JP2017045328A - Apparatus, method and program for determining authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an apparatus, method and program for properly determining a combination of authentication systems in accordance with a service.SOLUTION: An authentication system determination apparatus 1 includes: a service point determination unit 10 which integrates indices based on the quantity of damage, collection of the damage, or difficulty of deletion, for each of the types of the damage estimated in a service, to calculate a service point indicating safety of authentication required by the service; an authentication point determination unit 50 which calculates an authentication point indicating safety to be obtained by a combination of authentication systems, on the basis of at least one of indices of one-time property, belongings authentication property, and multi-element property, in addition to the safety point indicating safety against an attack for each authentication system; and an authentication system determination unit 60 which determines a combination of authentication systems having the authentication point equal to or larger than the service point and a small difference between the authentication point and the service point, preferentially.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an apparatus, a method, and a program for determining an authentication method when using a service.

  Conventionally, various services are provided via a communication network. In order to prevent spoofing and the like, identity authentication technology for confirming the identity of the user is adopted for these services. There are a wide variety of authentication methods for personal authentication technology, but the service provider usually determines which authentication method to use.

Japanese Patent Application Laid-Open No. 2004-133830 proposes a technique for setting and managing a security level for each security target and selecting an authentication method to be used for authentication according to this level.
Patent Document 2 proposes a technique for performing authentication using an authentication method selected by the user himself and determining whether or not the authentication point of this authentication method has reached the authentication level required by the service provider. .

JP 2005-227934 A JP 2010-67124 A

  By the way, the level of authentication required for each of the provided services varies, and it has been difficult to set these appropriately. In addition, it is difficult to select an appropriate combination of authentication methods according to the level of authentication required.

  An object of this invention is to provide the apparatus, method, and program which can determine appropriately the combination of the authentication method according to a service.

  The apparatus according to the present invention is an apparatus for determining an authentication method for using a service, and the amount of the damage content for each type of damage content assumed in the service, and collection or deletion of the damage content In addition to the service point determination unit that calculates the service point indicating the security of authentication required by the service by integrating the indicators based on the difficulty of the service, and the safety point that indicates the security against the attack for each authentication method An authentication point determination unit that calculates an authentication point indicating safety obtained by a combination of the authentication methods based on at least one of the indicators of one-time property, property authenticity, and multi-factor, and The difference between the authentication point and the service point among the combinations of the authentication methods in which the authentication point is equal to or greater than the service point Comprising the authentication method determining unit for determining with priority small combination, the.

  In addition to usability points indicating user convenience for each authentication method, the device is based on at least one of time information at the time of authentication execution, position information, peripheral information, and indicators of moving means information, A situation point determination unit that calculates a situation point indicating a priority of the combination of authentication methods at the time of authentication execution, and the authentication method determination unit includes a combination of the authentication methods in which the authentication point is equal to or greater than the service point. The combination having a large situation point may be preferentially determined.

  The situation point determination unit calculates the situation point using a function that is different for each authentication method using at least one of the time information, the position information, the peripheral information, and the moving means information as a parameter. May be.

  The apparatus, for each authentication method, based on at least one of the priority or points selected by the user, the time required for registration / authentication procedure, and the index based on the frequency of registration / authentication failure, You may provide the usability point determination part which calculates a usability point.

  The situation point determination unit may calculate the situation point using different calculation formulas depending on whether the combination of the authentication methods is an AND, OR, or weighting pattern.

  In the combination of the authentication methods, the execution order of each authentication method may be determined for each pattern according to the size of the status point of the authentication method alone.

  The apparatus may include a safety point determination unit that calculates the safety point based on at least one of an attack success probability for each attack type, a cost and time required for the attack.

  The safety point determination unit includes an index based on the success probability of all attacks, an index based on the attack success probability related to the attack having the maximum attack success probability among the special attacks other than the all attack, an index based on cost and time required for the attack May be integrated to calculate the safety point.

  The authentication point determination unit may calculate the authentication point using different calculation formulas depending on whether the combination of the authentication methods is AND, OR, or weighting.

  The method according to the present invention is a method for determining an authentication method for using a service, and the amount of the damage content for each type of damage content assumed in the service, and collection or deletion of the damage content In addition to the service point determination step for calculating the service point indicating the security of authentication required by the service by integrating the indicators based on the difficulty of the service, and the safety point indicating the security against the attack for each authentication method An authentication point determination step for calculating an authentication point indicating safety obtained by a combination of the authentication methods based on at least one of the one-time property, property authenticity and multi-factor indicators, and Of the combinations of authentication methods in which the authentication point is equal to or greater than the service point, the authentication point and the service point An authentication method determining step of determining a combination differences cement is small with priority, the computer executes.

