TWI448921B - Captcha (completely automated public test to tell computers and humans apart) data management methods and related data management systems and computer program products thereof - Google Patents

Description

Fully automatic computer and human test data management method and related data management system and computer program product thereof

The invention relates to a data management method and a related data management system thereof, in particular to a method for automatically generating computer and human test data generation and a related management system thereof, which can strengthen the protection of transmission data.

In recent years, as the application and development of the Internet has become more and more mature, users have more and more opportunities to obtain information through the Internet. Users can use their electronic devices such as computer systems, portable devices, etc. to carry out a large number of services and applications through the network. In some web services, users must register for a particular service or confirm some information. During the registration or confirmation process, the user must view the relevant information provided by the server that provides the service and use the information to make relevant input for registration or confirmation.

Traditionally, the transmission of information between the server and the user is transmitted via computer text, which is easily falsified by malicious programs such as viruses or Trojans. Even if the virtual keyboard is used, the transmission after the user input is completed is also via the computer. Text transfer. For example, the input of the current transaction data is input by the user terminal by using a keyboard or a virtual keyboard presented on the screen. When the user selects and transmits, it is still transmitted to the server by electronic text method to identify the transaction content.

In order to prevent the contents of these personal data or operations from being stolen by others, it is necessary to strengthen the confidentiality measures of data transmission between the server and the client.

Therefore, there is a need for a method and system that can ensure the correctness of transmitted data when performing any operation between the server and the client.

In view of this, the present invention provides a data management method based on a fully automatic computer and human test data and a related data management system thereof to solve the above problems.

Embodiments of the present invention provide a method for automatically testing computer and human test data management, including the following steps. First, a server generates at least one fully automatic computer and human test data based on a first data, wherein the first data is data related to an operation. Then, the server hides the test data of the fully automatic computer and human beings into a corresponding coded data. The server transmits the encoded fully automatic computer and human test data to a user terminal through a first transmission medium, so that the user end uses the coded fully automatic computer and human test data to input a second data and transmit the first data. The second data corresponds to one of the third materials. After that, the server receives and decodes the third data to obtain the data input by the client.

The embodiment of the invention further provides a test data management system for automatically distinguishing between a computer and a human, comprising at least one server. The server generates a fully automatic computer and human test data according to a first data, and hides the fully automatic computer and human test data into a corresponding coded data, and transmits the coded automatic transmission through a first transmission medium. The computer and human test data are sent to a user end, so that the user end uses the coded fully automatic computer and human test data to input a second data and transmit the second data corresponding to the third data, and receive and decode the third data. Information to get the information entered by the client. Among them, the first data is information related to an operation.

The above method of the present invention can be recorded in physical media through code. When the code is loaded and executed by the machine, the machine becomes the means for practicing the invention.

The above and other objects, features and advantages of the present invention will become more <RTIgt;

In the embodiment of the present invention, a data management method and a related data management system based on a fully-automatic computer and human-based Turing test (Completely Automated Public Test to Tell Computers and Humans Apart) (CAPTCHA) data are provided. A server (server) and a client (client) perform an operation, wherein the server converts the data into individual CAPTCHA data according to the data set used by the user, and encodes the CAPTCHA data through a The transmission medium (for example, a network) is transmitted to the user end, and the user end selects the received CAPTCHA data for data input, and returns the coded data or the identification data corresponding to the selected CAPTCHA data to the server for data. Verification, to verify whether the data is valid, to confirm that the data sent by the client can be correctly received by the server, and then the input data is obtained to prevent improper tampering during the transmission.

In an embodiment, a method for using encoded data technology for information such as transaction information required for an operation is provided. The encoded data may be unencrypted or unencrypted data such as a watermark, a digital signature or an algorithm. The specific key generated, etc. First, a server generates human or computer identifiable digital content, wherein the information required for the transaction process is embedded in the digital content in a technique that encodes the data. Among them, the digital content includes any digit type such as text, picture, sound, video, 2D barcode. Then, the server transmits the digital content embedded in the encoded data to a user end by using a transmission medium. The user terminal can use the digital content embedded in the encoded data as the input of the operation data to process the transaction, and transmit the digital content embedded in the encoded data to the server through the transmission medium. Finally, the server can extract the digital content embedded in the encoded data according to an algorithm or multiple algorithms to identify the information required for the operation process, and achieve the information security method. Need to be reminded that the transaction information is different from the transaction transmission, the transaction transmission is similar to the digital certificate, and the user can verify the object of the server.

