Safe protecting method and device for Web verification code with combined picture and characters

Abstract

The invention discloses a safe protecting method and a safe protecting device for a Web verification code with combined picture and characters. The method comprises the following steps that a Web server randomly displays a meaningful picture, gives a related question and randomly lists more than two selection answers, wherein only one answer is correct and the position of the correct answer in the selection answers is random; picture and the character backgrounds of the answer are added into random noise points; the Web verification code input by a user consists of acronyms and the position sequence number of the answer; and a server terminal verifies the correction of the Web verification code provided by a browser, wherein the judgment standard for the passing of verification is under the condition that both the acronyms and the position sequence number are correct. By the method and the device, the problem that the Web verification code is either difficultly identified and easy to mistakenly identify or is easy to identify but is easily cracked by a computer automatically in the prior art is solved.

Description

technical field [0001] The invention relates to an information security technology for Internet sites to defend against automatic program attacks, in particular to a method and device for security protection of Web authentication codes combined with graphics and text. Background technique [0002] The World Wide Web (abbreviated as WWW or Web) is one of the most common applications on the Internet, and the problem of security attacks against Web applications is also prominent. One type of security attack is called automatic program attack (if it is a script program, it is called automatic script attack), which is characterized in that the attack action is automatically controlled by the program without manual operation, which greatly improves the attack efficiency Attack effects that are difficult to achieve, such as guessing website login passwords with exhaustive methods, crowding message board space with spam, and so on. [0003] One way to defend against bot attacks is ...

AI Technical Summary

Problems solved by technology

[0007] Disadvantages: OCR (Optical Symbol Recognition) technology is relatively mature, as long as the attacker has such a technology or program, its automatic program can almost 100% identify the correct Web verification code, thus making the existing technology invalid

[0010] Cons: This is a palliative, not a permanent solution

[0013] Disadvantages: It requires the professional knowledge of the viewer, which may not be applicable to ordinary people

Manual production of professional questions is more difficult, and the number of questions is limited. It is easy for automatic programs to store all the correspondence between questions and answers, and use the look-up table method to crack

[0014] To sum up, the security protection methods of web verification codes in the prior art are either easy to be cracked, difficult to recognize by human eyes, or too professional and limited in scope of application.

Images