JP6505573B2 - Authentication system, authentication server, business server and user terminal - Google Patents

Description

  The present invention relates to an authentication system that performs authentication when using a service.

  Conventionally, various services are provided via a communication network. In these services, in order to prevent impersonation etc., the personal identification technology which confirms the identity of the user is adopted. There are a wide variety of authentication methods in the personal authentication technology, but the service provider usually decides which authentication method to use.

Patent Document 1 proposes a technique for setting and managing a security level for each security target, and selecting an authentication method to be used at the time of authentication according to this level.
Patent Document 2 proposes a technique for performing authentication using an authentication method selected by the user itself, and determining whether an authentication point of this authentication method has reached an authentication level required by a service provider. .

JP 2005-227934 A JP, 2010-67124, A

  By the way, in each of the provided services, the level of authentication required varies, and it was difficult to set these appropriately. In addition, it was difficult to select an appropriate combination of authentication methods according to the level of authentication required.

  An object of the present invention is to provide an authentication system, an authentication server, an operator server, and a user terminal capable of appropriately determining a combination of authentication methods according to services.

  An authentication system according to the present invention is an authentication system including a user terminal using a service, an enterprise server providing the service, and an authentication server performing authentication of the user, wherein the user terminal is a part of the service. An authentication request unit for making a request, and an authentication information transmission unit for transmitting authentication information for each of the authentication methods determined in the authentication server, wherein the business entity server is configured for each type of damage contents assumed in the service. Service point management that manages the service points that indicate the security of the authentication required by the service, calculated by integrating the volume of the damage content and the index based on the difficulty of recovery or deletion of the damage content The authentication server, in addition to security points indicating security against attacks for each authentication method, one-time, An authentication point management unit that manages an authentication point indicating security obtained by a combination of the authentication methods, which is calculated based on at least one of the indicators of property authentication and multi-factority; An authentication method determination unit that preferentially determines a combination having a small difference between the authentication point and the service point among combinations of the authentication methods that are equal to or higher than the service point, and an authentication method determined by the authentication method determination unit And an authentication processing unit that receives the authentication information for each combination and performs an authentication process.

  The user terminal includes an acquisition unit that acquires terminal information of at least one of time information at the time of authentication execution, position information, peripheral information, and moving means information, and a terminal information transmission unit that transmits the terminal information; The authentication server calculates a status point indicating the priority of the combination of the authentication methods at the time of performing authentication based on the terminal information and the usability point indicating the convenience of the user for each of the authentication methods. A point determination unit may be provided, and among the combinations of the authentication methods in which the authentication point is at least the service point, the authentication method determination unit may preferentially determine a combination in which the situation point is large.

  The situation point determination unit may calculate the situation point using a function different from one authentication method to another using the terminal information as a parameter.

  The user terminal, for each of the authentication methods, at least one of input information among priorities or points selected by the user, time required for registration and authentication procedures, and indicators based on the frequency of registration and authentication failures. And the input information transmission unit for transmitting the input information, and the authentication server determines the usability point determination unit for calculating the usability point based on the input information for each of the authentication methods. You may have.

  The situation point determination unit may calculate the situation point using different calculation formulas depending on whether the combination of the authentication methods is an AND, an OR, or a weighting pattern.

  In the combination of the authentication methods, the execution order of each authentication method may be determined according to the size of a single situation point of the authentication method for each of the patterns.

  The security point may be calculated based on at least one of an attack success probability for each type of the attack, a cost required for the attack, and a time.

  The security point combines an index based on the success probability of the 100% attack, and an attack success probability regarding an attack having the highest attack success probability among the special attacks other than the 100% attack, an index based on cost and time required for the attack It may be calculated.

  The authentication point may be calculated using different calculation formulas depending on whether the combination of the authentication methods is AND, OR, or weighting.

  An authentication server according to the present invention is an authentication server for authenticating a user who uses a service provided by a business entity server, and the quantity of the damage contents for each type of damage contents assumed in the service, And a service point indicating the security of the authentication required by the service, calculated by integrating an index based on the difficulty of recovery or deletion of the damage content and managed by the business server, the user terminal Based on at least one of the one-time property, the property authentication property and the multifactorial index, in addition to the service point acquisition unit received via the network and the security point indicating security against an attack for each authentication method. An authentication point management unit that manages an authentication point indicating security obtained by the combination of the authentication methods calculated by the authentication method; An authentication method determination unit that preferentially determines a combination having a small difference between the authentication point and the service point among combinations of the authentication methods that are equal to or higher than the service point, and an authentication method determined by the authentication method determination unit And an authentication processing unit that receives authentication information from the user terminal for each combination and performs an authentication process.

