KR101784821B1 - Access management system for illegal access to resource using psychology of behavior and method thereof - Google Patents

Abstract

A system and method for access control of an illegal approach using behavioral psychology is disclosed. The access control system includes a behavior pattern DB for storing behavior pattern information that can specify a psychological behavior pattern at the time of cheating or before cheating of each user, a situation collection system for collecting the current situation information of the user, A behavior information acquiring module for acquiring the situation information from the behavior information acquiring module, a status information acquiring module for acquiring the situation information from the environment information acquiring module, And a control module for allowing access to the access request of the user or performing an access control process on the basis of the determination module and the irregularity judged by the control module.

Description

[0001] The present invention relates to an access control system for illegal access using behavioral psychology,

The present invention relates to an illegal information system access control system and method of an enterprise using behavioral psychology (or behavioral psychology), and relates to a psychological behavior The present invention relates to a system and method for controlling access to an information system by recognizing whether the member performs an illegal operation based on a model.

Recently, due to the development and generalization of computer and network systems, many information resources of corporations or organizations are connected physically / logically, making it easy to access information resources. However, this situation has resulted in many adverse effects such as illegal access and release of resources such as information systems and data files in enterprises or organizations.

There have been various methods for solving such problems. Traditionally, access to resources is restricted according to the access rights set for each member (user) in advance. However, this case does not prevent illegal actions from being performed within the access rights, and fails to operate normally when the authentication of access rights is disabled.

In order to solve such a problem, a method of analyzing an abnormal pattern based on an action has been known. An example of such an example is disclosed in Korean Patent No. 10-150448, "Detection of abnormal access using normal behavior profile" There is a bar.

However, these conventional technologies have a disadvantage in that illegal actions (or illegal actions) are generated first because an event for accessing information resources is generated in a system-centric manner, and the behavior can be analyzed and the access can be controlled.

Therefore, a technical idea is needed to prevent illegal access to information resources by preemptively sensing the possibility of such illegal acts (or fraud) before they occur.

Korean Registered Patent Registration No. 10-150448, "Detection of abnormal access using normal behavior profile"

Therefore, the technical problem to be solved by the present invention is to define a behavioral pattern of behavioral psychology (behavioral psychology) of a user who wants to access an information resource in a corporation or an organization, .

Also, it provides a technological idea that can pre - emptively control access to information resources by using behavioral psychological behavior patterns before an event to actually access information resources occurs.

According to another aspect of the present invention, there is provided an access control system for performing access control of a user, including a behavior pattern DB storing behavior pattern information that can specify a psychological behavior pattern at the time of cheating or before cheating, A situation information acquisition module for acquiring the situation information from a situation collection system for collecting the current situation information of the user; a status information acquisition module for acquiring the situation information obtained from the situation information acquisition module and the behavior pattern A determination module for determining whether the user is fraudulent or not based on the information, and a control module for allowing the user to access the access request based on the fraud or not, or performing the access control process And a control module.

The behavior pattern DB may store image feature behavior pattern information that can be acquired through an image from a psychological behavior pattern appearing before the cheating action or the cheating action of the user.

The image feature behavior pattern information may be information defining at least one of a degree of disturbance of the user, hesitation, fluctuation of the pupil, and change of body temperature.

The behavior pattern DB stores voice feature behavior pattern information that can be obtained through speech among psychological behavior patterns that appear before the user performs cheating or cheating.

The voice feature behavior pattern information may be information that can define at least one of the user's abilities, pronunciation, speech speed, accent, and voice shaking.

The behavior pattern DB may store system feature behavior pattern information defined by an action performed on a specific system from a psychological behavior pattern that appears before the cheating action or the cheating action of the user.

The system feature behavior pattern information may be information that defines at least one of an input of the user's keystrokes, a mouse operation, a touch action of a touch pad, and an error rate which is a key.

The determination module may further include a preprocessing module for preprocessing the context information so as to be compared with the behavior pattern information stored in the behavior pattern DB.

