CN102708112A - Method for randomly generating verification graph and question set - Google Patents
Method for randomly generating verification graph and question set Download PDFInfo
- Publication number
- CN102708112A CN102708112A CN2012100188100A CN201210018810A CN102708112A CN 102708112 A CN102708112 A CN 102708112A CN 2012100188100 A CN2012100188100 A CN 2012100188100A CN 201210018810 A CN201210018810 A CN 201210018810A CN 102708112 A CN102708112 A CN 102708112A
- Authority
- CN
- China
- Prior art keywords
- verification
- graphics
- frame
- graphic
- server
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000012795 verification Methods 0.000 title claims abstract description 293
- 238000000034 method Methods 0.000 title claims abstract description 50
- 235000001674 Agaricus brunnescens Nutrition 0.000 description 16
- 238000010586 diagram Methods 0.000 description 7
- 230000008569 process Effects 0.000 description 5
- 230000000694 effects Effects 0.000 description 3
- 238000012545 processing Methods 0.000 description 3
- 238000012360 testing method Methods 0.000 description 3
- 241000282412 Homo Species 0.000 description 2
- 238000002474 experimental method Methods 0.000 description 2
- 230000003993 interaction Effects 0.000 description 2
- 238000011160 research Methods 0.000 description 2
- 240000000599 Lentinula edodes Species 0.000 description 1
- 241000086570 Tyrannosaurus rex Species 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 230000006835 compression Effects 0.000 description 1
- 238000007906 compression Methods 0.000 description 1
- 238000005336 cracking Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 230000007774 longterm Effects 0.000 description 1
- 230000006855 networking Effects 0.000 description 1
- 230000001568 sexual effect Effects 0.000 description 1
- 238000005728 strengthening Methods 0.000 description 1
Images
Landscapes
- Storage Device Security (AREA)
- Computer And Data Communications (AREA)
- Information Transfer Between Computers (AREA)
- Processing Or Creating Images (AREA)
Abstract
本发明公开了一种随机产生验证图形及题组的方法,该方法应用在一验证服务器上,该验证服务器内设有一图形数据库,该图形数据库内储存有多个物件图形,每一个物件图形分别对应于一物件名称,该验证服务器自该图形数据库中随机选取多个物件图形,分别作为一验证图形,且将该等验证图形置放于一预定框架中,依序检测各所述验证图形的边界范围,并判断各所述验证图形是否与其他验证图形重叠;在判断出各验证图形均未与其他验证图形重叠的情况下,将预定框架连同其中的验证图形,制作成一帧验证图形框架;及根据验证图形框架中所述验证图形的物件名称及数量产生至少一题组及与之相对应的至少一解答,且将所述验证图形框架及题组传送至所述终端装置。
The invention discloses a method for randomly generating verification graphics and question groups. The method is applied to a verification server. The verification server is provided with a graphics database. The graphics database stores multiple object graphics. Each object graphics is individually Corresponding to an object name, the verification server randomly selects multiple object graphics from the graphics database as a verification pattern, places the verification patterns in a predetermined frame, and detects the characteristics of each verification pattern in sequence. boundary range, and determine whether each of the verification graphics overlaps with other verification graphics; when it is determined that each verification graphics does not overlap with other verification graphics, make the predetermined frame together with the verification graphics therein into a frame of verification graphics; And generate at least one question group and at least one answer corresponding to it according to the object name and quantity of the verification pattern in the verification pattern frame, and transmit the verification pattern frame and question group to the terminal device.
Description
技术领域 technical field
本发明涉及一种随机产生验证图形及题组的方法,主要是在一验证服务器内设置一图形数据库,以当该验证服务器在对该终端装置进行验证时,能自该图形数据库中随机选取多个物件图形制作成一帧验证图形框架,并根据该帧验证图形框架中的物件图形的名称及数量产生题组,以供终端装置的使用者在观看该验证图形框架后,能将对应于该题组的答案信息回传至该验证服务器,进而令该终端装置通过验证程序,防止恶意程序自动完成验证程序。The present invention relates to a method for randomly generating verification graphs and question groups. The main method is to set a graph database in a verification server, so that when the verification server verifies the terminal device, it can randomly select multiple graphs from the graph database. The object graphics are made into a frame verification graphics frame, and the title and quantity of the object graphics in the frame verification graphics frame are used to generate a question group, so that the user of the terminal device can answer the corresponding question after viewing the verification graphics frame. The answer information of the group is sent back to the verification server, so that the terminal device can pass the verification procedure, preventing malicious programs from automatically completing the verification procedure.