  The provider server according to the present invention is a provider server that provides a service to a user terminal authenticated by the authentication server, and the quantity of the damage content for each type of damage content assumed in the service, and A service point management unit that manages a service point indicating the security of the authentication required by the service, which is calculated by integrating an index based on the difficulty of recovery or deletion of the damage content; A request processing unit that provides the service point in response to a request for the service and redirects to the authentication server, and the authentication server, in addition to security points indicating security against attacks for each authentication method, one time Combination of the authentication methods calculated based on at least one of the property, the property authentication property, and the multi-factor property index Among the combinations of authentication methods in which an authentication point indicating security obtained from the above is the service point or more, after a priority is given to a combination having a small difference between the authentication point and the service point, the determined authentication method And a service providing unit that starts providing a service to the user terminal in response to receiving a notification indicating that the authentication is successful for the combination.

  The user terminal according to the present invention is a user terminal that uses a service provided by the business entity server, and the quantity of the damage contents for each type of damage contents assumed in the service, and the damage contents The service point is obtained by integrating the index based on the difficulty of collection or deletion of data, and managed by the business server, and indicates the security of the authentication required by the service, and authenticates it to the authentication server At least one of the one-time property, the property authentication property, and the multifactorial property, in addition to the authentication request unit which makes a request, and the security point indicating the security against the attack for each authentication method in the authentication server In the authentication method, the authentication point indicating the security obtained by the combination of the authentication methods calculated based on Of combined seen, after determining with priority combinations difference of the authentication point and the service point is small, and an authentication information transmitting unit for transmitting the authentication information for each authentication method the determined.

  According to the present invention, it is possible to appropriately determine the combination of authentication methods according to services.

It is a figure showing the composition of the attestation system concerning an embodiment. It is a figure which shows the procedure which determines the combination of the authentication method which concerns on embodiment. It is a flowchart which shows an example of the combination determination process of the authentication method which concerns on embodiment. It is a sequence diagram which shows the registration process of the input information which concerns on embodiment. It is a sequence diagram which shows the collation information registration process for utilizing the authentication system which concerns on embodiment. It is a sequence diagram showing processing of selection and attestation of an authentication method concerning an embodiment.

Hereinafter, an example of the embodiment of the present invention will be described.
FIG. 1 is a diagram showing the configuration of an authentication system 1 according to the present embodiment.

  The authentication system 1 includes a user terminal 10 that uses a service, an enterprise server 20 that provides a service, and an authentication server 30 that authenticates a user.

  The user terminal 10, the provider server 20, and the authentication server 30 are connected to one another via a network. When the user uses the service in the user terminal 10, the service request is redirected to the authentication server 30, and after the legitimacy of the user is authenticated, the business server 20 provides the service.

  The user terminal 10 includes an authentication request unit 11, an input unit 12, an input information transmission unit 13, a terminal information acquisition unit 14, a terminal information transmission unit 15, and an authentication information transmission unit 16.

The authentication request unit 11 requests the provider server 20 for a service.
The input unit 12 receives, for each authentication method, at least one of input information selected from the priority or point selected by the user, the time required for the registration / authentication procedure, and the index based on the frequency of registration / authentication failure.
The input information transmission unit 13 transmits the input information accepted by the input unit 12 to the authentication server 30 for usability point calculation indicating the convenience of the user for each authentication method.

The terminal information acquisition unit 14 acquires terminal information of at least one of time information at the time of authentication execution, position information, peripheral information, and moving means information.
The terminal information transmission unit 15 transmits the terminal information acquired by the terminal information acquisition unit 14 to the authentication server 30 for calculating a status point indicating the priority of the combination of authentication methods at the time of execution of authentication.

  The authentication information transmission unit 16 transmits authentication information for each of the authentication methods determined in the authentication server 30.

  The provider server 20 includes a service point management unit 21, a request processing unit 22, and a service providing unit 23.

  The service point management unit 21 stores and manages a service point indicating the security of the authentication required by the service, which is calculated by the service point determination process described later in the authentication server 30.

  The request processing unit 22 provides a service point managed by the service point management unit 21 in response to a request for service from the user terminal 10, and redirects the service point to the authentication server 30.

  After the service providing unit 23 determines the combination of the authentication methods in the authentication server 30, the service providing unit 23 receives the notification indicating that the authentication for the determined combination of authentication methods is successful. Start providing services to 10

  The authentication server 30 includes a service point acquisition unit 31, an authentication point management unit 32, a usability point determination unit 33, a status point determination unit 34, an authentication method determination unit 35, and an authentication processing unit 36.

