JP2012173953A - Authentication system, authentication method, authentication program, and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a visual anti-robot test that can be easily perceived by a human being while making it impossible to cause a nuisance.SOLUTION: A server comprises: an authentication section for performing authentication based on information received from a client; an authentication image generation section for generating an authentication image; an authentication image presentation section for presenting the authentication image generated by the authentication image generation section to the client; a communication section for communicating with the client; a service provision section for providing service to the client depending on a service request instruction received from the client if the authentication is successful in the authentication section; and a control section for performing various controls of the server including the authentication section, the authentication image generation section, the authentication image presentation section, the communication section, and the service provision section.

Description

  The present invention relates to an authentication system, and more particularly to an authentication system on a computer network for authenticating that a computer user is a human being.

  Electronic bulletin boards on the Internet, so-called blogs, Wiki, and other user-participating content generation systems have come to be widely used. In such a system, a user can not only browse information but also can post information freely by simply performing user registration. Also, in commercial sites such as news sites and shopping sites, an increasing number of sites allow users to freely comment on each content. However, by using a computer program called a “bot” that exploits these features and automatically communicates with the server, it acquires indiscriminate and mass accounts of such sites, Annoying acts such as posting advertisements that are completely unrelated to the content are also increasing. Also, a free e-mail address acquisition service can automatically acquire a large number of addresses illegally using the “bot” and send indiscriminate spam mails to unspecified majority, It is often used for various nuisances on the Internet, such as for the purpose of performing nuisances for user-participating content generation systems.

In order to prevent such annoying behavior, a system that discriminates whether the user is an actual human operation or the above-mentioned “bot” operation and allows posting only when the user is determined to be a human. Has been devised. Such a system is generally called an anti-robot test, which is identifiable to humans, but presents as a test program information that is indistinguishable or difficult with current computer programs, and only allows posting if it is identified. System. Specifically, the above-mentioned program called “bot” analyzes messages between the client and the server that are mainly exchanged with text information, and automatically generates a spoofed message from the client side. Whether or not to allow the provision of services based on the result of sending messages from the client side, providing information that is considered to be difficult to interpret except text information presented by the server side and other than actual humans It is a system that decides.
A visual anti-robot that presents an image containing a plurality of rasterized characters and symbols as information other than such character information and inputs the result of reading the characters and symbol strings in the image into a separately prepared input form Tests are often used. This is because it is easy for humans to read characters in an image, but it is difficult to do this with a computer program, or the benefits obtained from the above-mentioned nuisance and It is a system that utilizes the fact that the cost to execute is not commensurate.

Here, a general visual anti-robot test will be described. For example, in the example of FIG. 12, humans can read “NkpGJN”. However, in order for a computer program to recognize characters and symbols rasterized as an image in this way, a special character recognition function such as OCR is not required. Moreover, it is difficult to recognize characters or symbols that are distorted or obscured as shown in FIG. That is, if the client side is a so-called “bot”, it must have at least an OCR function, and even if it has an OCR function, it is distorted or obscured as shown in FIG. Since it is difficult to read a character or symbol as a character string from an image, an OCR that has been subjected to more advanced learning is required. Since this is technically very difficult and costly, it is practically difficult to implement such things indiscriminately, in large quantities and at low cost using a computer program. Thus, the conventional visual anti-robot test system distinguishes between a human and an automated computer program. However, it is also true that such protection is weakening year by year as character recognition technology in images by computers such as OCR advances.
Patent Document 1 discloses an authentication apparatus that prevents an annoying act by a bot by superimposing or rotating noise on a problem image as a processed image or performing different image processing.

