US20160034677A1 - Method and system for verification of human presence at a mobile device - Google Patents
Method and system for verification of human presence at a mobile device Download PDFInfo
- Publication number
- US20160034677A1 US20160034677A1 US14/879,816 US201514879816A US2016034677A1 US 20160034677 A1 US20160034677 A1 US 20160034677A1 US 201514879816 A US201514879816 A US 201514879816A US 2016034677 A1 US2016034677 A1 US 2016034677A1
- Authority
- US
- United States
- Prior art keywords
- recited
- response
- captcha
- captcha challenge
- verification
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/36—User authentication by graphic or iconic representation
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2133—Verifying human interaction, e.g., Captcha
Definitions
- the present invention relates to verification on internet in general. More specifically, the present invention relates to a method and system for verification of human presence at a communication device.
- Computer systems are capable of mimicking human interactions with other computers.
- One computer can be programmed to fill in forms, submit those forms, and generally behave in an automated way to accomplish certain tasks, especially in on-line forums like bulletin boards, blogs, online polls, commerce sites, and so forth. While many such automation tasks are benign and even helpful, the same technology can be used to automate fraud and/or attacks.
- the concept of verification by sending a random PIN to a mobile device was conceived. For example, to verify that a transaction on a website is being made by authorized user, the user is sent a randomly generated PIN to his registered mobile device. The user is then required to enter the PIN on the website to complete the transaction. For example, for verifying that humans are present at the opt-in for mobile phone transactions, such as mobile payments, purchases by mobile phone, prepaid card top-ups, premium mobile content subscription opt-ins, standard-rated mobile messaging campaign opt-ins and the like.
- PINs are sent via test message to mobile devices, and the presumption is that human user reads the PIN number and then copies it into the website.
- the above and other objects of the present invention are achieved by providing a method and system for verifying human presence at a mobile device.
- the method includes receiving a request for verification, where the request is received from a user. Further, the method includes sending a CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) challenge to the communication device of the user. Further, the method includes receiving a response to the CAPTCHA challenge, where the response is sent by the user. Finally, the method includes verifying the human presence by matching the response received to the CAPTCHA challenge sent.
- CAPTCHA Computer Automated Public Turing test to tell Computers and Humans Apart
- FIG. 1 shows a block diagram of a system for verifying human presence at a mobile device, in accordance with an embodiment of the present invention.
- FIG. 2 shows a flow chart of a method for verifying human presence at a mobile device, in accordance with another embodiment of the present invention.
- FIG. 3 shows a flow chart of a method for verifying human presence at a mobile device, in accordance with an embodiment of the present invention.
- FIG. 4 illustrates a process flow for verifying human presence at a mobile device, in accordance with an embodiment of the present invention.
- FIG. 5 illustrates a process flow for verifying human presence at a mobile device, in accordance with another embodiment of the present invention.
- FIG. 6 shows examples of human interpretable challenges, in accordance with an embodiment of the present invention.
- mobile device and “communication device” have been used interchangeably, and refer to computing device which has the capability of communicating or interacting with its users.
- the present invention provides a method and system for verifying human presence at a mobile device.
- the method includes receiving a request for verification, where the request is received from a user. Further, the method includes sending a CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) challenge to the communication device of the user. Further, the method includes receiving a response to the CAPTCHA challenge, where the response is sent by the user. Finally, the method includes verifying the human presence by matching the response received to the CAPTCHA challenge sent.
- CAPTCHA Computer Automated Public Turing test to tell Computers and Humans Apart
- FIG. 1 shows a block diagram of a system 100 for verifying human presence at a mobile device, in accordance with an embodiment of the present invention.
- the mobile device include, but are not limited to, a desktop computer, a laptop, a mobile phone, a tablet PC, a netbook, an e-book reader and a PDA.
- the system 100 includes a request reception module 102 , a code module 104 , a response reception module 106 and a verification module 108 .
- the request reception module 102 receives a request for verification, where the request is received from a user.
- the user accesses a web portal or a mobile application, and is asked for verification to complete a transaction.
- the web portal or the mobile application sends the request for verification to the system 100 via web server or Internet.
- the code module 104 sends a CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) challenge to the communication device of the user.
- the code module 104 sends the CAPTCHA challenge via a multi-media message (MMS), a SMS, a voice call, an Email, one-time internet or URL hyperlink, a WAP push, an alert sent via a smart phone app, and a video call to the mobile device of the user.
- MMS multi-media message
- SMS SMS
- voice call a voice call
- Email Email
- one-time internet or URL hyperlink a WAP push
- an alert sent via a smart phone app and a video call to the mobile device of the user.
- Examples of the CAPTCHA challenge include, but are not limited to, one or more of an image, a video, a question, a word, a phrase, a number, a motion, an interaction, an
- the code module 104 includes a code generation module for generating the CAPTCHA challenge.