  The service point acquisition unit 31 receives the service point managed by the provider server 20 via the user terminal 10.

  The authentication point management unit 32 stores and manages an authentication point indicating security obtained by a combination of authentication methods, which is calculated by an authentication point determination process described later.

The usability point determination unit 33 calculates usability points by usability point determination processing described later based on the input information received from the user terminal 10 for each authentication method.
The situation point determination unit 34 calculates a situation point by the situation point determination process described later, based on the usability points and the terminal information received from the user terminal 10.

The authentication method determination unit 35 determines a combination of authentication methods by an authentication method determination process described later, based on the authentication point, the service point, and the status point.
The authentication processing unit 36 receives authentication information from the user terminal 10 for each combination of authentication methods determined by the authentication method determination unit 35, and performs an authentication process.

FIG. 2 is a diagram showing a procedure for automatically determining an optimum combination of authentication methods from among the authentication methods existing in a wide variety of types in the authentication system 1 according to the present embodiment.
Here, for example, although the following authentication methods may be mentioned in the present embodiment, the present invention is not limited thereto, and various authentication methods may be used.
・ Password authentication ・ 4 digit password authentication ・ 8 digit password authentication ・ Pattern authentication ・ Authentication using secret question ・ One-time password authentication ・ One-time pattern authentication ・ SIM authentication ・ Device authentication ・ Use secret key Authentication by signature ・ Authentication by random number table ・ Handprint authentication ・ Fingerprint authentication ・ Face authentication ・ Uranium vein authentication ・ Finger vein authentication ・ Iris authentication ・ Voice authentication ・ Signature authentication ・ Multi-factor authentication ・ Image authentication (CAPTCHA)
-Position authentication-Risk based authentication-Multi-path authentication

(Service point determination process)
In the service point determination process, it is determined from the following three types of items input by the administrator of the authentication server 30 or the provider server 20 how much the required service is required.

(A) Type of damage content In the service provided by the service provider, assuming that the type of damage will be suffered if a spoofer is spoofed, money, personal information, etc. will be used as the type of damage content. The item of is input.

(B) Quantity of damage contents In the service provided by the service provider, assuming that the damage will be incurred if the spoofing by fraudsters is performed, the amount of damage contents will be the amount of money (in the case of money), Items such as the number (in the case of personal information) are input.

(C) Difficulty in recovery and deletion of damage content In the service provided by the service provider, assuming that it is difficult to collect or delete the damage received, if the spoofing by an unauthorized person is performed, the damage content Items such as the collection difficulty rate (in the case of money) and the deletion difficulty rate (in the case of personal information) are input as the collection / deletion difficulty of

At this time, the service point is calculated by the following equation.
Service Point = "Money""Money" x "Recovery ratio" x Psr1
+ "Number" in "Personal Information" × "Destruction difficulty rate" × Psr2
+ "Quantity" in "Others" × "Intractability / deletion ratio" × Psr3

However, Psr1, Psr2, Psr3 mean the following.
・ Psr1: Parameter for normalizing the damage content on “Money” Psr2: Parameter for normalizing the damage content on “Personal Information” Psr3: Parameter for normalizing the damage content on “Others”

(Usability point determination process)
In the usability point determination process, it is determined which authentication method the user wants to use preferentially from the following three items input by the service user.

(A) Priority of user selection or point In using services provided by a service provider, an authentication method that can be selected as an item indicating which authentication method the user wishes to select preferentially, and Priorities or points (for example, 0 to 100) are input.
When the priority is input, it may be converted into points according to a predetermined rule. For example, when the first to fourth priorities are specified for the four authentication methods, the first place is converted to 100 points, the second place to 75 points, the third place to 50 points, and the fourth place to 25 points. It may be done.
Moreover, when only a specific authentication method is prioritized, for example, 100 points may be input for this authentication method, and 0 points may be input for another authentication method.

(B) Registration / Authentication Elapsed Time In using the service provided by the service provider, in the authentication method selectable by the user, how long is it for registration of information used for authentication such as password or biometric information, and authentication processing? As an item indicating whether time is required, the registration / authentication elapsed time in the selectable authentication method is input.
The data to be input may be a specific time (minute or second) or a graded level value.

(C) Registration / Authentication Failure Count In using the service provided by the service provider, in the authentication method that can be selected by the user, it is an assumed item indicating how many times failed before registration / authentication succeeds The number of registration / authentication failures in the selectable authentication method is input.

