Human Interactive Proof Service for Web Server Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Small web-based businesses lack the resources to develop effective human interactive proof (HIP) challenges to differentiate between human and automated system interactions, necessitating a scalable HIP service.

Innovation Solution

A human interactive proof service that generates and evaluates HIP challenges, enabling web servers to embed challenges on web pages and assess user responses, thereby granting access only to correct human interactions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If small web-based businesses develop their own HIP challenges, then they can differentiate between human and automated interactions, but they lack the necessary resources to create effective challenges

Engineering Contradiction:
Improveeffectiveness of HIP challengeVSAvoidresource requirements
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a HIP service as an intermediary between small businesses and HIP challenge generation. The service receives requests from web servers, generates appropriate HIP challenges, and returns them for implementation. This mediator approach allows small businesses to access effective HIP challenges without needing to develop them in-house, resolving the contradiction between reliability and resource requirements.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The HIP service is designed to serve multiple entities and generate various types of HIP challenges (image-based, audio, video, etc.) through a single unified system. This universal approach allows one service to replace multiple individual development efforts, enabling small businesses to access effective HIP technology without proportionally increasing their resource investment.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Object-affected harmful factors

If large corporations develop HIP challenges, then they can create difficult challenges for automated systems, but small businesses cannot afford to do the same

Engineering Contradiction:
Improveautomated system exploitationVSAvoidresource availability
Core Design Contradiction:
Object-affected harmful factorsVSEase of manufacture

Solution Approach 1:

The HIP service acts as an intermediary that translates the resource advantage of large corporations into accessible solutions for small businesses. By centralizing HIP challenge development expertise in the service, small businesses can benefit from enterprise-level protection against automated exploitation without needing to invest in equivalent development resources.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The service enables small businesses to effectively copy or replicate the HIP challenge capabilities of large corporations through the centralized platform. Instead of each business needing to independently develop and maintain complex HIP systems, they can access proven, effective challenges through the service, achieving the same protective effect with minimal resource investment.

Inventive Principle:
Principle #26Copying

3Adaptability or versatility

If a centralized HIP service is implemented, then multiple entities can access HIP technology, but the service must handle requests from multiple web servers simultaneously

Engineering Contradiction:
Improveaccessibility to multiple entitiesVSAvoidrequest handling capacity
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The HIP service architecture segments the request handling process into distinct components: receiving requests from multiple web servers, generating appropriate HIP challenges, and returning results. This segmentation allows the service to efficiently manage multiple concurrent requests by processing them through standardized pathways, maintaining high productivity while serving diverse entities.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The service performs preliminary actions by pre-generating and caching HIP challenges where applicable, and by establishing standardized response formats in advance. This preliminary preparation enables the service to handle multiple simultaneous requests more efficiently, reducing processing time and maintaining high productivity while serving multiple entities with different needs.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS7533419B2Human interactive proof service
Publication Date: 2009.05.12 MICROSOFT TECHNOLOGY LICENSING LLC
  • US7533419B2 patent drawing
  • US7533419B2 patent drawing
  • US7533419B2 patent drawing

AI summary

A human interactive proof (HIP) service is described. In response to a request from a web server, the HIP service generates a HIP challenge and an associated attestation. The web server can then embed the generated HIP challenge in a requested web page. The attestation is used to determine whether or not a user response to the HIP challenge is correct.