Figure 1 shows a data management system in accordance with an embodiment of the present invention. The data management system 100 according to the embodiment of the present invention includes at least a server 110 and a client 120. The server 110 can transmit data to and from the client 120 through a transmission medium, such as the network 130. An operation. The transmission medium, for example but not limited to, includes the network 130. Network 130 may include a wired or wireless network, such as the Internet, but is not limited thereto.

The server 110 can convert the data set of the information required for the operation into individual CAPTCHA data according to the content of the operation to be performed, such as the data attribute, and transmit it to the client 120 through the network 130. In order to avoid a large number of malicious or repetitive input behavior caused by a computer or program, CAPTCHA technology can be used to distinguish between computers or humans to recognize that the relevant input is input by the user or automatically generated by the computer. In general, CAPTCHA distinguishes text or numbers displayed on pictures that are not easily recognizable by some recognition programs, such as words or numbers displayed on distorted or lined pictures. The relevant input is generated by a computer or a human. It should be noted that in the embodiment of the present invention, the concept of the CAPTCHA technology is used to provide the CAPTCHA data corresponding to the relevant data required for the operation. However, during operation, the user can input the data through the user interface provided by the client 120, for example, by clicking on the CAPTCHA data through a browser.

The server 110 further includes a generating module 112, an encoding module 114, and a decoding module 116. The generating module 112 is configured to determine a set of first data sets according to the first data. The generating module 112 may determine a set of first data sets according to one or more first materials in the operation to be performed and generate a set of CAPTCHA data corresponding to the first data set. The first data may be information related to the operation, such as user-related data or important information, such as the user's personal identification data, account number, transfer amount, address, and the like. The first set of data may contain all possible data corresponding to the first material. For example, when the first data is a digital data, the corresponding first data set may be the numbers 0-9. Therefore, the generation module 112 can generate a set of CAPTCHA data including the numbers 0-9 according to the characteristics of the digital material, but the present invention is not limited thereto. When the first data includes a character data consisting of one or more characters, the generating module 112 can generate a set of CAPTCHA data including the English letters A-Z according to the characteristics of the character data.

For example, but not limited to, in an embodiment, when the operation is a online banking transfer operation, the data input during operation may include an account number and a transfer amount, and therefore, the server 110 will generate numbers 0-9 respectively. Corresponding 10 CAPTCHA data 200-209, as shown in Figure 2. The 10 CAPTCHA data of Fig. 2 will be encoded and then transmitted to the client 120 for data input. It should be noted that in this example, the CAPTCHA data 200-209 is a picture. However, in some embodiments, in addition to the pictures, the CAPTCHA data may also be video or sound.

After the generating module 112 generates a set of CAPTCHA data corresponding to the first data set, the encoding module 114 can individually hide all the generated CAPTCHA data of the generating module 112 into a corresponding encoded data. In some embodiments, the encoded data may be unencrypted data or encrypted data, such as a watermark, a digital signature, or a particular key generated by an algorithm. In some embodiments, the encoded data is an identification code corresponding to one of the fully automated computer and human test data. Referring to FIG. 3, a schematic diagram of a CAPTCHA data according to an embodiment of the present invention is shown. As shown in FIG. 3, the CAPTCHA data 300 further includes an encoded data 310, which may be a unique hash number corresponding to each CAPTCHA data, and the hash number may be via a hash table. Generated by look-up table or directly by a given hash function.

The CAPTCHA data stored in the encoded data will be transmitted to the client 120, causing the client 120 to use the generated fully automated computer and human test data for input, and the server terminal 110 performs the operation. The client 120 can receive and display the CAPTCHA data generated by the server 110 through the network 130, and input the corresponding data by using the received CAPTCHA data. During operation, the client 120 may first input a second data by using the coded fully automatic computer and human test data, and then transmit a third data (eg, coded data) corresponding to the second data to the servo. The terminal 110 performs verification. The client 120 may further include a decoding module 122 for analyzing the CAPTCHA data to obtain the encoded data, and then generating the corresponding third data according to the input second data and the analyzed encoded data. For example, when the encoded data in the CAPTCHA data is an identification code (for example, a hash number), the decoding module 122 can analyze the CAPTCHA data, obtain the corresponding identification code, and then according to the input second data and the analyzed The identification code generates an identification code (third data) corresponding to the second data.

