Method and device for confirming computer end-user identity
View Patent ↗The identity of an end-user operating a computer is confirmed by analyzing user reactions to aberrations in output. More specifically, an aberration is caused in output that the computer provides to an output device, and the end-user's response to the aberration is received. An end-user characteristic is extracted from the response and compared to stored characteristic responses to find a match. A match is indicative of the identity of the computer user. It can also be checked whether, after causing an aberration in output the end-user responded differently to the output than if the output did not have the aberration. The lack of a different response can be interpreted as indicative that the end-user is a bot.
1. A method of confirming the identity of an end-user interacting with a remote server, using an end-user electronic device, the method comprising:
a. during an interaction session of said end-user, executed by said end-user via an input unit associated with said end-user electronic device, causing an aberration in output that is displayed upon an output unit of said end-user device,
wherein said aberration comprises modifying input data from said input unit of said end-user device, resulting in display of said aberration upon said output unit;
b. receiving an end-user response to the displayed aberration from said input unit of said end-user electronic device;
c. extracting from said end-user response, a user-specific end-user characteristic that is based on the response of a specific end-user to said displayed aberration; and
d. comparing between the user-specific end-user characteristic extracted from said end-user response; with one or more stored characteristic responses that are stored in a database of prior responses of said end-user to displayed aberrations, to find a match;
e. wherein finding a match using said comparison, is indicative of the identity of the end-user.
2. The method of claim 1 , wherein the aberration is causing the output unit to display a character that differs from a character specified for display by the end-user via a keyboard or an emulated keyboard.
3. The method of claim 1 further comprising:
repeating the steps of: causing of an aberration, the receiving of the end-user response, the extracting of a user-specific end-user characteristic, and the comparing of the extracted user-specific end-user characteristic with stored characteristic responses.
4. The method of claim 3 , wherein said comparing of the extracted user-specific end-user characteristic with stored characteristic responses comprises generating a learning curve associated with an end-user's responsiveness to aberrations.
5. The method of claim 4 , wherein generating said learning curve comprises generating the learning curve by utilizing at least one measurable parameter selected from:
the speed of correction for said aberration;
an end-user's time for identification of an aberration;
continuity of correction for said aberration;
mistakes made by said end-user during correction for said aberration;
noises in correcting said aberration; and
parameters of the efficiency of cursor movement during correction of said aberration.
6. An apparatus for confirming the identity of an end-user operating an end-user device, the apparatus comprising:
a processor; and
a memory storing instructions that, when executed by the processor, cause the processor to perform a method which comprises:
a. during an interaction session of said end-user, executed by said end-user via an input unit associated with said end-user electronic device, causing an aberration in output that is displayed upon an output unit of said end-user device,
wherein said aberration comprises modifying input data from said input unit of said end-user device, resulting in display of said aberration upon said output unit
b. receiving an end-user response to the displayed aberration from said input unit of said end-user electronic device;
c. extracting from said end-user response, a user-specific end-user characteristic that is based on the response of a specific end-user to said displayed aberration; and
d. comparing between the user-specific end-user characteristic extracted from said end-user response; with one or more stored characteristic responses that are stored in a database of prior responses of said end-user to displayed aberrations, to find a match;
e. wherein finding a match using said comparison, is indicative of the identity of the end-user.
7. The apparatus of claim 6 , wherein said input unit is operative to communicate the end-user response to the displayed aberration through a communication network.
8. The apparatus of claim 6 , wherein the output unit is a display for human use or an emulated display for a bot, and
wherein the aberration comprises a diverted movement of a cursor on the display or on the emulated display,
wherein the diverted movement is a diversion from the movement that the end-user entered via a cursor movement device or via an emulated cursor movement device;
wherein the cursor movement is diverted by changing one or more of the following:
the ratio of the angle of cursor movement displayed, from that specified by said end-user;
the magnitude of cursor movement displayed, from that specified by said end-user.
9. The apparatus of claim 6 , wherein the instructions stored by the memory, when executed by the processor, cause the processor to repeat the causing of an aberration, the receiving of the end-user response, the extracting of a user-specific end-user characteristic, and the comparing of the extracted user-specific end-user characteristic with stored characteristic responses.