- the code generation module generates the CAPTCHA challenge by one of random rules and pre-specified rules.
- the code module 104 includes a code reception module for sending the CAPTCHA challenge generated by a third party server. In this case, the code module 104 uses APIs of a third party CAPTCHA generating server to send the CAPTCHA challenge.
- the response reception module 106 receives a response to the CAPTCHA challenge.
- the response is manually entered by the user of the mobile device.
- the response is entered in the same web portal or mobile application from where the request for verification was generated.
- the verification module 108 verifies the human presence by matching the response received to the CAPTCHA challenge sent.
- the verification module 108 matches the response to expected response of the CAPTCHA challenge.
- the verification module 108 sends the response to the third party server which generated the CAPTCHA challenge.
- FIG. 2 shows a flow chart of a method for verifying human presence at a mobile device, in accordance with another embodiment of the present invention.
- the system 100 receives a request for verification. For example, a user may initiate a transaction on a web portal or a mobile application, and may be asked for verification to complete the transaction. Examples include mobile phone transactions, such as mobile payments, purchases by mobile phone, prepaid card top-ups, premium mobile content subscription opt-ins, standard-rated mobile messaging campaign opt-ins and the like.
- the web portal or the mobile application sends the request for verification to the system 100 via web server or Internet.
- the system 100 sends a CAPTCHA challenge to the communication device of the user.
- the CAPTCHA challenge is sent via a multi-media message (MMS), a SMS, a voice call, an Email and a video call to the mobile device of the user.
- MMS multi-media message
- the CAPTCHA challenge include, but are not limited to, one or more of an image, a video, a question, a word, a phrase, a number, a motion, an interaction, an audio and a vibration.
- the system 100 receives a response to the CAPTCHA challenge, where the response is sent by the user.
- the response may be manually entered by the user of the mobile device. In an embodiment, the response may be entered in the same web portal or mobile application from where the request for verification was generated.
- the system 100 verifies the human presence by matching the response received to the CAPTCHA challenge sent.
- the response is matched to expected response of the CAPTCHA challenge.
- the response may be sent to a third party server that generated the CAPTCHA challenge.
- FIG. 3 shows a flow chart of a method for verifying human presence at a mobile device, in accordance with an embodiment of the present invention.
- the system 100 receives a request for verification.
- it is checked if a CAPTCHA challenge can be generated by the system 100 .
- the system 100 is capable of generating a CAPTCHA challenge.
- the system 100 generates a CAPTCHA challenge.
- the system 100 is not capable of generating a CAPTCHA challenge.
- the system 100 requests a CAPTCHA challenge from a third party server.
- the system 100 uses APIs of a third party CAPTCHA generating server to send the CAPTCHA challenge.
- the system 100 sends the CAPTCHA challenge to the communication device of the user.
- the CAPTCHA challenge is sent via a multi-media message (MMS), a WAP push, a hyperlink embedded in a message, a mobile alert delivered via a smart phone or tablet app, a SMS, a voice call, an Email and a video call to the mobile device of the user.
- MMS multi-media message
- Examples of the CAPTCHA challenge include, but are not limited to, one or more of an image, a video, a question, a motion, an interaction, an audio and a vibration.
- the system 100 receives a response to the CAPTCHA challenge, where the response is sent by the user. The response is manually entered by the user of the mobile device.
- the response is entered in the same web portal or mobile application from where the request for verification was generated.
- the system 100 verifies the human presence by matching the response received to the CAPTCHA challenge sent.
- the response is matched to expected response of the CAPTCHA challenge.
- the response is sent to the third party server which generated the CAPTCHA challenge.
- FIG. 4 illustrates a process flow for verifying human presence at a mobile device, in accordance with an embodiment of the present invention.
- a user logs into a portal and makes a transaction by entering mobile phone number on the portal.
- the portal then sends a verification request to the system 100 .
- the system 100 then sends a CAPTCHA challenge to the mobile phone number entered by the user.
- the user interprets the CAPTCHA and enters the response to the portal.
- the portal then sends the response back to the system 100 for verification.
- the system 100 verifies transaction by matching the CAPTCHA response with the expected response to the CAPTCHA challenge.
- FIG. 5 illustrates a process flow for verifying human presence at a mobile device, in accordance with another embodiment of the present invention.
- a user logs into a portal and makes a transaction by entering mobile phone number on the portal.
- the portal then sends a verification request to the system 100 .
- the system 100 requests a third party server to generate a CAPTCHA challenge.
- the system 100 then sends a CAPTCHA challenge to the mobile phone number entered by the user.
- the user interprets the CAPTCHA and enters the response to the portal.
- the portal then sends the response back to the system 100 for verification.
- the system 100 verifies transaction at the third party server by matching the CAPTCHA response with the expected response to the CAPTCHA challenge.
