet browser, uses the decoding information to cause a plurality of graphical elements to be displayed in a webpage so that the webpage displays the challenge text.

22. The at least one non-transitory computer readable storage medium of claim 21, wherein the plurality of graphical elements includes one or more HTML elements and/or one or more OpenGL elements.

23. The at least one non-transitory computer readable storage medium of claim 21, wherein the software code includes OpenGL instructions, and wherein the software code, when executed by the Internet browser, causes the plurality of graphical elements to be displayed by using at least one graphical processing unit (GPU) to execute the OpenGL instructions to render the plurality of graphical elements.

24. The at least one non-transitory computer readable storage medium of claim 19, wherein the image encodes other text that is displayed to a user when the image is displayed by the device against a white background, wherein the other text is different from the challenge text.

25. The at least one non-transitory computer readable storage medium of claim 24, wherein the other text is encoded in data stored in at least one channel of the plurality of channels, the at least one channel not including the transparency channel.

26. The at least one non-transitory computer-readable storage medium of claim 19, wherein the software code, when executed by the device, uses the decoding information to generate graphical elements based on the plurality of saturation values in the decoding information.

27. The at least one non-transitory computer-readable storage medium of claim 26, wherein the software code, when executed by the device, uses the decoding information to generate an HTML element for a pixel and set the color of the HTML element based on a saturation value for the pixel specified in the decoding information.

28. A device, comprising:

at least one hardware processor; and

at least one non-transitory computer readable storage medium storing processor-executable instructions that, when executed by the at least one hardware processor, cause the at least one hardware processor to perform;

transmitting, to at least one computer and via at least one network, a communication comprising a request to access a web resource;

receiving, from the at least one computer and via the at least one network, an image that encodes a challenge text and software code,

the image;

comprising pixel values in a plurality of channels including a transparency channel, and

storing decoding information for displaying the challenge text in the transparency channel, wherein the decoding information includes a plurality of saturation values for a respective plurality of pixels in the image;

the software configured to use the decoding information to facilitate displaying of the challenge text by the device;

executing the software code;

displaying, to a user of the device, the challenge text using decoding information in the transparency channel of the image;

receiving, from the user of the device, input specifying a response text; and

transmitting, to the at least one computer and via the at least one network, a communication comprising the response text.

29. The device of claim 28, wherein

the software code is configured to use the decoding information in the transparency channel of the image to cause a plurality of graphical elements to be displayed in a webpage so that the webpage displays the challenge text.

30. The device of claim 28, wherein the software code comprises JAVASCRIPT software code for execution by an Internet browser executing on the device, and wherein the displaying comprises executing the software code using the Internet browser.