背景技术 Background technique
目前,随着网际网络的蓬勃发展,各种网页或网络平台服务,诸如社群网站、论坛、网络相本、电子信箱、部落格或网络游戏等,早已深入至人们的日常生活中,方便人们在任何场所均能通过网际网络取得所需的数据;然而,前述的网页或网络平台服务,常会受到恶意使用者,诸如骇客、网络诈骗者等的攻击或滥用,而令正常使用者的使用权利受到排挤;前述的恶意使用者常会利用机器人程序(Robots)或蠕虫程序(Worm),自动在网页或网络平台服务上注册帐号或张贴恶意文章,或者大量且自动地搜索、破解及下载具隐密性的信息,诸如私人信息、软件及公司数据等,如此不但造成网络频宽被占用,且会侵害正常使用者的个人隐私,严重损害正常使用者使用网页或网络平台服务的权利。At present, with the vigorous development of the Internet, various webpages or network platform services, such as social networking sites, forums, online albums, e-mails, blogs or online games, have already penetrated into people's daily life, making it convenient for people to Any place can obtain the required data through the Internet; however, the aforementioned webpages or network platform services are often attacked or abused by malicious users, such as hackers, network scammers, etc., and normal users' right to use Being squeezed out; the above-mentioned malicious users often use robots (Robots) or worms (Worm) to automatically register accounts or post malicious articles on web pages or network platform services, or search, crack and download a large number of automatically hidden files. Sexual information, such as private information, software, and company data, will not only cause network bandwidth to be occupied, but will also infringe on the personal privacy of normal users, and seriously damage the rights of normal users to use web pages or network platform services.
为解决前述问题,一种产生验证图形的验证方法便应运而生;该方法是当使用者利用一终端装置的浏览器,存取特定数据(如:读取网页、发表信息或下载文件)时,验证服务器会先针对该终端装置的用户进行测试,以判断该终端装置的用户是否为人类(亦或是机器人程序或计算机),且在判断出该终端装置的用户为人类的情况下,才会开放权限予该终端装置,使该终端装置能通过验证程序,兹针对目前较常见的验证图形产生技术,进行说明以下:In order to solve the foregoing problems, a verification method for generating verification graphics has emerged; the method is when a user uses a browser of a terminal device to access specific data (such as: reading web pages, publishing information or downloading files) , the verification server will first test the user of the terminal device to determine whether the user of the terminal device is a human (or a robot program or a computer), and only when it is determined that the user of the terminal device is a human being The authority will be granted to the terminal device so that the terminal device can pass the verification procedure. Here is an explanation of the more common verification graphic generation technology as follows:
目前较常使用的验证图形产生技术为一种全自动区分计算机和人类的测试(CAPTCHA,Completely Automated Public Turing Test to tell Computers andHumans Apart),请参阅图1所示,主要先由一验证服务器产生一验证图形11后,将该验证图形11显示在一验证网页1中,该验证图形11上设有多个扭曲的字符111(如:peace schlzoid),使用者必须依看到的字符111,通过一终端装置在下方的空格中输入前述的字符111;若使用者输入正确的字符111,则验证服务器会判断出该终端装置的用户为人类,并开放权限予该终端装置;反之,若使用者输入错误的字符111,则该验证服务器会重新产生另一验证图形11,并显示在该验证网页1上,使得该等字符111再次改变,直到该终端装置通过验证程序为止;如此,便能确保在前述的验证程序中,存在人为的互动,减少前述网页或网络服务平台受到恶意程序攻击的机会,进而防止前述的恶意文章、自动注册帐号或破解密码等情况。At present, the commonly used verification graphic generation technology is a fully automatic test for distinguishing between computers and humans (CAPTCHA, Completely Automated Public Turing Test to tell Computers and Humans Apart), please refer to Figure 1, which is mainly generated by a verification server. After the verification figure 11, the verification figure 11 is displayed in a
该验证服务器在产生验证图形11的过程中,尚能通过在验证图形11内增加噪点、噪线、背景图片或是进行影像扭曲等处理,以提升验证图形11的图形复杂度,进而加强验证程序的辨识能力;虽然,此举能令恶意程序的影像辨识功能无法正确辨识出验证图形11的内容,进而降低恶意程序的辨识成功率,且能抵制部分恶意程序的运作,而避免前述问题的发生,但同时也会大幅降低验证图形11的可读性,使得使用者(人类用户)无法轻易辨识出验证图形11的内容,严重降低使用者的辨识正确率,大幅增加使用者辨认错误的可能性;一旦验证图形11的影像复杂度高到连使用者也无法辨识或辨识错误的情况下,使用者极容易因辨识不清而输入错误的验证密码,使得验证服务器必须不断重新执行验证程序,而使用者则必须多次试误(try & error),如此不仅徒增使用者的困扰,更加重验证服务器的负担,而为前述网页或网络服务平台业者及使用者所不乐见。In the process of generating the
因此,如何改善传统验证图形产生技术的诸多问题,以在不降低使用者辨识正确率的前提下,确保在验证程序中存在人为的互动,防止恶意程序利用影像辨识技术自动登入等情事,即为本发明在此欲探讨的一重要课题。Therefore, how to improve many problems of the traditional verification graphic generation technology, so as to ensure that there is human interaction in the verification program without reducing the correct rate of user identification, and prevent malicious programs from automatically logging in using image recognition technology, that is, An important topic that the present invention intends to discuss here.
发明内容 Contents of the invention
有鉴于前揭诸多问题,发明人经过长久努力研究与实验,终于开发设计出本发明的一种随机产生验证图形及题组的方法,期防止不肖人士利用恶意程序自动完成验证程序,并降低使用者的辨识难度,避免重复验证错误,以降低验证服务器的负荷。In view of the many problems disclosed above, the inventor has worked hard for a long time to research and experiment, and finally developed and designed a method of randomly generating verification graphics and question groups of the present invention, hoping to prevent unscrupulous people from using malicious programs to automatically complete the verification process, and reduce the use of The identification difficulty of the user can avoid repeated verification errors, so as to reduce the load on the verification server.