  The program according to the present invention is a program for determining an authentication method for using a service, and the amount of damage content and the recovery of the damage content for each type of damage content assumed in the service. Or a service point determination step for calculating a service point indicating the security of authentication required by the service by integrating indexes based on the difficulty of deletion, and a safety point indicating the security against an attack for each authentication method In addition, an authentication point determination step for calculating an authentication point indicating safety obtained by a combination of the authentication methods based on at least one of the one-time property, property authenticity property and multi-factor indicators, and Among the combinations of the authentication methods in which the authentication point is equal to or higher than the service point, the authentication point An authentication method determining step of determining with priority combinations difference fine said service point is small, causes the computer to execute.

  ADVANTAGE OF THE INVENTION According to this invention, the combination of the authentication system according to a service can be determined appropriately.

It is a figure which shows the function structure of the authentication method determination apparatus which concerns on embodiment. It is a flowchart which shows an example of the combination determination process of the authentication system which concerns on embodiment.

Hereinafter, an example of an embodiment of the present invention will be described.
FIG. 1 is a diagram illustrating a functional configuration of an authentication method determining apparatus 1 according to the present embodiment.

  The authentication method determination device 1 includes a service point determination unit 10, a usability point determination unit 20, a situation point determination unit 30, a safety point determination unit 40, an authentication point determination unit 50, and an authentication method determination unit 60. Prepare.

  The service point determination unit 10 is a means for determining how much safety the target service requires, and calculates a service point.

The usability point determination unit 20 is means for determining which authentication method the user wants to use preferentially, and calculates usability points.
The situation point determination unit 30 is a means for determining which authentication method or combination of authentication methods should be preferentially used based on the usability point and the situation where the user is currently placed. calculate.

The safety point determination unit 40 is a means for determining how much safety each authentication method has when used alone, and calculates a safety point.
The authentication point determination unit 50 determines how secure each authentication method is when used in combination with other methods, based on the security points and characteristics of each authentication method. The authentication point is calculated.

  The authentication method determination unit 60 is a means for determining an authentication method or a combination of authentication methods balanced in terms of convenience and safety from the service point, status point, and authentication point.

Hereinafter, a procedure for automatically determining an optimum combination of authentication methods from among a wide variety of authentication methods using each unit of the authentication method determination apparatus 1 will be described in detail.
In addition, although the following is mentioned as the authentication method made into object in this embodiment, for example, it is not restricted to these, Various authentication methods may be used.
・ Password authentication ・ 4-digit password authentication ・ 8-digit password authentication ・ Pattern authentication ・ Authentication using a secret question ・ One-time password authentication ・ One-time pattern authentication ・ SIM authentication ・ Device authentication ・ Using a secret key Authentication by signature-Authentication by random number table-Palmprint authentication-Fingerprint authentication-Face authentication-Palm vein authentication-Finger vein authentication-Iris authentication-Voice authentication-Signature authentication-Multi-factor authentication-Image authentication (CAPTCHA)
・ Location authentication ・ Risk-based authentication ・ Multi-path authentication

(Determination of service points)
The service point determination unit 10 determines how much security the target service requires from the following three types of items input by the administrator of the authentication method determination device 1 or the service provider.

(A) Types of damage content Assuming what type of damage is assumed when impersonation is performed by an unauthorized person in a service provided by a service provider, the type of damage content includes money, personal information, etc. Is entered.

(B) Quantity of damage contents Assuming how much damage will be done when impersonation is performed by an unauthorized person in the service provided by a service provider, the amount of damage contents (in the case of money), Items such as the number of cases (in the case of personal information) are entered.

(C) Difficulties in collecting / deleting damage contents Assume how difficult it is to recover or delete damage received by unauthorized persons in the services provided by service providers. Items such as the difficulty of collection (in the case of money) and the difficulty of deletion (in the case of personal information) are entered as the difficulty of collection / deletion.

At this time, the service point is calculated by the following mathematical formula.
Service point = "money" in "money" x "difficulty rate" x Psr1
+ "Number of cases" in "Personal information" x "Deletion difficulty rate" x Psr2
+ "Quantity" in "Others" x "Recovery / deletion difficulty rate" x Psr3

However, Psr1, Psr2, and Psr3 mean the following.
Psr1: parameter for normalizing the damage content related to “money” Psr2: parameter for normalizing the damage content related to “personal information” Psr3: parameter for normalizing the damage content related to “other”

(Usability point decision)
The usability point determination unit 20 determines which authentication method the user wants to use preferentially from the following three types of items input by the service user.

