An authentication protocol has been unveiled that helps prove that people and bots are legitimate traffic without tracking users. As internet usage shifts from human-driven clicking to agent-driven activities, website operators face the challenge of blocking automated malicious traffic that infringes on personal information without tracking.

Cloudflare announced on the 24th that it has developed a privacy-based protocol called 'Private Access Control Tokens (PACT)' together with major web browser companies such as Mozilla Firefox, Google Chrome, and Microsoft Edge, as well as Shopify, and has announced an initiative to standardize it.

PACT is designed so that a site possessing information to verify that the user is a real person issues an anonymous token.

The user's browser presents this token to other sites to prove that the actual user is involved in the request.

The company explained that this allows for a reduction in reliance on CAPTCHA or tracking technologies that could compromise personal information.

It is also designed to enable verification without tracking users or identifying browsing history.

Cloudflare assesses that as automated attacks become more widespread and sophisticated due to the proliferation of generative AI, it is becoming difficult to respond using existing defense techniques alone.

Existing methods, such as forced login or excessive tracking, were also cited as limitations because they can undermine user trust.

PACT helps companies accurately identify legitimate visitors and focus resources on important traffic.

The company claims that it can secure visitor trust with minimal user inconvenience by utilizing verification information from services whose identities have already been confirmed as a personal information protection method. The side stated.

"As AI-driven traffic becomes commonplace, it is becoming difficult to effectively support it with existing tools alone," said Dane Knecht, CTO of Cloudflare. "Through this collaboration, all users, including people and agents, will be able to protect their personal information while reducing the inconvenience caused by security procedures."