本发明的一目的,是提供一种随机产生验证图形及题组的方法,应用在一验证服务器上,该验证服务器通过网络与至少一终端装置相连接,其内设有一图形数据库及一图形列表,该图形数据库内储存有多个物件图形,每一个物件图形分别对应于一物件名称,该验证服务器在对各该终端装置进行验证时,会自该图形数据库中随机选取多个物件图形,分别作为一验证图形,且将该等验证图形置放于一预定框架(frame)中,并将该等验证图形所对应的物件名称及数量登记至该图形列表中,俟该图形列表中所登记的验证图形的总数达一预定的数量(如:5)的情况下,该验证服务器即会将该预定框架连同其中的验证图形,制作成一帧验证图形框架;该验证服务器会根据该等验证图形在该图形列表中对应的物件名称及数量产生至少一题组(如:该帧验证图形框架中有几只暴龙?)及与之相对应的一解答(如:该帧验证图形框架中有三只暴龙),且将该验证图形框架及题组传送至该终端装置。An object of the present invention is to provide a method for randomly generating verification graphics and question groups, which is applied to a verification server, which is connected to at least one terminal device through a network, and is provided with a graphics database and a graphics list , there are multiple object graphics stored in the graphic database, and each object graphic corresponds to an object name. When the verification server verifies each terminal device, it will randomly select a plurality of object graphics from the graphic database, respectively As a verification figure, place the verification figures in a predetermined frame, and register the object names and quantities corresponding to the verification figures in the figure list, and when the registered figures in the figure list When the total number of verification patterns reaches a predetermined number (such as: 5), the verification server will make the predetermined frame together with the verification patterns therein into a frame of verification patterns; The corresponding object names and quantities in the graphics list produce at least one question group (such as: how many tyrannosaurs are there in the frame verification graphics frame?) and a corresponding answer (such as: there are three tyrannosaurs in the frame verification graphics frame) Tyrannosaurus Rex), and the verification graphic frame and question group are sent to the terminal device.
本发明的另一目的,是供使用者在观看经本发明的方法所制作出的验证图形框架后,即能辨识出该验证图形框架中各验证图形对应的物件名称及数量,且在观看到该题组后,将对应于该题组的一答案信息输入该终端装置并回传至该验证服务器,待该验证服务器接收到该答案信息,且将该答案信息与该解答比对无误的情况下,该验证服务器即开放权限给该终端装置,使该终端装置能通过验证程序;由于该验证图形框架经该验证服务器随机选取多个物件图形制作而成,因此,恶意程序无法完整辨识出该验证图形框架内的完整内容,包括全部验证图形对应的物件名称及数量等,亦无法通过多次试误以及图库比对的方式来通过验证,故能防止恶意程序自动完成验证程序的问题。Another object of the present invention is for the user to recognize the object name and quantity corresponding to each verification pattern in the verification pattern frame after viewing the verification pattern frame produced by the method of the present invention, and to view After the question group, input an answer information corresponding to the question group into the terminal device and send it back to the verification server, wait for the verification server to receive the answer information, and compare the answer information with the answer and it is correct Next, the verification server will open the authority to the terminal device, so that the terminal device can pass the verification procedure; since the verification graphic frame is made by randomly selecting multiple object graphics by the verification server, the malicious program cannot completely identify the Verifying the complete content in the graphics frame, including the names and quantities of objects corresponding to all the verification graphics, cannot pass the verification through multiple trial and error and gallery comparisons, so it can prevent malicious programs from automatically completing the verification process.
本发明的又一目的,是提供一种随机产生验证图形及题组的验证服务器,该验证服务器通过网络分别与至少一终端装置相连接,其中包括一图形数据库及一解答模块,该图形数据库内储存有多个物件图形,每一个物件图形分别对应于一物件名称,该验证服务器在对该终端装置进行验证时,能自该图形数据库中随机选取多个物件图形,分别作为一验证图形,置放于一预定框架中,以形成一帧验证图形框架,该解答模块则会根据该验证图形框架中该等验证图形对应的物件名称及数量,产生至少一题组及至少一解答,该解答与该题组相对应,且该解答模块能将该验证图形框架及题组传送至该终端装置;如此,该验证服务器即能通过产生多变化的题组及解答,强化验证程序的辨识能力,藉以判断出该终端装置的使用者是否为人类用户。Another object of the present invention is to provide a verification server that randomly generates verification graphics and question groups. The verification server is connected to at least one terminal device through the network, and includes a graphic database and an answering module. A plurality of object graphics are stored, and each object graphic corresponds to an object name. When the verification server verifies the terminal device, it can randomly select a plurality of object graphics from the graphic database and use them as a verification graphic respectively. placed in a predetermined frame to form a verification graphic frame, the answer module will generate at least one question group and at least one answer according to the object names and quantities corresponding to the verification graphics in the verification graphic frame, the answer and The question group corresponds, and the answering module can transmit the verification graphic frame and the question group to the terminal device; thus, the verification server can strengthen the recognition ability of the verification program by generating a variety of question groups and answers, thereby It is determined whether the user of the terminal device is a human user.
