Animated CAPTCHA Segmentation for Bot Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional CAPTCHA techniques are susceptible to automated access by web bots and malicious computers, which can overcome optical character recognition (OCR) distortions, and are vulnerable to 'botnet' methods where humans are used to solve CAPTCHA images, making it difficult for humans to access protected content while preventing automated access.
Innovation Solution
The system divides a challenge phrase into multiple character subsets, each with less than all characters, and presents them as animated or distorted images, requiring human users to correctly identify the subsets to access protected content, while making it difficult for automated systems to obtain the complete set of characters.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If increased distortion or warping is used to defeat automated optical character recognition, then web bots and computers cannot correctly respond to CAPTCHA challenge, but human users cannot correctly identify the displayed letters or digits
Solution Approach 1:
The challenge phrase is divided into multiple character subsets, each displayed separately in different frames. This segmentation prevents automated systems from capturing the complete phrase through single-frame OCR, while human users can mentally assemble the complete phrase from the sequential subsets.
Solution Approach 2:
The CAPTCHA system uses animation to dynamically display different character subsets across multiple frames rather than showing a static image. This dynamic presentation makes it difficult for automated systems to capture and process the complete challenge phrase, while human users can easily follow the animation and identify all characters.
2Reliability
If conventional CAPTCHA techniques are used, then automated access can be prevented, but the system is vulnerable to botnet methods where humans solve scraped CAPTCHA images
Solution Approach 1:
By dividing the challenge phrase into multiple character subsets displayed across separate frames, the system prevents botnets from effectively scraping and distributing complete CAPTCHA images to human solvers. Each frame contains only a portion of the complete challenge phrase.
Solution Approach 2:
The system performs preliminary processing by animating and distributing character subsets across multiple frames before the CAPTCHA challenge is fully presented. This preliminary segmentation action prevents subsequent scraping attacks from obtaining complete challenge phrases.
3Ease of operation
If the complete challenge phrase is displayed in a single image, then human users can easily identify it, but automated optical character recognition can successfully capture and solve it
Solution Approach 1:
The complete challenge phrase is segmented into multiple character subsets, with each subset displayed in a separate frame of an animation sequence. This ensures that no single frame contains the complete phrase that could be captured by automated OCR systems.
Solution Approach 2:
The system transitions from displaying a static complete challenge phrase to displaying dynamic animated sequences with character subsets appearing in different frames. This dynamic approach maintains human readability while preventing automated capture of the complete phrase.
Data Source
AI summary
Systems and methods are provided for challenge/response animation. In one implementation, a request for protected content may be received from a client, and the protected content may comprise data. A challenge phrase comprising a plurality of characters may be determined, and a computer processor may divide the challenge phrase into at least two character subsets selected from the characters comprising the challenge phrase. Each of the at least two character subsets may include less than all of the characters comprising the challenge phrase. The at least two character subsets may be sent to the client in response to the request; and an answer to the challenge phrase may be received from the client in response to the at least two character subsets. Access to the protected content may be limited based on whether the answer correctly solves the challenge phrase.