Systems and methods for challenge-response animation and randomization testing
View Patent ↗Systems and methods are provided for challenge/response animation. In one implementation, a request for protected content may be received from a client, and the protected content may comprise data. A challenge phrase comprising a plurality of characters may be determined, and a computer processor may divide the challenge phrase into at least two character subsets selected from the characters comprising the challenge phrase. Each of the at least two character subsets may include less than all of the characters comprising the challenge phrase. The at least two character subsets may be sent to the client in response to the request; and an answer to the challenge phrase may be received from the client in response to the at least two character subsets. Access to the protected content may be limited based on whether the answer correctly solves the challenge phrase.
1. A computer-implemented method comprising:
receiving one or more characteristics of a client requesting access to protected content, the protected content comprising data;
determining, with at least one processor, a risk profile for the client based on the client characteristics, the risk profile reflecting a likelihood that the client is unauthorized to access the protected content;
selecting, with at least one processor, first challenge characteristics or second challenge characteristics of a challenge/response test based on the risk profile;
generating a challenge/response test based on the selected challenge characteristics, the generating comprising:
determining a challenge phrase comprising a plurality of characters; and
dividing the challenge phrase into at least two character subsets selected from the plurality of characters comprising the challenge phrase; and
providing the at least two character subsets for consecutive display on the client at a predetermined frequency,
wherein the first challenge characteristics and the second challenge characteristics each reflect distortion levels used to distort characters of the challenge/response test, and the first challenge characteristics reflect less character distortion than the second challenge characteristics.
2. The computer-implemented method according to claim 1 , wherein the client characteristics include one or more of an IP address, a MAC address, or session management technique implemented by the client.
3. The computer-implemented method according to claim 1 , wherein the first challenge characteristics and the second challenge characteristics each reflect timeout periods during which the client must provide a response to the challenge/response test, and the first challenge characteristics reflect a shorter timeout period than the second challenge characteristics.
4. The computer-implemented method according to claim 1 , wherein the first challenge characteristics and the second challenge characteristics each reflect data sizes associated with image frames of the challenge response test, and the first challenge characteristics reflect a larger data size than the second challenge characteristics.
5. The computer-implemented method according to claim 1 , wherein the first challenge characteristics and the second challenge characteristics each reflect colors used for characters and background of the challenge/response test, and the first challenge characteristics reflect less contrast between the characters and background than the second challenge characteristics.
6. The computer-implemented method according to claim 1 , wherein the first challenge characteristics reflect that one or more characters of the challenge/response test should be obscured, and the second challenge characteristics reflect that the one or more characters should not be obscured.
7. The computer-implemented method according to claim 2 , wherein the session management technique includes at least one of a username and password provided by the client, a secure shell or transport-layer security communication protocol used by the client, or the client allowing cookies for session management to be stored at the client.
8. The computer-implemented method according to claim 1 , wherein the first challenge characteristics and second challenge characteristics each reflect a number of characters to include in the challenge/response test, and wherein the first challenge characteristics reflect a greater number of characters than the second challenge characteristics.
9. The computer-implemented method according to claim 1 , wherein the first challenge characteristics reflect that the plurality of characters does not include a word, while the second challenge characteristics reflect that the plurality of characters does include a word.
10. The computer-implemented method according to claim 1 , wherein the first challenge characteristics and second challenge characteristics each reflect movement of a background in the challenge/response test, and the first challenge characteristics reflect moving a background more quickly than the second challenge characteristics.
11. The computer-implemented method according to claim 1 , wherein the challenge/response test includes a challenge phrase comprising a plurality of characters, wherein the challenge phrase is divided into at least two character subsets selected from the plurality of characters comprising the challenge phrase, each of the at least two character subsets comprising less than all of the characters comprising the challenge phrase.
12. The computer-implemented method according to claim 11 , wherein the first challenge characteristics and the second challenge characteristics each reflect a percentage of characters of the challenge phrase to include in each of the character subsets, and wherein the first challenge characteristics reflect a lower percentage of characters than the second challenge characteristics.
13. The computer-implemented method according to claim 1 , wherein the first challenge characteristics and the second challenge characteristics each reflect a number of fonts to include in the challenge/response test, and wherein the first challenge characteristics reflect a greater number of fonts than the second challenge characteristics.
14. A system comprising:
a memory device that stores instructions; and
at least one processor that executes the instructions and is configured to:
receive one or more characteristics of a client requesting access to protected content, the protected content comprising data;
determine a risk profile for the client based on the client characteristics, the risk profile reflecting a likelihood that the client is unauthorized to access the protected content;
select first challenge characteristics or second challenge characteristics of a challenge/response test based on the risk profile;
generate a challenge/response test based on the selected challenge characteristics by:
determining a challenge phrase comprising a plurality of characters; and
dividing the challenge phrase into at least two character subsets selected from the plurality of characters comprising the challenge phrase; and
provide the at least two character subsets for consecutive display on the client at a predetermined frequency,
wherein the first challenge characteristics and the second challenge characteristics each reflect distortion levels used to distort characters of the challenge/response test, and the first challenge characteristics reflect less character distortion than the second challenge characteristics.
15. The system of claim 14 , wherein the client characteristics include at least one of an IP address, a MAC address, or session management technique implemented by the client.
16. The system of claim 14 , wherein the first challenge characteristics and the second challenge characteristics each reflect a number of characters to include in the challenge/response test, and wherein the first challenge characteristics reflect a greater number of characters than the second challenge characteristics.
17. The system of claim 14 , wherein the first challenge characteristics and the second challenge characteristics each reflect timeout periods during which the client must provide a response to the challenge/response test, and the first challenge characteristics reflect a shorter timeout period than the second challenge characteristics.
18. The system of claim 14 , wherein the first challenge characteristics and the second challenge characteristics each reflect colors used for characters and background of the challenge/response test, and the first challenge characteristics reflect less contrast between the characters and background than the second challenge characteristics.