首页> 外国专利> SYSTEM SECURITY PROCESS METHOD AND PROPERTIES OF HUMAN AUTHORIZATION MECHANISM

SYSTEM SECURITY PROCESS METHOD AND PROPERTIES OF HUMAN AUTHORIZATION MECHANISM

机译:人类授权机制的系统安全过程方法和性质

摘要

A system and method for automatically determining if a computer user is a human or an automated script. Human interactive proofs (HIPs) are currently used to deter automated registration for web services by automated computer scripts. Unfortunately, whilst every endeavour is made to obscure the HIPs from such automated processes, the presentation of current HIPs leaves systems very much open to malicious attack from automated computer scripts and processes such as optical character readers (OCR). Those HIPs that have proven more successful in foiling malicious attacks have proved difficult for humans to decipher. The system and method of the invention in one embodiment provides a Pseudo-Isochromatic challenge or puzzle or any other visual illusion generated on the basis of Pseudo- Isochromatic imagery (PICPVI), to be employed within a challenge generator, the invention is created in such a way as to make it extremely difficult for an automated process to read, decipher or otherwise interpret the PICPVI but relatively easy for the human end user to successfully complete. In one embodiment the end user issues a request to a service provider for access to services, the service provider requests HIP by generating a PICPVI. The PICPVI is generated for the user and the response can be provided as the whole or part of the access to service request, making it extremely difficult for an automated process to access services unlawfully or maliciously.
机译:一种用于自动确定计算机用户是人工脚本还是自动脚本的系统和方法。人工交互证明(HIP)当前用于阻止通过自动计算机脚本对Web服务进行自动注册。不幸的是,尽管已尽一切努力使HIP不受此类自动化过程的影响,但当前HIP的呈现使系统非常容易受到来自自动化计算机脚本和过程(如光学字符读取器(OCR))的恶意攻击。事实证明,在挫败恶意攻击方面更成功的那些HIP对人类而言难以破解。在一个实施例中,本发明的系统和方法提供了一种伪等色质挑战或难题或基于伪等色图像(PICPVI)生成的任何其他视觉幻觉,以用于挑战产生器中,本发明是在这种情况下创建的一种使自动化过程难以读取,解密或以其他方式解释PICPVI的方法,但是对于人类最终用户而言,成功完成该过程相对容易。在一个实施例中,最终用户向服务提供商发出访问服务的请求,该服务提供商通过生成PICPVI来请求HIP。 PICPVI是为用户生成的,响应可以作为访问服务请求的全部或部分来提供,这使得自动化过程极其难以非法或恶意访问服务。

著录项

  • 公开/公告号EP2534602A2

    专利类型

  • 公开/公告日2012-12-19

    原文格式PDF

  • 申请/专利权人 GEOLANG LIMITED;

    申请/专利号EP20110710415

  • 发明设计人 GARSIDE DEBBIE;

    申请日2011-02-08

  • 分类号G06F21/20;

  • 国家 EP

  • 入库时间 2022-08-21 16:31:44

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号