Personal authentication system, personal authentication method, personal score calculation device, authentication device, and program

Abstract

An identity authentication system (1) comprises an identity score calculation device (10) and an authentication device (20). The identity score calculation device (10) comprises: a behavior information collection unit that collects access information and an action history as behavior information; an advanced authentication control unit that determines an advanced authentication method on the basis of the behavior information for a user for whom it is determined to perform advanced authentication in addition to normal authentication; and a probability calculation unit that uses authentication result information to calculate the probability of identity. The authentication device (20) comprises an authentication processing unit which performs normal authentication and advanced authentication, and which transmits the authentication result information to the identity score calculation device (10).

Description

[Technical Field]

[0001] The present invention relates to an identity authentication system, an identity authentication method, an identity score calculation device, an authentication device, and a program that quantitatively estimate whether a user accessing an account of a web service or an online system is a legitimate user. [Background technology]

[0002] The Single Sign-On (SSO) system is known as a convenient login method for users. Single sign-on is a mechanism that enables the use of multiple systems (web services, in-house systems, cloud services, etc.) with a single user authentication.

[0003] For example, in a single sign-on system 1a described in Non-Patent Document 1 as shown in Figure 12, information on user behavior is collected, and an identity score calculation function (identity score calculation device 10a in Figure 12) calculates the identity score of the user. Information on user behavior includes the time of access to the user's account, the terminal or device used, and location information at the time of access. Furthermore, the authentication function of the single sign-on system 1a (authentication device 20a in FIG. 12) performs strict authentication such as two-step authentication for users with low identity (high score) based on the user's identity score calculated by the identity score calculation device 10a before allowing them to access their account. In this specification, "authenticity" refers to the reliability that a user accessing an account is the true user (principal person) associated with that account.

[0004] The flow of processing for personal authentication in the single sign-on system 1a shown in Fig. 12 will be described. Note that, as a system using single sign-on (hereinafter, sometimes referred to as "SS0"; the same applies to each figure), the description will be given here by taking as an example a case where a user accesses a web server 51 in an environment where the user uses a web server 51, an in-house system 52, a cloud service 53, etc.

[0005] (Step S1) First, in order to use a Web service using the user terminal 3, the user accesses the Web server 51 and requests to log in. (Step S2) The Web server 51 redirects the user to the single sign-on system 1a via the user terminal 3 to authenticate the user.

[0006] (Step S3) Authentication device 20a of single sign-on system 1a acquires, from user terminal 3, location information and terminal type (device information) as user behavior information. (Step S4) The authentication device 20a transmits the location information and the terminal type (device information) together with the access time to the identity score calculation device 10a.

[0007] (Step S5) The identity score calculation device 10a stores the location information, terminal type (device information), and access time acquired from the authentication device 20a in a user behavior information table. Then, the identity score calculation device 10a calculates and records a score based on the difference between the location information, terminal type (device information), and information at past access times for each access time.

[0008] The identity score of a user calculated by this identity score calculation device 10a estimates whether the user attempting to access an account is the account owner based on the acquired user behavior information for each item of user behavior information, and evaluates the score numerically. In calculating the identity score, the greater the difference from the information at the time of previous access, the higher the score value. For example, with regard to location information, the higher the score value is when the connection is made from an area different from usual. With regard to terminal type (device information), the higher the score value is when the connection is made using a device different from usual. With regard to access time, the higher the score value is when the access is made at a time different from usual. As shown in FIG. 13, the identity score calculation device 10a calculates and stores the sum of the numerical values ​​evaluated for each item of user behavior information as the user identity score.

[0009] (Step S6) The identity score calculation device 10a transmits the calculated identity score of the user to the authentication device 20a. (Step S7) If the identity score exceeds a preset threshold, the authentication device 20a performs two-step authentication to authenticate the user. If the identity score does not exceed the threshold, the authentication device 20a authenticates the user using a default authentication method. In this way, the single sign-on system 1a can perform identity authentication using the identity score.