At this time, the usability point is calculated, for example, according to the following equation, using the user selection point, which is a subjective index, and the registration / authentication elapsed time and the registration / authentication failure frequency, which are objective indices. .
Usability point = "Point of user selection" in authentication method × Pus 1
+ Pus 2 / ("Registration / Authentication elapsed time" in the relevant authentication method)
+ Pus 3 / (Number of registration / authentication failures in this authentication method)

However, Pus1, Pus2, and Pus3 mean the following.
-Pus1: Parameter for normalizing "point of user selection"-Pus2: Parameter for normalizing "registration and authentication elapsed time"-Pus3: for normalizing "number of registration and authentication failure" Parameter

(Status point determination process)
In the situation point determination process, it is determined which combination of authentication methods should be preferentially used according to what situation the user is currently in, from the following five types of input items.

(A) Usability point The selectable authentication method and the usability point calculated by the usability point determination process with respect to this authentication method are input.

(B) Time information In using the service provided by the service provider, time information indicating when the user intends to use the target authentication method is input.

(C) Location information In using the service provided by the service provider, location information indicating where the user intends to use the target authentication method is input.

(D) Peripheral information In using the service provided by the service provider, peripheral information indicating the user's intention to use the target authentication method is input.
The peripheral information is an item that represents a situation that may be convenient or inconvenient depending on the selected authentication method, for example, whether it is a bright place or a dark place, a quiet place or a noisy place, or there are no people nearby. It is.

(E) Mobile Means Information In using the service provided by the service provider, mobile means information is input indicating how the user intends to use the target authentication method while moving.
The moving means information indicates, for example, the type of train, walking, stationary, and the like.

At this time, the situation point in one authentication method is calculated by the following equation.
Status point in one authentication method = "usability point"
× f (Pst1, Pst2, Pst3, Pst4) × Pst5

However, f, Pst1, Pst2, Pst3, Pst4, and Pst5 mean the following.
F: function using time information, position information, surrounding information, moving means information as parameters Pst1: parameter indicating time information when the target authentication method is used Pst 2: position information where the target authentication method is used Parameters representing Pst3: Parameter representing peripheral information in which the target authentication method is used Pst4: parameter representing transport means information in which the target authentication method is used Pst5: for normalizing status points in the target authentication method Parameters of

Note that f is a function that differs for each authentication method.
For example, in the case of voice authentication, it is important to use the volume of the surrounding area (quiet place or noisy place) as the peripheral information, and in the case of password authentication, there may be people nearby (risk of watching) Is important). Further, the importance of time information, position information, surrounding information, and moving means information differs depending on the authentication method.
Therefore, the weighting of each information is appropriately set for each authentication method, and different functions are provided.

Here, there are three methods of combining a plurality of authentication methods: AND, OR, and weighting. The calculation method of the situation point for the combination of authentication methods and the execution order of the authentication methods are as follows.
In the following formulas, M, n and Wi mean the following.
M: Maximum value when normalizing status points n: Number of authentication methods in the case of combining multiple authentication methods Wi: Weight in authentication method i

(A) In the case of AND The method of calculating the situation point when the combination method is AND is as follows.

  The plurality of authentication methods in the case of AND may be executed in order from the authentication method with the lowest status point, that is, from the authentication method with the least convenience, and the effort required at the time of authentication failure may be minimized.

(A) In the case of OR The method of calculating the situation point when the combination method is OR is as follows.

  The plurality of authentication methods in the case of OR may be executed in order from the authentication method in which the status point is high, that is, in order from the authentication method in high convenience, and the time required for successful authentication may be minimized.

(C) Weighting Weighting is, for example, the following method.
In the two types of authentication methods A and B, the case where authentication fails with a verification rate of 90% with respect to the threshold of authentication method A, and when authentication with a verification rate of 150% with respect to threshold B of authentication method B is successful. Suppose. At this time, assuming that the authentication method A is weighted by 0.6 and the authentication method B is weighted by 0.4, the collation rates are weighted at 54% and 60%, respectively, and both exceed 50% of the weighted average threshold , Authentication success.

The method of calculating the situation point when the combination method is weighting is as follows.

  The plurality of authentication methods in the case of weighting may be executed in order from the authentication method with the lowest status point, that is, from the authentication method with the low convenience, and the effort required at the time of authentication failure may be minimized.

(Safety point determination process)
In the security point determination process, from the following four types of items input by the administrator of the authentication server 30, it is determined what degree of security each authentication method has when used alone.

(A) Success probability of an exhaustive attack When each authentication method is used alone, the success probability of the exhaustive attack indicating the probability with which the attacker succeeds in the exhaustive attack is input. The exhaustive attack is, for example, an attack that tries all possible password patterns for password authentication.