The decoding module 116 is configured to decode the data transmitted by the client 120, decode the encoded data (for example, an identification code) from the third data transmitted by the client 120, and determine whether the data is based on the content indicated by the encoded data. The original information was the same, and the content of the input was obtained. The detailed CAPTCHA data management method will be introduced below.

Figure 4 is a flow chart showing a CAPTCHA data management method in accordance with an embodiment of the present invention. Please refer to both Figure 1 and Figure 4. The CAPTCHA data management method according to the embodiment of the present invention can be applied to the data management system 100 for inputting data required for an operation.

First, in step S402, the server 110 generates one or more CAPTCHA data according to the data attributes in the operation and hides the generated one or more CAPTCHA data into an encoded data according to step S404. For example, the encoded material can be an identification code corresponding to one or more CAPTCHA data. After the encoded data is hidden, in step S406, the server 110 transmits the encoded CAPTCHA data to the client 120 through a first transmission medium (such as the network 130). For example, but not limited to, in an embodiment, when the operation is an online banking transfer operation, the information required for the operation may include an account number and a transfer amount data, and therefore, the server 110 will generate numbers 0-9 respectively. Corresponding 10 CAPTCHA data, and each identification code of each CAPTCHA data is specified. In another embodiment, if the account data includes a combination of English letters and numbers, the server 110 can generate 36 CAPTCHA data corresponding to the letters AZ and 0-9, respectively, and assign a specific hash number to each CAPTCHA data. .

Then, in step S408, the client 120 receives and displays the CAPTCHA data, and in step S410, uses the CAPTCHA data to input a first data and, as in step S412, generates a second data corresponding to the first data. The first data may be composed of one or more CAPTCHA data, and the second data may be the identification data corresponding to the first data. For example, the second data may be an identification code corresponding to the first data (eg, a specific hash number), a corresponding CAPTCHA data or its summary information, a first data and a corresponding operation result (eg, a riddle answer) or a coordinate Information, but not limited to this. In an embodiment, when the operation to be performed is an online banking transfer operation, the input first data may include transfer related materials, such as account number, transfer amount, name of the transaction object, currency unit, and the like. In another embodiment, when the operation to be performed is a login operation, the input first data may include login related information that can be used for identity identification, such as a user's account number, password, and/or other login requirements. Authentication information. In this step, the decoding module 122 of the client 120 can analyze the CAPTCHA data, obtain the corresponding encoded data, for example, a unique hash number, and generate the corresponding first data according to the input first data and the analyzed encoded data. Encoding data (second data).

After the second data is generated, the client 120 transmits the second data to the server 110 as in step S414. For example, if a step is the step of inputting the amount, the user can input the number by clicking the CAPTCHA data corresponding to the amount of the amount to be input, and the client 120 will corresponding code corresponding to the CAPTCHA data or the CAPTCHA data ( For example, the hash number is transmitted to the server 110 to verify whether the data correctly communicates with the server 110, thereby causing the server 110 to obtain the input data content.

In step S416, when the server 110 receives the second data transmitted by the client 120, step S418 is performed to determine whether the received data is valid data. In an embodiment, the server 110 may determine whether the data is valid according to the format or content of the received data. When the format and content of the received data are correct, the server 110 determines that the received data is valid data, and vice versa.

When it is determined that the data is invalid data (No in step S418), it indicates that the received data may not be generated by the server 110 or transmitted by the client 120, and the data has been changed, so the process ends. At this time, the user may be further prompted to re-enter or directly prohibit the user from performing subsequent input. When it is determined that the data is valid data (YES in step S418), in step S420, the server 110 may obtain the data input according to the received data. For example, when the received data is a hash number, the server 110 may obtain a hash number from the received data, and use the lookup table or a hash function to obtain the client 120 according to the hash number. Enter the information.

Thereafter, in step S422, the server 110 may continue to receive the next data from the client 120 and repeat steps S416 to S422 to obtain the input material content. If any invalid data is found in the middle, the entire process is stopped. Therefore, it is ensured that the input data is not arbitrarily falsified, ensuring the safety of the operation.

In some embodiments, the encoded material can be a unique identification code. For example, the server 110 may assign a unique hash number to each generated CAPTCHA data, and then transmit it to the client 120 for selection, and then use the hash number of the image returned by the client 120 to use the lookup table. To get the content of the input data. In some embodiments, the server 110 may also use a hash function to obtain the input data content by using a hash function of the hash number of the image returned by the client 120.