Wherein the determination module selectively selects at least one of image feature behavior pattern information, voice feature behavior pattern information, or system feature behavior pattern information included in the behavior pattern database based on the type of the situation information collected from the situation collection system And can be specified by information to be compared with the situation information.

In order to solve the technical problem, the access control system of the illegal access using the behavioral psychology can be constructed such that the access control system for performing the access control of the user can specify the psychological behavior pattern at the time of cheating or before cheating The access control system acquires the current situation information of the user, and the access control system acquires the current behavior information of the user based on the situation information and the stored behavior pattern information of the user, Determining whether or not the access control system determines whether the access control system is malicious, and allowing access to the access request of the user based on whether or not the access control system determines the irregularity, or performing an access control process.

The behavior pattern information includes image feature behavior pattern information that can be obtained through a video from a psychological behavior pattern appearing before the user performs a cheating action or a cheating action, The voice feature behavior pattern information that can be obtained through speech among the emerging psychological behavior patterns is a system defined by an action performed on a specific system from a psychological behavior pattern appearing at the time of cheating or the cheating behavior of the user Feature behavior pattern information.

The above method can be performed by a program installed in the data processing apparatus.

According to the technical idea of the present invention, since a behavioral psychological pattern that may appear when a user intends to perform an illegal act (or cheating) can be used for access control of an information resource, It is also possible to have prior access control before performing illegal activities.

Also, by using the behavioral psychological pattern, access control based on the user 's behavior pattern is possible even if the user' s action (or event) for accessing the information resource does not occur.

BRIEF DESCRIPTION OF THE DRAWINGS A brief description of each drawing is provided to more fully understand the drawings recited in the description of the invention.
1 shows a schematic system configuration for implementing an access control method of illegal access using a behavioral psychology according to an embodiment of the present invention.
FIG. 2 shows a schematic configuration of an illegal access control system using a behavioral psychology according to an embodiment of the present invention.
3 is a view for explaining an example of a behavior pattern DB according to an embodiment of the present invention.
4 shows a schematic flow chart for explaining an access control method of illegal access using behavior psychology according to an embodiment of the present invention.

In order to fully understand the present invention, operational advantages of the present invention, and objects achieved by the practice of the present invention, reference should be made to the accompanying drawings and the accompanying drawings which illustrate preferred embodiments of the present invention.

In the present specification, when one component 'transmits' data to another component, the component may transmit the data directly to the other component or may transmit the data through at least one other component To the other component. Conversely, when one element 'directly transmits' data to another element, it means that the data is transmitted to the other element without passing through another element in the element.

Also, the terms first, second, etc. may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise.

Also, in this specification, the terms " comprises " or " having ", and the like, specify that the presence of stated features, integers, But do not preclude the presence or addition of other features, numbers, steps, operations, components, parts, or combinations thereof.

Hereinafter, the present invention will be described in detail with reference to the embodiments of the present invention with reference to the accompanying drawings. Like reference symbols in the drawings denote like elements.

1 shows a schematic system configuration for implementing an access control method of illegal access using a behavioral psychology according to an embodiment of the present invention. 2 shows a schematic configuration of an illegal access control system using a behavioral psychology according to an embodiment of the present invention.

Referring to FIG. 1, an illegal access control system (hereinafter referred to as an 'access control system') 100 using behavior psychology can be implemented to implement the technical idea of the present invention.

The access control system 100 may be a system for implementing access control of an information system of the organization, that is, a resource (information resource), provided in a predetermined organization (e.g., a corporation, a school, etc.).

The resources may be meant to include any type of hardware, data, and / or software that needs to be controlled by system resources, information, and / or access provided to the organization.

For example, the resource may be hardware of the terminal 200 used by members of a specific organization or information provided to the terminal 200, and may be a common resource (for example, a corporation Server solution, enterprise solution, database, etc. 300).

It is needless to say that the access control system 100 can perform predetermined user authentication separately from the technical idea of the present invention. To this end, the access control system 100 may further include a user DB (not shown). And can perform authentication of the user using information provided in the user DB (not shown). It is possible to make it impossible to access the resources of the organization when the authentication of the user fails. The access control system 100 according to the technical idea of the present invention determines whether the current user wants to access the information resource by using the behavioral psychological behavior pattern of the user even if the user has succeeded in user authentication . That is, there is an effect that the user can control the access based on the behavioral psychological behavior pattern of the user, even if the user accesses the information resource in the right granted to the user through legitimate user authentication as in the conventional method.