- FIG. 6 shows examples of human interpretable challenges, in accordance with an embodiment of the present invention.
- the FIG. 6 shows CAPTCHA challenges 602 , 604 and 606 .
- the PIN number sent in graphical form that can be read only by a human user.
- an MO opt-in campaign can use this same verification technique.
- the CAPTCHA challenge 602 shows that rather than sending the cell phone an SMS message with the PIN number “ 12345 ,” under the present invention, the user would receive an MMS message containing the PIN number within a human-readable graphic.
- the type of multimedia can change (image, sound, video, vibration) and the contents of those images and videos and sounds can change.
- the images for example may be of numbers, objects, colours, shapes etc.
- video, sound, and other multimedia can vary in its form.
- the “human present” test can take other forms, such as asking the human to respond to simple questions about graphics such as asking color of the dot in the CAPTCHA challenge 604 or by asking the type of the object that does not belong to the CAPTCHA challenge 606 .
- This use of MMS to verify human authentication can include, images, sounds, videos and other multimedia events such as discerning the haptic vibration pattern a phone is making.
- Such graphical images are human-readable images of language, numbers, shapes or other information that takes substitutes for the function of a unique one-time personal identification number.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Telephonic Communication Services (AREA)
- Telephone Function (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
Description
- This application claims the benefit of U.S. Provisional Application No. 61/574,557 titled “Method and System for Verifying that a Human is Present at a Mobile Device” filed on Aug. 5, 2011, the entire contents of which are incorporated by reference herein.
- 1. Field of the Invention
- The present invention relates to verification on internet in general. More specifically, the present invention relates to a method and system for verification of human presence at a communication device.
- 2. Description of the Prior Art
- Computer systems are capable of mimicking human interactions with other computers. One computer can be programmed to fill in forms, submit those forms, and generally behave in an automated way to accomplish certain tasks, especially in on-line forums like bulletin boards, blogs, online polls, commerce sites, and so forth. While many such automation tasks are benign and even helpful, the same technology can be used to automate fraud and/or attacks. In response to increasing automated attacks, the concept of verification by sending a random PIN to a mobile device was conceived. For example, to verify that a transaction on a website is being made by authorized user, the user is sent a randomly generated PIN to his registered mobile device. The user is then required to enter the PIN on the website to complete the transaction. For example, for verifying that humans are present at the opt-in for mobile phone transactions, such as mobile payments, purchases by mobile phone, prepaid card top-ups, premium mobile content subscription opt-ins, standard-rated mobile messaging campaign opt-ins and the like.
- Sending a PIN to a mobile device, and requiring the user to enter the PIN into the website, is thought to be a superior level of authentication than sending a PIN to an email address, since this PIN-to-mobile technique verifies that the human user also is in possession of his mobile phone, elevating the phone itself to the role of physical token security factor. Normally, PINs are sent via test message to mobile devices, and the presumption is that human user reads the PIN number and then copies it into the website.
- But with the advent of smart phones designed on open platforms such as Android, mobile phones themselves have the capability of copying PIN numbers from text messages and entering those PIN numbers onto websites, unbeknownst to any user. The mobile devices are also capable of being affected by virus and malware. Therefore there lies a risk of text messages being monitored and used to make unauthorized transactions.
- In the light of the foregoing discussion, there is a need for a method and system for increasing the security to ensure human authentication of mobile transactions. Thus, there is a need for a method and system that can verify human presence at a mobile device.
- Accordingly, it is an object of the present invention to provide a method and system for increasing the security of transactions involving mobile transactions or website or digital authentications.
- It is yet another object of the present invention to provide a method and system for requiring human presence at a mobile device. The above and other objects of the present invention are achieved by providing a method and system for verifying human presence at a mobile device. The method includes receiving a request for verification, where the request is received from a user. Further, the method includes sending a CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) challenge to the communication device of the user. Further, the method includes receiving a response to the CAPTCHA challenge, where the response is sent by the user. Finally, the method includes verifying the human presence by matching the response received to the CAPTCHA challenge sent.
- For a more complete understanding of the present invention, the needs satisfied thereby, and the objects, features, and advantages thereof, reference now is made to the following description taken in connection with the accompanying drawings.
-
FIG. 1 shows a block diagram of a system for verifying human presence at a mobile device, in accordance with an embodiment of the present invention. -
FIG. 2 shows a flow chart of a method for verifying human presence at a mobile device, in accordance with another embodiment of the present invention. -
FIG. 3 shows a flow chart of a method for verifying human presence at a mobile device, in accordance with an embodiment of the present invention. -
FIG. 4 illustrates a process flow for verifying human presence at a mobile device, in accordance with an embodiment of the present invention. -
FIG. 5 illustrates a process flow for verifying human presence at a mobile device, in accordance with another embodiment of the present invention. -
FIG. 6 shows examples of human interpretable challenges, in accordance with an embodiment of the present invention. - Skilled artisans will appreciate that elements in the figures are illustrated for simplicity and clarity and have not necessarily been drawn to scale. For example, the dimensions of some of the elements in the figures may be exaggerated relative to other elements to help to improve understanding of embodiments of the present invention.
