Spliced CAPTCHA Sub-Image Rearrangement for Authentication Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional CAPTCHA codes are vulnerable to decryption by automated programs due to their limited anti-decryption ability and high server workload caused by delivering multiple images for clicking-type CAPTCHA codes, which affects identity authentication efficiency.
Innovation Solution
A method and device that randomly select and rearrange CAPTCHA codes formed by spliced sub-images based on a preset processing rule, reducing server workload by allowing the user equipment to rearrange the images, thus enhancing authentication efficiency and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional CAPTCHA codes are used, then the authentication process is simple, but the anti-decryption ability is poor and security is low
Solution Approach 1:
The CAPTCHA image is divided into multiple sub-images that need to be rearranged according to a processing rule. This segmentation increases the difficulty for automated recognition while maintaining a relatively simple authentication interface for users.
Solution Approach 2:
The patent introduces dynamic elements by allowing the CAPTCHA code to change based on user interaction. The processing rule requires users to rearrange sub-images dynamically, making each authentication instance unique and harder to decrypt through static analysis.
2Reliability
If clicking type CAPTCHA code is used, then the anti-decryption ability is improved, but the server workload increases and authentication efficiency decreases
Solution Approach 1:
The user equipment performs the rearrangement of sub-images locally using the processing rule provided by the server. This self-service approach transfers the computational workload from the server to the client device, reducing server burden while maintaining authentication security.
Solution Approach 2:
The server pre-generates the processing rule and provides it to the user equipment along with the CAPTCHA code. This preliminary action allows the client to perform the complex rearrangement operation without requiring real-time server computation, thereby improving authentication efficiency.
3Reliability
If multiple images are delivered for clicking type CAPTCHA code, then the authentication security is enhanced, but the server workload increases significantly
Solution Approach 1:
Instead of the server managing and tracking multiple images and their usage states, the processing rule is provided to the user equipment which then autonomously handles the rearrangement. This self-service mechanism eliminates the need for server-side tracking of image delivery states, significantly reducing server workload.
Solution Approach 2:
The patent extracts the image rearrangement functionality from the server system and implements it on the user equipment. By taking out this computational task from the server, the system reduces server workload while maintaining the security benefits of multi-image CAPTCHA codes.
Data Source
AI summary
An identity authentication method and device and a storage medium are disclosed, and the method includes: receiving a CAPTCHA code acquiring request from a user equipment; randomly selecting a CAPTCHA code and a password corresponding thereto as per the request, the CAPTCHA code comprising a first CAPTCHA image formed by a plurality of spliced sub-images, and the password comprising a preset processing rule for the sub-images; sending the CAPTCHA code and password to the user equipment, so that the user equipment rearranges positions of the sub-images to form a second CAPTCHA image and presents the second CAPTCHA image to a user; and receiving, from the user equipment, authentication response information inputted by a user according to the second CAPTCHA image, authenticating an identity of the user according to the authentication response information, and returning an authentication result to the user equipment.