As mentioned above, the CAPTCHA data can include a picture, a video, and/or a sound. In some embodiments, server 110 can transmit one or a set of pictures, videos, and/or sounds to client 120 for selection. The user terminal 120 can directly select a picture, a video, and/or a sound or select a certain data corresponding to the picture, the video, and/or the voice to input the data, and then transmit the selected data to the server 110. In one embodiment, the server 110 can transmit a picture or a set of sounds to the client 120 for selection.

In some embodiments, when the CAPTCHA data is a picture, the server 100 can generate a clickable area on the picture to provide a plurality of clickable targets for clicking. For example, the clickable area may be a block representing a keyboard, the keyboard is randomly displayed in a specific area of the picture, and the arrangement of the input data is also randomly generated. Please refer to FIG. 5A and FIG. 5B for a schematic diagram of a CAPTCHA data according to another embodiment of the present invention. As shown in FIG. 5A, the CAPTCHA data 500 further includes a clickable area 510, which is displayed in a specific area 520 of the CAPTCHA material and the numbers 0-9 in the selectable area 510 are sequentially Arranged in a specific area. As shown in FIG. 5B, the clickable area 510 in the CAPTCHA material 500 is displayed in the specific area 530 of the CAPTCHA material and the number keys 0-9 in the selectable area 510 are arranged as shown in the figure, rather than in the order. Arranged in the keyboard area. The server 110 can transmit the CAPTCHA data including the clickable area 510 to the client 120. When the client 120 receives and displays the CAPTCHA data, the user of the client 120 can click a location of the clickable area 510 in the specific area to input the desired material. For example, the user can click the position P9 of the area 520 of FIG. 5A or the position P6 of the area 530 of the 5B figure to input the number "9". When the client 120 receives the selection, the coordinate information corresponding to the location is transmitted to the server 110. Therefore, the server 110 receives the coordinate information transmitted by the client 120 and determines the data input by the client according to the coordinate information. For example, if the coordinate of the position 9 of the area 520 of FIG. 5A is (x, y), when the server 110 receives the coordinate information, it can infer that the content of the data input is based on its position. The number "9". Note that the coordinate information can be absolute coordinates or relative coordinates (relative to coordinates at a certain location). For example, the client 120 can set the coordinate of the confirmation key to the coordinate (0, 0), and then transmit the corresponding one of the target information to the server 110, and the server 110 can obtain the data content input by the server 110. It should be noted that although the clickable area 510 in FIG. 5A and FIG. 5B only displays numeric keys, in some embodiments, the clickable area 510 may also include keys of all physical keyboards for the user terminal 120. Users make input and selection.

Figure 6 is a flow chart showing a data management method according to another embodiment of the present invention. Please refer to both Figure 1 and Figure 6. The data management method according to the embodiment of the present invention can be applied to the data management system 100 for inputting data required for an operation.

First, in step S602, the server 110 generates a CAPTCHA data according to the data attribute in the operation, wherein the CAPTCHA data includes a clickable area, and the selectable area is randomly displayed in a specific area of the picture, and the input data is The arrangement is also randomly generated (as clickable area 510 shown in Figure 5A). For example, but not limited to, in an embodiment, when the operation is a online banking transfer operation, the information required for the operation may include an account number and a transfer amount data, and therefore, the server 110 will generate the image as shown in FIG. 5A. The CAPTCHA data of area 510 can be clicked.

Thereafter, in step S604, the server 110 transmits the CAPTCHA data containing the clickable area to the client 120. The server 110 can transmit the CAPTCHA data including the clickable area to the client 120 through a first transmission medium (such as the network 130).

The client 120 receives and displays the CAPTCHA data, and in step S606, the client 120 selects a specific location (eg, a certain button location) of the clickable area of the specific area, and returns the coordinate information of the location to the server 110. . Then, in step S608, the server 110 can obtain the input data according to the returned coordinate information.

In some embodiments, the encoded material may be a piece of text or a picture that is used to prompt the client 120 to perform a specific operation, such that the client 120 generates a result corresponding to the particular operation to the server 110. In one embodiment, the piece of text or picture may represent a human understandable operation, such as representing a riddle or a game. For example, the server 110 may add the encoded data representing a riddle to the CAPTCHA data and transmit it to the client 120, so that the client 120 must return the information including the answer corresponding to the riddle for verification by the server 110.