- Before describing in detail the particular method and system for verifying human presence at a mobile device in accordance with an embodiment of the present invention, it should be observed that the present invention resides primarily in combinations of method and system components related to computing device of the present invention.
- Accordingly, the system components have been represented where appropriate by conventional symbols in the drawings, showing only those specific details that are pertinent to understanding the present invention so as not to obscure the disclosure with details that will be readily apparent to those of ordinary skill in the art having the benefit of the description herein.
- In this document, relational terms such as ‘first’ and ‘second’, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. The terms ‘comprises’, ‘comprising’, or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. An element proceeded by ‘comprises . . . a’ does not, without more constraints, preclude the existence of additional identical elements in the process, method, article, or apparatus that comprises the element.
- The terms “mobile device” and “communication device” have been used interchangeably, and refer to computing device which has the capability of communicating or interacting with its users.
- [00021]The present invention provides a method and system for verifying human presence at a mobile device. The method includes receiving a request for verification, where the request is received from a user. Further, the method includes sending a CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) challenge to the communication device of the user. Further, the method includes receiving a response to the CAPTCHA challenge, where the response is sent by the user. Finally, the method includes verifying the human presence by matching the response received to the CAPTCHA challenge sent.
-
FIG. 1 shows a block diagram of asystem 100 for verifying human presence at a mobile device, in accordance with an embodiment of the present invention. Examples of the mobile device include, but are not limited to, a desktop computer, a laptop, a mobile phone, a tablet PC, a netbook, an e-book reader and a PDA. Thesystem 100 includes arequest reception module 102, acode module 104, aresponse reception module 106 and averification module 108. Therequest reception module 102 receives a request for verification, where the request is received from a user. In an embodiment, the user accesses a web portal or a mobile application, and is asked for verification to complete a transaction. The web portal or the mobile application sends the request for verification to thesystem 100 via web server or Internet. On receiving the request for verification, thecode module 104 sends a CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) challenge to the communication device of the user. In an embodiment of the present invention, thecode module 104 sends the CAPTCHA challenge via a multi-media message (MMS), a SMS, a voice call, an Email, one-time internet or URL hyperlink, a WAP push, an alert sent via a smart phone app, and a video call to the mobile device of the user. Examples of the CAPTCHA challenge include, but are not limited to, one or more of an image, a video, a question, a word, a phrase, a number, a motion, an interaction, an audio and a vibration. - In an embodiment of the present invention, the
code module 104 includes a code generation module for generating the CAPTCHA challenge. The code generation module generates the CAPTCHA challenge by one of random rules and pre-specified rules. In another embodiment of the present invention, thecode module 104 includes a code reception module for sending the CAPTCHA challenge generated by a third party server. In this case, thecode module 104 uses APIs of a third party CAPTCHA generating server to send the CAPTCHA challenge. - The
response reception module 106 receives a response to the CAPTCHA challenge. The response is manually entered by the user of the mobile device. In an embodiment, the response is entered in the same web portal or mobile application from where the request for verification was generated. Finally, theverification module 108 verifies the human presence by matching the response received to the CAPTCHA challenge sent. In an embodiment of the present invention, theverification module 108 matches the response to expected response of the CAPTCHA challenge. In another embodiment of the present invention, theverification module 108 sends the response to the third party server which generated the CAPTCHA challenge. -
FIG. 2 shows a flow chart of a method for verifying human presence at a mobile device, in accordance with another embodiment of the present invention. Atstep 202, thesystem 100 receives a request for verification. For example, a user may initiate a transaction on a web portal or a mobile application, and may be asked for verification to complete the transaction. Examples include mobile phone transactions, such as mobile payments, purchases by mobile phone, prepaid card top-ups, premium mobile content subscription opt-ins, standard-rated mobile messaging campaign opt-ins and the like. The web portal or the mobile application sends the request for verification to thesystem 100 via web server or Internet. Atstep 204, thesystem 100 sends a CAPTCHA challenge to the communication device of the user. In an embodiment of the present invention, the CAPTCHA challenge is sent via a multi-media message (MMS), a SMS, a voice call, an Email and a video call to the mobile device of the user. Examples of the CAPTCHA challenge include, but are not limited to, one or more of an image, a video, a question, a word, a phrase, a number, a motion, an interaction, an audio and a vibration. Atstep 206, thesystem 100 receives a response to the CAPTCHA challenge, where the response is sent by the user. The response may be manually entered by the user of the mobile device. In an embodiment, the response may be entered in the same web portal or mobile application from where the request for verification was generated. Finally, atstep 208, thesystem 100 verifies the human presence by matching the response received to the CAPTCHA challenge sent. In an embodiment of the present invention, the response is matched to expected response of the CAPTCHA challenge. In another embodiment of the present invention, the response may be sent to a third party server that generated the CAPTCHA challenge. -