(A) Priorities or points of user selection When using services provided by service providers, selectable authentication methods as items indicating which authentication method the user wants to select preferentially, and Priorities or points (for example, 0 to 100) are input.
In addition, when a priority is input, it may be converted into points according to a predetermined rule. For example, if priority levels from 1st to 4th are specified for 4 types of authentication methods, 1st is converted to 100 points, 2nd is 75 points, 3rd is 50 points, 4th is 25 points May be.
When only a specific authentication method is given priority, for example, 100 points may be input for this authentication method, and 0 points may be input for other authentication methods.

(B) Registration / authentication elapsed time How much time is required for registration and authentication processing of information used for authentication, such as passwords or biometric information, in the authentication methods that can be selected by the user when using the services provided by the service provider? As an item indicating whether time is required, a registration / authentication elapsed time in a selectable authentication method is input.
The input data may be a specific time (minute or second) or a stepped level value.

(C) Number of registration / authentication failures As an assumption item indicating how many times registration / authentication failed before successful registration / authentication in the user-selectable authentication method when using services provided by service providers The number of registration / authentication failures in the selectable authentication method is input.

At this time, the usability point is calculated by using the following formula, for example, by using the user selection point that is a subjective index and the registration / authentication elapsed time and the number of registration / authentication failures that are objective indices. .
Usability point = "User selection point" in the authentication method x Pus1
+ Pus2 / ("Registration / authentication elapsed time" in the authentication method)
+ Pus3 / (“Number of registration / authentication failures” in the authentication method)

However, Pus1, Pus2, and Pus3 mean the following.
・ Pus1: Parameter for normalizing “Point of user selection” ・ Pus2: Parameter for normalizing “Registration / authentication elapsed time” ・ Pus3: Normalization of “Number of registration / authentication failure” Parameters

(Situation point decision)
The situation point determination unit 30 determines which combination of authentication methods should be used preferentially from the following five types of input items, depending on what situation the user is currently in.

(A) Usability point Selectable authentication methods and usability points calculated by the usability point determination unit 20 for this authentication method are input.

(B) Time information Time information indicating when the user intends to use the target authentication method when using the service provided by the service provider is input.

(C) Location information Location information indicating where the user intends to use the target authentication method in using the service provided by the service provider is input.

(D) Peripheral information Peripheral information indicating in what circumstances the user intends to use the target authentication method when using the service provided by the service provider is input.
Peripheral information is an item that represents a situation that can be advantageous or inconvenient depending on the selected authentication method, such as whether it is a bright place or a dark place, whether it is a quiet place or a noisy place, or whether there are people nearby. It is.

(E) Moving Means Information Moving means information indicating how the user intends to use the target authentication method while moving the service provided by the service provider is input.
The moving means information represents, for example, a type such as train, walking, or stationary.

At this time, the situation point in one authentication method is calculated by the following mathematical formula.
Situation point in one authentication method = “usability point”
Xf (Pst1, Pst2, Pst3, Pst4) x Pst5

However, f, Pst1, Pst2, Pst3, Pst4, and Pst5 mean the following.
F: a function having time information, position information, peripheral information, and moving means information as parameters Pst1: a parameter indicating time information in which the target authentication method is used Pst2: position information in which the target authentication method is used Parameters Pst3: Parameters representing the peripheral information in which the target authentication method is used Pst4: Parameters representing the means of transportation in which the target authentication method is used Pst5: To normalize the situation points in the target authentication method Parameters

Note that f is a function that is different for each authentication method.
For example, in the case of voice authentication, the surrounding volume (whether it is a quiet place or a noisy place) is important as peripheral information, and in the case of password authentication, whether there are people nearby (risk of peeping) Or not) is important. Also, the importance of time information, position information, peripheral information, and moving means information varies depending on the authentication method.
For this reason, weighting of each information is appropriately set for each authentication method, and different functions are provided.

Here, there are three types of methods of combining a plurality of authentication methods: AND, OR, and weighting. The situation point calculation method for the combination of authentication methods and the execution order of the authentication methods are as follows.
In the following formulas, M, n, and Wi mean the following.
-M: Maximum value when normalizing situation points-n: Number of authentication methods when multiple authentication methods are combined-Wi: Weight in authentication method i

(A) In the case of AND The situation point calculation method when the combination method is AND is as follows.

