System and method for determining use of non-human users in a distributed computer network environment
Embodiments of systems and methods as disclosed herein may determine that an initiator of a communication on a distributed computer network is an automated script or the like. More particularly, in one embodiment, a web page including a hidden field may be generated in response to a request for the web page. This hidden field is a field included in the web page that is not visible to a human user when the web page is rendered by a browser and presented to the user. By comparing a received value for such a hidden field with an associated value for the hidden field as provided in the web page, the use of an automated script may be detected.
1. A system, comprising:
a web server computer, including a set of instructions embodied on a computer readable medium, the instructions executable for:
receiving a request for a web page from a user device;
determining, at the web server computer, a reverse CAPTCHA field and an associated value for inclusion in the web page;
providing, from the web server computer, the web page with the reverse CAPTCHA field to the user device in response to the request, wherein the reverse CAPTCHA field is configured that when the web page is rendered at the user device the reverse CAPTCHA field is not visible in a visual presentation of the web page and the reverse CAPTCHA field has the associated value as determined at the web server computer;
receiving, at the web server computer, a response to the web page from the user device, the response including a received value associated with the reverse CAPTCHA field, the received value provided in the response to the web page from the user device;
determining an expected value of the reverse CAPTCHA field at the web server computer; and
comparing the expected value determined for the reverse CAPTCHA field at the web server computer with the received value provided in the response to the web page from the user device to determine if the response has been provided by an automated script.
2. The system of claim 1 , wherein the instructions are further executable for modifying the web page to include the reverse CAPTCHA field.
3. The system of claim 1 , wherein the reverse CAPTCHA field was selected randomly based on a set of reverse CAPTCHA rules.
4. The system of claim 1 , wherein the associated value and the expected value are determined algorithmically.
5. The system of claim 1 , wherein the value is an empty value.
6. The system of claim 1 , wherein the reverse CAPTCHA field is configured to be hidden, displayed beneath an element of the web page, or displayed offscreen.
7. A method, comprising:
receiving a request for a web page from a user device;
determining, at a web server computer, a reverse CAPTCHA field and an associated value for inclusion in the web page;
providing, from the web server computer, the web page with the reverse CAPTCHA field to the user device in response to the request, wherein the reverse CAPTCHA field is configured that when the web page is rendered at the user device the reverse CAPTCHA field is not visible in a visual presentation of the web page and the reverse CAPTCHA field has the associated value as determined at the web server computer;
receiving, at the web server computer, a response to the web page from the user device, the response including a received value associated with the reverse CAPTCHA field, the received value provided in the response to the web page from the user device;
determining an expected value of the reverse CAPTCHA field at the web server computer; and
comparing the expected value determined for the reverse CAPTCHA field at the web server computer with the received value provided in the response to the web page from the user device to determine if the response has been provided by an automated script.
8. The method of claim 7 , wherein the instructions are further executable for modifying the web page to include the reverse CAPTCHA field.
9. The method of claim 7 , wherein the reverse CAPTCHA field was selected randomly based on a set of reverse CAPTCHA rules.
10. The method of claim 7 , wherein the associated value and the expected value are determined algorithmically.
11. The method of claim 7 , wherein the value is an empty value.
12. The method of claim 7 , wherein the reverse CAPTCHA field is configured to be hidden, displayed beneath an element of the web page, or displayed offscreen.
13. A non-transitory computer readable medium, comprising instructions for:
receiving a request for a web page from a user device;
determining, at a web server computer, a reverse CAPTCHA field and an associated value for inclusion in the web page;
providing, from the web server computer, the web page with the reverse CAPTCHA field to the user device in response to the request, wherein the reverse CAPTCHA field is configured that when the web page is rendered at the user device the reverse CAPTCHA field is not visible in a visual presentation of the web page and the reverse CAPTCHA field has the associated value as determined at the web server computer;
receiving, at the web server computer, a response to the web page from the user device, the response including a received value associated with the reverse CAPTCHA field, the received value provided in the response to the web page from the user device;
determining an expected value of the reverse CAPTCHA field at the web server computer; and
comparing the expected value determined for the reverse CAPTCHA field at the web server computer with the received value provided in the response to the web page from the user device to determine if the response has been provided by an automated script.
14. The computer readable medium of claim 13 , wherein the instructions are further executable for modifying the web page to include the reverse CAPTCHA field.
15. The computer readable medium of claim 13 , wherein the reverse CAPTCHA field was selected randomly based on a set of reverse CAPTCHA rules.
16. The computer readable medium of claim 13 , wherein the associated value and the expected value are determined algorithmically.
17. The computer readable medium of claim 13 , wherein the value is an empty value.
18. The computer readable medium of claim 14 , wherein the reverse CAPTCHA field is configured to be hidden, displayed beneath an element of the web page, or displayed offscreen.
19. A system, comprising
a server computer coupled to a plurality of user devices and a plurality of payment gateways through a computer network, the server computer including:
a form generation engine:
receiving, from a user device of the plurality of user devices, a form request over the computer network in association with a web page of a merchant organization including a widget;
determining, at the server computer, a reverse CAPTCHA field and an associated value for inclusion in a form definition;
providing, from the server computer, the form definition to the user device over the computer network in response to the form request received from the user device, wherein a form having one or more fields for entering payment information is presented to a user in the web page at the user device when the form definition is rendered by the widget at the user device and the form includes the reverse CAPTCHA field having the associated value as determined at the server computer, wherein the reverse CAPTCHA field is not visible in a visual presentation of the form when the form definition is rendered by the widget at the user device; and
storing, at the server computer, form definition data, wherein the form definition data includes an identifier associated with the reverse CAPTCHA field;
a transaction processing engine:
receiving, at the server computer, a form response over the computer network from the user device, wherein the form response was sent using the form presented at the user device and the form response includes payment information for a requested payment transaction and a received value for the reverse CAPTCHA field;
storing, at the server computer, form response data in association with the form definition data; and
a reverse CAPTCHA analysis engine:
generating an expected value for the reverse CAPTCHA field at the server computer based on the identifier associated with the reverse CAPTCHA field in the form definition data;
determining, at the sever computer, the received value for the reverse CAPTCHA field from the form response data;
comparing the expected value determined for the reverse CAPTCHA field at the server computer with the received value included in the form response data from the form response received from the user device;
identifying the payment transaction as fraudulent if the received value and the expected value do not match; and
generating at the server computer, a fraud prevention response form without submitting the payment transaction to a payment gateway.