JP2017072979A - Authentication system, authentication server, provider server, and user terminal - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication system for determining a combination of authentication methods appropriately in accordance with a service, an authentication server, a provider server, and a user terminal.SOLUTION: In an authentication system 1, a user terminal 10 includes: an authentication request unit 11 for requesting a service; and an authentication information transmission unit 16 which transmits authentication information for each of authentication methods. A provider server 20 includes a service point management unit 21 for managing service points indicating safety of authentication required by the service. An authentication server 30 includes: an authentication point management unit 32 for managing authentication points indicating safety to be obtained by the combination of authentication methods; an authentication method determination unit 35 which determines a combination having a small difference between the authentication points and service points preferentially, out of combinations of authentication methods having the authentication points equal to or larger than the service points; and an authentication processing unit 36 which receives authentication information for each of the determined combinations of authentication methods, to execute authentication processing.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an authentication system for performing authentication when using a service.

  Conventionally, various services are provided via a communication network. In order to prevent spoofing and the like, identity authentication technology for confirming the identity of the user is adopted for these services. There are a wide variety of authentication methods for personal authentication technology, but the service provider usually determines which authentication method to use.

Japanese Patent Application Laid-Open No. 2004-133830 proposes a technique for setting and managing a security level for each security target and selecting an authentication method to be used for authentication according to this level.
Patent Document 2 proposes a technique for performing authentication using an authentication method selected by the user himself and determining whether or not the authentication point of this authentication method has reached the authentication level required by the service provider. .

JP 2005-227934 A JP 2010-67124 A

  By the way, the level of authentication required for each of the provided services varies, and it has been difficult to set these appropriately. In addition, it is difficult to select an appropriate combination of authentication methods according to the level of authentication required.

  An object of the present invention is to provide an authentication system, an authentication server, an operator server, and a user terminal that can appropriately determine a combination of authentication methods according to services.

  An authentication system according to the present invention is an authentication system including a user terminal that uses a service, an operator server that provides the service, and an authentication server that performs user authentication, and the user terminal An authentication requesting unit that makes a request, and an authentication information transmitting unit that transmits authentication information for each of the authentication methods determined in the authentication server. Service point management for managing the service point indicating the security of authentication required by the service, which is calculated by integrating the quantity of the damage content and an index based on the difficulty of collecting or deleting the damage content In addition to a safety point indicating safety against an attack for each authentication method, the one-time property, An authentication point management unit that manages an authentication point indicating safety obtained by a combination of the authentication methods, calculated based on at least one of the material authenticity and multi-factor indicators, and the authentication point Among the combinations of authentication methods that are equal to or greater than the service point, an authentication method determination unit that preferentially determines a combination having a small difference between the authentication point and the service point, and an authentication method determined by the authentication method determination unit. An authentication processing unit that receives the authentication information and performs an authentication process for each combination.

  The user terminal includes: an acquisition unit that acquires at least one of terminal information among time information at the time of authentication execution, position information, peripheral information, and moving means information; a terminal information transmission unit that transmits the terminal information; The authentication server calculates a status point indicating the priority of the combination of the authentication methods at the time of executing the authentication based on the usability point indicating the convenience of the user for each authentication method and the terminal information. A point determination unit may be provided, and the authentication method determination unit may preferentially determine a combination having a larger status point among combinations of the authentication methods in which the authentication point is equal to or greater than the service point.

  The situation point determination unit may calculate the situation point using a function that is different for each authentication method using the terminal information as a parameter.

  The user terminal, for each authentication method, inputs at least one of the priority order or points selected by the user, the time required for registration / authentication procedure, and an index based on the frequency of registration / authentication failure And an input information transmission unit that transmits the input information, and the authentication server includes a usability point determination unit that calculates the usability points based on the input information for each of the authentication methods. You may prepare.

  The situation point determination unit may calculate the situation point using different calculation formulas depending on whether the combination of the authentication methods is an AND, OR, or weighting pattern.

  In the combination of the authentication methods, the execution order of each authentication method may be determined for each pattern according to the size of the status point of the authentication method alone.

  The safety point may be calculated based on at least one of an attack success probability for each attack type, a cost and time required for the attack.

  The safety point integrates an index based on the success probability of all attacks and an index based on the attack success probability related to the attack with the maximum attack success probability among the special attacks other than the all attack, the cost required for the attack, and the time. May be calculated as follows.

  The authentication points may be calculated using different calculation formulas depending on whether the combination of the authentication methods is AND, OR, or weighting.