[0010] On the other hand, the technology described in Non-Patent Document 2 is known as a technology relating to the identity of a user who accesses an account. In the technology described in Non-Patent Document 2, a multilevel Bayesian network is constructed to predict the probability of an incident occurring (probability of an attack occurring: probability of it being an unauthorized individual) in order to perform highly secure incident predictions that are characteristic of ICS (Industrial Control Systems).The multilevel Bayesian network is then combined with multiple models to evaluate the impact (damage) caused by the incident.The technology described in Non-Patent Document 2 evaluates the risk of an attack on a network based on the probability of the incident occurring and the impact it will cause. [Prior art documents] [Non-patent literature]

[0011] [Non-Patent Document 1] “SmartFactor Authentication,” OneLogin, [online], [Retrieved June 7, 2022], Internet<URL:https: / / www.onelogin.com / product / smartfactor-authentication> [Non-patent document 2] Q. Zhang, et.al., “Multimodel-Based Incident Prediction and Risk Assessment in Dynamic Cybersecurity Protection for Industrial Control Systems,” IEEE Transactions on Systems, Man, and Cybernetics: Systems, vol. 46, no. 10, pp. 1429-1444, 2016. Summary of the Invention [Problem to be solved by the invention]

[0012] However, the technologies described in Non-Patent Document 1 and Non-Patent Document 2 quantify (score) the identity of each user, making it difficult to perform authentication that optimizes security and convenience based on the operational status of the network or server (for example, changes in traffic volume that may indicate an attack on the network or server) (Problem A).

[0013] Furthermore, in the technology described in Non-Patent Document 1, the user's identity is scored using unique criteria for each product, so the account administrator must acquire different know-how for each product in order to assess the impact and determine how to respond when a threat posed by a user other than the account owner (such as a user who is not the account owner or is impersonating another user) occurs (Problem B). Furthermore, because the user's identity is quantified using unique criteria, it is difficult to integrate the numerical values ​​of multiple products to evaluate the identity (Problem C).

[0014] On the other hand, the technology described in Non-Patent Document 2 assumes that parameters related to user behavior and state transition probabilities have been extracted based on the advanced knowledge of the maintainer. Unless the probability of an attack occurring (probability that the user is not the real person) and the probability that an incident will lead to other incidents are known, the user's identity cannot be quantified in terms of probability (issue D).

[0015] The present invention was made in consideration of these points, and its objective is to calculate a user's identity score from observable information without using unique standards or know-how for each product. [Means for solving the problem]

[0016] The identity authentication system according to the present invention is an identity authentication system comprising an identity score calculation device that calculates a score indicating the identity of a user, and an authentication device that performs user authentication, wherein the authentication device has a plurality of types of normal authentication means for normal authentication that performs authentication of standard authentication strength, and a plurality of types of advanced authentication means for advanced authentication that performs authentication of authentication strength that suppresses authentication failure below a first predetermined level if the user is the user himself / herself, and suppresses authentication success below a second predetermined level if the user is not the user himself / herself, and the identity score calculation device comprises a behavior information collection unit that collects access information that indicates the service usage environment in which the user accessed an account using a user terminal, and behavior information that indicates the user's behavior history information, an authentication result collection unit that collects authentication result information that indicates the success or failure of the normal authentication and the advanced authentication from the authentication device, and a determination unit that determines whether to perform the advanced authentication in addition to the normal authentication for users who have accessed an account within a predetermined period. and an advanced authentication control unit that, for a user for whom it is determined that the advanced authentication should be performed, determines, by referring to the behavior information, which of the multiple types of advanced authentication means will prevent authentication failure for the user to be below a first predetermined level if the user is the real person, and notifies the authentication device of the advanced authentication means determined for the user for whom it is determined that the advanced authentication should be performed; and a probability calculation unit that calculates the probability that the user who has accessed the account is the real person based on statistical values ​​using the number of users who succeeded and failed the normal authentication and the number of users who succeeded and failed the advanced authentication, obtained from the authentication result information, and is characterized in that the authentication device performs normal authentication using the predetermined normal authentication means for the user who has accessed the account, and performs advanced authentication for the user for whom it is determined that the advanced authentication should be performed using the advanced authentication means notified by the identity score calculation device, and is further characterized in that it comprises an authentication processing unit that transmits the authentication result information of the normal authentication and the advanced authentication to the identity score calculation device. [Effects of the Invention]

[0017] According to the present invention, the user's identity score can be calculated from observable information without using unique standards or know-how for each product. [Brief explanation of the drawings]

