Patent ID: 9705893
Date: 2017-07-11
CPC Classifications: G06F,H04L,H04W

Claim:
1. A method comprising: sending, from a user device to a computing device, a request including a device identifier (ID) identifying the user device; receiving, from the computing device, a request ID and a human challenge-response test to determine whether the request originated from a human user, the request ID being at least one of an application ID or a one-time key generated by the computing device; receiving, from a user interface of the user device, a user's solution to the human challenge-response test; sending, to the computing device, the request ID and a response hash value computed over a set of data elements, the set of data elements including the user's solution, and at least one of the device ID or the request ID received from the computing device; and receiving, from the computing device, an indicator indicating whether the request is permitted, wherein whether the request is permitted is determined based on at least whether a variable expiration time period associated with the request has lapsed when the response hash value is received by the computing device, the variable expiration time period being set based on at least information received in the request.