Due to recent improvements in image recognition technology using computers, it is technically easy to deceive and break through visual anti-robot test systems that use characters in images, which also reduces costs and weakens the system. I can't deny it.
The prior art disclosed in Patent Document 1 is a method of adding very large distortion and noise to an image including characters for the purpose of making the character recognition accuracy in the image by a computer more difficult. It has become very difficult to decipher this, and there is a problem that service usability is reduced.
The present invention has been made in view of such a problem, and even if a “bot” having a function of recognizing characters in an image is used, it is impossible to perform an annoying act and it is easy for human beings. The aim is to provide a recognizable visual anti-robot test.

In order to solve such a problem, the present invention provides an information processing apparatus that requests a service as a client and a user who operates the information processing apparatus when a service request is generated from the information processing apparatus. Is transmitted to the information processing apparatus, and when the answer returned from the information processing apparatus matches the answer requested by the test program, the information processing apparatus is A server that authenticates that the user who operates is a human, and the server converts, as the test program, part or all of an object having a memory color stored by a human into another color. The information processing apparatus transmits the processed image to the information processing apparatus, and the information processing apparatus replies to the server the answer indicating what the default color is for the color converted in the image. And wherein the door.
The system includes a server and an information processing device connected to a network. The server has a test program for determining whether or not the user operating the information processing apparatus is a human. Although this test program can be judged by a human, it is difficult for a computer to discriminate, and even if it can be discriminated, it takes time and cost. Accordingly, when there is an information processing apparatus that requests a service, a test program is transmitted to the information processing apparatus, and it is determined whether or not the user who operates the information processing apparatus is a human based on the returned response content. For example, as a test program, an image obtained by converting a part or all of an object having a memory color stored by a human into a color different from the memory color is used. Accordingly, it is possible to accurately and quickly determine whether or not the user who operates the information processing apparatus is a human by a simple test program.

According to a second aspect of the present invention, the server determines whether or not the answer received from the information processing apparatus matches the answer requested by the test program, and when the determination result matches the answer, An authentication unit that authenticates that the information processing apparatus is operated by a human, an authentication image generation unit that generates an image obtained by converting a part or all of the colors of the object into another color, and the authentication An authentication image presentation unit that presents the authentication image generated by the image generation unit to the information processing device, a communication unit that communicates with the information processing device, and the authentication unit that causes the information processing device to be A service providing unit that provides a service to the information processing apparatus in response to a service request instruction received from the information processing apparatus, the authentication unit, and the authentication image; Generating unit, the authentication image presenting unit, the communication unit, and characterized in that it comprises a control unit for performing various control of the server, including the service provider.
The server according to the present invention generates an authentication image as a test program for an information processing apparatus having a service request in order to determine whether or not a user operating the information processing apparatus is a human being. And transmitted to the information processing apparatus via the communication unit. The information processing apparatus that has received the authentication image returns an answer to the question to the server, and the received authentication unit determines whether the answer matches the answer requested by the test program. If they match, it authenticates that the user operating the information processing apparatus is a human being and provides the service from the service providing unit. Accordingly, the server can accurately and quickly determine whether or not the user who operates the information processing apparatus having the service request is a human.

According to a third aspect of the present invention, the information processing apparatus inputs characters as to what color is a predetermined color with respect to the color converted in the authentication image, and sends it back to the server. .
In order for the information processing apparatus to determine a color and answer the name of the color with characters, it is necessary to store a name associated with each color. However, the name of the color is not simply called red, blue, or green, but may be expressed by other names such as skin color or light blue. Although it is relatively easy for a human to express the memory color in this way and express it in characters, an information processing apparatus is very difficult. Thereby, it is possible to make a difference in the judgment power between the human and the information processing apparatus.
According to a fourth aspect of the present invention, the information processing apparatus selects, from among a plurality of color names, a predetermined color for the color converted in the authentication image, and returns the selected color to the server. It is characterized by doing.
There are many methods that make the information processing device difficult to understand, but if it is too complicated, the operability will be hindered even if the operator is a human. Therefore, in the present invention, the number of predetermined colors is selected from a plurality of color names. Thereby, it is possible to determine whether or not the user operating the information processing apparatus is a human being without impairing operability.