[0018] [Figure 1] 1 is a diagram showing the overall configuration of an identity authentication system according to an embodiment of the present invention; [Figure 2] FIG. 2 is a diagram for explaining an overview of the processing of the personal authentication system according to the present embodiment. [Figure 3] 10A and 10B are diagrams for explaining authentication results of a person who is the same as the ... [Figure 4] 1 is a functional block diagram showing an example of the configuration of an identity score calculation device according to the present embodiment. [Figure 5] 10 is a diagram illustrating an example of a data configuration of authentication result information stored in an authentication result DB according to the embodiment. FIG. [Figure 6] 3 is a diagram showing an example of the data configuration of behavior information (access information and action history information) stored in a behavior information DB according to the present embodiment. FIG. [Figure 7] 3 is a diagram showing an example of the data configuration of statistical information stored in a statistical information DB according to the embodiment. FIG. [Figure 8] 1 is a functional block diagram showing an example of the configuration of an authentication device according to an embodiment of the present invention; [Figure 9] 10A and 10B are diagrams for explaining a selection process of a normal authentication method by the authentication device according to the present embodiment. [Figure 10] FIG. 2 is a sequence diagram showing the flow of processing executed by the personal authentication system according to the present embodiment. [Figure 11] FIG. 2 is a hardware configuration diagram showing an example of a computer that realizes the functions of the identity score calculation device and the authentication device according to the present embodiment. [Figure 12] FIG. 1 is a diagram illustrating a conventional single sign-on system. [Figure 13] FIG. 10 is a diagram illustrating an example of calculating a score of a user's identity in the prior art. DETAILED DESCRIPTION OF THE INVENTION

[0019] Next, an embodiment of the present invention (hereinafter referred to as "the present embodiment") will be described. FIG. 1 is a diagram showing the overall configuration of an identity authentication system 1 according to this embodiment. The identity authentication system 1 according to this embodiment is a single sign-on (SSO) system configured by an authentication device 20 and an identity score calculation device 10. The authentication device 20 of this identity authentication system 1 accepts user authentication, and thereby centrally manages the user's account with a single authentication for a web server 51 that provides web services, an in-house system 52, a cloud service 53, and the like. Furthermore, the identity authentication system 1 collects information about human behavior linked to an account from the service usage environment (location information, usage time, line information, ID information, etc.) and behavior history without requiring the user's effort. For example, information about the user's behavior history is obtained from an external server 40 (for example, an entry / exit management server, etc.). In other words, information about human behavior linked to an account is obtained from devices or systems (out-of-band) on a channel different from the account authentication channel. The obtained information about human behavior is then used to determine the selection of an authentication method (the "advanced authentication method" described below).

[0020] <Overview and technical concept> First, an overview of the personal authentication system 1 according to this embodiment and the technical concept for solving the above-mentioned problems A to D will be described. To solve the above-mentioned problem A, the identity authentication system 1 according to this embodiment evaluates the tendency of the proportion of all users who access the web server 51, the in-house system 52, the cloud service 53, etc. during operation. In other words, the system focuses on the proportion of all users who are the same, rather than the identity of each individual user. Furthermore, to solve the above-mentioned problems B and C, the identity authentication system 1 (identity score calculation device 10) enables the identity of a user who accesses the web server 51, the in-house system 52, the cloud service 53, etc. to be evaluated by probability as an objective numerical value, rather than by the device's own criteria. Furthermore, to solve the above-mentioned problem D, the identity authentication system 1 (identity score calculation device 10) enables the identity of a user who accesses the web server 51, etc. to be scored by using observable information on human behavior linked to accounts on the web server 51, etc.

[0021] The technical concept regarding the functions (and processing) of the personal authentication system 1 for solving the above-mentioned problems will be described. In the identity authentication system 1 according to this embodiment, to solve the above-mentioned problem A, the system automatically selects a standard authentication method with optimal strength based on an estimated probability value that evaluates the trend in the proportion of users who are the same as the original user among all users accessing a web server 51, an in-house system 52, a cloud service 53, etc. Furthermore, to solve problems B and C, the system enables the user's identity to be evaluated by probability as an objective numerical value, rather than based on the device's own criteria. Furthermore, to solve problem D, the system enables scoring of the identity of users accessing web services, etc., using observable information on human behavior linked to accounts for web services, etc. In other words, advanced knowledge and expertise of maintenance personnel, such as past service operation records, is not required. Furthermore, information on human behavior linked to accounts is collected from the service usage environment (location information, usage time, line information, ID information, etc.) and behavioral history without requiring the user's effort. The personal authentication system 1 then makes it possible to (automatically) select a normal authentication method with optimal strength based on an estimated value of the probability of identity for all users.