FIG. 3 shows a flow chart of a method for verifying human presence at a mobile device, in accordance with an embodiment of the present invention. Atstep 202, thesystem 100 receives a request for verification. Atstep 302, it is checked if a CAPTCHA challenge can be generated by thesystem 100. In an embodiment, thesystem 100 is capable of generating a CAPTCHA challenge. Atstep 304, thesystem 100 generates a CAPTCHA challenge. In another embodiment of the present invention, thesystem 100 is not capable of generating a CAPTCHA challenge. Atstep 306, thesystem 100 requests a CAPTCHA challenge from a third party server. Thesystem 100 uses APIs of a third party CAPTCHA generating server to send the CAPTCHA challenge. Atstep 204, thesystem 100 sends the CAPTCHA challenge to the communication device of the user. In an embodiment of the present invention, the CAPTCHA challenge is sent via a multi-media message (MMS), a WAP push, a hyperlink embedded in a message, a mobile alert delivered via a smart phone or tablet app, a SMS, a voice call, an Email and a video call to the mobile device of the user. Examples of the CAPTCHA challenge include, but are not limited to, one or more of an image, a video, a question, a motion, an interaction, an audio and a vibration. Atstep 206, thesystem 100 receives a response to the CAPTCHA challenge, where the response is sent by the user. The response is manually entered by the user of the mobile device. In an embodiment, the response is entered in the same web portal or mobile application from where the request for verification was generated. Finally, atstep 208, thesystem 100 verifies the human presence by matching the response received to the CAPTCHA challenge sent. In an embodiment of the present invention, the response is matched to expected response of the CAPTCHA challenge. In another embodiment of the present invention, the response is sent to the third party server which generated the CAPTCHA challenge. -
FIG. 4 illustrates a process flow for verifying human presence at a mobile device, in accordance with an embodiment of the present invention. A user logs into a portal and makes a transaction by entering mobile phone number on the portal. The portal then sends a verification request to thesystem 100. Thesystem 100 then sends a CAPTCHA challenge to the mobile phone number entered by the user. The user then interprets the CAPTCHA and enters the response to the portal. The portal then sends the response back to thesystem 100 for verification. Finally, thesystem 100 verifies transaction by matching the CAPTCHA response with the expected response to the CAPTCHA challenge. -
FIG. 5 illustrates a process flow for verifying human presence at a mobile device, in accordance with another embodiment of the present invention. A user logs into a portal and makes a transaction by entering mobile phone number on the portal. The portal then sends a verification request to thesystem 100. Thesystem 100 then requests a third party server to generate a CAPTCHA challenge. Thesystem 100 then sends a CAPTCHA challenge to the mobile phone number entered by the user. The user then interprets the CAPTCHA and enters the response to the portal. The portal then sends the response back to thesystem 100 for verification. Finally, thesystem 100 verifies transaction at the third party server by matching the CAPTCHA response with the expected response to the CAPTCHA challenge. -
FIG. 6 shows examples of human interpretable challenges, in accordance with an embodiment of the present invention. TheFIG. 6 shows CAPTCHA challenges 602, 604 and 606. Namely, in the case of a web-landing page opt-in, in which the transaction commences with a user entering the cell phone number on a web page, and then requires them to verify by entering a PIN that has been sent to the mobile device, under the present invention, the PIN number sent in graphical form that can be read only by a human user. Likewise, an MO opt-in campaign can use this same verification technique. By requesting an Opt-in, and user can be presented with an MMS MT containing a picture, sound or video. By verifying some quality of the picture, video, or sound back via MO, the users has again utilized this more advanced authentication technique. TheCAPTCHA challenge 602 shows that rather than sending the cell phone an SMS message with the PIN number “12345,” under the present invention, the user would receive an MMS message containing the PIN number within a human-readable graphic. - The type of multimedia can change (image, sound, video, vibration) and the contents of those images and videos and sounds can change. The images for example may be of numbers, objects, colours, shapes etc. Likewise video, sound, and other multimedia can vary in its form. The “human present” test can take other forms, such as asking the human to respond to simple questions about graphics such as asking color of the dot in the
CAPTCHA challenge 604 or by asking the type of the object that does not belong to theCAPTCHA challenge 606. This use of MMS to verify human authentication can include, images, sounds, videos and other multimedia events such as discerning the haptic vibration pattern a phone is making. Such graphical images are human-readable images of language, numbers, shapes or other information that takes substitutes for the function of a unique one-time personal identification number. - While the present invention has been described in connection with preferred embodiments, it will be understood by those skilled in the art that variations and modifications of the preferred embodiments described above may be made without departing from the scope of the invention. Other embodiments will be apparent to those skilled in the art from a consideration of the specification or from a practice of the invention disclosed herein. It is intended that the specification and the described examples are considered exemplary only, with the true scope of the invention indicated by the following claims.