An embodiment is exemplified below to assist in explaining the details of data management in accordance with the present invention, but the present invention is not limited thereto. In this embodiment, assuming that an operation is an online banking transfer transaction, the data of the "transfer account number" and the "amount" in the transaction may be defined as input data in the transaction, and " The data set corresponding to the "transfer account" and "amount" data may be the numbers "0" - "9" and the letters "A" - "Z", for example, the "transfer account number" may be "A123456" and the "amount" may be "1000", therefore, the numbers "0"-"9" and the letters "A"-"Z" are possible data sets, so according to the CAPTCHA data management method of the present invention, the generating module 112 of the server 110 will be respectively Generate corresponding CAPTCHA data for 0-9 and AZ.

The encoding module 114 of the server 110 then stores all of the generated CAPTCHA data into a coded material, such as a hash number. Then, the encoded CAPTCHA data can be transmitted to the client 120, and the encoded CAPTCHA data can be used for the transaction. Then, the client 120 can transmit the encoded data corresponding to the selected CAPTCHA data to the server 110, so that the server 110 verifies and obtains the data content input by the client 120 according to the received data.

In summary, according to the data management method and related data management system of the present invention, a set of CAPTCHA data can be generated according to a possible data set of input data required for an operation to be performed, and then the group of CAPTCHA data is added. A specific coded data, such as an identification code, to further protect the transmitted and received data, can enhance the security of the current transaction method, and use the CAPTCHA data (such as pictures) to replace the virus more easily on the server side and the user end. Or the hacked computer text is safer than the computer text transmission in the past, and can apply the hidden information technology to the operation content, such as the transmission of transaction content, to ensure the security of the data transmitted by the client and the server, and It ensures that important materials in the transmission process are not lost or stolen. Furthermore, the data management method according to the present invention can further provide a variety of CAPTCHA data such as a set of audio, video or CAPTCHA data containing the aforementioned clickable areas, riddles or games as a user input input, which can be further The input data is protected from viruses or Trojans through interactive input between the server and the client.

The method of the present invention, or a specific type or part thereof, may be included in a physical medium such as a floppy disk, a compact disc, a hard disk, or any other machine (for example, a computer readable computer). A storage medium in which, when the code is loaded and executed by a machine, such as a computer, the machine becomes a device for participating in the present invention. The method and apparatus of the present invention can also be transmitted in a code format through some transmission medium such as a wire or cable, an optical fiber, or any transmission type, wherein the code is received, loaded, and executed by a machine such as a computer. At this time, the machine becomes a device for participating in the present invention. When implemented in a general purpose processor, the code in conjunction with the processor provides a unique means of operation similar to application specific logic.

While the present invention has been described in its preferred embodiments, the present invention is not intended to limit the invention, and the present invention may be modified and modified without departing from the spirit and scope of the invention. The scope of protection is subject to the definition of the scope of the patent application.

100‧‧‧Data Management System

110‧‧‧Server

112‧‧‧ generating module

114‧‧‧Code Module

116‧‧‧Decoding module

120‧‧‧User side

122‧‧‧Analysis module

130‧‧‧Network

200-209, 300‧‧‧CAPTCHA data

310‧‧‧ Coded information

S402-S422‧‧‧Steps for implementation

500‧‧‧CAPTCHA information

510‧‧‧Clickable area

520, 530‧‧‧ areas

P6, P9‧‧‧ position

S602-S608‧‧‧Execution steps

Figure 1 shows a data management system in accordance with an embodiment of the present invention.

Figure 2 is a schematic diagram showing CAPTCHA data in accordance with an embodiment of the present invention.

Figure 3 is a diagram showing a CAPTCHA data containing encoded data in accordance with an embodiment of the present invention.

Figure 4 is a flow chart showing a CAPTCHA data management method in accordance with an embodiment of the present invention.

5A and 5B are schematic views showing CAPTCHA data according to another embodiment of the present invention.

Figure 6 is a flow chart showing a CAPTCHA data management method according to another embodiment of the present invention.