In this specification, the behavioral psychological behavior pattern refers to a pattern difference in behavior caused by a psychological difference when a user performs a normal act (a legitimate act) and an illegal act (a misconduct) can do. That is, a pattern that can define a user's behavior based on a user's psychological behavioral model may be the behavioral pattern of the present specification. Here, the action may be a behavior performed consciously by the user, a physical change that occurs unconsciously, not a conscious act of the user, or may be a feature of an action that is unconsciously expressed in an action performed consciously.

By using this behavior pattern, it can be predicted or predicted whether the user intends to perform a normal action or a wrong action even before the user accesses the information resource. This is because the pattern of psychological behavior is characterized by psychological pressure even before cheating. In addition, since it is a behavior pattern due to psychological difference, it can be estimated or predicted whether or not the person intends to perform cheating even if he / Even if there is no action, there is an effect that a certain degree of guessing or prediction may be made as to whether or not the person wants to cheat by the physical change expressed by the user.

In order to apply the technical idea of the present invention, for example, a user can be specified in various ways. The user's specification can be made based on information collected by various situation information collection systems (e.g., camera, microphone, etc.) 400 that can monitor the user's living environment or work environment. Or the user may be specified through a user authentication (e.g., login, etc.) action that may specify the user.

The access control system 100 may collect status information of a specified user. The status information may be information that can indicate the current status of the user (what action is being taken or any physical change). The status information may be information that can be compared with the action pattern information defined in advance in the access control system 100, that is, information capable of deriving the current behavior pattern of the user.

The situation information may be obtained from the situation information collection system 400, and the situation information collection system may be an apparatus or a system capable of collecting the situation information. For example, information on a user's image capable of acquiring a behavior pattern of a user may be the context information, and information on a user's voice capable of acquiring a behavior pattern of the user may be the context information. (E.g., a keyboard operation, a touch, a mouse operation) on an operation performed by a user on a predetermined system (e.g., a mouse, a touch screen, a keyboard, or a data processing apparatus connected to the same) Lt; / RTI >

For this, the situation information collection system 400 includes an image acquisition means (e.g., a camera, an infrared camera, a temperature sensing camera, etc.) capable of acquiring a user's image, a voice acquisition means (E.g., an agent program installed in the data processing apparatus, etc.) for acquiring information about the actions that the user performs on the system may be included in the situation information collection system 400. [

The access control system 100 may preprocess the information obtained by the situation information collection system 400 if necessary. For example, if the situation information collected by the situation information collection system 400 is information on the user's image, pre-processing may be performed to compare the collected image information with behavior pattern information. For example, key frame feature detection may be performed to derive a differencial image of an image and an image according to time from the image information. In addition, various preprocessing can be performed to perform image analysis, such as dividing the size of the key frame as necessary.

For example, if the context information collected by the context information collection system 400 is information about the user's speech, a preprocess may be performed to perform noise cancellation, sampling, and / or various other acoustic processing from the collected speech information have. This preprocessing may be processing for deriving a current user's behavior pattern from the context information so as to be easily compared with the behavior pattern information of the user stored in the behavior pattern DB 120. [

The behavior pattern of the current user, which has been preprocessed from the context information itself or the context information, can be compared with the behavior pattern information of the user stored in the behavior pattern DB 120. [

The behavior pattern information of the user stored in the behavior pattern DB 120 can specify an action (defined as a meaning including a change in the body) caused by a psychological factor before or during execution of an illegal act Can be information. Such behavior pattern information can be stored in any data form as long as it can represent each action performed by the user. For example, a data structure capable of defining the behavior may be defined according to the type of the behavior and the object of the behavior, and each behavior may be defined through the data structure. Or a predetermined coordinate system, and each action through the coordinate system may be defined as a coordinate in a multidimensional coordinate system. Or behavior pattern information is defined as a text-based rule-set, and an analysis protocol that can compare the current behavior of the user with the behavior pattern information is applied to compare the behavior of the current user with the behavior pattern information previously stored . The behavior pattern information may be information that defines an action due to a psychological factor while the user performs a cheating action, or may be information that defines a behavior while the user performs a normal action or before. Or information that can respectively define an action when the user performs the normal action and an action when the user performs the illegal action may be stored together. In any case, it is sufficient for the user to be able to define the behavior while performing the cheating.