本发明实施例的一种随机产生验证图形及题组的方法,通过随机选取多个物件图形制作出的验证图形及题组,令恶意程序无法完整辨识出整个验证图形的内容,亦无法藉文字辨识来破解题组,进而达到防止恶意程序自动完成验证程序的效果。A method for randomly generating verification graphics and question groups in the embodiment of the present invention, by randomly selecting a plurality of object graphics to produce verification graphics and question groups, so that malicious programs cannot completely identify the content of the entire verification graphics, and cannot use text Identify to crack the question group, and then achieve the effect of preventing malicious programs from automatically completing the verification process.
附图说明 Description of drawings
图1为传统验证方法的示意图;Figure 1 is a schematic diagram of a traditional verification method;
图2为本发明的硬件方块图;Fig. 2 is a hardware block diagram of the present invention;
图3为本发明的物件图形画面示意图;FIG. 3 is a schematic diagram of an object graphic screen of the present invention;
图4为本发明的预定框架画面示意图;Fig. 4 is a schematic diagram of a predetermined frame picture of the present invention;
图5为本发明的图形列表示意图;Fig. 5 is a schematic diagram of a graphic list of the present invention;
图6A为本发明的较佳实施例的流程图一;FIG. 6A is a
图6B为本发明的较佳实施例的流程图二;FIG. 6B is a second flowchart of a preferred embodiment of the present invention;
图7为本发明的验证图形框架及题组示意图;及Fig. 7 is a schematic diagram of verification graphic framework and question group of the present invention; and
图8为本发明的另一验证图形框架及题组示意图。FIG. 8 is a schematic diagram of another verification graphic framework and question group in the present invention.
附图标号:Figure number:
验证服务器...............20Authentication Server ................20
终端装置...............21End Device ................21
网络...............22Network ................22
图形数据库...............23Graph Database ................23
图形列表...............24Graphical List ................24
第一物件图形...............231
第二物件图形...............232
第三物件图形...............233
第一背景图形...............234First Background Graphics ................234
第二背景图形...............235Secondary Background Graphics ................235
预定框架...............25Predetermined framework ................25
验证图形框架...............26Verify Graphics Frame ................26
题组...............27Question Group... 27
具体实施方式 Detailed ways
为便审查员能对本发明的目的、结构及其功效,做更进一步的认识与了解,兹举实施例配合图式,详细说明如下。In order to facilitate the examiner to further understand and understand the purpose, structure and effect of the present invention, the following examples are given together with the drawings, and the detailed description is as follows.
由于目前的恶意程序常附带有影像辨识功能,使得业者往往会采取将验证图形复杂化的作法(如:增加大量噪点、噪线、扭曲图形等),但此举又会造成验证图形的可读性大幅下降,严重影响使用者的辨识正确率;有鉴于此,发明人经过长久努力研究与实验,终于开发设计出本发明的一种随机产生验证图形及题组的方法,通过随机选取多个物件图形制作出的验证图形及题组,令恶意程序无法完整辨识出整个验证图形的内容,亦无法藉文字辨识来破解题组,进而达到防止恶意程序自动完成验证程序的效果。Since the current malicious programs often have image recognition functions, the industry often adopts methods of complicating the verification graphics (such as adding a lot of noise, noise lines, distorting graphics, etc.), but this will make the verification graphics unreadable In view of this, the inventor has finally developed and designed a method for randomly generating verification graphics and question groups of the present invention after long-term hard research and experiments. By randomly selecting multiple The verification graphics and question groups produced by the object graphics make it impossible for malicious programs to fully identify the content of the entire verification graphics, and it is also impossible to use text recognition to decipher the question groups, thus achieving the effect of preventing malicious programs from automatically completing the verification process.