According to a fifth aspect of the present invention, the information processing apparatus determines, from among color patches of a plurality of colors including one correct answer, how many colors the predetermined color is for the color converted in the authentication image. It selects and returns to the said server, It is characterized by the above-mentioned.
According to the present invention, it is possible to answer using only a pointing device such as a mouse without inputting a key, thereby reducing the load on the user without impairing the function of discriminating between “bots” and humans. Is possible.
According to a sixth aspect of the present invention, the information processing apparatus clicks a color converted in the authentication image by using a pointing device, and answers to the server what the default color is. It is characterized by replying.
In order to recognize objects such as faces, sky, and grass in an image with a computer program, the colors of these objects play an important role. In the present invention, the colors of these areas are different from the original colors. Therefore, it is very difficult for a computer program such as “bot” to recognize these objects as faces, sky, grass, etc., and it is more difficult to detect these areas. Furthermore, since it is necessary to answer with a color name, it is necessary for “bot” to prepare data associated with an object called a face and the color name of the object in advance and refer to it. Therefore, it is more difficult for “bots” to pass this test. In addition, since such processing requires a large-capacity memory and a high-speed CPU, the cost for implementing this inevitably increases, so the implementation of nuisance using a bot becomes impractical. .

According to a seventh aspect of the present invention, as the test program, the server converts a part or the whole color of an object having a memory color stored by a human into another color, and further rotates the converted image to obtain the information. The information processing apparatus transmits the information to the processing apparatus, and the information processing apparatus returns a response to the server by answering what the default color is for the color converted in the image.
The user clicks on a certain part as an unnatural area, and further fills in the originally desired color in the answer column and presses the send button. For example, a specific object such as the sky has a very high probability that the relative position in the image exists at the top of the image, for example, when it is empty. If so, the probability of passing the test can be improved to some extent, but in the present invention, such a guess is made difficult by rotating and displaying the test image.
An authentication method according to an authentication system including an information processing apparatus and a server, wherein the information processing apparatus requests a service as a client, and the server receives a service request from the information processing apparatus. If it occurs, a test program for determining whether or not a user operating the information processing apparatus is a human being is transmitted to the information processing apparatus, and a response returned from the information processing apparatus is the test program Authenticating that the user operating the information processing apparatus is a human when the answer matches the requested answer, the server has a memory color stored by the human as the test program An image obtained by converting a part or all of the colors of the object into another color is transmitted to the information processing apparatus, and the information processing apparatus converts the color converted in the image The default color for is characterized in that the reply to the server to answer how many colors.
There exists an effect similar to Claim 1.

A ninth aspect is characterized in that the authentication method according to the eighth aspect is programmed so as to be controlled by a computer.
By programming the authentication method of the present invention according to an OS that can be controlled by a computer, any computer equipped with the OS can be controlled by the same processing method.
A tenth aspect is characterized in that the authentication program according to the ninth aspect is recorded in a computer-readable format.
By recording the authentication program on a recording medium in a computer-readable format, the program can be operated anywhere by carrying the recording medium.

  According to the present invention, a computer uses an image obtained by converting a color corresponding to a memory color of an object having a memory color into another color, and allows the user to answer a desired color in the converted memory color area, thereby allowing the computer to In services on the network, it is possible to reduce the burden on human users and make it more difficult to perform nuisances using computer programs that automatically communicate with the server.

It is a figure which shows the operation | use form of the authentication system (visual anti-robot system) which concerns on the 1st Embodiment of this invention. It is a block diagram which shows the hardware constitutions of the client and server which concern on this embodiment. It is a figure explaining the functional structure of the authentication system which concerns on this embodiment. It is a flowchart (the 1) explaining operation | movement of the client server system comprised from the server and client of this invention. It is a flowchart (the 2) explaining operation | movement of the client server system comprised from the server and client of this invention. It is a flowchart (the 3) explaining operation | movement of the client server system comprised from the server and client of this invention. It is a figure explaining the authentication system which concerns on the 1st Embodiment of this invention. It is a figure explaining the authentication system which concerns on the 2nd Embodiment of this invention. It is a figure explaining the authentication system which concerns on the 3rd Embodiment of this invention. It is a figure explaining the authentication system which concerns on the 4th Embodiment of this invention. It is a figure explaining the authentication system which concerns on the 5th Embodiment of this invention. It is a figure showing the character and symbol which were rasterized.