  The plurality of authentication methods in the case of AND may be executed in order from the authentication method with the lowest status point, that is, in order from the authentication method with the lower convenience, so that the effort required at the time of authentication failure may be minimized.

(A) In the case of OR The calculation method of the situation point when the combination method is OR is as follows.

  The plurality of authentication methods in the case of OR may be executed in order from the authentication method with the highest status point, that is, the authentication method with high convenience, in order, so that the effort required for successful authentication may be minimized.

(C) In the case of weighting Weighting is, for example, the following method.
In the two types of authentication methods A and B, the case where the authentication fails with the verification rate of 90% with respect to the threshold value of the authentication method A and the authentication with the verification rate of 150% with respect to the threshold value B of the authentication method B Suppose. At this time, when the authentication method A is set to 0.6 and the authentication method B is set to a weighting of 0.4, the collation rate is weighted to 54% and 60%, respectively, both of which exceed the weighted average threshold value of 50%. Authentication is successful.

The calculation method of the situation point when the combination method is weighting is as follows.

  The plurality of authentication methods in the case of weighting may be executed in order from the authentication method with the lowest status point, that is, in order from the authentication method with the lower convenience, so that the effort required at the time of authentication failure may be minimized.

(Determine safety points)
The safety point determination unit 40 determines how much security is provided when each authentication method is used alone from the following four types of items input by the administrator of the authentication method determination device 1.

(A) Success probability of exhaustive attack When each authentication method is used independently, the success probability of exhaustive attack indicating the probability of the attacker succeeding in exhaustive attack is input. The exhaustive attack is, for example, an attack that attempts all password patterns that can be entered for password authentication.

(B) Probability of special attack When each authentication method is used alone, the probability of success of the special attack indicating the probability that the attacker will succeed in a special attack other than the total attack is displayed along with the type of the special attack. Entered.

(C) Attack Cost When each authentication method is used alone, an attack cost indicating how much cost an attacker needs for each attack is input together with the type of attack.

(D) Attack time When each authentication method is used alone, an attack time indicating how much time the attacker needs for each attack is input together with the type of attack.

At this time, the safety point is calculated by the following mathematical formula.
Security point in one authentication method = Psc1 / "Success probability of all attacks"
+ Psc2 / max ("special attack success probability" for "special attack type")
+ ("Attack cost" for the above "special attack type") x Psc3
+ ("Attack time" for the above "special attack type") x Psc4

However, Psc1, Psc2, Psc3, and Psc4 mean the following.
Psc1: a parameter for normalizing “success probability of all attacks” Psc2: a parameter for normalizing “success probability of special attack” Psc3: a parameter for normalizing “attack cost” Psc4 : Parameter for normalizing "attack time"

When there are a plurality of special attacks having the highest success probability, the safety point determination unit 40 narrows down the special attacks in the following order.
(1) Special attacks with low “attack costs”.
(2) A special attack with a short “attack time” if there is a special attack with the same “attack cost” in (1).
(3) If there is a special attack with the same “attack time” in (2), the special attack described first.

(Authentication point decision)
From the following four types of items input by the administrator of the authentication method determination device 1, the authentication point determination unit 50 has a level of security when each authentication method is used in combination with other methods. To decide.

(A) Safety point The selectable authentication method and the safety point calculated by the safety point determination unit 40 for this authentication method are input.

(B) One-time property One-time property indicating whether each authentication method uses temporary information or fixed information is input. The one-time property is, for example, a value of 0 to 1, and is a value between 0 and 1 when information is used a plurality of times.

(C) Property authenticity The property authenticity indicating whether each authentication method is authentication by the user's property is input.
In the authentication by possession, since the identity is confirmed by whether or not the user has the object, there is a risk that the object will be stolen, but the safety is enhanced by combining with other authentication methods. Therefore, the authentication point determination unit 50 adjusts the safety point for the combination of authentication methods based on the property authenticity.

(D) Multi-element property A multi-element property indicating whether each authentication method is used in combination with a plurality of authentication methods is input.