本发明是一种随机产生验证图形及题组的方法,请参阅图2所示,在本发明的较佳实施例中,该方法应用在一验证服务器20上,该验证服务器20通过网络22与至少一终端装置21相连接,且能对该终端装置21进行验证,在本实施例中,该网络22可为网际网络或区域网络,且该验证服务器20兼具有网页服务器及文件服务器的功能,以当该终端装置21通过该验证服务器20的验证程序后,该验证服务器20即允许该终端装置21存取该验证服务器20内的数据(如:网页或文件)。The present invention is a kind of method that randomly produces verification pattern and question group, please refer to shown in Fig. 2, in preferred embodiment of the present invention, this method is applied on a
请参阅图2及图3所示,在本实施例中,该验证服务器20内设有一图形数据库23及一图形列表24,该图形数据库23内储存有多个物件图形及多个背景图形,(在本实施例中,该图形数据库23内储存有三个物件图形231、232及233,以及二个背景图形,包括第一背景图形234及第二背景图形235),每一个物件图形分别对应于一物件名称(在本实施例中,前述三个物件图形231、232及233对应的物件名称分别为幽灵、香菇怪及史莱姆),且每一个背景图形分别对应于一背景名称(在本实施例中,该第一背景图形234及第二背景图形235对应的背景名称分别为山峰及树),使用者通过该终端装置21的浏览器连接至网络22,且能在通过该验证服务器20的验证后,通过该终端装置21向该验证服务器20下载一文件,或者读取网页;在此情况下,该终端装置21会向该验证服务器20传送一存取请求,该存取请求可为一文件下载请求或网页读取请求,代表该终端装置21欲在通过该验证服务器20的验证程序后,下载一文件或读取一网页;当该验证服务器20接收到该终端装置21传来的存取请求后,请参阅图2、图3、图4及图6A、图6B所示,该验证服务器20即会执行下列步骤,以便于后续进行验证程序:Please refer to Fig. 2 and Fig. 3, in this embodiment, a
步骤300:该验证服务器20自该图形数据库23中随机选取至少一个背景图形,作为一预定框架25的背景,在本实施例中,该验证服务器20选取2个背景名称为“山峰”的第一背景图形234作为该预定框架25的背景,且该预定框架25的背景尚可由多个不同种的背景图形组成,并不限于由单一个或单一种背景图形组成;Step 300: The
步骤301:该验证服务器20将该预定框架25的背景所对应的背景名称及数量登记至该图形列表24中,如图3、图4及图5所示,在本实施例中,作为该预定框架25的背景的第一背景图形234的背景名称为“山峰”,其数量为“2”,因此,该验证服务器20即能将该预定框架25的背景所对应的背景名称(“山峰”)及数量(“2”)登记该图形列表24中;Step 301: The
步骤302:该验证服务器20自该图形数据库23中随机选取多个物件图形,分别作为一验证图形,在本实施例中,该验证服务器20共选取三个物件图形作为验证图形,其中包括一个物件名称为“幽灵”的第一物件图形231、一个物件名称为“香菇怪”的第二物件图形232及一个物件名称为“史莱姆”的第三物件图形233;Step 302: The
步骤303:该验证服务器20将该等验证图形依序置放于该预定框架25中,在本实施例中,前述该验证服务器20所选取的三个物件图形231、232及233,会如图4所示,分别被该验证服务器20作为验证图形,而被置放于该预定框架25中,且该验证服务器20能通过依序检测各该验证图形的边界范围,判断各该验证图形是否重叠,若否,代表各该验证图形被置放在该预定框架25中相互不重叠的位置,进入步骤304,若是,进入步骤308;Step 303: The
步骤304:该验证服务器20将该等验证图形所对应的物件名称及数量登记至该图形列表24中,如图3及图5所示,在本实施例中,作为验证图形的第一物件图形231的物件名称为“幽灵”,其数量为“1”,作为验证图形的第二物件图形232的物件名称为“香菇怪”,其数量为“1”,而作为验证图形的第三物件图形233的物件名称为“史莱姆”,其数量为“1”,因此,该验证服务器20即能如图5所示,将该等验证图形所对应的物件名称(“幽灵”、“香菇怪”及“史莱姆”)及数量(三个验证图形的数量均为“1”)登记至该图形列表24中;Step 304: The
步骤305:该验证服务器20判断该图形列表24中所登记的验证图形的数量总和是否达一预定的数量,若是,进入步骤306,若否,进入步骤302,在本实施例中,该预定的数量被限定在3,意即,在判断出该图形列表24中所登记的数量总和已达3的情况下,该验证服务器20即会执行步骤306;Step 305: The
步骤306:该验证服务器20将该预定框架25及其背景,连同其中的验证图形(即第一物件图形231、第二物件图形232及第三物件图形233),制作成一帧验证图形框架26(如图4及图7所示),在本实施例中,该验证图形框架26为一GIF(Graphics Interchange Format,图形交换格式)文件,采用LZW压缩演算法进行编码,是一种广泛应用于网络传输的影像格式,其文件体积小而成像相对清晰,能有效地减少文件在网络上传输的时间;Step 306: The
步骤307:该验证服务器20根据该等验证图形(即第一物件图形231、第二物件图形232及第三物件图形233)在该图形列表24中对应的物件名称及数量,以及该预定框架25的背景在该图形列表24中对应的背景名称及数量,产生至少一题组27及与之相对应的一解答,且将该验证图形框架26及题组27传送至该终端装置21,如图7所示,在本实施例中,该验证服务器20所产生的题组为“图中有几只香菇怪?(单选)(1)0只(2)1只(3)2只(3)3只”,且该验证服务器20所产生与该题组相对应的一解答为“(2)1只”;Step 307: The
步骤308:舍弃重叠的验证图形,如此即能减少该终端装置21的使用者在观看该验证图形框架26时,可能会因验证图形相互重叠而误判验证图形的数量的问题,进入步骤309;及Step 308: Discard overlapping verification patterns, which can reduce the problem that the user of the
步骤309:判断舍弃重叠的验证图形的次数是否达一预定值(如:3次),若否,进入步骤302,若是,进入步骤306。Step 309: Determine whether the number of discarded overlapping verification patterns reaches a predetermined value (for example: 3 times), if not, go to step 302, if yes, go to step 306.