  Hereinafter, the present invention will be described in detail with reference to embodiments shown in the drawings. However, the components, types, combinations, shapes, relative arrangements, and the like described in this embodiment are merely illustrative examples and not intended to limit the scope of the present invention only unless otherwise specified. .

  FIG. 1 is a diagram showing an operation mode of an authentication system (visual anti-robot system) according to an embodiment of the present invention. The authentication system according to the present invention includes a client (information processing apparatus) 100 that requests a service, and a test for determining whether a user who operates the client 100 is a human when a service request is generated from the client 100. A server 200 that transmits a program to the client 100 and authenticates that the user operating the client 100 is a human when an answer returned from the client 100 matches an answer requested by the test program; and the client 100 and the server 200, and the server 200 transmits, as a test program, an image obtained by converting a part or all of an object having a memory color stored by a person into another color as a test program to the client 100. And the client 100 is converted in the image The default color to answer whether it is what color to reply to the server 200 to the color.

As shown in FIG. 1, the authentication system according to the present embodiment includes a plurality of clients 100 that require authentication and a server 200 as an authentication device. The authentication system according to the present embodiment constitutes a general visual anti-robot test system that determines whether a user is an actual person or an automated computer program. As shown in FIG. 1, a plurality of clients 100 and server devices 200 according to the present embodiment are connected via a network 150 such as the Internet.
That is, the system includes a server 200 and a client 100 connected to the network 150. The server 200 prepares a test program for determining whether or not the client 100 is a human being. Although this test program can be discriminated by a human, it is difficult for a computer to discriminate, and even if it can be discriminated, it takes time and cost. Therefore, when there is a client 100 that requests a service, a test program is transmitted to the client 100, and it is determined whether or not the client 100 is a human being based on the returned response content. For example, as a test program, an image obtained by converting a part or all of an object having a memory color stored by a human into a color different from the memory color is used. Thereby, it is possible to accurately and quickly determine whether or not the client 100 is a human by a simple test program.

FIG. 2 is a block diagram illustrating a hardware configuration of the client and the server according to the present embodiment. As illustrated in FIG. 2, the client 100 and the server 200 according to the present embodiment have the same configuration as a general information processing apparatus. That is, the client 100 and the server 200 according to the present embodiment are connected to the CPU 10, RAM 20, ROM 30, HDD 40, and I / F 50 via the bus 80. Further, the LCD 60 and the operation unit 70 are connected to the I / F 50.
The CPU 10 is a calculation means and controls the operation of the entire apparatus. The RAM 20 is a volatile storage medium capable of reading and writing information at high speed, and is used as a work area when the CPU 10 processes information. The ROM 30 is a read-only nonvolatile storage medium and stores a program such as firmware. The HDD 40 is a nonvolatile storage medium that can read and write information, and stores an OS, various control programs, application programs, and the like. The I / F 50 connects and controls the bus 80 and various hardware and networks. The LCD 60 is a visual user interface for the user to check the status. The operation unit 70 is a user interface such as a keyboard and a mouse for the user to input information to the apparatus.

