CN105681344A - Verification code recognition system and method - Google Patents
Verification code recognition system and method Download PDFInfo
- Publication number
- CN105681344A CN105681344A CN201610137671.1A CN201610137671A CN105681344A CN 105681344 A CN105681344 A CN 105681344A CN 201610137671 A CN201610137671 A CN 201610137671A CN 105681344 A CN105681344 A CN 105681344A
- Authority
- CN
- China
- Prior art keywords
- verification code
- verification
- module
- code
- database
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000012795 verification Methods 0.000 title claims abstract description 133
- 238000000034 method Methods 0.000 title claims abstract description 16
- 238000004364 calculation method Methods 0.000 claims description 6
- 238000012545 processing Methods 0.000 claims description 3
- 238000010200 validation analysis Methods 0.000 claims 4
- 238000012360 testing method Methods 0.000 abstract description 11
- 238000012015 optical character recognition Methods 0.000 description 13
- 238000005516 engineering process Methods 0.000 description 4
- 230000006399 behavior Effects 0.000 description 3
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000005336 cracking Methods 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 238000007781 pre-processing Methods 0.000 description 1
- 238000000682 scanning probe acoustic microscopy Methods 0.000 description 1
- 238000000926 separation method Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/36—User authentication by graphic or iconic representation
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2133—Verifying human interaction, e.g., Captcha
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- General Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Computing Systems (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The invention discloses a verification code recognition system, which comprises a third party verification code module, a verification code adapter module, an OCR automatic recognition engine module and a manual assistant recognition subsystem module. In addition, the invention further discloses a verification code recognition method. According to the verification code recognition system and the verification code recognition method, OCR automatic verification code recognition is provided, and a subsystem for manual assistant recognition is provided, the recognition rate of verification codes is greatly increased, and the problem that the automatic test process cannot be proceeded due to the existence of the verification codes is solved.
Description
Technical Field
The invention relates to the technical field of computers, in particular to a verification code identification system and a verification code identification method.
Background
CAPTCHA (CAPTCHA) is an abbreviation for "comprehensive automatic public trust firmest computers and human wizard platform", a common fully automated program that distinguishes whether a user is a computer or a human. It is possible to prevent: the password is cracked maliciously, the ticket is swiped, the forum is watered, a hacker is effectively prevented from carrying out continuous login attempts on a certain specific registered user in a mode of violently cracking a specific program, actually, the verification code is used in a mode that many websites pass at present, and the function is realized in a simpler mode. This question can be generated and evaluated by a computer, but must only be solved by a human. Since the computer is unable to solve the CAPTCHA's problem, the user who answers the question may be considered a human.
Authentication codes have been developed from the simple generation of random numbers into pictures, to the addition of distortions, to the addition of interferences, and to more complex problems, even to the development of graphics. In order to better identify the verification code, the verification code is shielded by modifying the server-side code, but the modification authority of the server-side code needs to be possessed, and the security risk is brought if the verification code is shielded on a production system. Furthermore, the universal verification code is added by modifying the server-side code, so that the modification authority of the server-side code is also required, and if an attacker detects the universal verification code, the verification code loses effect. Therefore, in the face of various complicated verification codes, how to pass the verification codes becomes a key point in the automated testing.
Disclosure of Invention
The invention aims to overcome the defects of the prior art, provides a verification code identification system and a verification code identification method, and solves the problems that an automatic flow cannot automatically identify a verification code in an automatic test or other occasions needing verification code identification and the like.
In order to achieve the aim, the invention provides a verification code recognition system which comprises a third-party verification code module, a verification code adapter module, an OCR automatic recognition engine module and a manual auxiliary recognition subsystem module; the third party verification code module refers to a verification code to be identified by a third party; the verification code adapter module comprises a verification code information database, an acquisition adapter and a verification adapter; the OCR automatic recognition engine module is used for recognizing the preprocessed picture and returning a recognition result; the manual auxiliary identification subsystem module comprises a verification code display module, a verification code input module and a verification result display module.
Further, the third party authentication code includes a plurality of different types, such as character pictures, arithmetic calculations, question answering, click by prompt, drag by prompt.
Further, the acquisition adapter converts different verification codes into a uniform interface to be provided for the back program, and the back program performs further processing after acquiring the verification codes; and submitting the identified verification code to a third-party website or application for verification through a verification adapter by using a uniform interface, and returning a verification result.
Further, the assisted identification subsystem can be a dedicated client, or a web application, or embedded in other applications requiring authentication codes, or a mini-game based on authentication code identification.