如此,如图2及图7所示,当该终端装置21的使用者在观看到该验证图形框架26后,即能辨识出该验证图形框架26中各验证图形(即第一物件图形231、第二物件图形232及第三物件图形233)对应的物件名称(“幽灵”、“香菇怪”及“史莱姆”)及数量(三个验证图形的数量均为“1”),而使用者在观看到该题组27后,即能得知该验证图形框架26中对应于物件名称“香菇怪”的验证图形的数量为“1”,故使用者即能将对应于该题组的一答案信息“(2)1只”输入至该终端装置21并回传至该验证服务器20(通过鼠标点击、键盘输入、音控或其他输入方式),待该验证服务器20接收到该答案信息“(2)1只”,且将该答案信息“(2)1只”与该解答“(2)1只”比对无误的情况下,该验证服务器20即开放权限予该终端装置21,使该终端装置21能通过验证程序;通过本发明的方法,由于该验证图形框架26经该验证服务器20随机选取三个物件图形231、232及233作为验证图形制作而成,因此,恶意程序无法完整辨识出该验证图形框架26内的完整内容,包括全部验证图形对应的物件名称及数量等,亦无法通过多次试误以及图库比对的方式来通过验证,故能防止恶意程序自动完成验证程序的问题。In this way, as shown in FIG. 2 and FIG. 7, when the user of the terminal device 21 watches the verification graphic frame 26, he can recognize each verification graphic in the verification graphic frame 26 (i.e. the first object graphic 231, The second object graphics 232 and the third object graphics 233) corresponding object names ("ghost", "mushroom monster" and "slime") and quantity (the quantity of the three verification graphics is "1"), and use After seeing this question group 27, the reader can know that the quantity of the verification pattern corresponding to the object name "mushroom monster" in the verification pattern frame 26 is "1", so the user can put the corresponding question group An answer information "(2) 1 only" is input to the terminal device 21 and sent back to the verification server 20 (by mouse click, keyboard input, voice control or other input methods), and the verification server 20 receives the answer information "(2) 1", and if the answer information "(2) 1" is compared with the answer "(2) 1", the verification server 20 releases the authority to the terminal device 21, The terminal device 21 can pass the verification program; through the method of the present invention, since the verification graphic framework 26 is made by randomly selecting three object graphics 231, 232 and 233 through the verification server 20 as verification graphics, malicious programs cannot Completely identify the complete content in the verification graphic frame 26, including the names and quantities of objects corresponding to all verification graphics, etc., and cannot pass the verification through multiple trial and error and gallery comparisons, so malicious programs can be prevented from automatically completing the verification program problem.
承上所述,在本实施例中,该验证服务器20兼具有网页服务器及文件服务器的功能,然而,在实际施作中,该验证服务器20能与一网页服务器或一文件服务器相连接,以当该终端装置21通过该验证服务器20的验证程序后,该验证服务器20即允许该终端装置21存取该网页服务器或该文件服务器上的数据,凡本领域技术人员所能轻易思及的变化,均属本发明所欲保护的技术范围,合先陈明。As mentioned above, in this embodiment, the
此外,本发明的验证方法能用于判断该终端装置21的使用者是否为人类用户,且在该终端装置21通过该验证服务器20的验证程序后,允许该终端装置21存取该网页服务器或该文件服务器上的数据,然而,本发明的验证方法尚能应用在其他领域;以网络游戏为例,请参阅图8所示,在该终端装置21通过网络22与该验证服务器20相连接,且正存取该验证服务器20内建的游戏数据以执行网络游戏的情况下,该验证服务器20能随时或随机执行本发明的验证方法,且将经本发明的验证方法所产生的验证图形框架26及题组27传送至该终端装置21,以对该终端装置21进行验证,该终端装置21的使用者必须在限定时间内输入对应于该题组27的答案信息并回传该验证服务器20,否则在超过限定时间后,若该验证服务器20未收到该终端装置21回传的答案信息,或在该验证服务器20判断出答案信息与解答的比对结果不同的情况下,该验证服务器20即会判断该终端装置21正在执行机器人程序以进行网络游戏,进而关闭该终端装置21存取该验证服务器20的权限。In addition, the verification method of the present invention can be used to determine whether the user of the terminal device 21 is a human user, and after the terminal device 21 passes the verification procedure of the verification server 20, the terminal device 21 is allowed to access the web server or The data on the file server, however, the verification method of the present invention can still be applied in other fields; Taking online games as an example, please refer to shown in Figure 8, when the terminal device 21 is connected with the verification server 20 through the network 22, And when accessing the built-in game data of the verification server 20 to execute the online game, the verification server 20 can execute the verification method of the present invention at any time or randomly, and the verification graphic frame produced by the verification method of the present invention 26 and question group 27 are sent to this terminal device 21, to this terminal device 21 is verified, and the user of this terminal device 21 must input the answer information corresponding to this question group 27 and return this verification server 20 within a limited time , otherwise after exceeding the limited time, if the verification server 20 does not receive the answer information returned by the terminal device 21, or when the verification server 20 judges that the answer information is different from the comparison result of the answer, the verification server 20 20 will determine that the terminal device 21 is executing the robot program to play the online game, and then close the authority of the terminal device 21 to access the verification server 20 .