In such a hardware configuration, a program stored in a storage medium such as the ROM 30, the HDD 40, or an optical disk (not shown) is read into the RAM 20, and operates according to the control of the CPU 10, thereby configuring a software control unit. A functional block that realizes the functions of the client 100 and the server 200 according to the present embodiment is configured by a combination of the software control unit configured as described above and hardware. For the server 200, user interfaces such as the LCD 60 and the operation unit 70 can be omitted.
With the system configuration described above, the authentication system determines whether the user of the client 100 is an actual person or an automated computer program. Communication between the client 100 and the server 200 is performed via HTTPS, which is HTTP or encrypted HTTP. The server 200 transmits information in the HTML format to the client 100 in response to a request from the client 100. Note that the communication protocol used for communication between the client 100 and the server 200 is not limited to the above HTTP and HTTPS.

FIG. 3 is a diagram illustrating a functional configuration of the authentication system according to the present embodiment. As illustrated in FIG. 3, the client 100 includes an input unit 110, a display unit 120, a communication unit 130, and a control unit 140. The server 200 includes an authentication unit 210, an authentication image generation unit 220, an authentication image presentation unit 230, a communication unit 240, a service providing unit 250, a control unit 260, and the like.
First, each functional unit included in the client 100 will be described. The input unit 110 inputs various instructions from the user of the client 100. The input unit 110 is realized by the operation unit 70 illustrated in FIG. The information input to the input unit 110 is, for example, a service request instruction for receiving service provision such as a Web service from the server 200. The display unit 120 is configured to display the operation state and the like of the client 100, and is realized by the I / F 50 and the LCD 60 illustrated in FIG. The communication unit 130 is an interface unit for performing communication with the server 200, and is realized by the I / F 50 shown in FIG. The control unit 140 performs various controls of the client 100 including the input unit 110, the display unit 120, and the communication unit 130 described above. The control unit 140 is configured by a program loaded in the RAM 20 illustrated in FIG. 2 operating according to the control of the CPU 10.

Next, each functional unit included in the server 200 will be described.
The server 200 determines whether or not the information received from the client 100 matches the answer requested by the test program, and authenticates that the client 100 is operated by a human if the determination result matches the answer. An authentication unit 210 that performs authentication, an authentication image generation unit 220 that generates an image obtained by converting some or all of the colors of the object into another color, and an authentication image generated by the authentication image generation unit 220 Received from the client 100 when the authentication image presentation unit 230 that presents the image to the client 100, the communication unit 240 that communicates with the client 100, and the authentication unit 210 authenticate that the client 100 is operated by a human being The service providing unit 25 that provides the client 100 with a service in response to the service request instruction. And a control unit 260 that performs various controls of the server 200 including the authentication unit 210, the authentication image generation unit 220, the authentication image presentation unit 230, the communication unit 240, and the service providing unit 250. Yes.

  That is, the authentication unit 210 performs authentication based on information received from the client 100. For example, it is determined (authenticated) whether the user of the client 100 is an actual person or an automated computer program. Furthermore, user authentication of the client 100 is performed based on the user name, password, etc. received from the client 100. The authentication unit 210 is configured by a program loaded in the RAM 20 shown in FIG. 2 operating according to the control of the CPU 10. The authentication image generation unit 220 generates an authentication image according to the present invention. An example of the generated authentication image will be described later. The authentication image generation unit 220 is configured by a program loaded in the RAM 20 shown in FIG. The authentication image presentation unit 230 presents the authentication image generated by the authentication image generation unit 220 to the client 100. Specifically, display information for displaying the authentication image on the display unit of the client 100 is generated. The authentication image presentation unit 230 is configured by a program loaded on the RAM 20 shown in FIG. The communication unit 240 is an interface unit for performing communication with the client 100. The communication unit 240 is realized by the I / F 50 in FIG. The service providing unit 250 provides a service to the client 100 in response to a service request instruction received from the client 100 when the authentication by the authentication unit 210 is successful. The service providing unit 250 is realized by an application configured by a program loaded in the RAM 20 illustrated in FIG. 2 operating according to the control of the CPU 10, and a recording medium such as the HDD 30 illustrated in FIG. The control unit 260 performs various controls of the server 200 including the authentication unit 210, the authentication image generation unit 220, the authentication image presentation unit 230, the communication unit 240, and the service providing unit 250 described above. The control unit 260 is configured by a program loaded in the RAM 20 shown in FIG. 2 operating according to the control of the CPU 10.