In addition, the invention also provides a verification code identification method, which comprises the following steps:
s1. analyzing the third party verification code, identifying the display position of the verification code, the input position of the verification code and the position of the submit button, and storing in the database;
s2, intercepting the verification code to be verified, judging whether the verification code exists in the database, and returning to s1 if the verification code does not exist in the database; if the verification code is in the database, calling an OCR automatic recognition engine to recognize the verification code;
s3. if OCR can not be identified automatically, calling a manual auxiliary identification subsystem to identify the verification code in the database;
s4. the identified verification code results are backfilled and exposed to a third party website or application.
And further, calling a manual auxiliary identification subsystem to identify the verification codes in the database, wherein a large number of professional identification personnel, ordinary users or game players identify the verification codes, and backfilling identification results into a verification code input box or converting user operation behaviors into an action instruction operation interface and submitting verification.
The technical scheme of the invention has the following beneficial effects:
the invention provides an OCR automatic identification verification code and a manual auxiliary identification subsystem, thereby greatly improving the identification rate of the verification code and ensuring that the automatic test process can not be carried out due to the existence of the verification code.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.
FIG. 1 is a system architecture diagram of an embodiment of the present invention;
fig. 2 is a flow chart of a method of an embodiment of the present invention.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Currently, many websites use passcode technology on the pages that users log in, submit information, etc. to log in and input. The verification code technology can effectively prevent malicious users from abusing the website, so that the website can effectively avoid the problems of user information theft, advertisement SPAM and the like. But at the same time, the use of the verification code technology makes the automatic test face a great difficulty — because of the existence of the verification code, the traditional ' recording ' -playback ' tool can not identify the verification code and fails. The invention adopts full automation and combines with manual assistance to identify the verification code and return to the flow of the automatic test, so that the flow is not interrupted by the verification code any more and can not be executed continuously.
The verification code identification system provided by the invention solves the problems that an automatic flow cannot automatically identify the verification code in an automatic test or other occasions needing verification code identification and the like. The system architecture is shown in fig. 1. The system comprises a third party verification code module, a verification code adapter module, an OCR automatic recognition engine module and a manual auxiliary recognition subsystem module.
1) Third party verification code module
The module is a verification code to be identified by a third party, and the verification code can be of various types, such as character pictures, arithmetic calculation, question answering, clicking according to prompts, dragging according to prompts and the like.
2) Verification code adapter module
The module comprises a verification code information database, an acquisition adapter, a verification adapter and the like. Converting different verification codes into a uniform interface through the acquisition adapter and providing the uniform interface for a back program, and further processing the verification codes obtained by the back program; and submitting the identified verification code to a third-party website or application for verification through a verification adapter by using a uniform interface, and returning a verification result.
3) OCR automatic recognition engine module
After preprocessing such as interference removal, character separation, rotation and the like is carried out on simple verification codes such as simple character pictures and simple arithmetic calculation, the preprocessed pictures are recognized by using an OCR technology, and a recognition result is returned.
4) Artificial auxiliary identification subsystem module
The subsystem comprises a verification code display module, a verification code input module and a verification result display module, and the system can be a special client, or a web application, or embedded into other applications needing the verification code, or a mini-game based on the verification code identification. After the user manually identifies the verification code, filling text content according to the type of the verification code, if the text type is the verification code; filling the calculation result in the calculation type; if the click type is adopted, clicking an interface and recording the click coordinates; dragging the interface component and recording the initial coordinate of dragging in the dragging type; and finally, the behavior of the user is transmitted back to the verification adapter.
Fig. 2 shows a flowchart of a method according to an embodiment of the present invention, which includes the following steps:
1) and manually analyzing the information of the identifying codes to be identified in the third-party website and the application, including the types of the identifying codes, whether OCR (optical character recognition) can be adopted for automatic identification, the display positions of the identifying codes, the input positions of the identifying codes, the positions of the submitting buttons and the like, and storing the information into a database.
2) When the automatic test is started, the verification code information which is manually analyzed is obtained from the database according to the website and the application information, and the verification code is intercepted from the webpage and the application interface according to the information.
3) And if the OCR automatic recognition is applicable, calling an OCR automatic recognition engine to recognize the verification code, backfilling the recognition result into a verification code input box, and submitting the verification.