Claims (16)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US14/879,816 US20160034677A1 (en) | 2011-08-05 | 2015-10-09 | Method and system for verification of human presence at a mobile device |
Applications Claiming Priority (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US201161574557P | 2011-08-05 | 2011-08-05 | |
US13/567,537 US9183362B2 (en) | 2011-08-05 | 2012-08-06 | Method and system for verification of human presence at a mobile device |
US14/879,816 US20160034677A1 (en) | 2011-08-05 | 2015-10-09 | Method and system for verification of human presence at a mobile device |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US13/567,537 Continuation US9183362B2 (en) | 2011-08-05 | 2012-08-06 | Method and system for verification of human presence at a mobile device |
Publications (1)
Publication Number | Publication Date |
---|---|
US20160034677A1 true US20160034677A1 (en) | 2016-02-04 |
Family
ID=47668861
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US13/567,537 Expired - Fee Related US9183362B2 (en) | 2011-08-05 | 2012-08-06 | Method and system for verification of human presence at a mobile device |
US14/879,816 Abandoned US20160034677A1 (en) | 2011-08-05 | 2015-10-09 | Method and system for verification of human presence at a mobile device |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US13/567,537 Expired - Fee Related US9183362B2 (en) | 2011-08-05 | 2012-08-06 | Method and system for verification of human presence at a mobile device |
Country Status (3)
Country | Link |
---|---|
US (2) | US9183362B2 (en) |
CA (1) | CA2844262A1 (en) |
WO (1) | WO2013022839A1 (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US10313322B2 (en) | 2016-09-02 | 2019-06-04 | Ca, Inc. | Distinguishing human-generated input from programmatically-generated input |
Families Citing this family (14)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2013022839A1 (en) * | 2011-08-05 | 2013-02-14 | M-Qube, Inc. | Method and system for verification of human presence at a mobile device |
RU2522024C2 (en) * | 2012-10-15 | 2014-07-10 | Общество С Ограниченной Ответственностью "Лаборатория Эландис" | Method of signing electronic documents with analogue-digital signature with additional verification |
US20140129441A1 (en) * | 2012-11-02 | 2014-05-08 | German Blanco | Systems and methods for authorizing sensitive purchase transactions with a mobile device |
US20140273987A1 (en) * | 2013-03-14 | 2014-09-18 | Google Inc. | Challenge Response System to Detect Automated Communications |
US9736130B1 (en) | 2013-07-05 | 2017-08-15 | Sonus Networks, Inc. | Communications methods and apparatus related to web initiated sessions |
CN104468107B (en) * | 2013-09-18 | 2018-12-11 | 深圳市腾讯计算机系统有限公司 | Verify data processing method and processing device |
US10686781B1 (en) * | 2013-12-24 | 2020-06-16 | Affirm Inc. | System and method for passwordless logins |
KR101686181B1 (en) | 2015-01-12 | 2016-12-28 | 주식회사 엔터플 | Method and apparatus for secured communication using predefined url |
CN106155298B (en) * | 2015-04-21 | 2019-11-08 | 阿里巴巴集团控股有限公司 | The acquisition method and device of man-machine recognition methods and device, behavioural characteristic data |
US9571475B2 (en) * | 2015-06-09 | 2017-02-14 | Verizon Patent And Licensing Inc. | Call encryption systems and methods |
US10148759B2 (en) | 2016-04-04 | 2018-12-04 | Gogo Llc | Presence-based network authentication |
US10877560B2 (en) * | 2017-12-22 | 2020-12-29 | Mastercard International Incorporated | Haptic feedback for authentication and security in computer systems |
US11204648B2 (en) | 2018-06-12 | 2021-12-21 | Mastercard International Incorporated | Handshake to establish agreement between two parties in virtual reality |
KR102636409B1 (en) | 2018-12-28 | 2024-02-15 | 삼성전자주식회사 | Electronic apparatus and the control method thereof |
Citations (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20090055193A1 (en) * | 2007-02-22 | 2009-02-26 | Pudding Holdings Israel Ltd. | Method, apparatus and computer code for selectively providing access to a service in accordance with spoken content received from a user |
US20090150983A1 (en) * | 2007-08-27 | 2009-06-11 | Infosys Technologies Limited | System and method for monitoring human interaction |
US20100049526A1 (en) * | 2008-08-25 | 2010-02-25 | At&T Intellectual Property I, L.P. | System and method for auditory captchas |