FIG. 4 is a flowchart for explaining the operation of a client-server system composed of a server and a client according to the present invention. Communication between the server and the client is performed via HTTP or https which is encrypted http, and information from the server is transmitted in the HTML format.
The user requests authentication from the server 200 via the client 100 (S1). The server 200 transmits a test program for determining whether or not the user is a human to the client 100 (S4). The user transmits an answer to the test program to the server 200 side (S2). Next, the server 200 determines whether or not the returned answer is an expected answer (S5). If it is an expected answer (YES in S5), a user authentication screen consisting of at least a user identification character string (user name) input form and a password input form is presented (S6) to authenticate the user. The user inputs a user name and a password here (S3). If the entered user name and password are those of a legitimate user (YES in S7), the server starts to actually provide the intended service, such as displaying a content posting form.

Further, the order of the anti-robot test and the user authentication may be reversed as shown in FIG. That is, the user requests authentication from the server 200 via the client 100 (S10). A user authentication screen consisting of at least a user identification character string (user name) input form and a password input form is presented (S13), prompting the user for authentication, and the user inputs the user name and password here. (S11). If the input user name and password are those of the authorized user (YES in S14), the server 200 transmits a test program for determining whether or not the user is a human to the client 100 ( S15). The user transmits an answer to the test program to the server 200 side (S12). Next, the server 200 determines whether the returned answer is an expected answer (S16). If it is an expected answer (YES in S16), the provision of the actually intended service such as displaying a content posting form is started.
Also, if the server 200 permits anonymous commenting, as shown in FIG. 6, only the visual anti-robot test is performed, and then a comment posting form is displayed to the user to post a comment. Prompt. That is, the user requests authentication from the server 200 via the client 100 (S20). The server 200 transmits a test program for determining whether or not the user is a human to the client 100 (S22). The user transmits an answer to the test program to the server 200 side (S21). Next, the server 200 determines whether or not the returned answer is an expected answer (S23). If it is an expected answer (YES in S23), the provision of the actually intended service such as displaying a content posting form is started.

FIG. 7 is a diagram for explaining an authentication system according to the first embodiment of the present invention. In the present embodiment, the server 200 transmits a test program to the client 100 and presents to the user a photographic image 4 including an object having a memory color such as the face 5 painted in gray in FIG. To do. An object having a memory color by humans is, for example, human skin, sky, grass, etc., and the corresponding memory colors are skin color, blue, and green, respectively. In the present embodiment, an image obtained by converting colors in the color gamut corresponding to these memory colors into a color far from the original memory color is used. That is, the image presented to the user in the present embodiment is an image in which the color of the human face 5 that should be the skin color is converted to a completely different color such as green. Although FIG. 7 is actually a color photographic image in which only the face portion is converted to green, it is a line drawing for the convenience of display, and only this region is painted in gray to clearly show the region of the face 5. An instruction to prompt the user to answer the original color name of the unnatural part is displayed together with such an image. The user answers the color name in the answer column 7 (in this case, skin color) and presses the send button 6. In the example of FIG. 7, since the human face portion is converted to green, it looks unnatural. Since the originally desirable color of this portion is skin color, the user answers skin color. When the test program detects the pressing event of the transmission button 6, the test program transmits the user's answer to the server 200. If the received answer is correct, the server 200 considers that the test has passed. If it does not pass, it may be determined that the user operating the client 100 is not a human and the process may not proceed to the next step, or the test program may be retransmitted. Even in the latter case, for example, if the user does not pass three times in succession, it is determined that the user is not a user who operates the client 100 and the next step is not allowed to proceed. To recognize objects such as faces, sky, and grass in an image with a computer program, the colors of these objects play an important role. In this embodiment, the colors of these areas are different from the original colors. Because it has been converted to color, it is very difficult for computer programs such as “bots” to recognize these objects as faces, sky, grass, etc. Furthermore, since it is necessary to answer with a color name, it is necessary for “bot” to prepare data associated with an object called a face and the color name of the object in advance and refer to it. Therefore, it is more difficult for “bots” to pass this test. In addition, since such processing requires a large-capacity memory and a high-speed CPU, the cost for implementing this inevitably increases, so the implementation of nuisance using a bot becomes impractical. .
In the present embodiment and the following embodiments, the description is given assuming that the image presented to the user is one for the sake of simplicity. However, in order to make it more difficult for the “bot” to pass this test. Is preferably implemented using a plurality of different images including objects having a memory color.