[0022] The personal authentication system 1 solves the above-mentioned problems A to D and then introduces the following technical idea to enable selection of the optimal normal authentication based on an estimated value of the probability of authenticity for all users.

[0023] [Technical Concept 1: Advanced authentication to estimate the proportion of non-identifying individuals] The personal authentication system 1 uses both the normal authentication that the authentication device 20 has traditionally performed and the "advanced authentication" for estimating the proportion of non-personalities. Here, normal authentication refers to authentication with standard authentication strength as a procedure for permitting a user to use an account, such as authentication using a user ID and password, which is widely used around the world. In addition to normal authentication, the identity authentication system 1 performs user authentication (hereinafter referred to as "advanced authentication") on randomly sampled users to estimate the proportion of users who are not the actual user (hereinafter referred to as "non-identified users") among the group of users accessing the account.

[0024] Advanced authentication refers to highly secure user authentication, which almost completely prevents authentication failure for the user (prevents authentication failure below a first predetermined level for the user) and almost completely prevents authentication success for non-users (prevents authentication success below a second predetermined level for non-users). Advanced authentication methods include, for example, smart cards, SMS (Short Message Service) authentication, and out-of-band authentication methods that require unlocking and line usage at the time of use, and use authentication methods that are multi-factor and cryptographically sufficiently strong. In this embodiment, the meaning of "multi-factor and cryptographically sufficiently strong" is used to mean the same as "almost completely preventing authentication failure for the user (preventing authentication failure to fall below a first predetermined level for the user)" and "almost completely preventing authentication success for non-users (preventing authentication success to fall below a second predetermined level for non-users)."

[0025] [Technical concept 2: Selecting an advanced authentication method from multiple options that can prevent users from failing to authenticate themselves] The personal authentication system 1 prepares a plurality of advanced authentication methods and selects an advanced authentication method that can prevent the user from failing to be authenticated, based on information about human behavior associated with the account being accessed.

[0026] As shown in Figure 2, the identity authentication system 1 is equipped with multiple advanced authentication methods (advanced authentication methods "1" to "n") in addition to normal authentication. Of the users who have requested access to an account, randomly selected users are subjected to one of the multiple advanced authentication methods (advanced authentication methods "1" to "n") in addition to normal authentication. This advanced authentication method is selected based on information about the behavior of the person (user) associated with the account being accessed ("behavior information" described below) (symbol x in Figure 2).

[0027] The advanced authentication method is selected, for example, as follows. (Example 1) If the person associated with the account being accessed has recently successfully performed some form of authentication using their My Number card on another ID-linked account, they will select advanced authentication using their My Number card. (Example 2) If the person associated with the account accessing the network recently accessed the network from a pre-registered mobile device, advanced authentication using SMS is selected. (Example 3) If the person associated with the accessing account has already entered the office and opens and closes the door using an employee ID card (smart card) with IC card functionality when entering or exiting, select advanced authentication using the smart card. (Example 4) If the person associated with the accessing account plans to work from home, select advanced authentication using a pre-registered home line ID.

[0028] In this way, the personal authentication system 1 stores human behavior information linked to the account being accessed, and selects advanced authentication based on the real-time behavior of the person accessing the account. By using the human behavior information, it is possible to prevent the person from failing to be authenticated.

[0029] [Technical Concept 3: Method for calculating the estimated probability of identity for all users] In the personal authentication system 1, the probability of authenticity for all users is estimated using the following assumptions. (Premise 1) With the selected advanced authentication method, the user will almost always be successfully authenticated (if the user is the user, the chance of authentication failure is below a first predetermined level), and non-users will almost always fail authentication (if the user is not the user, the chance of authentication success is below a second predetermined level). (Premise 2) Access to an account by an unauthorized person is not affected by the account status (whether it is in use, the user's location information, line type, and other environmental factors). In other words, the selection of the advanced authentication method described in Technical Concept 2 is not arbitrary in terms of the proportion of unauthorized users. (Premise 3) In a group of users (N1) randomly sampled from all users (population N2) who have requested authentication during a given period, the following proportions can be approximated to those in the population. Note that (Premise 1) and (Premise 2) are required to realize (Premise 3).

