Authentication system and method

Patent metadata

Field	Value
Publication number	US-10402548-B2
Application number	US-201515506198-A
Country	US
Kind code	B2
Filing date	Aug 24, 2015
Priority date	Aug 25, 2014
Publication date	Sep 3, 2019
Grant date	Sep 3, 2019

Abstract

An object of the present invention is to provide an authentication system and method which can reduce a burden on a user while ensuring security by using a combination of a plurality of authentication methods. A method for authentication of the present invention comprises the steps of: obtaining a first authentication performance value for each transaction based on initial input information at a transaction; determining whether or not additional authentication is required for authentication of a person by comparing the first authentication performance value and the authentication performance threshold value required for authentication of a person; presenting, if the additional authentication is required, a plurality of authentication methods from which one authentication method or a combination of authentication methods can be selected so as to satisfy an additional authentication performance value obtained using the first authentication performance value and the authentication performance threshold value; and obtaining a second authentication performance value based on additional input information using the one or more authentication methods selected from the plurality of presented authentication methods, and determining whether to authenticate by comparing the additional authentication performance value and the second authentication performance value.

First claim

The invention claimed is:

1. An authentication system comprising:
a storage storing a plurality of authentication methods and authentication performance values thereof;
a first authentication performance value calculator calculating a first authentication performance value for each transaction based on initial input information at each transaction;
an additional authentication performance value calculator, in response to determination whether or not additional authentication is required to authenticate a person by comparing a predetermined authentication performance threshold value required for authentication of a person and said first authentication performance value, calculating an additional authentication performance value using said authentication performance threshold value and said first authentication performance value if the additional authentication is required;
an additional authentication menu provider presenting a plurality of authentication methods from which one authentication method or a combination of authentication methods can be selected to satisfy said additional authentication performance value; and
an authentication determinator, in response to calculation of a second authentication performance value based on said selected one or more authentication methods from the plurality of authentication methods presented by said additional authentication menu provider, determining whether to authenticate by comparing said second authentication performance value and said additional authentication performance value.

2. The authentication system of claim 1 comprising a historical database; and
said first authentication performance value comprising an authentication performance value of historical data authentication which is obtained based on input information for each transaction and historical information obtained from said historical database.

3. The authentication system of claim 2 , wherein said input information comprises identification information of a user terminal, said historical data authentication comprises terminal authentication using user terminal identification information included in the historical information, and said authentication performance value of the historical data authentication comprises an authentication performance value of the terminal authentication.

4. The authentication system of claim 2 , if the plurality of authentication methods include an authentication method, other than said historical data authentication, whose authentication performance value can be obtained based on the initial input information, said first authentication value obtained based on said initial input information comprises said authentication performance value obtained based on said initial input information.

5. The authentication system of claim 1 , wherein part or all of the authentication performance values of the plurality of the authentication methods are changeable.

6. The authentication system of claim 1 , wherein part or all of the authentication performance values for the plurality of the authentication methods are changeable depending on a user.

7. The authentication system of claim 1 , wherein said authentication threshold value required for authentication of a person is changeable.

8. A method for authentication comprising the steps of:
obtaining a first authentication performance value based on initial input information at each transaction;
determining whether or not additional authentication is required to authenticate a person by comparing the first authentication performance value and an authentication performance threshold value required for authentication of a person;
if the additional authentication is required, presenting a plurality of authentication methods from which one authentication method or a combination of authentication methods can be selected to satisfy an additional authentication performance value which is obtained using the first authentication performance value and the authentication performance threshold value; and
obtaining a second authentication performance value based on additional input information using said one or more authentication methods selected from the plurality of presented authentication methods, and determining whether to authenticate by comparing the additional authentication performance value and the second authentication performance value.

9. The method of claim 8 , wherein said first authentication performance value comprises an authentication performance value of historical data authentication which is obtained based on input information for each transaction and historical information obtained from historical database.

10. The method of claim 8 , wherein said first authentication performance value comprises an authentication performance value of terminal authentication.

11. The method of claim 9 , wherein said first authentication performance value comprises an authentication performance value obtained based on the initial input information for an authentication method other than said historical data authentication.

12. An authentication system comprising:
a storage storing a plurality of authentication methods, authentication performance values thereof and an authentication performance threshold value required for user authentication;
a first authentication performance value calculator calculating a first authentication performance value for each transaction based on initial input information at each transaction;
a first authentication determinator determining whether or not additional authentication is required to authenticate a user by comparing said authentication performance threshold value and said first authentication performance value;
a second authentication performance value calculator, if the additional authentication is required, calculating an additional authentication performance value using said authentication performance threshold value and said first authentication performance value;
an additional authentication menu provider presenting an additional authentication menu comprising a plurality of authentication methods to the user and allowing the user to select one or more authentication methods from the additional authentication menu and enter additional information;
a third authentication performance value calculator calculating a second authentication performance value based on said additional information; and
a second authentication determinator determining whether to authenticate the user by comparing said second authentication performance value and said additional authentication performance value.

13. The authentication system of claim 12 , wherein said first authentication determinator authenticates the user if the additional authentication is not required.

14. The authentication system of claim 12 , wherein said additional authentication menu is presented on a screen.

15. The authentication system of claim 12 , wherein said storage comprises a historical database and said first authentication performance value comprises an authentication performance value of historical data authentication which is obtained based on input information for each transaction and historical information obtained from said historical database.

Assignees

• Univ Tokyo

Inventors

• Yamaguchi Rie
• Nakayama Hideki
• Harada Tatsuya
• Sakamoto Daisuke

Classifications

• G06F21/32

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• G06F21/316

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title

• G06F21/31 Primary

  User authentication · CPC title

• G06F21/30 Primary

  Authentication, i.e. establishing the identity or authorisation of security principals · CPC title