  An authentication server according to the present invention is an authentication server for authenticating a user who uses a service provided by an operator server, and the amount of the damage content for each type of damage content assumed in the service, And a service point indicating the security of authentication required by the service, which is calculated by integrating the indexes based on the difficulty of collecting or deleting the damage contents and managed by the provider server, Based on at least one of the indicators of one-time property, property authenticity and multi-factor in addition to the service point acquisition unit received via and the safety point indicating the security against attacks for each authentication method An authentication point management unit for managing an authentication point indicating safety obtained by a combination of the authentication methods calculated in the above, and the authentication point Among the combinations of authentication methods that are equal to or greater than the service point, an authentication method determination unit that preferentially determines a combination having a small difference between the authentication point and the service point, and an authentication method determined by the authentication method determination unit. An authentication processing unit that receives authentication information from the user terminal and performs authentication processing for each combination.

  The provider server according to the present invention is a provider server that provides a service to a user terminal authenticated by an authentication server, and the amount of the damage content for each type of damage content assumed in the service, and A service point management unit for managing service points indicating safety of authentication required by the service, which is calculated by integrating indices based on difficulty in collecting or deleting the damage content, and from the user terminal In response to the service request, the service point is provided and redirected to the authentication server. In the authentication server, in addition to the safety point indicating safety against an attack for each authentication method, one-time A combination of the above authentication methods calculated based on at least one of the indicators of property, property authenticity and multi-factor More preferably, the authentication method is determined after preferentially determining a combination with a small difference between the authentication point and the service point among a combination of the authentication methods in which an authentication point indicating security obtained is greater than or equal to the service point. A service providing unit that starts providing a service to the user terminal in response to receiving a notification indicating that the authentication is successful for the combination.

  The user terminal according to the present invention is a user terminal that uses a service provided by an operator server, and the amount of the damage content and the content of the damage for each type of damage content assumed in the service. Service points indicating the security of authentication required by the service, which is calculated by integrating indicators based on the difficulty of collecting or deleting the service and managed by the provider server, are acquired and authenticated against the authentication server. In addition to the safety point indicating the security against the attack for each authentication method in the authentication request unit that performs the request and the authentication server, at least one of the indicators of one-time property, property authenticity, and multi-element property An authentication point indicating the safety obtained by the combination of the authentication methods calculated based on the authentication method is equal to or higher than the service point. Of combined seen, after determining with priority combinations difference of the authentication point and the service point is small, and an authentication information transmitting unit for transmitting the authentication information for each authentication method the determined.

  ADVANTAGE OF THE INVENTION According to this invention, the combination of the authentication system according to a service can be determined appropriately.

It is a figure which shows the structure of the authentication system which concerns on embodiment. It is a figure which shows the procedure which determines the combination of the authentication method which concerns on embodiment. It is a flowchart which shows an example of the combination determination process of the authentication system which concerns on embodiment. It is a sequence diagram which shows the registration process of the input information which concerns on embodiment. It is a sequence diagram which shows the collation information registration process for utilizing the authentication system which concerns on embodiment. It is a sequence diagram which shows the selection of the authentication method and authentication process which concern on embodiment.

Hereinafter, an example of an embodiment of the present invention will be described.
FIG. 1 is a diagram illustrating a configuration of an authentication system 1 according to the present embodiment.

  The authentication system 1 includes a user terminal 10 that uses a service, an operator server 20 that provides the service, and an authentication server 30 that authenticates the user.

  The user terminal 10, the provider server 20, and the authentication server 30 are connected to each other via a network. When the user uses the service at the user terminal 10, the service request is redirected to the authentication server 30, and after the user's validity is authenticated, the service is provided by the business server 20.

  The user terminal 10 includes an authentication request unit 11, an input unit 12, an input information transmission unit 13, a terminal information acquisition unit 14, a terminal information transmission unit 15, and an authentication information transmission unit 16.

The authentication request unit 11 makes a service request to the business server 20.
The input unit 12 accepts at least one input information among the priority order or point selected by the user, the time required for the registration / authentication procedure, and the index based on the frequency of registration / authentication failure for each authentication method.
The input information transmitting unit 13 transmits the input information received by the input unit 12 to the authentication server 30 for usability point calculation indicating the convenience of the user for each authentication method.

The terminal information acquisition unit 14 acquires at least one of terminal information among time information at the time of executing authentication, position information, peripheral information, and moving means information.
The terminal information transmitting unit 15 transmits the terminal information acquired by the terminal information acquiring unit 14 to the authentication server 30 for calculating a situation point indicating the priority of the combination of authentication methods at the time of executing authentication.

  The authentication information transmitting unit 16 transmits authentication information for each authentication method determined by the authentication server 30.

  The business server 20 includes a service point management unit 21, a request processing unit 22, and a service providing unit 23.

  The service point management unit 21 stores and manages service points indicating the security of authentication required by the service, calculated by the authentication server 30 by a service point determination process described later.

  The request processing unit 22 provides a service point managed by the service point management unit 21 in response to a service request from the user terminal 10 and redirects it to the authentication server 30.

  After the authentication server 30 determines a combination of authentication methods, the service providing unit 23 receives a notification indicating that the authentication has succeeded for the determined combination of authentication methods. 10 starts providing services.