The behavior pattern information for each user may be derived, for example, from an action in the case where the user's usual work in the organization is monitored and illegitimate activity has occurred, or an individual specific action or the like. Alternatively, the behavior pattern information of the user may be collected in advance by a variety of psychological interview formats such as conducting a predetermined interview and making a lie or cheating through an ongoing interview. The behavior pattern information of the user may be collected and defined in various ways in advance and stored in the behavior pattern DB 120 in advance, and various behavioral psychology or behavioral psychological techniques may be used for this purpose.

The behavior pattern information stored in the behavior pattern DB 120 may include image feature behavior pattern information that can be defined by the user's image. In addition, the behavior pattern information may include voice feature behavior pattern information that can be defined by the user's voice. In addition, the behavior pattern information may include system feature behavior pattern information that can be defined by an action that the user performs on the system of the organization.

For example, the image feature behavior pattern information is information that defines a user's image characteristic when the user conducts cheating or performs a cheating action due to psychological factors such as hesitation, hesitation, fluctuation of the pupil, Lt; / RTI > That is, it may mean a feature of a user that can be visually confirmed, which may include not only externally identified features, but also a physical change (e.g., body temperature, etc.) of the user that can be visually confirmed.

For example, the voice feature behavior pattern information is information that defines a voice characteristic of a user, which is generated when a cheating action is performed or is performed by a psychological factor such as a user's performance, pronunciation, speed, accent, .

For example, the system feature behavior pattern information may include at least one of an input of the user's keystrokes (e.g., a speed or rhythm of a keystroke), a mouse operation (e.g., a speed or an acceleration of a mouse click or movement) A characteristic of behaviors performed by the user expressed by the user when performing cheating or performing cheating by a psychological factor such as a key-in error rate (e.g., a touch speed, a rhythm, or a move) Lt; / RTI >

Thus, the behavior pattern information of the user can be classified in advance according to the type of the collected context information. When the user performs a certain action, the action information pattern is selectively compared with the action information pattern that can be compared among the action patterns and the behavior pattern information of the stored plurality of types, thereby making it possible to determine whether or not the action is more efficient.

For example, when only the user's image is collected as the context information, only the image feature behavior pattern information among the information stored in the behavior pattern DB 120 can be selectively selected as a comparison target. Or only the voice of the user is collected as the context information, only the voice feature behavior pattern information among the information stored in the behavior pattern DB 120 may be selectively selected as a comparison target. Or only the action on the user's system is collected as the situation information, only the system feature behavior pattern information among the information stored in the behavior pattern DB 120 can be selectively selected as the comparison object.

Further, a plurality of kinds of situation information may be collected as occasion demands. For example, both the user's video and the user's voice may be collected as context information. In this case, the corresponding behavior pattern information may be compared with each other according to the type of the situation information, and the result of the comparison of the types may be considered in combination to determine whether the user is cheating. For example, as a result of comparison between the video information included in the context information and the video feature behavior pattern information stored in advance, the user is predicted to perform (or is performing) cheating, The result of the comparison of the behavior pattern information may be predicted by the user to perform a normal action. In this case, when a comparison result of one kind is predicted to be a cheating behavior, the user may comprehensively judge that cheating will be performed, and a priority or a weight is assigned to each kind, It may be judged whether the user is cheating or not based on a comprehensive judgment based on the difference in the behavior pattern of the user.

According to the technical idea of the present invention, when the access control system 100 predicts that the user is performing (performing) a cheating action, the access control system 100 may notify the user of the access Can be blocked in advance or immediately.