(B) Success probability of special attack When each authentication method is used alone, the success probability of the special attack, which indicates the probability that the attacker succeeds in special attacks other than 100% attack, together with the special attack type It is input.

(C) Attack Cost When each authentication method is used alone, an attack cost indicating the cost of the attacker for each attack is input along with the type of attack.

(D) Attack time When each authentication method is used alone, an attack time that indicates how long an attacker requires for each attack is input along with the type of attack.

At this time, the safety point is calculated by the following equation.
Security point in one authentication method = Psc 1 / "Probability probability of 100% attack"
+ Psc2 / max (“Probability of special attack success” against “type of special attack”)
+ ("Attack cost" for the "special attack type" above) × Psc3
+ ("Attack time" for the above "special attack type") × Psc4

However, Psc1, Psc2, Psc3 and Psc4 mean the following.
Psc1: Parameter for normalizing “success probability of 100% attack” Psc2: Parameter for normalizing “success probability of special attack” Psc3: Parameter for normalizing “attack cost” Psc4 : Parameter to normalize "attack time"

When there are multiple special attacks with the highest success probability, in the security point determination process, the special attacks are narrowed down in the following order.
(1) Special attack with low "attack cost".
(2) If there is a special attack having the same "attack cost" in (1), the special attack whose "attack time" is short.
(3) The special attack described at the beginning when the same special attack exists in the “attack time” in (2).

(Authentication point determination process)
In the authentication point determination process, from the following four types of items input by the administrator of the authentication server 30, it is determined what degree of security each authentication method has when used in combination with other methods. Ru.

(A) Security Point A selectable authentication method and a security point calculated by the security point determination process for this authentication method are input.

(B) One-time property One-time property indicating whether each authentication method uses temporary information or fixed information is input. The one-time property is, for example, a value of 0 to 1 and is a value between 0 and 1 when the information is used a plurality of times.

(C) Ownership authentication property Ownership authentication is input indicating whether each authentication method is authentication by the user's possession.
In the case of the authentication by possession, since the identity is confirmed based on whether or not the user has the object, there is a risk that the object is stolen, but the security is enhanced by combining with other authentication methods. Therefore, in the authentication point determination process, the security point for the combination of authentication methods is adjusted by the possession item authentication property.

(D) Multi-factor property Multi-factor property indicating whether each authentication scheme is used in combination of a plurality of authentication schemes is input.

At this time, an authentication point (i, j) when the authentication method i (authentication point i) and the authentication method j (authentication point j) are combined is calculated by the following equation.
(A) In the case of authentication method i 認証 authentication method j Authentication point (i, j) = max (authentication point i, authentication point j)
(A) In the case of authentication method i∨ authentication method j Authentication point (i, j) = min (authentication point i, authentication point j)
(C) When each authentication method has a weight Authentication point (i, j) = authentication point i x Wi + authentication point j x Wj

The method of calculating the authentication point k (k ′ = j when k = i and k ′ = i when k = j) in each authentication method is as follows.
Authentication point k
= "Safety point"
× (1 + "one-time")
× (1 + "authentic property authentic" × Pau 1)
× (1 + "multiple elements" × Pau 2)
× Pau3

However, Pau1, Pau2 and Pau3 mean the following.
Pau1: A parameter which becomes 1 only when the authentication method k is the possessed object authentication and the authentication method k 'is not the possessed object authentication. Pau 2: the multi-factor authentication of the authentication method k is possible, and Parameter that becomes 1 only when multi-factor authentication is possible Pau 3: Parameter for normalizing the authentication point in each authentication method

(Authentication method determination process)
In the authentication method determination process, the service point, the status point and each point of the authentication point are input, and a combination of the most balanced authentication methods in terms of convenience and security is determined.

FIG. 3 is a flowchart showing an example of an authentication method combination determination process according to the present embodiment.
In addition, it is assumed that the service point of the target service and the situation point and the authentication point for each combination of the assumed authentication methods are determined in advance.

  In step S1, the authentication server 30 extracts a combination of authentication methods whose status points are greater than zero.

  In step S2, the authentication server 30 extracts, from among the combinations extracted in step S1, a combination of authentication methods in which the authentication point is equal to or higher than the service point.

  In step S3, the authentication server 30 selects a combination of authentication methods in which the difference between the authentication point and the service point is the smallest among the combinations extracted in step S2, that is, the authentication point is not too high compared to the service point. Extract.

