Authentication method and system adopting captchas

Abstract

The invention discloses an authentication method and system adopting captchas. The authentication method comprises the following steps: a, when the condition that an unlocking slider on the current page slides to a preset detection position is detected by a client, the unlocking slider is set in an non-movable state, an authentication request carrying the current point-in-time information, sliding progress information and client identification is sent to a web server; b, the web server judges whether the authentication request is legal, if yes, whether the sliding progress indicated by the authentication request is 100% is judged, if yes, a captcha is generated and sent to the client and a step d is executed, otherwise, a sliding continuing instruction is sent to the client, and a step c is executed; c, the client sets the unlocking slider to be in a movable state according to the sliding continuing instruction, and operation shifts to the step a; d, the client displays the captcha and sends the captcha determined by a user to the web server, and the web server checks the captcha. With adoption of the authentication method, automatic identification of the captchas by an illegal program can be avoided.

Description

technical field [0001] The invention relates to computer application technology, in particular to a method and system for verifying verification codes. Background technique [0002] With the deepening of the social Internet, there are more and more Internet-based application systems, and these systems are facing more and more online attacks. As an auxiliary security means, verification code has a special status in Web security. Captcha is a public fully automatic procedure to distinguish whether a user is a computer or a human. It can prevent: malicious cracking of passwords, swiping tickets, and flooding of forums, so as to prevent a hacker from making continuous login attempts to a specific registered user with a specific program brute force cracking method. Currently, verification codes are widely used by many websites. [0003] The existing main technologies for realizing verification codes include: plain text verification codes use plain text and graphic verification...

AI Technical Summary

Problems solved by technology

[0008] The disadvantage of the existing plain text verification code technology is that the number of texts is limited, and the cracking is very simple. It is easy to crack after swiping a few times

For graphic verification codes, since they are usually composed of geometric elements such as points, lines, surfaces, and bodies, and non-geometric attributes such as grayscale, color, linetype, and line width, as current computers perform basic two-dimensional graphic elements (such as image Pixels, lines, surfaces, etc.) and color difference analysis and processing capabilities are gradually improved, and it is also easier to be cracked by hacker software

In this way, the verification code is easy to be automatically recognized by the software, which will cause the Internet application system to be attacked by hackers and cannot operate normally.

[0009] It can be seen that the existing verification code technology has the problem of being easily cracked

Images