The access control system 100 for implementing such a technical idea will be described with reference to FIG.

2, the access control system 100 according to the technical idea of the present invention includes a control module 110, a behavior pattern DB 120, a situation information acquisition module 130, and a determination module 140 .

Herein, a module may mean a functional and structural combination of hardware for carrying out the technical idea of the present invention and software for driving the hardware. For example, each of the above configurations may refer to a logical unit of a predetermined code and a hardware resource for executing the predetermined code, and may be a code physically connected to one another or a specific type of hardware May be easily deduced to the average expert in the field of the present invention. Thus, each of the above configurations refers to a combination of hardware and software that performs the functions defined herein, and does not mean a specific physical configuration.

1 and 2, a plurality of physical devices are connected through a wired / wireless network and are organically coupled to the access control system 100, Of course. For example, the behavior pattern DB 120 may be implemented as a physical device separate from other components of the access control system 100.

The access control system 100 may communicate with a predetermined situation information collection system 400. The status information collection system 400 may refer to a system capable of collecting current status information of a user as described above, and may be installed in an image acquisition means, a voice acquisition means, or an apparatus or systems used by a user An agent (program) capable of collecting information on an action (e.g., a keystroke, a touch pad operation, a mouse operation, and the like) performed by the user on the device or the system.

The control module 110 may be configured to receive other configurations (e.g., the behavior pattern DB 120, the context information acquisition module 130, and / or the determination module 130) included in the access control system 100 according to the technical idea of the present invention 140) and / or resources of the system.

As described above, the behavior pattern DB 120 may store behavior pattern information that can derive a characteristic of a behavior of a user expressed by a psychological factor when the user performs a cheating action.

An example of the behavior pattern DB 120 will be described with reference to FIG.

3 is a view for explaining an example of a behavior pattern DB according to an embodiment of the present invention.

Referring to FIG. 3, the behavior pattern DB 120 according to the embodiment of the present invention includes an image feature behavior pattern DB 121 for storing image feature behavior pattern information, A feature behavior pattern database 123, and a system feature behavior pattern database 125 that stores system feature behavior pattern information.

By comparing the behavior pattern corresponding to the current user's situation information, that is, the comparison with the current user's behavior pattern, by reducing the comparison with the unnecessary object, Can be increased. This can be very important in the access control of the information resource because the real time nature of the judgment can be very important because the control can be done only after the first occurrence of the cheating. In addition, even when the behavior pattern information of a user is defined, it may be defined separately according to the type (e.g., voice, image, or system characteristics), and therefore it is effective to separately define and define the system effectively .

In addition, by defining the behavior pattern information according to the kind of the behavior pattern, it is possible to determine whether or not the user is systematically irregular if the action performed by the current user includes a plurality of behavior patterns. For example, the judgment result of the cheating behavior based on the result of judging the cheating behavior based on the image characteristic behavior pattern information and the behavior pattern information of another kind (for example, the voice characteristic or the system characteristic) may be different. In this case, It may be very effective to classify the action pattern information of the user according to the type in order to define whether to finally determine whether the user is cheating or to collectively consider a plurality of determination results according to the determination result. For example, according to an embodiment, when a determination result using one kind of behavior pattern information is predicted to be an irregularity, the user is determined to perform or perform irregularity irrespective of a determination result using another kind of behavior pattern information And access control can be performed. According to an embodiment, it may be determined that the user will perform a cheating behavior because all of the determination results based on the behavior pattern information of all kinds are judged to be cheating. Or a predetermined difference is indexed according to a result of comparison between each behavior pattern information and the current behavior pattern information, and whether or not the user's cheating behavior is finally determined based on whether the difference exceeds the predetermined reference value in consideration of all the indexed differences It can be judged.