  In step S4, the authentication server 30 extracts, among the combinations extracted in step S3, one having the largest status point, that is, a combination of authentication methods with high user convenience.

  In this process, the authentication server 30 narrows down the authentication method on the condition that “the difference between the authentication point and the service point is minimum” in step S3, but this is not a limitation. For example, the difference is within a predetermined range A plurality of combinations of authentication methods may be extracted.

  Next, the flow of processing performed in cooperation among the respective devices (the user terminal 10, the business server 20, the authentication server 30) until the user terminal 10 receives the provision of the service in the authentication system 1 will be described.

FIG. 4 is a sequence diagram showing registration processing of input information according to the present embodiment.
In this processing, in order to determine the above-mentioned usability points corresponding to the user terminal 10, the user terminal 10 has at least one of the priority or point of the authentication method, the registration / authentication elapsed time, and the number of registration / authentication failures. The input information to be included is registered in the authentication server 30.

  In step S11, the user terminal 10 transmits, to the authentication server 30, a priority registration request of the authentication method.

  In step S12, in response to the request received in step S11, the authentication server 30 transmits a priority registration response of the authentication method to the user terminal 10.

  In step S13, the user terminal 10 receives input information of priority or points for each authentication method, registration / authentication elapsed time, and registration / authentication failure number.

  In step S14, the user terminal 10 transmits the description file of the input information accepted in step S13 to the authentication server 30.

  In step S15, the authentication server 30 verifies the legitimacy of the format of the file and the range of numerical data received in step S14, registers the input information if the verification is OK, and does not register the verification NG.

  In step S16, the authentication server 30 transmits the result (OK / NG) of the verification and registration of step S15 to the user terminal.

  In step S17, the user terminal 10 saves the file transmitted in step S14 if registration is OK for the registration result received in step S16, and does not save the file if registration is NG.

FIG. 5 is a sequence diagram showing collation information registration processing for using the authentication method according to the present embodiment.
In this process, the user terminal 10 registers verification information such as a password for each authentication method or biometric information in the authentication server 30 in order to perform authentication in the authentication server 30.

  In step S21, the user terminal 10 transmits an authentication method information registration request to the authentication server 30.

  In step S22, the authentication server 30 transmits an authentication method information registration response and an authentication method list request to the user terminal 10 in response to the request received in step S21.

  In step S23, in response to the request received in step S22, the user terminal 10 transmits, to the authentication server 30, a list of authentication methods for registering information.

  In step S24, the authentication server 30 transmits an authentication method registration information request to the user terminal 10 according to the authentication method list received in step S23.

  In step S25, the user terminal 10 receives an input of registration information for each authentication method.

  In step S26, the user terminal 10 transmits the registration information accepted in step S25 to the authentication server 30.

  In step S27, the authentication server 30 verifies that the registration information received in step S26 is valid data, registers the registration information if the verification is OK, and does not register the information if the verification is NG.

  In step S28, the authentication server 30 transmits the registration result (OK / NG) of step S27 to the user terminal 10. If the information of all the authentication methods described in the authentication method list received in step S23 is registered, the authentication server 30 proceeds to step S29. If not registered, the authentication server 30 repeats steps S24 to S28.

  In step S29, the authentication server 30 transmits a registration completion response to the user terminal 10.

FIG. 6 is a sequence diagram showing processing of selection of an authentication method and authentication according to the present embodiment.
In this process, selection of an authentication method and authentication according to the selected method are carried out by cooperation between the user terminal 10, the business server 20, and the authentication server 30.

  In step S31, the user terminal 10 transmits a service request to the business server 20.

  In step S32, in response to the request received in step S31, the provider server 20 transmits a service response and the service point described above to the user terminal 10.

  In step S33, in response to the response received in step S32, the user terminal 10 transmits the service point along with the service redirect response to the authentication server 30.

  In step S34, the authentication server 30 sends a terminal information request to the user terminal 10 in response to the response received in step S33.

  In step S35, the user terminal 10 acquires, as terminal information, time information, position information, surrounding information, and moving means information for calculating the aforementioned situation points.

  In step S36, the user terminal 10 transmits terminal information to the authentication server 30 in response to the request received in step S34.

  In step S37, the authentication server 30 automatically selects an authentication method from the service point received in step S33, the status point calculated based on the terminal information received in step S36, and the authentication point.

In step S38, the authentication server 30 transmits an authentication request to the user terminal 10 for each of the authentication methods selected in step S37.
When combining a plurality of authentication methods, there are three types of combining, AND, OR, and weighting. In the case of AND or weighting, the authentication method is performed in order from the authentication method with the lowest status point, and in the case of OR, the authentication method is performed with the highest status point.