此外,复请参阅图2、图4、图6A、图6B及图7所示,在本实施例中,当该验证服务器20执行步骤303时,该验证服务器20能通过等比例缩放各该验证图形大小,将各该验证图形与该预定框架25间的覆盖面积比控制在一预定的百分比(如:50%),避免各该验证图形过大而相互重叠在该预定框架25中,以减少该终端装置21的使用者在观看该验证图形框架26时,可能会因验证图形相互重叠而误判验证图形的数量的问题;再者,当该验证服务器20执行步骤303时,该验证服务器20尚能对各该验证图形进行影像处理(如:缩放比例、拉近拉远、翻转、镜射、或加上噪点、噪线,甚至扭曲图形等),再将经影像处理后的验证图形置放于预定框架25中;另,该验证服务器20尚能在执行步骤306时,对该预定框架25连同其中的验证图形进行前述的影像处理,进而制作成该验证图形框架26,如此,该验证服务器20即能通过产生多变化的验证图形及验证图形框架26,进而强化验证程序的辨识能力。In addition, referring to Fig. 2, Fig. 4, Fig. 6A, Fig. 6B and Fig. 7, in this embodiment, when the
复请参阅图2、图5及图7所示,虽然,在本实施例中,该验证服务器20根据该等验证图形在该图形列表24中对应的物件名称(“幽灵”、“香菇怪”及“史莱姆”)及数量(三个验证图形的数量均为“1”)所产生的题组为“图中有几只香菇怪?(单选)(1)0只(2)1只(3)2只(3)3只”,且该验证服务器20所产生与该题组27相对应的一解答为“(2)1只”,然而,该验证服务器20及其所产生的题组27并不以此为限;在本发明其他实施例中,该验证服务器20尚内建有一解答模块(图中未示),该解答模块会根据该验证图形框架26中该等验证图形对应的物件名称及数量,产生该题组27及解答;再者,该验证服务器20所产生的题组27与相对应的解答分别可为“请问何者正确?(单选)(1)图中幽灵有2只(2)图中香菇怪有1只(3)图中史莱姆有3只(4)图中香菇怪有0只”及”(2)图中香菇怪有1只”,或为”请问图中有何种怪物?(单选)(1)香菇怪(2)木乃伊(3)吸血鬼(4)狼人”及”(1)香菇怪”,此外,与题组相对应的解答的数量并不仅限于一个,该验证服务器20尚能产生一题组,例如”请问何者正确?(复选)(1)图中幽灵有1只(2)图中香菇怪有1只(3)图中史莱姆有3只(4)图中香菇怪有0只”,且能产生对应于该题组的多个解答,包括“(1)图中幽灵有1只”及(2)“图中香菇怪有1只”,再者,该解答模块除能根据该等验证图形在该图形列表24中对应的物件名称及数量,产生至少一题组27及与之相对应的一解答外,亦能根据该预定框架25的背景在该图形列表24中对应的背景名称及数量来产生题组27与解答;举例而言,该解答模块所产生的题组27与相对应的解答分别可为“请问何者正确?(单选)(1)图中背景为1座山峰(2)图中背景有2座山峰(3)图中背景有1棵树(4)图中背景有2棵树”及“(2)图中背景有2座山峰”,或为“图中背景有几座山峰?(单选)(1)1座(2)2座(3)3座(3)4座”及“(2)2座”;如此,该验证服务器20即能通过产生多变化的题组及解答,令恶意程序更难辨识出该验证图形框架26内的完整内容。Please refer again to Fig. 2, Fig. 5 and shown in Fig. 7, although, in the present embodiment, this
本发明的实施例所用语汇仅供叙述之用,不应视为本发明的限制,另,虽然本发明的实施例及图式中,仅列举了简单的元件名称及连接关系,但仅为方便说明,让一般大众或相关领域的从业人员能据以了解本发明揭露内容的本质与要旨,而并非仅限定为上述的硬件系统架构,在实际实施中,本领域及人员当能掌握本发明的技术特征后,利用其他结构、装置、系统或调换方法步骤加以实现,而达成本发明的目的,因此,本发明所主张的权利范围,并不局限于此,按凡本领域技术人员依据本发明所揭露的技术内容,可轻易思及的等效变化,均应属不脱离本发明的保护范畴。The vocabulary used in the embodiments of the present invention is only used for description, and should not be considered as a limitation of the present invention. In addition, although in the embodiments of the present invention and the drawings, only simple component names and connection relationships are listed, it is only for convenience Description, so that the general public or practitioners in related fields can understand the essence and gist of the disclosure of the present invention, and not limited to the above-mentioned hardware system architecture. In actual implementation, those skilled in the art and personnel should be able to grasp the essence of the present invention After the technical features, other structures, devices, systems or replacement method steps are used to achieve the purpose of the present invention. Therefore, the scope of rights claimed by the present invention is not limited thereto. The disclosed technical content and easily conceivable equivalent changes shall all fall within the scope of protection of the present invention.