Referring back to FIG. 2, the context information acquisition module 130 may obtain context information for determining an action pattern of a current user. The status information acquisition module 130 may obtain the status information from the status information collection system 400. [ The situation information collecting system 400 may include at least one of the image acquiring means, the voice acquiring means, or the agent for collecting information about an action performed on the system, as described above. Of course, the situation information collection system 400 may vary according to the type of behavior pattern information stored in the behavior pattern DB 120. [

The determination module 140 may determine whether the user is cheating based on the current user context information and the behavior pattern information stored in the behavior pattern DB 120. [ The determination module 140 may include a preprocessing module for performing predetermined preprocessing to compare the context information acquired by the context information acquisition module 130 with the behavior pattern information stored in the behavior pattern database 120, (141).

The determination module 140 may determine the type of the context information (e.g., context information corresponding to the voice feature behavior pattern information, context information corresponding to the video feature behavior pattern information, At least one of the image feature behavior pattern information, the voice feature behavior pattern information, or the system feature behavior pattern information included in the behavior pattern DB 120 on the basis of the feature pattern information, The comparison may be performed only with the behavior pattern information that is specified by the information to be compared with the context information and is the comparison target.

If the determination result is different according to the kind of the situation information as described above, it is possible to finally determine whether or not the user is cheating according to a predetermined determination rule.

Based on the determination result of the determination module 140, the control module 110 may allow or control access to the access request to the information resource (information system) of the user.

According to the technical idea of the present invention, when the user is judged to be cheating, that is, when he / she does not request any access but is predicted to cheat, the access control is presumed prior to the actual access request There is an effect that can be decided. Of course, in such a case, access control may be determined only for an access request that is made within a predetermined time from the determination of whether or not the user is fraudulent.

In addition, since the behavior pattern according to the psychological factors of the user may not necessarily be related to the organization but may also occur for personal reasons irrelevant to the organization, the control module 110 determines Even if it is judged to be doing or doing something, it may be possible to perform access control of the organization's information resources by further authentication procedure.

4 shows a schematic flow chart for explaining an access control method of illegal access using behavior psychology according to an embodiment of the present invention.

Referring to FIG. 4, the access control system 100 according to the embodiment of the present invention can obtain status information of a predetermined user (S100). The access control system 100 may perform preprocessing if necessary according to the type and the type of the situation information (S110).

The access control system 100 may compare the context information or the context information on which the preprocessing has been performed, that is, the current user's action pattern with the action pattern information stored in the behavior pattern DB 120 (S131, S132, S133). For this, the access control system 100 can perform a comparison with the behavior pattern information selectively corresponding to the type of the context information as described above.

To this end, the behavior pattern DB 120 may store the image feature behavior pattern information, the voice feature behavior pattern information, and / or the system feature behavior pattern information separately.

In addition, the access control system 100 may allow access to the access request currently performed by the user or the access request to be performed within a predetermined time based on the judgment result using the action pattern information of each type ( S140), and the access may be controlled (S150).

It is not easy to completely separate the normal behavior or the illegal activity and block it when the user's behavioral psychological behavior pattern is defined and the access control to the information resource is performed using the same. This is because the definition of behavior pattern information according to the psychological behavior model may not be perfect. Accordingly, the user who is determined to be cheating and blocked or blocked from accessing the predetermined resource can request access to the resource again through settlement of a predetermined additional authentication or approval authority.

The access control method according to the embodiment of the present invention can be implemented as a computer-readable code on a computer-readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored.

Examples of the computer-readable recording medium include magnetic media such as a hard disk, a floppy disk and a magnetic tape, optical media such as CD-ROM and DVD, and optical disks such as a floppy disk Hard-wired devices that are specially configured to store and execute program instructions such as magneto-optical media and ROM, RAM, flash memory, etc. Also included in the computer- Distributed on a networked computer system, computer readable code can be stored and executed in a distributed fashion.

Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a device, e.g., a computer, that processes information electronically using an interpreter or the like.

The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed embodiments, but, on the contrary, is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims. Accordingly, the true scope of the present invention should be determined by the technical idea of the appended claims.