  In step S39, the user terminal 10 receives an input of authentication information for each authentication method.

  In step S40, the user terminal 10 transmits the authentication information accepted in step S39 to the authentication server 30.

  In step S41, the authentication server 30 collates the authentication information received in step S40 with the registration information registered in advance.

  In step S42, the authentication server 30 transmits the result (OK / NG) of the collation performed in step S41 to the user terminal 10. If the authentication by the authentication method selected in step S37 is completed, the authentication server 30 advances the process to step S43, and if not completed, repeats steps S38 to S42.

  In step S43, the authentication server 30 transmits, to the user terminal 10, the authentication result (OK / NG) obtained from the collation result repeatedly performed in steps S38 to S42.

  In step S44, the user terminal 10 transmits an authentication success redirect response to the business server 20 if the authentication result obtained in step S43 is authentication OK, and forcibly terminates if the authentication NG.

  In step S45, the provider server 20 verifies the response received in step S44, and if the verification is OK, transmits a token request to the authentication server 30, and if the verification is NG, the process is forcibly terminated.

  In step S46, the authentication server 30 verifies the request received in step S45, issues a token if the request source is the user terminal 10 that has succeeded in the authentication (verification OK), and forcibly terminates if the verification is NG .

  In step S47, the authentication server 30 transmits the token issued in step S46 to the business server 20.

  In step S48, the provider server 20 verifies the response received in step S47, and if the verification is OK, the service is provided to the user terminal 10, and if the verification is NG, the process is forcibly terminated.

According to the present embodiment, the authentication system 1 for integrating various authentication methods among the three of the user terminal 10, the business server 20, and the authentication server 30 is realized.
The authentication system 1 manages service points for each service, and manages authentication points for each combination of authentication methods. Then, the authentication system 1 preferentially determines a combination having a small difference between the authentication point and the service point among the combinations of authentication methods in which the authentication point is equal to or higher than the service point. Therefore, the authentication system 1 can appropriately determine the combination of authentication methods that satisfy the security required for the service and that the authentication point is not too high compared to the service point.

Further, the authentication system 1 calculates a situation point for each combination of authentication methods, and prioritizes and determines a combination having a large situation point. Therefore, the authentication system 1 satisfies the security required according to the service, and the authentication point is not too high compared to the service point, and the authentication is given priority in preference to the user having high convenience. The combination of methods can be properly determined.
At this time, the authentication system 1 calculates the situation point using a different function for each authentication method using the time information, the position information, the surrounding information, and the moving means information as parameters, so the user's situation at the time of authentication becomes the authentication method. It is possible to appropriately evaluate and decide the combination of authentication methods appropriately.

Further, the authentication system 1 can appropriately determine the combination of the authentication methods by more appropriately evaluating the convenience of the user by calculating the usability points based on the input information of the user.
Furthermore, the authentication system 1 calculates the situation point and the authentication point according to different calculation formulas according to the combination pattern (AND, OR or weighting) of the authentication scheme. Therefore, the authentication system 1 can distinguish each combination method of the authentication method, can obtain each point more appropriately, and can appropriately determine the combination of the authentication method.

  In addition, since the authentication system 1 determines the execution order of the authentication method based on the size of the situation point, the burden on the user when combining a plurality of authentication methods can be reduced.

In addition, since the authentication system 1 calculates security points based on the success probability, cost, or time for each type of attack, the security of the authentication method is more appropriately evaluated on the assumption of various attacks, and the authentication method is performed. The combination of can be properly determined.
At this time, the authentication system 1 distinguishes between an exhaustive attack and a special attack, and further calculates security points using information on the special attack with the highest probability of successful attack, so the security for each authentication method is more appropriate. As a result, the combination of authentication methods can be properly determined.

  As mentioned above, although embodiment of this invention was described, this invention is not limited to embodiment mentioned above. Further, the effects described in the present embodiment only list the most preferable effects arising from the present invention, and the effects according to the present invention are not limited to those described in the present embodiment.

  In the present embodiment, the authentication server 30 calculates the usability points and the situation points based on the information received from the user terminal 10. However, the present invention is not limited to this. For example, the user terminal 10 may calculate usability points and situation points and provide them to the authentication server 30.

  In this embodiment, the authentication server 30 carries out the authentication of the service provided by the business server 20. However, the business server 20 and the authentication server 30 are identical, that is, the business server 20 has the function of the authentication server 30. You may have.