  The authentication server 30 includes a service point acquisition unit 31, an authentication point management unit 32, a usability point determination unit 33, a situation point determination unit 34, an authentication method determination unit 35, and an authentication processing unit 36.

  The service point acquisition unit 31 receives a service point managed by the provider server 20 via the user terminal 10.

  The authentication point management unit 32 stores and manages authentication points indicating safety obtained by a combination of authentication methods calculated by an authentication point determination process described later.

The usability point determination unit 33 calculates usability points by the usability point determination process described later based on the input information received from the user terminal 10 for each authentication method.
Based on the usability points and the terminal information received from the user terminal 10, the situation point determination unit 34 calculates the situation points by a situation point determination process described later.

The authentication method determination unit 35 determines a combination of authentication methods by an authentication method determination process described later based on the authentication point, the service point, and the situation point.
The authentication processing unit 36 receives authentication information from the user terminal 10 for each combination of authentication methods determined by the authentication method determination unit 35 and performs authentication processing.

FIG. 2 is a diagram showing a procedure for automatically determining an optimal combination of authentication methods from a wide variety of authentication methods in the authentication system 1 according to the present embodiment.
Here, examples of the authentication method targeted in the present embodiment include the following, but are not limited to these, and various authentication methods may be used.
・ Password authentication ・ 4-digit password authentication ・ 8-digit password authentication ・ Pattern authentication ・ Authentication using a secret question ・ One-time password authentication ・ One-time pattern authentication ・ SIM authentication ・ Device authentication ・ Using a secret key Authentication by signature-Authentication by random number table-Palmprint authentication-Fingerprint authentication-Face authentication-Palm vein authentication-Finger vein authentication-Iris authentication-Voice authentication-Signature authentication-Multi-factor authentication-Image authentication (CAPTCHA)
・ Location authentication ・ Risk-based authentication ・ Multi-path authentication

(Service point determination process)
In the service point determination process, it is determined how much security the target service requires from the following three types of items input by the administrator of the authentication server 30 or the operator server 20.

(A) Types of damage content Assuming what type of damage is assumed when impersonation is performed by an unauthorized person in a service provided by a service provider, the type of damage content includes money, personal information, etc. Is entered.

(B) Quantity of damage contents Assuming how much damage will be done when impersonation is performed by an unauthorized person in the service provided by a service provider, the amount of damage contents (in the case of money), Items such as the number of cases (in the case of personal information) are entered.

(C) Difficulties in collecting / deleting damage contents Assume how difficult it is to recover or delete damage received by unauthorized persons in the services provided by service providers. Items such as the difficulty of collection (in the case of money) and the difficulty of deletion (in the case of personal information) are entered as the difficulty of collection / deletion.

At this time, the service point is calculated by the following mathematical formula.
Service point = "money" in "money" x "difficulty rate" x Psr1
+ "Number of cases" in "Personal information" x "Deletion difficulty rate" x Psr2
+ "Quantity" in "Others" x "Recovery / deletion difficulty rate" x Psr3

However, Psr1, Psr2, and Psr3 mean the following.
Psr1: parameter for normalizing the damage content related to “money” Psr2: parameter for normalizing the damage content related to “personal information” Psr3: parameter for normalizing the damage content related to “other”

(Usability point determination process)
In the usability point determination process, which authentication method the user wants to use preferentially is determined from the following three types of items input by the service user.

(A) Priorities or points of user selection When using services provided by service providers, selectable authentication methods as items indicating which authentication method the user wants to select preferentially, and Priorities or points (for example, 0 to 100) are input.
In addition, when a priority is input, it may be converted into points according to a predetermined rule. For example, if priority levels from 1st to 4th are specified for 4 types of authentication methods, 1st is converted to 100 points, 2nd is 75 points, 3rd is 50 points, 4th is 25 points May be.
When only a specific authentication method is given priority, for example, 100 points may be input for this authentication method, and 0 points may be input for other authentication methods.

(B) Registration / authentication elapsed time How much time is required for registration and authentication processing of information used for authentication, such as passwords or biometric information, in the authentication methods that can be selected by the user when using the services provided by the service provider? As an item indicating whether time is required, a registration / authentication elapsed time in a selectable authentication method is input.
The input data may be a specific time (minute or second) or a stepped level value.

(C) Number of registration / authentication failures As an assumption item indicating how many times registration / authentication failed before successful registration / authentication in the user-selectable authentication method when using services provided by service providers The number of registration / authentication failures in the selectable authentication method is input.