  FIG. 8 is a diagram for explaining an authentication system according to the second embodiment of the present invention. In the present embodiment, in order to make the user answer the color name, a check box 8 corresponding to each of a plurality of color name options including one correct answer is displayed. The user checks the check box 8 of the color name that he thinks is correct. Alternatively, each color name can be clicked, and the user may click a color name that is considered correct. With such a configuration, it is possible to answer using only a pointing device such as a mouse without inputting a key, and the load on the user is reduced without impairing the function of discriminating between “bots” and humans. It becomes possible to reduce.

  FIG. 9 is a diagram for explaining an authentication system according to the third embodiment of the present invention. In the present embodiment, in order to make the user answer the color, a check box 8 corresponding to each option consisting of a plurality of color patches including one correct answer is displayed. The user checks the check box of the color patch that he thinks is correct. Alternatively, each color patch can be clicked, and the user may click a color patch that is considered correct. With such a configuration, it is possible to answer using only a pointing device such as a mouse without inputting a key, and the load on the user is reduced without impairing the function of discriminating between “bots” and humans. It becomes possible to reduce.

  FIG. 10 is a diagram for explaining an authentication system according to the fourth embodiment of the present invention. In the present embodiment, an unnatural part is clicked together with the test image 4 by using the pointing device 9 such as a mouse, and an instruction to prompt the user to answer the original color name of the part is displayed. The user clicks an unnatural area in the image and displays a check box 8 corresponding to each of a plurality of color name options including one correct answer in order to make the user answer the color name. The user checks the color name check box 8 that he thinks is correct and presses the send button 6. Alternatively, each color name can be clicked, and the user may click a color name that is considered correct. In the example of FIG. 10, since the human face 5 portion is converted to green, it looks unnatural. Therefore, when the test program detects the event of pressing the send button, the answer is the last clicked position in the image by the user. The transmitted color name is transmitted to the server 200. If the received answer is correct, the server 200 considers that the test has passed. If it does not pass, it may be determined that the user operating the client 100 is not a human and the process may not proceed to the next step, or the test program may be retransmitted. In order to recognize objects such as faces, sky, and grass in an image with a computer program, the colors of these objects play an important role. In the present invention, the colors of these areas are different from the original colors. Therefore, it is very difficult for a computer program such as “bot” to recognize these objects as faces, sky, grass, etc., and it is more difficult to detect these areas.

  FIG. 11 is a diagram for explaining an authentication system according to the fifth embodiment of the present invention. The image presented to the user in the present embodiment is an image obtained by rotating an image obtained by converting the color of the sky portion that should originally be blue into a completely different color such as yellow by 90 degrees. Although FIG. 11 is actually a color photographic image in which only the sky 11 is converted to yellow, it is a line drawing for the convenience of display, and only this area is painted in gray to clearly show the sky 11 area. The user clicks on the sky 11 as an unnatural area, and further fills in the answer color 7 with blue, which is originally the desired color, and presses the send button 6. A specific object such as the sky has a very high probability that it exists at the top of the image when the relative position in the image is empty, for example. However, in this embodiment, it is difficult to make such a guess by rotating the test image by 90 degrees and displaying it. An example of the rotation angle is 90 degrees, but it may be 180 degrees, or an arbitrary angle such as 40 degrees or 52 degrees.