4) If the OCR is not suitable for automatic recognition, the verification code is issued to a distributed manual auxiliary recognition subsystem, a large number of professional recognition personnel, ordinary users or game players recognize the verification code, the recognition result is backfilled into a verification code input box or the user operation behavior is converted into an action instruction operation interface, and verification is submitted.
5) If the verification passes, return to the automated testing continues with the following flow.
6) And if the verification is not passed, repeating the second step.
In addition, the time for waiting for the tester to manually input the verification code is reserved in the automatic test script, and if a large number of tests are required, the identification and input actions completed by the tester are incompletable tasks.
The above embodiments of the present invention are described in detail, and the principle and the implementation of the present invention are explained by applying specific embodiments, and the above description of the embodiments is only used to help understanding the method of the present invention and the core idea thereof; meanwhile, for a person skilled in the art, according to the idea of the present invention, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present invention.
Claims (6)
1. A verification code recognition system is characterized by comprising a third-party verification code module, a verification code adapter module, an OCR automatic recognition engine module and a manual auxiliary recognition subsystem module; wherein,
the third party verification code module is a verification code to be identified by a third party;
the verification code adapter module comprises a verification code information database, an acquisition adapter and a verification adapter;
the OCR automatic recognition engine module is used for recognizing the preprocessed picture and returning a recognition result;
the manual auxiliary identification subsystem module comprises a verification code display module, a verification code input module and a verification result display module.
2. The system of claim 1, wherein the third party authentication code comprises a plurality of different types, such as a character picture, an arithmetic calculation, a question and answer, a click by prompt, a drag by prompt.
3. The system of claim 1, wherein the acquisition adapter converts different validation codes into a unified interface for the back-end program, and the back-end program performs further processing after acquiring the validation codes; and submitting the identified verification code to a third-party website or application for verification through a verification adapter by using a uniform interface, and returning a verification result.
4. The system of claim 1, wherein the human-assisted identification subsystem can be a dedicated client, or a web application, or embedded in other applications requiring authentication codes, or a mini-game based on authentication code identification.
5. A verification code identification method is characterized in that the method comprises the following processes:
s1. analyzing the third party verification code, identifying the display position of the verification code, the input position of the verification code and the position of the submit button, and storing in the database;
s2, intercepting the verification code to be verified, judging whether the verification code exists in the database, and returning to s1 if the verification code does not exist in the database; if the verification code is in the database, calling an OCR automatic recognition engine to recognize the verification code;
s3. if OCR can not be identified automatically, calling a manual auxiliary identification subsystem to identify the verification code in the database;
s4. the identified verification code results are backfilled and exposed to a third party website or application.
6. The method of claim 5, wherein the invoking of the human-assisted recognition subsystem recognizes the validation code in the database by a plurality of professional recognizers, ordinary users or game players, and backfills the recognition result into a validation code input box or converts the user operation behavior into an action instruction operation interface and submits the verification.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610137671.1A CN105681344A (en) | 2016-03-11 | 2016-03-11 | Verification code recognition system and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610137671.1A CN105681344A (en) | 2016-03-11 | 2016-03-11 | Verification code recognition system and method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN105681344A true CN105681344A (en) | 2016-06-15 |
Family
ID=56308137
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610137671.1A Pending CN105681344A (en) | 2016-03-11 | 2016-03-11 | Verification code recognition system and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105681344A (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109032955A (en) * | 2018-09-07 | 2018-12-18 | 郑州云海信息技术有限公司 | A kind of UI automated testing method, device, equipment and readable storage medium storing program for executing |
| CN109086591A (en) * | 2018-06-11 | 2018-12-25 | 平安科技（深圳）有限公司 | Method for recognizing verification code, device, computer equipment and storage medium |