At this time, the usability point is calculated by using the following formula, for example, by using the user selection point that is a subjective index and the registration / authentication elapsed time and the number of registration / authentication failures that are objective indices. .
Usability point = "User selection point" in the authentication method x Pus1
+ Pus2 / ("Registration / authentication elapsed time" in the authentication method)
+ Pus3 / (“Number of registration / authentication failures” in the authentication method)

However, Pus1, Pus2, and Pus3 mean the following.
・ Pus1: Parameter for normalizing “Point of user selection” ・ Pus2: Parameter for normalizing “Registration / authentication elapsed time” ・ Pus3: Normalization of “Number of registration / authentication failure” Parameters

(Situation point determination process)
In the situation point determination processing, which authentication method combination is to be preferentially used is determined from the following five types of input items, depending on what situation the user is currently in.

(A) Usability point Selectable authentication methods and usability points calculated by usability point determination processing for this authentication method are input.

(B) Time information Time information indicating when the user intends to use the target authentication method when using the service provided by the service provider is input.

(C) Location information Location information indicating where the user intends to use the target authentication method in using the service provided by the service provider is input.

(D) Peripheral information Peripheral information indicating in what circumstances the user intends to use the target authentication method when using the service provided by the service provider is input.
Peripheral information is an item that represents a situation that can be advantageous or inconvenient depending on the selected authentication method, such as whether it is a bright place or a dark place, whether it is a quiet place or a noisy place, or whether there are people nearby. It is.

(E) Moving Means Information Moving means information indicating how the user intends to use the target authentication method while moving the service provided by the service provider is input.
The moving means information represents, for example, a type such as train, walking, or stationary.

At this time, the situation point in one authentication method is calculated by the following mathematical formula.
Situation point in one authentication method = “usability point”
Xf (Pst1, Pst2, Pst3, Pst4) x Pst5

However, f, Pst1, Pst2, Pst3, Pst4, and Pst5 mean the following.
F: a function having time information, position information, peripheral information, and moving means information as parameters Pst1: a parameter indicating time information in which the target authentication method is used Pst2: position information in which the target authentication method is used Parameters Pst3: Parameters representing the peripheral information in which the target authentication method is used Pst4: Parameters representing the means of transportation in which the target authentication method is used Pst5: To normalize the situation points in the target authentication method Parameters

Note that f is a function that is different for each authentication method.
For example, in the case of voice authentication, the surrounding volume (whether it is a quiet place or a noisy place) is important as peripheral information, and in the case of password authentication, whether there are people nearby (risk of peeping) Or not) is important. Also, the importance of time information, position information, peripheral information, and moving means information varies depending on the authentication method.
For this reason, weighting of each information is appropriately set for each authentication method, and different functions are provided.

Here, there are three types of methods of combining a plurality of authentication methods: AND, OR, and weighting. The situation point calculation method for the combination of authentication methods and the execution order of the authentication methods are as follows.
In the following formulas, M, n, and Wi mean the following.
-M: Maximum value when normalizing situation points-n: Number of authentication methods when multiple authentication methods are combined-Wi: Weight in authentication method i

(A) In the case of AND The situation point calculation method when the combination method is AND is as follows.

  The plurality of authentication methods in the case of AND may be executed in order from the authentication method with the lowest status point, that is, in order from the authentication method with the lower convenience, so that the effort required at the time of authentication failure may be minimized.

(A) In the case of OR The calculation method of the situation point when the combination method is OR is as follows.

  The plurality of authentication methods in the case of OR may be executed in order from the authentication method with the highest status point, that is, the authentication method with high convenience, in order, so that the effort required for successful authentication may be minimized.

(C) In the case of weighting Weighting is, for example, the following method.
In the two types of authentication methods A and B, the case where the authentication fails with the verification rate of 90% with respect to the threshold value of the authentication method A and the authentication has succeeded with the verification rate of 150% with respect to the threshold value B of the authentication method B. Suppose. At this time, when the authentication method A is set to 0.6 and the authentication method B is set to a weighting of 0.4, the collation rate is weighted to 54% and 60%, respectively, both of which exceed the weighted average threshold value of 50%. Authentication is successful.

The calculation method of the situation point when the combination method is weighting is as follows.

  The plurality of authentication methods in the case of weighting may be executed in order from the authentication method with the lowest status point, that is, in order from the authentication method with the lower convenience, so that the effort required at the time of authentication failure may be minimized.

(Safety point determination process)
In the safety point determination process, it is determined from the following four types of items input by the administrator of the authentication server 30 how much security is provided when each authentication method is used alone.

(A) Success probability of exhaustive attack When each authentication method is used independently, the success probability of exhaustive attack indicating the probability of the attacker succeeding in exhaustive attack is input. The exhaustive attack is, for example, an attack that attempts all password patterns that can be entered for password authentication.

(B) Probability of special attack When each authentication method is used alone, the probability of success of the special attack indicating the probability that the attacker will succeed in a special attack other than the total attack is displayed along with the type of the special attack. Entered.

(C) Attack Cost When each authentication method is used alone, an attack cost indicating how much cost an attacker needs for each attack is input together with the type of attack.

