Authentication Server Using Text-Based CAPTCHA to Reduce Network Load

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional CAPTCHA techniques fail to accurately distinguish human operations from automated processes due to characters with overly broken shapes, leading to incorrect recognition and increased network load from transmitting varying image-based challenges.

Innovation Solution

An authentication server system that provides text-based operating instructions and objects, tracking position information to determine if operations are performed by a human, reducing network load by caching text-based instructions and objects, and using session IDs to vary challenges per session.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If image-based CAPTCHA characters with broken shapes are transmitted to user terminal, then authentication capability is provided, but network load increases due to repeated transmission of varying images

Engineering Contradiction:
Improveauthentication capabilityVSAvoidnetwork load
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The patent uses text-based representations as copies of the visual challenge elements. Instead of transmitting actual images of broken characters, the system transmits text descriptions that can be rendered locally, allowing the user terminal to generate the visual challenge without repeated network transmissions of image data.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent pre-defines a set of challenge objects with their text representations and visual characteristics on the server side. These are prepared in advance and can be cached or referenced without needing to generate and transmit new images each time, reducing network load while maintaining authentication capability.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If image-based CAPTCHA characters are transmitted to user terminal, then authentication challenge is provided, but images cannot be cached in user terminal leading to increased network load

Engineering Contradiction:
Improveauthentication challengeVSAvoidnetwork efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system transmits text-based challenge definitions that can be cached in the user terminal. These text representations can be stored and reused across multiple authentication sessions, eliminating the need to download new images each time and improving network efficiency.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent changes the format of the challenge from images to text-based representations. This parameter change allows the challenge data to be cached and reused, transforming an inefficient image transmission system into an efficient text-based system that can be stored and referenced locally.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If characters with broken shapes are used in CAPTCHA, then bot detection capability is enhanced, but character recognition by users becomes difficult leading to incorrect authentication

Engineering Contradiction:
Improvebot detection capabilityVSAvoidcharacter recognition accuracy
Core Design Contradiction:
ReliabilityVSMeasurement precision

Solution Approach 1:

Instead of making characters visually difficult for bots to process through broken shapes, the patent inverts the approach by using text-based challenge definitions that are semantically meaningful. The challenge requires users to understand and interpret text instructions rather than simply recognize visually distorted characters, maintaining bot detection while improving user recognition accuracy.

Inventive Principle:
Principle #13The other way round (Inversion)

Solution Approach 2:

The patent replaces the visual-mechanical system of recognizing distorted characters with a cognitive system based on text comprehension. Instead of relying on visual pattern recognition of broken shapes, the system uses text-based challenges that require logical understanding, substituting visual processing with semantic processing to improve accuracy.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

4Loss of energy

If text-based operating instructions are used instead of image-based CAPTCHA, then network load is reduced through caching, but authentication challenge variety may be limited

Engineering Contradiction:
Improvenetwork loadVSAvoidchallenge variety
Core Design Contradiction:
Loss of energyVSAdaptability or versatility

Solution Approach 1:

The patent creates a universal text-based challenge system that can serve multiple authentication scenarios. The same text-based framework can define different types of challenges (selection, ordering, identification) using the same underlying mechanism, providing versatility without requiring multiple image-based systems and reducing network load through caching.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS9348986B2Authentication server apparatus, authentication server apparatus-use program and authentication method
Publication Date: 2016.05.24 RAKUTEN GROUP INC
  • US9348986B2 patent drawing
  • US9348986B2 patent drawing
  • US9348986B2 patent drawing

AI summary

An authentication server apparatus is capable of simply and accurately assessing whether a user terminal is being operated by a person. In the authentication server apparatus connected to the user terminal, operating instructions for instructing operation by an operator by using objects are associated with operation information and stored. A session ID is imparted for each session with the user terminal, operating instructions are selected for each session, a page provided with the selected operating instructions and the objects is generated, and position information is received corresponding to operations executed at the user terminal that has displayed the page. At authentication time, operating instructions using the session ID of the session are associated with position information received from the terminal, and using the stored operation information associated with the operating instruction that have been associated with the received position information, and the position information, an assessment is made of whether or not the operations were made by an operator.