Claims (10)
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| TW100103632 | 2011-01-31 | ||
| TW100103632A TWI426764B (en) | 2011-01-31 | 2011-01-31 | Randomly generate methods for verifying graphics and questionnaires |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN102708112A true CN102708112A (en) | 2012-10-03 |
Family
ID=46900905
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2012100188100A Pending CN102708112A (en) | 2011-01-31 | 2012-01-20 | Method for randomly generating verification graph and question set |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN102708112A (en) |
| TW (1) | TWI426764B (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104468101A (en) * | 2013-09-12 | 2015-03-25 | 深圳市腾讯计算机系统有限公司 | User identity authentication method and device and authentication service system |
| CN110009488A (en) * | 2019-04-12 | 2019-07-12 | 深圳乐信软件技术有限公司 | Order processing method, apparatus, equipment and storage medium |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| TWI859833B (en) * | 2023-04-28 | 2024-10-21 | 華碩電腦股份有限公司 | Anomaly labelled-assistant detection system and method thereof |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1845489A (en) * | 2005-04-06 | 2006-10-11 | 腾讯科技(深圳)有限公司 | Verification information generating device and method thereof, anti-automatic verification device and method thereof |
| CN1980126A (en) * | 2005-12-08 | 2007-06-13 | 上海盛大网络发展有限公司 | Method for realizing picture identifying code |
| CN101064601A (en) * | 2006-04-26 | 2007-10-31 | 资通电脑股份有限公司 | Graphical Text Authentication Method |
| CN101179381A (en) * | 2006-11-07 | 2008-05-14 | 阿里巴巴公司 | Method and device for validating information |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7430720B2 (en) * | 2004-03-05 | 2008-09-30 | America Online, Inc. | System and method for preventing screen-scrapers from extracting user screen names |
| US20070277224A1 (en) * | 2006-05-24 | 2007-11-29 | Osborn Steven L | Methods and Systems for Graphical Image Authentication |
| TWI336631B (en) * | 2007-04-17 | 2011-02-01 | Univ Nat Taiwan Science Tech | Online game managing method and online game managing device using the same |
-
2011
- 2011-01-31 TW TW100103632A patent/TWI426764B/en active
-
2012
- 2012-01-20 CN CN2012100188100A patent/CN102708112A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1845489A (en) * | 2005-04-06 | 2006-10-11 | 腾讯科技(深圳)有限公司 | Verification information generating device and method thereof, anti-automatic verification device and method thereof |
| CN1980126A (en) * | 2005-12-08 | 2007-06-13 | 上海盛大网络发展有限公司 | Method for realizing picture identifying code |
| CN101064601A (en) * | 2006-04-26 | 2007-10-31 | 资通电脑股份有限公司 | Graphical Text Authentication Method |
| CN101179381A (en) * | 2006-11-07 | 2008-05-14 | 阿里巴巴公司 | Method and device for validating information |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104468101A (en) * | 2013-09-12 | 2015-03-25 | 深圳市腾讯计算机系统有限公司 | User identity authentication method and device and authentication service system |
| CN110009488A (en) * | 2019-04-12 | 2019-07-12 | 深圳乐信软件技术有限公司 | Order processing method, apparatus, equipment and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| TW201233116A (en) | 2012-08-01 |
| TWI426764B (en) | 2014-02-11 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8745729B2 (en) | Preventing abuse of services through infrastructure incompatibility | |
| US10740411B2 (en) | Determining repeat website users via browser uniqueness tracking | |
| CN102893287B (en) | Method and apparatus for mask-based challenge-response testing | |
| EP2410450A1 (en) | Method for providing a challenge based on a content | |
| US20090113294A1 (en) | Progressive captcha | |
| US20120192266A1 (en) | Mask Based Challenge Response Test | |
| CN101261669A (en) | A method for visual validation system based on mouse operation | |
| CN104348617A (en) | Verification code processing method and device, and terminal and server | |
| Gutub et al. | Practicality analysis of utilizing text-based CAPTCHA vs. graphic-based CAPTCHA authentication | |
| CN104852916A (en) | Social engineering-based webpage verification code recognition method and system | |
| CN107967422A (en) | One kind verification implementation method and electric terminal | |
| CN105681344A (en) | Verification code recognition system and method | |
| US20130191641A1 (en) | Captcha (completely automated public test to tell computers and humans apart) data generation methods and related data management systems and computer program products thereof | |
| CN107742068A (en) | A multi-source implicit identity authentication system and method for smart devices | |
| CN117313067A (en) | Verification code generation verification method and device, electronic equipment and storage medium | |
| CN117541379A (en) | Information self-certification method and device, electronic equipment and medium | |
| Chiasson | Usable authentication and click-based graphical passwords | |
| CN103457908B (en) | Verification methods combining characters and styles | |
| CN102708112A (en) | Method for randomly generating verification graph and question set | |
| CN104935436A (en) | User verification method and user verification system | |
| JP7227444B2 (en) | Access authentication method using random dot pattern CAPTCHA | |
| TW201228326A (en) | Method for generating dynamic authimage by means of utilizing character arrangement | |
| CN110543754A (en) | memory, verification code implementation method, device and equipment | |
| Jin et al. | Ar captcha: Recognizing robot by augmented reality | |
| EP3619890B1 (en) | Systems and methods for distinguishing among human users and software robots |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| REG | Reference to a national code |
Ref country code: HK Ref legal event code: DE Ref document number: 1171534 Country of ref document: HK |
|
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20121003 |