At this time, the authentication point (i, j) when the authentication method i (authentication point i) and the authentication method j (authentication point j) are combined is calculated by the following mathematical formula.
(A) Authentication method i 方式 Authentication method j Authentication point (i, j) = max (authentication point i, authentication point j)
(B) Authentication method i∨Authentication method j Authentication point (i, j) = min (authentication point i, authentication point j)
(C) When each authentication method has a weight Authentication point (i, j) = Authentication point i × Wi + Authentication point j × Wj

The method for calculating the authentication point k (k ′ = j when k = i and k ′ = i when k = j) in each authentication method is as follows.
Authentication point k
= "Safety point"
× (1 + “one-time”)
× (1 + “property authentication” × Pau1)
× (1+ “multi-element” × Pau2)
× Pau3

However, Pau1, Pau2, and Pau3 mean the following.
Pau1: A parameter that is 1 only when the authentication method k is property authentication and the authentication method k ′ is not property authentication. Pau2: The authentication method k is capable of multi-factor authentication, and the authentication method k ′ is also Parameter that becomes 1 only when multi-factor authentication is possible. Pau3: Parameter for normalizing authentication points in each authentication method.

(Authentication method decision)
The authentication method determination unit 60 receives the service point, status point, and authentication point as inputs, and determines a combination of authentication methods that is most balanced in terms of convenience and safety.

FIG. 2 is a flowchart illustrating an example of authentication method combination determination processing according to the present embodiment.
It is assumed that the service point of the target service and the status points and authentication points for each possible combination of authentication methods are determined in advance by each unit of the authentication method determination device 1.

  In step S1, the authentication method determination unit 60 extracts a combination of authentication methods whose status points are greater than zero.

  In step S2, the authentication method determination unit 60 extracts a combination of authentication methods in which the authentication point is equal to or greater than the service point from the combinations extracted in step S1.

  In step S3, the authentication method determination unit 60 has a minimum difference between the authentication point and the service point among the combinations extracted in step S2, that is, an authentication method in which the authentication point is not too high compared to the service point. Extract combinations.

  In step S4, the authentication method determination unit 60 extracts the combination of authentication methods having the highest situation point, that is, the authentication method combination that is highly convenient for the user, from the combinations extracted in step S3.

  In this process, the authentication method determination unit 60 narrows down the authentication methods in step S3 under the condition that “the difference between the authentication point and the service point is minimum”. However, the present invention is not limited to this. A plurality of combinations of authentication methods may be extracted.

  According to the present embodiment, the authentication method determination apparatus 1 calculates a service point for each service and calculates an authentication point for each combination of authentication methods. Then, the authentication method determination apparatus 1 preferentially determines a combination having a small difference between the authentication point and the service point among authentication method combinations in which the authentication point is equal to or greater than the service point. Therefore, the authentication method determining apparatus 1 can appropriately determine a combination of authentication methods that satisfy the safety required according to the service and have an authentication point that is not too high compared to the service point.

Further, the authentication method determination device 1 calculates a situation point for each combination of authentication methods, and preferentially determines a combination having a large situation point. Therefore, the authentication method determination device 1 gives priority to the one that satisfies the safety required for each service, has an authentication point that is not too high compared to the service point, and has high user convenience. The combination of authentication methods can be determined appropriately.
At this time, the authentication method determination device 1 calculates the situation point using a different function for each authentication method using time information, position information, peripheral information, and moving means information as parameters, so the user situation at the time of authentication is authenticated. Appropriate evaluation can be performed according to the method, and a combination of authentication methods can be determined appropriately.

Further, the authentication method determination apparatus 1 can appropriately evaluate user convenience by calculating usability points based on user input information, and can appropriately determine a combination of authentication methods.
Furthermore, the authentication method determination apparatus 1 calculates a situation point and an authentication point by different calculation formulas according to a combination pattern (AND, OR, or weighting) of authentication methods. Therefore, the authentication method determination apparatus 1 can distinguish the combination method of authentication methods, can obtain | require each point more appropriately, and can determine the combination of authentication method appropriately.

  Moreover, since the authentication method determination apparatus 1 determines the execution order of authentication methods according to the size of the situation points, it is possible to reduce the burden on the user when combining a plurality of authentication methods.

In addition, since the authentication method determination device 1 calculates the safety point based on the success probability, cost, or time for each type of attack, the security of the authentication method is more appropriately evaluated assuming various attacks, Appropriate combinations of authentication methods can be determined.
At this time, the authentication method determination device 1 distinguishes between the total attack and the special attack, and further calculates the safety point using the information of the special attack having the maximum attack success probability. Evaluation can be performed more appropriately, and as a result, a combination of authentication methods can be appropriately determined.

  As mentioned above, although embodiment of this invention was described, this invention is not restricted to embodiment mentioned above. Further, the effects described in the present embodiment are merely a list of the most preferable effects resulting from the present invention, and the effects of the present invention are not limited to those described in the present embodiment.

