Initialization request

When a user initializes Captcha on a client application, the application sends a request to the Captcha server to obtain JavaScript (JS) resources, such as images or questions (time series chart, Step 1).

Authentication request

After a user completes a Captcha challenge, such as sliding a slider or completing a puzzle, the client application sends a request to the Alibaba Cloud Captcha server. This request is used to determine if it is from a bot (Step 3 of Interactive Verification and Step 4.1(i) of No-Captcha Verification) or if it is the initial verification in no-captcha mode (Step 3 of No-Captcha Verification).

Signature verification request

Your server calls the VerifyIntelligentCaptcha API to validate the CaptchaVerifyParam parameter. This corresponds to Step 6 in the time series chart.

Identity prefix

The identity prefix is a unique identifier for your Captcha service. After you activate Captcha 2.0, you can obtain this value from the top-right corner of the Overview page in the console. This prefix is passed as a global parameter in your client integration code.

Scene ID

A Scene ID is a unique identifier that is generated after you create and save a scene in the console. This ID is passed as an initialization parameter in the client integration code. It corresponds to configurations such as authentication type, interaction style, and security policies, and helps differentiate between business scenarios.

CertifyID

A CertifyID is a unique identifier for a single request. You can submit this ID to the product team to help them locate and troubleshoot issues.

Custom policy

Within the bot detection security policy system, you can customize certain security policies in the console to make personalized adjustments to the baseline security level. For more information, see Custom policy.

V2 technical architecture

In the V2 technical architecture, a verification request is sent from your server to the Captcha server. The verification result is then returned to your server for further processing. For more information, see the V2 verification architecture time series chart.

V3 technical architecture

In the V3 technical architecture, a verification request is sent from the business client to the Captcha server. If the verification fails, the captcha is refreshed and the interaction with the business client continues until the verification is successful. Then, the subsequent business signature verification is performed. For more information, see the V3 verification architecture time series chart.