(D) Attack time When each authentication method is used alone, an attack time indicating how much time the attacker needs for each attack is input together with the type of attack.

At this time, the safety point is calculated by the following mathematical formula.
Security point in one authentication method = Psc1 / "Success probability of all attacks"
+ Psc2 / max ("special attack success probability" for "special attack type")
+ ("Attack cost" for the above "special attack type") x Psc3
+ ("Attack time" for the above "special attack type") x Psc4

However, Psc1, Psc2, Psc3, and Psc4 mean the following.
Psc1: a parameter for normalizing “success probability of all attacks” Psc2: a parameter for normalizing “success probability of special attack” Psc3: a parameter for normalizing “attack cost” Psc4 : Parameter for normalizing "attack time"

When there are a plurality of special attacks with the highest success probability, the special attacks are narrowed down in the following order in the safety point determination process.
(1) Special attacks with low “attack costs”.
(2) A special attack with a short “attack time” if there is a special attack with the same “attack cost” in (1).
(3) If there is a special attack with the same “attack time” in (2), the special attack described first.

(Authentication point determination process)
In the authentication point determination process, the following four types of items input by the administrator of the authentication server 30 determine how much security each authentication method has when used in combination with other methods. The

(A) Safety point The selectable authentication method and the safety point calculated by the safety point determination process for this authentication method are input.

(B) One-time property One-time property indicating whether each authentication method uses temporary information or fixed information is input. The one-time property is, for example, a value of 0 to 1, and is a value between 0 and 1 when information is used a plurality of times.

(C) Property authenticity The property authenticity indicating whether each authentication method is authentication by the user's property is input.
In the authentication by possession, since the identity is confirmed by whether or not the user has the object, there is a risk that the object will be stolen, but the safety is enhanced by combining with other authentication methods. Therefore, in the authentication point determination process, the safety point for the combination of authentication methods is adjusted by the property authenticity.

(D) Multi-element property A multi-element property indicating whether each authentication method is used in combination with a plurality of authentication methods is input.

At this time, the authentication point (i, j) when the authentication method i (authentication point i) and the authentication method j (authentication point j) are combined is calculated by the following mathematical formula.
(A) Authentication method i 方式 Authentication method j Authentication point (i, j) = max (authentication point i, authentication point j)
(B) Authentication method i∨Authentication method j Authentication point (i, j) = min (authentication point i, authentication point j)
(C) When each authentication method has a weight Authentication point (i, j) = Authentication point i × Wi + Authentication point j × Wj

The method for calculating the authentication point k (k ′ = j when k = i and k ′ = i when k = j) in each authentication method is as follows.
Authentication point k
= "Safety point"
× (1 + “one-time”)
× (1 + “property authentication” × Pau1)
× (1+ “multi-element” × Pau2)
× Pau3

However, Pau1, Pau2, and Pau3 mean the following.
Pau1: A parameter that is 1 only when the authentication method k is property authentication and the authentication method k ′ is not property authentication. Pau2: The authentication method k is capable of multi-factor authentication, and the authentication method k ′ is also Parameter that becomes 1 only when multi-factor authentication is possible. Pau3: Parameter for normalizing authentication points in each authentication method.

(Authentication method decision process)
In the authentication method determination process, the service point, the situation point, and the authentication point are input, and the combination of authentication methods that is most balanced in terms of convenience and safety is determined.

FIG. 3 is a flowchart illustrating an example of authentication method combination determination processing according to the present embodiment.
It is assumed that the service point of the target service and the situation points and authentication points for each possible combination of authentication methods are determined in advance.

  In step S <b> 1, the authentication server 30 extracts a combination of authentication methods whose status points are greater than zero.

  In step S2, the authentication server 30 extracts a combination of authentication methods in which the authentication point is equal to or greater than the service point from the combinations extracted in step S1.

  In step S3, the authentication server 30 selects a combination of authentication methods in which the difference between the authentication point and the service point is the smallest among the combinations extracted in step S2, that is, the authentication method combination in which the authentication point is not too high compared to the service point. Extract.

  In step S4, the authentication server 30 extracts the combination of authentication methods having the highest situation point, that is, the combination of authentication methods having high user convenience, from the combinations extracted in step S3.

  In this process, the authentication server 30 narrows down the authentication method in step S3 under the condition that “the difference between the authentication point and the service point is minimum”. However, the present invention is not limited to this. For example, the difference is within a predetermined range. A plurality of combinations of authentication methods may be extracted.

  Next, a detailed description will be given of the flow of processing linked between the respective devices (the user terminal 10, the business server 20, and the authentication server 30) until the user terminal 10 receives the service in the authentication system 1.

FIG. 4 is a sequence diagram showing a registration process of input information according to the present embodiment.
In this process, in order to determine the aforementioned usability point corresponding to the user terminal 10, the user terminal 10 determines at least one of the priority or points of the authentication method, the registration / authentication elapsed time, and the number of registration / authentication failures. The included input information is registered in the authentication server 30.