  The authentication method determination method by the authentication method determination device 1 is realized by software. When realized by software, a program constituting the software is installed in the information processing apparatus (authentication method determination apparatus 1). These programs may be recorded on a removable medium such as a CD-ROM and distributed to the user, or may be distributed by being downloaded to the user's computer via a network. Furthermore, these programs may be provided to the user's computer (authentication method determination apparatus 1) as a Web service via a network without being downloaded.

DESCRIPTION OF SYMBOLS 1 Authentication method determination apparatus 10 Service point determination part 20 Usability point determination part 30 Situation point determination part 40 Safety point determination part 50 Authentication point determination part 60 Authentication method determination part

Claims (11)

An apparatus for determining an authentication method for using a service,
Indicating the safety of authentication required by the service by integrating the number of damage contents for each type of damage assumed in the service and an index based on the difficulty of collecting or deleting the damage contents A service point determination unit for calculating a service point;
Obtained by a combination of authentication methods based on at least one of indicators of one-time property, property authenticity and multi-factor in addition to safety points indicating safety against attacks for each authentication method An authentication point determination unit for calculating an authentication point indicating safety;
An authentication method determination unit that preferentially determines a combination having a small difference between the authentication point and the service point among combinations of the authentication methods in which the authentication point is equal to or greater than the service point. In addition to the usability point indicating the convenience of the user for each authentication method, based on at least one of the time information at the time of authentication execution, position information, peripheral information, and moving means information index, A situation point determination unit for calculating a situation point indicating the priority of the combination of the authentication methods;
The apparatus according to claim 1, wherein the authentication method determination unit preferentially determines a combination having a larger status point among combinations of the authentication methods in which the authentication point is equal to or greater than the service point.   The situation point determination unit calculates the situation point using a different function for each authentication method, using at least one of the time information, the position information, the peripheral information, and the moving means information as a parameter. The apparatus of claim 2.   For each authentication method, the usability points are calculated based on at least one of the priority order or points selected by the user, the time required for registration / authentication procedures, and the index based on the frequency of registration / authentication failure. The apparatus of Claim 2 or Claim 3 provided with the usability point determination part to perform.   The said situation point determination part calculates the said situation point using a respectively different formula according to which pattern of the said authentication system is AND, OR, or a weighting pattern. The device according to any one of the above.   6. The apparatus according to claim 5, wherein in the combination of the authentication methods, the execution order of each authentication method is determined by the size of a situation point of the authentication method alone for each pattern.   The safety point determination unit according to any one of claims 1 to 6, further comprising a safety point determination unit that calculates the safety point based on at least one of an attack success probability for each attack type, a cost and time required for the attack. The device described in 1.   The safety point determination unit includes an index based on the success probability of all attacks, an index based on the attack success probability related to the attack having the maximum attack success probability among the special attacks other than the all attack, an index based on the cost and time required for the attack, and The apparatus according to claim 7, wherein the safety points are calculated by integrating.   9. The authentication point determination unit according to claim 1, wherein the authentication point determination unit calculates the authentication point using different calculation formulas depending on whether the combination of the authentication methods is AND, OR, or weighting. The device described in 1. A method for determining an authentication method for using a service,
Indicating the safety of authentication required by the service by integrating the number of damage contents for each type of damage assumed in the service and an index based on the difficulty of collecting or deleting the damage contents A service point determination step for calculating a service point;
Obtained by a combination of authentication methods based on at least one of indicators of one-time property, property authenticity and multi-factor in addition to safety points indicating safety against attacks for each authentication method An authentication point determination step for calculating an authentication point indicating safety;
A method in which a computer executes an authentication method determination step of preferentially determining a combination having a small difference between the authentication point and the service point among combinations of the authentication methods in which the authentication point is equal to or greater than the service point. A program for determining an authentication method when using a service,
Indicating the safety of authentication required by the service by integrating the number of damage contents for each type of damage assumed in the service and an index based on the difficulty of collecting or deleting the damage contents A service point determination step for calculating a service point;
Obtained by a combination of authentication methods based on at least one of indicators of one-time property, property authenticity and multi-factor in addition to safety points indicating safety against attacks for each authentication method An authentication point determination step for calculating an authentication point indicating safety;
A program for causing a computer to execute an authentication method determining step that preferentially determines a combination having a small difference between the authentication point and the service point among combinations of the authentication methods in which the authentication point is equal to or greater than the service point. .

Images