Claims (12)

1. An access control system for performing access control of a user,
A behavior pattern DB that stores behavior pattern information that can specify a psychological behavior pattern before cheating or before cheating of each user;
A situation information acquisition module for acquiring the situation information from a situation collection system for collecting current situation information of the user;
A judgment module for judging whether the user is cheating based on the situation information obtained in the situation information obtaining module and the behavior pattern information of the user stored in the behavior pattern DB; And
And a control module for allowing access to the access request of the user or performing an access control process based on whether or not the cheating behavior is determined by the determination module,
The behavior pattern DB includes:
And the image feature behavior pattern information that can be obtained through the image from the psychological behavior pattern appearing before the cheating action or the cheating action of the user is stored,
Wherein the image feature behavior pattern information comprises:
Wherein the information is information defining at least one of the user's confusion, hesitation, shaking of the pupil, and change in body temperature.
delete delete 1. An access control system for performing access control of a user,
A behavior pattern DB that stores behavior pattern information that can specify a psychological behavior pattern before cheating or before cheating of each user;
A situation information acquisition module for acquiring the situation information from a situation collection system for collecting current situation information of the user;
A judgment module for judging whether the user is cheating based on the situation information obtained in the situation information obtaining module and the behavior pattern information of the user stored in the behavior pattern DB; And
And a control module for allowing access to the access request of the user or performing an access control process based on whether or not the cheating behavior is determined by the determination module,
The behavior pattern DB includes:
And the voice feature behavior pattern information that can be obtained through speech among the psychological behavior patterns appearing before the cheating or performing the cheating action of the user is stored.
5. The method according to claim 4,
Wherein the information is information capable of defining at least one of the user's abilities, pronunciation, speed, accent, and voice irritation.
1. An access control system for performing access control of a user,
A behavior pattern DB that stores behavior pattern information that can specify a psychological behavior pattern before cheating or before cheating of each user;
A situation information acquisition module for acquiring the situation information from a situation collection system for collecting current situation information of the user;
A judgment module for judging whether the user is cheating based on the situation information obtained in the situation information obtaining module and the behavior pattern information of the user stored in the behavior pattern DB; And
And a control module for allowing access to the access request of the user or performing an access control process based on whether or not the cheating behavior is determined by the determination module,
The behavior pattern DB includes:
And the system feature behavior pattern information defined by an action performed on a specific system among the psychological behavior patterns appearing before the cheating or performing the cheating action of the user is stored. system.
7. The system according to claim 6,
Wherein the information is information defining at least one of an input of the user's keystrokes, a mouse operation, a touch action of a touch pad, and an error rate as a key.
The method of claim 1, 4, or 6,
And a preprocessing module for preprocessing the context information so as to be able to compare the behavior pattern information stored in the behavior pattern DB.
1. An access control system for performing access control of a user,
A behavior pattern DB that stores behavior pattern information that can specify a psychological behavior pattern before cheating or before cheating of each user;
A situation information acquisition module for acquiring the situation information from a situation collection system for collecting current situation information of the user;
A judgment module for judging whether the user is cheating based on the situation information obtained in the situation information obtaining module and the behavior pattern information of the user stored in the behavior pattern DB; And
And a control module for allowing access to the access request of the user or performing an access control process based on whether or not the cheating behavior is determined by the determination module,
Wherein the determination module comprises:
At least one of the image feature behavior pattern information, the voice feature behavior pattern information, or the system feature behavior pattern information included in the behavior pattern database, based on the type of the situation information collected from the situation collection system, An access control system for illicit access using psychology.
Storing an action pattern information that can specify a psychological behavior pattern at the time of cheating or performing a cheating action of each of the users in the access control system for performing access control of the user;
The access control system obtaining the current status information of the user;
The access control system determining whether the user is cheating based on the situation information and the stored behavior pattern information of the user; And
Allowing the access control system to access the access request of the user based on the determined irregularity or performing the access control process,
The action pattern information includes:
A voice feature behavior pattern information that can be obtained through speech among a psychological behavior pattern appearing before the cheating action or the cheating action of the user; or
A method of access control of an illegal approach using behavioral psychology including system feature behavior pattern information defined by an action performed on a specific system from a psychological behavior pattern appearing before a cheating action or a cheating action of the user.
delete A recorded computer program installed on a data processing device for performing the method recited in claim 10.

Images