  In step S <b> 11, the user terminal 10 transmits an authentication method priority registration request to the authentication server 30.

  In step S <b> 12, the authentication server 30 transmits an authentication method priority order registration response to the user terminal 10 in response to the request received in step S <b> 11.

  In step S <b> 13, the user terminal 10 receives input information on priority or points for each authentication method, registration / authentication elapsed time, and registration / authentication failure count.

  In step S <b> 14, the user terminal 10 transmits the input information description file received in step S <b> 13 to the authentication server 30.

  In step S15, the authentication server 30 verifies the validity of the file format and numerical data range received in step S14, registers the input information if the verification is OK, and does not register if the verification is NG.

  In step S16, the authentication server 30 transmits the result of verification and registration (OK / NG) in step S15 to the user terminal.

  In step S17, the user terminal 10 saves the file transmitted in step S14 if registration is OK with respect to the registration result received in step S16, and does not save the file if registration NG.

FIG. 5 is a sequence diagram showing a collation information registration process for using the authentication method according to the present embodiment.
In this process, the user terminal 10 registers verification information such as a password or biometric information for each authentication method in the authentication server 30 in order to perform authentication in the authentication server 30.

  In step S <b> 21, the user terminal 10 transmits an authentication method information registration request to the authentication server 30.

  In step S <b> 22, the authentication server 30 transmits an authentication method information registration response and an authentication method list request to the user terminal 10 in response to the request received in step S <b> 21.

  In step S <b> 23, the user terminal 10 transmits a list of authentication methods for registering information to the authentication server 30 in response to the request received in step S <b> 22.

  In step S24, the authentication server 30 transmits an authentication method registration information request to the user terminal 10 in accordance with the authentication method list received in step S23.

  In step S25, the user terminal 10 receives input of registration information for each authentication method.

  In step S <b> 26, the user terminal 10 transmits the registration information received in step S <b> 25 to the authentication server 30.

  In step S27, the authentication server 30 verifies that the registration information received in step S26 is valid data. If the verification is OK, the registration information is registered, and if the verification is NG, the information is not registered.

  In step S28, the authentication server 30 transmits the registration result (OK / NG) in step S27 to the user terminal 10. The authentication server 30 proceeds to step S29 if information on all authentication methods described in the authentication method list received in step S23 is registered, and repeats steps S24 to S28 if not registered.

  In step S <b> 29, the authentication server 30 transmits a registration completion response to the user terminal 10.

FIG. 6 is a sequence diagram showing authentication method selection and authentication processing according to the present embodiment.
In this process, the selection of the authentication method and the authentication by the selected method are performed by cooperation among the three of the user terminal 10, the operator server 20, and the authentication server 30.

  In step S <b> 31, the user terminal 10 transmits a service request to the business server 20.

  In step S <b> 32, the business server 20 transmits a service response and the service point described above to the user terminal 10 in response to the request received in step S <b> 31.

  In step S33, the user terminal 10 transmits a service point together with a service redirect response to the authentication server 30 in response to the response received in step S32.

  In step S34, the authentication server 30 transmits a terminal information request to the user terminal 10 in response to the response received in step S33.

  In step S35, the user terminal 10 acquires time information, position information, peripheral information, and moving means information for calculating the above-described situation points as terminal information.

  In step S36, the user terminal 10 transmits terminal information to the authentication server 30 in response to the request received in step S34.

  In step S37, the authentication server 30 automatically selects an authentication method from the service point received in step S33, the situation point calculated based on the terminal information received in step S36, and the authentication point.

In step S38, the authentication server 30 transmits an authentication request to the user terminal 10 for each authentication method selected in step S37.
When a plurality of authentication methods are combined, there are three types of combinations, AND, OR, and weighting. In the case of AND or weighting, the authentication method is performed in order from the lowest status point, and in the case of OR, the authentication method is performed from the higher status point.

  In step S39, the user terminal 10 receives input of authentication information for each authentication method.

  In step S40, the user terminal 10 transmits the authentication information received in step S39 to the authentication server 30.

  In step S41, the authentication server 30 collates the authentication information received in step S40 with the registration information registered in advance.

  In step S <b> 42, the authentication server 30 transmits the result of verification performed in step S <b> 41 (OK / NG) to the user terminal 10. The authentication server 30 proceeds to step S43 if the authentication by the authentication method selected in step S37 is completed, and repeats steps S38 to S42 if not completed.

  In step S43, the authentication server 30 transmits the authentication result (OK / NG) obtained from the collation result repeatedly performed in steps S38 to S42 to the user terminal 10.

  In step S44, the user terminal 10 transmits an authentication success redirect response to the business server 20 if the authentication result obtained in step S43 is authentication OK, and forcibly terminates if authentication NG.

