An adaptive verification code design method and system

Abstract

The present invention provides an adaptive verification code design method and system, so that when an automatic upgrade policy is used to handle an illegal request, other normal users are affected as less as possible, thereby ensuring user experience while protecting system security, and improving verification efficiency of a verification code. The method comprises: performing computation on a service identifier, corresponding to a service for which a user sends a verification code request, and a unique identifier of the user, to obtain a string with a fixed length, and generating a session identifier; according to the generated session identifier, reading a verification code security level of the session identifier from a buffer, and then generating a verification code; and performing verification according to the session identifier and the input verification code, and feeding back a verification result.

Description

technical field [0001] The invention relates to the technical field of computer networks, in particular to an adaptive verification code design method and system. Background technique [0002] In Internet applications, in order to prevent malicious users from performing a large number of illegal operations automatically submitted through the program, most websites use verification code technology to prevent the system from being maliciously attacked, so as to achieve the purpose of protecting the normal operation of the system. However, with the development of artificial intelligence and the improvement of computer processing capabilities, the recognition success rate of simple picture verification codes is also getting higher and higher. In order to prevent the verification code from being cracked by the robot, the difficulty of the verification code becomes higher and higher. This can indeed prevent the automatic recognition of the robot, but at the same time, the difficul...

AI Technical Summary

Problems solved by technology

[0017] 1. The existing verification code interference strategy has little impact on the machine, but greatly affects the identification of people, and cannot simultaneously ensure system security and human experience;

[0018] 2. The verification code difficulty level upgrade strategy adopts a single indicator. If the network speed is not good and clicks to submit the request repeatedly, it will cause the verification code difficulty level to increase, which will affect the enthusiasm and experience of users;

[0019] 3. Most of the threshold settings in the verification code difficulty level upgrade strategy are for all applications. The user's verification code difficulty upgrade in one application of the system will cause the verification code difficulty in other applications to increase accordingly. Good guarantee of user experience;

[0020] 4. The existing verification code systems that have different security levels and can be automatically upgraded according to user behavior, etc., all use IP for statistical restrictions. For universities or large companies with very few external network IPs, the scope of influence Too large, seriously affecting user operations

Images