Verification Code Character Substitution for Security and Usability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing verification code methods are complex and time-consuming for users, leading to increased errors and prolonged verification processes, while also being difficult for unauthorized scripts to recognize, thus affecting user experience and security efficacy.
Innovation Solution
A method and apparatus that replace variable characters in a pre-generated character string with backup characters based on a pre-established correspondence, generating a verification code that is intuitive for users and difficult for machines to recognize, without altering the code's meaning or using distortion, color change, or background addition.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complex display methods are used for verification codes (such as adding background, distorting text, providing multiple pictures), then security against unauthorized scripts is improved, but user recognition accuracy deteriorates and verification time increases
Solution Approach 1:
The patent changes the parameter of verification code generation from visual distortion methods to character substitution methods. By replacing original characters with substitute characters according to predefined rules, the system maintains security while improving user recognition. The substitute characters are selected from a set of characters with similar visual features, making them difficult for scripts to distinguish but recognizable by humans.
Solution Approach 2:
The patent creates a copy of the verification code in the form of substitute characters that replicate the security function without copying the visual distortion approach. The substitute characters serve as a simplified representation that maintains the cryptographic security while being more user-friendly than distorted images or complex visual puzzles.
2Reliability
If complex display methods are used for verification codes (such as adding background, distorting text, providing multiple pictures), then security against unauthorized scripts is improved, but user recognition accuracy deteriorates
Solution Approach 1:
The patent changes the parameter of verification code generation from visual distortion methods to character substitution methods. By replacing original characters with substitute characters according to predefined rules, the system maintains security while improving user recognition. The substitute characters are selected from a set of characters with similar visual features, making them difficult for scripts to distinguish but recognizable by humans.
3Reliability
If character distortion, color change, or background addition is used, then security against unauthorized scripts is improved, but user convenience deteriorates
Solution Approach 1:
The patent changes the parameter of verification code generation from visual distortion methods to character substitution methods. By replacing original characters with substitute characters according to predefined rules, the system maintains security while improving user recognition. The substitute characters are selected from a set of characters with similar visual features, making them difficult for scripts to distinguish but recognizable by humans.
Data Source
Figure 1a~1b
Figure 2a
Figure 2b
AI summary
Implementations of the present application disclose a method and apparatus for verification based on a verification code. The method includes: receiving a verification request; obtaining a pre-generated first character string after receiving the verification request, where the first character string includes at least one variable character; replacing some or all variable characters with backup characters based on a pre-established correspondence between a variable character and a backup character, to obtain a second character string; and generating a verification code based on the second character string, and verifying a user corresponding to the verification request. In the implementations of the present application, accuracy of recognizing the verification code by the user can be increased, and a time consumed in a verification process can be reduced. In addition, difficulty of recognizing the verification code by a computer program can be increased, and a possibility that the computer program performs an unauthorized operation can be effectively reduced.