  In step S45, the operator server 20 verifies the response received in step S44, transmits a token request to the authentication server 30 if the verification is OK, and forcibly terminates if the verification is NG.

  In step S46, the authentication server 30 verifies the request received in step S45, issues a token if the request source is the user terminal 10 that has been successfully authenticated (verification OK), and forcibly terminates if the verification is NG. .

  In step S47, the authentication server 30 transmits the token issued in step S46 to the business server 20.

  In step S48, the business entity server 20 verifies the response received in step S47, provides the service to the user terminal 10 if the verification is OK, and forcibly terminates if the verification is NG.

According to the present embodiment, the authentication system 1 for integrating a wide variety of authentication methods between the three of the user terminal 10, the provider server 20, and the authentication server 30 is realized.
The authentication system 1 manages service points for each service, and manages authentication points for each combination of authentication methods. Then, the authentication system 1 preferentially determines a combination having a small difference between the authentication point and the service point among combinations of authentication methods in which the authentication point is equal to or greater than the service point. Therefore, the authentication system 1 can appropriately determine a combination of authentication methods that satisfy the safety required according to the service and that the authentication point is not too high compared to the service point.

Further, the authentication system 1 calculates a situation point for each combination of authentication methods, and preferentially determines a combination having a large situation point. Therefore, the authentication system 1 satisfies the safety required for each service, and the authentication point is not too high compared to the service point, and moreover the user convenience is given priority. A combination of methods can be determined appropriately.
At this time, the authentication system 1 calculates a situation point using a different function for each authentication method using time information, position information, peripheral information, and moving means information as parameters, so that the user situation at the time of authentication is used as the authentication method. Appropriate evaluation can be made accordingly, and a combination of authentication methods can be determined appropriately.

Moreover, the authentication system 1 can evaluate a user's convenience more appropriately by calculating a usability point based on user input information, and can appropriately determine a combination of authentication methods.
Further, the authentication system 1 calculates the situation point and the authentication point by different calculation formulas according to the combination pattern (AND, OR, or weighting) of the authentication methods. Therefore, the authentication system 1 can distinguish the combination method of authentication methods, can determine each point more appropriately, and can appropriately determine the combination of authentication methods.

  Further, since the authentication system 1 determines the execution order of the authentication methods according to the size of the situation points, it is possible to reduce the burden on the user when combining a plurality of authentication methods.

In addition, since the authentication system 1 calculates the safety point based on the success probability, cost, or time for each type of attack, the security of the authentication method is more appropriately evaluated assuming various attacks, and the authentication method Can be determined appropriately.
At this time, the authentication system 1 distinguishes all attacks from special attacks, and further calculates safety points using information on special attacks with the highest probability of successful attacks. Therefore, the security for each authentication method is more appropriate. As a result, the combination of authentication methods can be determined appropriately.

  As mentioned above, although embodiment of this invention was described, this invention is not restricted to embodiment mentioned above. Further, the effects described in the present embodiment are merely a list of the most preferable effects resulting from the present invention, and the effects of the present invention are not limited to those described in the present embodiment.

  In this embodiment, although the authentication server 30 calculated the usability point and the situation point based on the information received from the user terminal 10, it is not limited to this. For example, the user terminal 10 may calculate usability points and situation points and provide them to the authentication server 30.

  In the present embodiment, the authentication server 30 performs the authentication for the service provided by the business server 20, but the business server 20 and the authentication server 30 are the same, that is, the business server 20 has the function of the authentication server 30. You may have.

  The authentication method by the authentication system 1 is realized by software. When implemented by software, a program constituting the software is installed in the information processing apparatus (user terminal 10, operator server 20, authentication server 30). These programs may be recorded on a removable medium such as a CD-ROM and distributed to the user, or may be distributed by being downloaded to the user's computer via a network. Furthermore, these programs may be provided to the user's computer (user terminal 10, provider server 20, authentication server 30) as a Web service via a network without being downloaded.

DESCRIPTION OF SYMBOLS 1 Authentication system 10 User terminal 11 Authentication request part 12 Input part 13 Input information transmission part 14 Terminal information acquisition part 15 Terminal information transmission part 16 Authentication information transmission part 20 Provider server 21 Service point management part 22 Request processing part 23 Service provision Unit 30 authentication server 31 service point acquisition unit 32 authentication point management unit 33 usability point determination unit 34 status point determination unit 35 authentication method determination unit 36 authentication processing unit

Claims (12)