1 server, 2 network, 3 client, 4 photo image, 5 face, 6 send button, 7 answer column, 8 check box, 9 pointer, 10 CPU, 11 empty, 20 RAM, 30 ROM, 40 HDD, 50 I / F , 60 LCD, 70 operation unit, 80 bus, 100 client, 110 input unit, 120 display unit, 130 communication unit, 140 control unit, 150 network, 200 server, 210 authentication unit, 220 authentication image generation unit, 230 for authentication Image presentation unit, 240 communication unit, 250 service providing unit, 260 control unit

JP 2010-67096 A

Claims (10)

An information processing apparatus that requests a service as a client;
When a service request is generated from the information processing apparatus, a test program for determining whether or not a user who operates the information processing apparatus is a human is transmitted to the information processing apparatus, and the information processing apparatus A server that authenticates that the user who operates the information processing apparatus is a human when the returned answer matches the answer requested by the test program,
The server transmits, as the test program, an image obtained by converting a part or all of an object having a memory color stored by a human into another color, to the information processing apparatus. An authentication system characterized in that it returns a response to the server by answering what the default color is for the color converted in the image. The server
It is determined whether or not the answer received from the information processing apparatus matches the answer requested by the test program. When the determination result matches the answer, the information processing apparatus is operated by a human being. An authentication unit that authenticates
An authentication image generating unit that generates an image obtained by converting a part or all of the color of the object into another color as an authentication image;
An authentication image presentation unit for presenting the authentication image generated by the authentication image generation unit to the information processing apparatus;
A communication unit for communicating with the information processing apparatus;
A service providing unit that provides a service to the information processing apparatus in response to a service request instruction received from the information processing apparatus when the authentication unit authenticates that the information processing apparatus is operated by a human;
A control unit that performs various controls of the server including the authentication unit, the authentication image generation unit, the authentication image presentation unit, the communication unit, and the service providing unit;
The authentication system according to claim 1, further comprising:   3. The information processing apparatus according to claim 1, wherein the information processing apparatus inputs characters as to what color is a predetermined color with respect to the color converted in the authentication image, and sends the character back to the server. The authentication system described in.   The information processing apparatus selects, from among a plurality of color names, the number of default colors for the color converted in the authentication image, and returns the selected color to the server. The authentication system according to claim 1 or 2.   The information processing apparatus selects, from the color patches of a plurality of colors including one correct answer, how many colors are predetermined for the color converted in the authentication image, and the server The authentication system according to claim 1, wherein the authentication system returns a response to.   The information processing apparatus clicks a color converted in the authentication image by using a pointing device, replies what color is a predetermined color, and sends it back to the server. The authentication system according to any one of claims 1 to 5.   The server converts, as the test program, a part or the whole color of an object having a memory color stored by a human into another color, and further rotates the converted image and transmits it to the information processing apparatus. 6. The information processing apparatus according to claim 1, wherein the information processing apparatus replies to the server by answering how many colors the predetermined color is for the color converted in the image. The authentication system according to one item. An authentication method according to an information processing apparatus and an authentication system including a server,
The information processing apparatus requesting a service as a client;
When a service request is generated from the information processing apparatus, the server transmits a test program for determining whether a user operating the information processing apparatus is a human being to the information processing apparatus, Authenticating that a user operating the information processing apparatus is a human when an answer returned from the information processing apparatus matches an answer requested by the test program,
The server transmits, as the test program, an image obtained by converting a part or all of an object having a memory color stored by a human into another color, to the information processing apparatus. An authentication method comprising: replying to the server after answering what color is a predetermined color for the color converted in the image.   9. An authentication program, wherein the authentication method according to claim 8 is programmed to be controllable by a computer.   A recording medium in which the authentication program according to claim 9 is recorded in a computer-readable format.

Images