S402-S422. . . Steps

Claims (17)

A fully automatic computer and human test data management method includes the following steps: a server end generates at least one fully automatic computer and human test according to a first data (Completely Automated Public Test to tell Computers and Humans Apart, CAPTCHA Data, wherein the first data is data related to an operation; the server hides the fully automatic computer and human test data into a corresponding coded data; the server transmits the code through a first transmission medium After the automatic separation of the computer and human test data to a client, the user uses the coded fully automatic computer and human test data to input a second data and transmit the second data corresponding to a third Data; and the server receives and decodes the third data to obtain data input by the client, wherein the fully automatic computer and human test data includes a picture with a clickable area, which can be selected The area is randomly displayed in a specific area of the picture, and the method further includes: The server receives a coordinate information transmitted by the client, and determines, according to the coordinate information, the data input by the user end, wherein the coordinate information is selected by the user endpoint in the selectable area of the specific area. The location is generated. For example, the fully automatic computer and human test management method described in claim 1 of the patent scope, wherein the coded data corresponds to the full self An identification code that distinguishes between computer and human test data. A fully automatic computer and human test management method as described in claim 2, wherein the identification code comprises a hash number. The method for automatically distinguishing between a computer and a human test management method as described in claim 3, wherein the step of the server receiving and decoding the third data to obtain the data input by the client further comprises: the server The hash number is obtained from the third data, and according to the hash number, a table lookup method is used to obtain the data input by the client. The method for automatically distinguishing between a computer and a human test management method as described in claim 3, wherein the step of the server receiving and decoding the third data to obtain the data input by the client further comprises: the server The hash number is obtained from the third material, and a hash function is used to obtain the data input by the client according to the hash number. The fully automatic computer and human test management method as described in claim 1, wherein the fully automatic computer and human test data further includes a video and/or a sound. The method for fully automatic computer and human test management according to claim 1, wherein the coded data is a piece of text or a picture, the piece of text or picture is used to prompt the user to perform a specific operation, so that the The client generates a result corresponding to one of the specific operations to the server. A fully automatic computer and human test management method as described in claim 7 wherein the text or picture represents a riddle or a game. A fully automatic test computer and human test data management system The system includes: a server for generating a fully automatic computer and human test data according to a first data, and hiding the fully automatic computer and human test data into a corresponding coded data, through a first transmission medium Transmitting the coded fully automatic computer and human test data to a user end, so that the user end uses the coded fully automatic computer and human test data to input a second data and transmit the second data corresponding to a third data, and receiving and decoding the third data to obtain data input by the user end, wherein the first data is data related to an operation and wherein the fully automatic distinguishing computer and human test data comprises Having a picture of a clickable area, the picture is a clickable area, the clickable area is randomly displayed in a specific area of the picture, and the server further receives a coordinate transmitted by the user end Information and determining the data input by the user terminal according to the coordinate information, wherein the coordinate information is selected by the user endpoint Given area of the region can be generated by one click position. For example, the fully automatic computer and human test management system described in claim 9 is wherein the coded data is an identification code corresponding to the test data of the fully automatic computer and human. A fully automatic computer and human test management system as described in claim 10, wherein the identification code comprises a hash number. The fully automatic computer and human test management system as described in claim 11, wherein the server is further included in the third data. The hash number is obtained, and according to the hash number, the data input by the client is obtained by using a look-up table. The fully automatic computer and human test management system according to claim 11, wherein the server further obtains the hash number from the third material, and according to the hash number, uses a hash function to obtain the The data entered by the client. The fully automatic computer and human test management system as described in claim 9 of the patent application, wherein the fully automatic computer and human test data further comprises a video and/or a sound. The fully automatic computer and human test management system according to claim 9 , wherein the coded data is a piece of text or a picture, the piece of text or picture is used to prompt the user to perform a specific operation, so that the The client generates a result corresponding to one of the specific operations to the server. The fully automatic computer and human test management system as described in claim 15 wherein the text or picture represents a riddle or a game. A computer program product, which is loaded by a machine to perform a fully automatic computer and human test data management method, the computer program product comprising: a first code for generating at least one full based on a first data Completely Automated Public Test to Tell Computers and Humans Apart (CAPTCHA) data, wherein the first data is data related to an operation; and a second code is used to automatically distinguish the data. Computer and human The test data is hidden in a corresponding coded data; a third code is used to transmit the encoded fully automatic computer and human test data to a client through a first transmission medium, so that the user uses the code Automatically distinguishing computer and human test data into a second data and transmitting a third data corresponding to the second data; and a fourth code for receiving and decoding the third data to obtain the client The input data, wherein the fully automatic computer and human test data comprises a picture having a clickable area, the selectable area is randomly displayed in a specific area of the picture, and the fourth code is further The method is configured to receive a coordinate information transmitted by a user terminal, and determine, according to the coordinate information, the data input by the user terminal, wherein the coordinate information is selected by the user endpoint in the selectable region of the specific region. The location is generated.