US20110150267A1 (en) * | 2009-12-22 | 2011-06-23 | Disney Enterprises, Inc. | Human verification by contextually iconic visual public turing test |
US20110208716A1 (en) * | 2010-02-19 | 2011-08-25 | Microsoft Corporation | Image-Based CAPTCHA Exploiting Context in Object Recognition |
US20110209076A1 (en) * | 2010-02-24 | 2011-08-25 | Infosys Technologies Limited | System and method for monitoring human interaction |
US20120254971A1 (en) * | 2011-04-01 | 2012-10-04 | Telefonaktiebolaget L M Ericsson (Publ) | Captcha method and system |
US20120323700A1 (en) * | 2011-06-20 | 2012-12-20 | Prays Nikolay Aleksandrovich | Image-based captcha system |
US8380503B2 (en) * | 2008-06-23 | 2013-02-19 | John Nicholas and Kristin Gross Trust | System and method for generating challenge items for CAPTCHAs |
US20130145441A1 (en) * | 2011-06-03 | 2013-06-06 | Dhawal Mujumdar | Captcha authentication processes and systems using visual object identification |
US9183362B2 (en) * | 2011-08-05 | 2015-11-10 | Mobile Messenger Global, Inc. | Method and system for verification of human presence at a mobile device |
Family Cites Families (17)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8145914B2 (en) * | 2005-12-15 | 2012-03-27 | Microsoft Corporation | Client-side CAPTCHA ceremony for user verification |
US8261071B2 (en) * | 2006-01-31 | 2012-09-04 | Microsoft Corporation | Stateless human detection for real-time messaging systems |
US7721107B2 (en) * | 2006-02-10 | 2010-05-18 | Palo Alto Research Center Incorporated | Physical token for supporting verification of human presence in an online environment |
US8036902B1 (en) * | 2006-06-21 | 2011-10-11 | Tellme Networks, Inc. | Audio human verification |
US8417791B1 (en) * | 2006-06-30 | 2013-04-09 | Google Inc. | Hosted calling service |
US8019127B2 (en) * | 2006-09-13 | 2011-09-13 | George Mason Intellectual Properties, Inc. | Image based turing test |
US20080209223A1 (en) * | 2007-02-27 | 2008-08-28 | Ebay Inc. | Transactional visual challenge image for user verification |
US20090328163A1 (en) * | 2008-06-28 | 2009-12-31 | Yahoo! Inc. | System and method using streaming captcha for online verification |
US8522010B2 (en) * | 2008-10-20 | 2013-08-27 | Microsoft Corporation | Providing remote user authentication |
US8307412B2 (en) * | 2008-10-20 | 2012-11-06 | Microsoft Corporation | User authentication management |
US8688940B2 (en) * | 2008-12-18 | 2014-04-01 | Sandisk Technologies Inc. | Method for using a CAPTCHA challenge to protect a removable mobile flash memory storage device |
US8239465B2 (en) * | 2009-02-19 | 2012-08-07 | Microsoft Corporation | Generating human interactive proofs |
US8910251B2 (en) * | 2009-03-06 | 2014-12-09 | Facebook, Inc. | Using social information for authenticating a user session |
US20100318669A1 (en) * | 2009-06-16 | 2010-12-16 | Kevin Chugh | Human Interactive Proof System and Apparatus that Enables Public Contribution of Challenges for Determining Whether an Agent is a Computer or a Human |
US8671058B1 (en) * | 2009-08-07 | 2014-03-11 | Gary Isaacs | Methods and systems for generating completely automated public tests to tell computers and humans apart (CAPTCHA) |
WO2012107879A2 (en) * | 2011-02-10 | 2012-08-16 | Site Black Box Ltd. | DISTINGUISH VALID USERS FROM BOTS, OCRs AND THIRD PARTY SOLVERS WHEN PRESENTING CAPTCHA |
US20120272302A1 (en) * | 2011-04-21 | 2012-10-25 | Microsoft Corporation | Human User Verification |
-
2012
- 2012-08-06 WO PCT/US2012/049755 patent/WO2013022839A1/en active Application Filing
- 2012-08-06 CA CA 2844262 patent/CA2844262A1/en not_active Abandoned
- 2012-08-06 US US13/567,537 patent/US9183362B2/en not_active Expired - Fee Related
-
2015
- 2015-10-09 US US14/879,816 patent/US20160034677A1/en not_active Abandoned
Patent Citations (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20090055193A1 (en) * | 2007-02-22 | 2009-02-26 | Pudding Holdings Israel Ltd. | Method, apparatus and computer code for selectively providing access to a service in accordance with spoken content received from a user |
US20090150983A1 (en) * | 2007-08-27 | 2009-06-11 | Infosys Technologies Limited | System and method for monitoring human interaction |
US8380503B2 (en) * | 2008-06-23 | 2013-02-19 | John Nicholas and Kristin Gross Trust | System and method for generating challenge items for CAPTCHAs |
US20100049526A1 (en) * | 2008-08-25 | 2010-02-25 | At&T Intellectual Property I, L.P. | System and method for auditory captchas |