An authentication system having a user terminal that uses a service, an operator server that provides the service, and an authentication server that performs user authentication,
The user terminal is
An authentication request unit for requesting the service;
An authentication information transmitting unit for transmitting authentication information for each authentication method determined in the authentication server,
The provider server is
Security of authentication required by the service calculated by integrating the quantity based on the damage content assumed for the service and the index based on the difficulty of collecting or deleting the damage content A service point management unit for managing service points
The authentication server is
A combination of the authentication methods calculated based on at least one of the indicators of one-time property, property authenticity and multi-factor in addition to the safety points indicating the security against attacks for each authentication method An authentication point management unit for managing authentication points indicating safety obtained by
Among the combinations of the authentication methods in which the authentication point is equal to or greater than the service point, an authentication method determination unit that preferentially determines a combination having a small difference between the authentication point and the service point;
An authentication system comprising: an authentication processing unit that receives the authentication information and performs an authentication process for each combination of authentication methods determined by the authentication method determination unit. The user terminal is
An acquisition unit that acquires at least one of terminal information among time information at the time of authentication execution, position information, peripheral information, and moving means information;
A terminal information transmission unit for transmitting the terminal information,
The authentication server is
Based on the usability point indicating the convenience of the user for each authentication method and the terminal information, a situation point determination unit for calculating a status point indicating the priority of the combination of the authentication methods at the time of authentication execution,
The authentication system according to claim 1, wherein the authentication method determination unit preferentially determines a combination having a larger status point among combinations of the authentication methods in which the authentication point is equal to or greater than the service point.   The authentication system according to claim 2, wherein the situation point determination unit calculates the situation point using a function that is different for each authentication method using the terminal information as a parameter. The user terminal is
For each of the authentication methods, an input unit that accepts at least one of input information of a priority order or points selected by the user, a time required for registration / authentication procedure, and an index based on the frequency of registration / authentication failure;
An input information transmission unit for transmitting the input information,
The authentication server is
4. The authentication system according to claim 2, further comprising a usability point determination unit that calculates the usability point based on the input information for each authentication method. 5.   The said situation point determination part calculates the said situation point using a respectively different formula according to which pattern of the said authentication system is AND, OR, or a weighting pattern. An authentication system according to any one of the above.   6. The authentication system according to claim 5, wherein in the combination of the authentication methods, the execution order of each authentication method is determined by the size of a situation point of the authentication method for each pattern.   The authentication system according to any one of claims 1 to 6, wherein the security point is calculated based on at least one of an attack success probability for each attack type, a cost and time required for the attack.   The safety point integrates an index based on the success probability of all attacks and an index based on the attack success probability related to the attack with the maximum attack success probability among the special attacks other than the all attack, the cost required for the attack, and the time. The authentication system according to claim 7, which is calculated as follows.   The authentication system according to any one of claims 1 to 8, wherein the authentication point is calculated using different calculation formulas depending on whether the combination of the authentication methods is AND, OR, or weighting. . An authentication server for authenticating a user who uses a service provided by a business server,
For each type of damage content assumed in the service, the amount of the damage content and an index based on the difficulty of collecting or deleting the damage content are calculated and managed in the provider server, A service point acquisition unit that receives a service point indicating the security of authentication required by the service via a user terminal; and
In addition to the safety points indicating the security against attacks for each authentication method, the combination of the authentication methods calculated based on at least one of the indicators of one-time property, property authenticity and multi-factor An authentication point management unit for managing the authentication points indicating the obtained safety;
Among the combinations of the authentication methods in which the authentication point is equal to or greater than the service point, an authentication method determination unit that preferentially determines a combination having a small difference between the authentication point and the service point;
An authentication server comprising: an authentication processing unit that receives authentication information from the user terminal and performs authentication processing for each combination of authentication methods determined by the authentication method determining unit. An enterprise server that provides services to user terminals authenticated by an authentication server,
Security of authentication required by the service calculated by integrating the quantity based on the damage content assumed for the service and the index based on the difficulty of collecting or deleting the damage content A service point management unit for managing service points indicating the
In response to a request for the service from the user terminal, a request processing unit that provides the service point and redirects to the authentication server;
In the authentication server, in addition to a safety point indicating safety against an attack for each authentication method, the authentication calculated based on at least one of one-time property, property authenticity and multi-factor indicators It is determined after a priority is given to a combination with a small difference between the authentication point and the service point among a combination of the authentication methods in which an authentication point indicating safety obtained by a combination of methods is equal to or greater than the service point. And a service providing unit that starts providing a service to the user terminal in response to receiving a notification indicating that the authentication is successful for the combination of authentication methods. A user terminal that uses a service provided by a provider server,
For each type of damage content assumed in the service, the amount of the damage content and an index based on the difficulty of collecting or deleting the damage content are calculated and managed in the provider server, An authentication request unit that obtains a service point indicating the security of authentication required by the service and makes an authentication request to the authentication server;
In the authentication server, in addition to a safety point indicating safety against an attack for each authentication method, the authentication calculated based on at least one of one-time property, property authenticity and multi-factor indicators It is determined after a priority is given to a combination with a small difference between the authentication point and the service point among a combination of the authentication methods in which an authentication point indicating safety obtained by a combination of methods is equal to or greater than the service point. An authentication information transmission unit that transmits authentication information for each authentication method.

Images