| CN109376524A (en) * | 2018-09-29 | 2019-02-22 | 浙江万朋教育科技股份有限公司 | The method of picture validation code on automatic identification remote machine |
| CN109635549A (en) * | 2018-12-13 | 2019-04-16 | 郑州云海信息技术有限公司 | A kind of method and device verified in automatic test |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101807192A (en) * | 2009-12-31 | 2010-08-18 | 优视科技有限公司 | Webpage optical character recognition processing method used for mobile communication equipment terminal |
| CN101944177A (en) * | 2010-08-30 | 2011-01-12 | 深圳市多赢软件技术有限公司 | Method for recognizing verification code |
| CN102143016A (en) * | 2010-11-25 | 2011-08-03 | 中国移动（深圳）有限公司 | Website automation test method and system |
| US20130259314A1 (en) * | 2012-03-30 | 2013-10-03 | Xerox Corporation | Methods and systems for enhancing the performance of automated license plate recognition applications utilizing multiple results |
| CN105260318A (en) * | 2015-11-25 | 2016-01-20 | 飞天诚信科技股份有限公司 | Automatic testing method and device based on web pages |
| KR101683574B1 (en) * | 2015-11-23 | 2016-12-07 | 연세대학교 산학협력단 | Captcha System using Motion Sensor and Method thereof |
-
2016
- 2016-03-11 CN CN201610137671.1A patent/CN105681344A/en active Pending
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101807192A (en) * | 2009-12-31 | 2010-08-18 | 优视科技有限公司 | Webpage optical character recognition processing method used for mobile communication equipment terminal |
| CN101944177A (en) * | 2010-08-30 | 2011-01-12 | 深圳市多赢软件技术有限公司 | Method for recognizing verification code |
| CN102143016A (en) * | 2010-11-25 | 2011-08-03 | 中国移动（深圳）有限公司 | Website automation test method and system |
| US20130259314A1 (en) * | 2012-03-30 | 2013-10-03 | Xerox Corporation | Methods and systems for enhancing the performance of automated license plate recognition applications utilizing multiple results |
| KR101683574B1 (en) * | 2015-11-23 | 2016-12-07 | 연세대학교 산학협력단 | Captcha System using Motion Sensor and Method thereof |
| CN105260318A (en) * | 2015-11-25 | 2016-01-20 | 飞天诚信科技股份有限公司 | Automatic testing method and device based on web pages |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109086591A (en) * | 2018-06-11 | 2018-12-25 | 平安科技（深圳）有限公司 | Method for recognizing verification code, device, computer equipment and storage medium |
| WO2019237549A1 (en) * | 2018-06-11 | 2019-12-19 | 平安科技（深圳）有限公司 | Verification code recognition method and apparatus, computer device, and storage medium |
| CN109032955A (en) * | 2018-09-07 | 2018-12-18 | 郑州云海信息技术有限公司 | A kind of UI automated testing method, device, equipment and readable storage medium storing program for executing |
| CN109376524A (en) * | 2018-09-29 | 2019-02-22 | 浙江万朋教育科技股份有限公司 | The method of picture validation code on automatic identification remote machine |
| CN109635549A (en) * | 2018-12-13 | 2019-04-16 | 郑州云海信息技术有限公司 | A kind of method and device verified in automatic test |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10657243B2 (en) | Variation analysis-based public turing test to tell computers and humans apart | |
| EP2892198B1 (en) | Detecting and breaking captcha automation scripts and preventing image scraping | |
| CA2753694C (en) | System and methods for automatically accessing a web site on behalf of a client | |
| CN106453209B (en) | Identity verification method and device | |
| CN104657639B (en) | A kind of method of testing and system of operating system identity authentication scheme | |
| CN108881126B (en) | Method, device and system for verifying verification code, storage medium and computer terminal | |
| CN105718783B (en) | Verification code interaction method and device, client and server | |
| CN105681344A (en) | Verification code recognition system and method | |
| CN101261669A (en) | A method for visual validation system based on mouse operation | |
| CN112883359B (en) | Dynamic verification method and system | |
| CN112187702A (en) | Method and device for verifying client | |
| CN112100598A (en) | Method and device for identifying login authentication through mouse and keyboard knocking rhythm | |
| CN106778151A (en) | Method for identifying ID and device based on person's handwriting | |
| CN111563746A (en) | Method, device, electronic equipment and medium for user identity authentication | |
| CN107358088A (en) | Verification method and system based on clock | |
| CN109299592B (en) | Man-machine behavior characteristic boundary construction method, system, server and storage medium | |
| CN113190310B (en) | Verification code design method based on random position object semantic recognition | |
| CN109413004B (en) | Verification method, device and equipment | |
| CN110795706B (en) | Hash-based verification method, equipment, storage medium and device | |
| CN106888207A (en) | Authentication method, system and SIM | |
| CN111125672A (en) | Method and device for generating image verification code | |
| US20240012896A1 (en) | System and method for classifying human and non-human traffice using behaviour authenticity | |
| Chithra et al. | Scanning-to-speech challenge-response authentication test for visually impaired | |
| CN112257053B (en) | Image verification code generation method and system based on general disturbance countermeasure | |
| TWI426764B (en) | Randomly generate methods for verifying graphics and questionnaires |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20160615 |
|
| WD01 | Invention patent application deemed withdrawn after publication |