US20110150267A1 (en) * | 2009-12-22 | 2011-06-23 | Disney Enterprises, Inc. | Human verification by contextually iconic visual public turing test |
US20110208716A1 (en) * | 2010-02-19 | 2011-08-25 | Microsoft Corporation | Image-Based CAPTCHA Exploiting Context in Object Recognition |
US20110209076A1 (en) * | 2010-02-24 | 2011-08-25 | Infosys Technologies Limited | System and method for monitoring human interaction |
US20120254971A1 (en) * | 2011-04-01 | 2012-10-04 | Telefonaktiebolaget L M Ericsson (Publ) | Captcha method and system |
US20130145441A1 (en) * | 2011-06-03 | 2013-06-06 | Dhawal Mujumdar | Captcha authentication processes and systems using visual object identification |
US20120323700A1 (en) * | 2011-06-20 | 2012-12-20 | Prays Nikolay Aleksandrovich | Image-based captcha system |
US9183362B2 (en) * | 2011-08-05 | 2015-11-10 | Mobile Messenger Global, Inc. | Method and system for verification of human presence at a mobile device |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US10313322B2 (en) | 2016-09-02 | 2019-06-04 | Ca, Inc. | Distinguishing human-generated input from programmatically-generated input |
Also Published As
Publication number | Publication date |
---|---|
WO2013022839A1 (en) | 2013-02-14 |
US9183362B2 (en) | 2015-11-10 |
US20130205386A1 (en) | 2013-08-08 |
CA2844262A1 (en) | 2013-02-14 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US9183362B2 (en) | Method and system for verification of human presence at a mobile device | |
US9560033B2 (en) | Method and system for authenticating user identity | |
CN107851254B (en) | Seamless transactions with minimized user input | |
JP6503357B2 (en) | Approve payment by reading QR code generated by separate user or device | |
US9088457B1 (en) | Transmission of an application download via an encoded image identifying the authorized recipient | |
EP3843328B1 (en) | User authentication and authorization using personas | |
CN109257321B (en) | Secure login method and device | |
US9270666B2 (en) | Verification of user communication addresses | |
Petrova et al. | QR codes advantages and dangers | |
CN110351672B (en) | Information pushing method and device and electronic equipment | |
JP2015531501A (en) | Managing digital receipts | |
TWM539667U (en) | System of online credentials application for network transaction via carrier | |
US20140215592A1 (en) | Method, apparatus and system for user authentication | |
US9356971B1 (en) | Broadcast-based trust establishment | |
US11888844B2 (en) | Electrical circuit testing device and method | |
WO2014117563A1 (en) | Method, apparatus and system for user authentication | |
Jakobsson | Social Engineering Resistant 2FA | |
TW201824129A (en) | System for applying for certificate online through carrier for transaction and method thereof | |
KR101631661B1 (en) | Method of providing card transaction service using social network and server performing the same | |
TW202217609A (en) | System for driving smart card by third-party device for identity verification and method thereof | |
TWI536299B (en) | Online system and method of registration and certification | |
KR102092377B1 (en) | User authentication system and method thereof, and apparatus applied to the same |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: MOBILE MESSENGER AMERICAS INC, CALIFORNIA Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:THOMPSON, FRASER;REEL/FRAME:036939/0601 Effective date: 20080623 |
|
AS | Assignment |
Owner name: MOBILE MESSENGER AMERICAS INC, CALIFORNIA Free format text: CORRECTIVE ASSIGNMENT TO CORRECT THE ASSIGNEE'S ADDRESS PREVIOUSLY RECORDED ON REEL 036939 FRAME 0601. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:THOMPSON, FRASER;REEL/FRAME:040415/0314 Effective date: 20080623 |
|
AS | Assignment |
Owner name: MOBILE MESSENGER GLOBAL, INC., CALIFORNIA Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:MOBILE MESSENGER AMERICAS INC.;REEL/FRAME:040431/0403 Effective date: 20161121 |
|
AS | Assignment |
Owner name: POST SMS GLOBAL CO., INC., CALIFORNIA Free format text: CHANGE OF NAME;ASSIGNOR:MOBILE MESSENGER GLOBAL, INC.;REEL/FRAME:040708/0238 Effective date: 20150116 |
|
AS | Assignment |
Owner name: MANTIS MESSAGING, INC., DELAWARE Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:POST SMS GLOBAL CO. INC.;REEL/FRAME:040460/0347 Effective date: 20151101 |
|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |