Sorry to rain on your parade, but this is not new and it won't work on any significant scale.
Search Google (groups) for Challenge/Response and you will find plenty of discussion, some dating back years.
Why won't it work? Well I have no time to provide all possible illustrations, but one should suffice:
- say you have users who wish to sign up to a properly maintained, confirmed opt-in mailing list.
- they sign up at a web page and the list server sends the confirmation email with a token to verify the opt in.
- your server sends the challenge (type in the code you see in this messy bitmap) to the list server
- the list server a) ignores it b) forwards it to the list administrator who ignores it
- your user never sees opt in confirmation and can never thus opt in
Actually while I am thinking about it there is the worse scenario of the deadly embrace where two C/R systems start forwarding challenges to each other in an infinite loop.
I am quite sure with a bit of ingenuity you could create a C/R system using native Notes/Domino functionality but it really isn't worth the trip - sorry.
Chris Linfoot
http://chris-linfoot.net