  The authentication method by the authentication system 1 is realized by software. When realized by software, a program that configures this software is installed in the information processing apparatus (user terminal 10, business server 20, authentication server 30). Also, these programs may be recorded on removable media such as a CD-ROM and distributed to the user, or may be distributed by being downloaded to the user's computer via a network. Furthermore, these programs may be provided to the user's computer (user terminal 10, business server 20, authentication server 30) as a Web service via a network without being downloaded.

DESCRIPTION OF SYMBOLS 1 authentication system 10 user terminal 11 authentication request part 12 input part 13 input information transmission part 14 terminal information acquisition part 15 terminal information transmission part 16 authentication information transmission part 20 provider server 21 service point management part 22 request processing part 23 service provision Part 30 authentication server 31 service point acquisition part 32 authentication point management part 33 usability point determination part 34 status point determination part 35 authentication method determination part 36 authentication processing part

Claims (10)

An authentication system comprising: a user terminal that uses a service; an enterprise server that provides the service; and an authentication server that authenticates the user,
The user terminal is
An authentication request unit for requesting the service;
An authentication information transmission unit for transmitting authentication information for each of the authentication methods determined in the authentication server;
The operator server is
The security of the authentication required by the service, calculated by integrating the number of damage contents and the index based on the difficulty of recovery or deletion of the damage contents for each type of damage contents assumed in the service It has a service point management unit that manages service points that
The authentication server is
A combination of the authentication methods calculated based on at least one of the one-time property, the property authentication property, and the multifactorial index, in addition to the security point indicating the security against the attack for each authentication method. An authentication point management unit that manages an authentication point indicating security obtained by the
An authentication method determination unit that preferentially determines a combination having a small difference between the authentication point and the service point among combinations of the authentication methods in which the authentication point is the service point or more;
An authentication processing unit that receives the authentication information for each combination of authentication methods determined by the authentication method determination unit, and performs an authentication process. The user terminal is
An acquisition unit for acquiring at least one of terminal information among time information at the time of authentication execution, position information, peripheral information, and moving means information;
A terminal information transmission unit that transmits the terminal information;
The authentication server is
The situation point determination unit calculates a situation point indicating the priority of the combination of the authentication methods at the time of performing authentication based on the usability information indicating convenience of the user for each authentication method and the terminal information.
The authentication system according to claim 1, wherein the authentication method determination unit prioritizes and determines a combination in which the status point is large among combinations of the authentication methods in which the authentication point is the service point or more.   The authentication system according to claim 2, wherein the situation point determination unit calculates the situation point using a function different from one authentication method to another using the terminal information as a parameter. The user terminal is
An input unit that receives input information of at least one of a priority or a point selected by the user, a time required for a registration / authentication procedure, and an index based on a frequency of registration / authentication failure for each authentication method;
An input information transmission unit for transmitting the input information;
The authentication server is
The authentication system according to claim 2, further comprising: a usability point determination unit that calculates the usability point based on the input information for each of the authentication methods.   The situation point determination unit calculates the situation point using different calculation formulas depending on whether the combination of the authentication methods is an AND, an OR, or a weighting pattern. The authentication system described in any one.   The authentication system according to claim 5, wherein in the combination of the authentication methods, the execution order of each authentication method is determined for each of the patterns by the size of a single situation point of the authentication method.   The authentication system according to any one of claims 1 to 6, wherein the security point is calculated based on at least one of an attack success probability for each type of attack, a cost required for an attack, and a time.   The security point combines an index based on the success probability of the 100% attack, and an attack success probability regarding an attack having the highest attack success probability among the special attacks other than the 100% attack, an index based on cost and time required for the attack The authentication system according to claim 7, which is calculated.   The authentication system according to any one of claims 1 to 8, wherein the authentication point is calculated using different calculation formulas depending on whether the combination of the authentication methods is AND, OR or weighting. . An authentication server for authenticating a user who uses a service provided by a business entity server, comprising:
The number of damage contents and the index based on the difficulty of collecting or deleting the damage contents for each type of damage contents assumed in the service are integrated and calculated and managed in the business server A service point acquisition unit that receives a service point indicating the security of the authentication required by the service via the user terminal;
In addition to security points indicating security against attacks for each authentication method, a combination of the authentication methods calculated based on at least one of the one-time property, the property authentication property, and the multifactorial index. An authentication point management unit that manages an authentication point indicating security obtained;
An authentication method determination unit that preferentially determines a combination having a small difference between the authentication point and the service point among combinations of the authentication methods in which the authentication point is the service point or more;
An authentication processing unit that receives authentication information from the user terminal for each of the combinations of authentication methods determined by the authentication method determination unit, and performs an authentication process.

Images