[0030]

number

[0031] Here, as shown in Figure 3, a1 indicates the number of individuals in the user group (N1) who succeeded in normal authentication and also succeeded in the selected advanced authentication. c1 indicates the number of individuals in the user group (N1) who failed normal authentication and also succeeded in the selected advanced authentication. b1 indicates the number of non-identified individuals in the user group (N1) who succeeded in normal authentication and also failed in the selected advanced authentication. d1 indicates the number of non-identified individuals in the user group (N1) who failed normal authentication and also failed in the selected advanced authentication. Furthermore, a2 indicates the number of true persons who succeeded in normal authentication in the population (N2). c2 indicates the number of true persons who failed normal authentication in the population (N2). b2 indicates the number of non-true persons who succeeded in normal authentication in the population (N2). d2 indicates the number of non-true persons who failed normal authentication in the population (N2).

[0032] The identity authentication system 1 collects the following observable information based on the selected advanced authentication method (see Figure 3).

[0033]

number

[0034] Then, the personal authentication system 1 calculates the "proportion β2 of non-identifiers who succeed in normal authentication" and the "proportion γ2 of non-identifiers to all users" in the population based on the following formulas (1) and (2).

[0035]

number

[0036] This "proportion β2 of non-identifiers succeeding in normal authentication" (Equation (1)) is the proportion of non-identifiers who successfully pass normal authentication among all accounts that accessed the account within a specified period. This indicates the proportion of accounts that were taken over by non-identifiers (and successfully authenticated). Furthermore, the “ratio of non-identical users to all users γ2” (Equation (2)) indicates the rate of attacks per account. This equation (1), equation (2), and the observable N2 (a+b) =a2+b2...Equation (3), and N2 (c+d) =c2+d2...By solving the simultaneous equations using equation (4), a2, b2, c2, and d2 can be obtained.

[0037] Specifically, the identity authentication system 1 calculates the "number of persons a2 who succeed in normal authentication," "number of non-persons b2 who succeed in normal authentication," "number of persons c2 who fail normal authentication," and "number of non-persons d2 who fail normal authentication" in the population using the following formulas.

[0038]

number

[0039] The personal authentication system 1 then calculates the probability (P S P ) (Equation (5)) is used to estimate the identity of the person, and the probability that the person is not the person (P S n ) (Equation (6)) is used to estimate the identity.

[0040]

number

[0041] Furthermore, the personal authentication system 1 determines the probability (P f P ) (Equation (7)) is used to estimate the identity of the person, and the probability that the person is not the person (P f n ) (Equation (8)) is used to estimate the identity.

[0042]

number

[0043] The personal authentication system 1 calculates the probability of identity (P t ) is estimated.

[0044]

number

[0045] In this way, in the personal authentication system 1, the probability that a user who has successfully passed normal authentication within a predetermined period is the same as the user (P S P ) can be used to estimate the identity of the person using equation (5). In addition, in the personal authentication system 1, the probability of authenticating the person is the same even if the authentication fails (P t ) can be used to estimate the identity using equation (9).

[0046] Next, the identity score calculation device 10 and the authentication device 20 that constitute the identity authentication system 1 according to this embodiment will be specifically described.

[0047] <Identity score calculation device> FIG. 4 is a functional block diagram showing an example of the configuration of the identity score calculation device 10 according to this embodiment. The authenticity score calculation device 10 obtains from the authentication device 20 the results of normal authentication and advanced authentication when a user accesses an account on the Web server 51 or the like using the user terminal 3, and calculates the probability that the accessing user is the authentic user. This authenticity score calculation device 10 collects, as "behavior information," information on the behavior of the person (user) linked to the account being accessed, such as the service usage environment (location information, usage time, line information, ID information, etc.) and behavior history, and selects an advanced authentication method that can prevent the person from failing authentication. The identity score calculation device 10 is configured by a computer including a control unit 11, an input / output unit 12, and a storage unit 13.

[0048] The input / output unit 12 inputs and outputs information between the authentication device 20 and the external server 40 for acquiring behavior information, etc. The input / output unit 12 is composed of a communication interface that transmits and receives information via a communication line, and an input / output interface that inputs and outputs information between an input device such as a keyboard and an output device such as a monitor, both of which are not shown.

[0049] The storage unit 13 is configured by a hard disk, a flash memory, a RAM (Random Access Memory), or the like. The memory unit 13 includes an authentication result DB100 (see FIG. 5 for details) that stores the authentication results of normal authentication and advanced authentication, a behavior information DB200 (see FIG. 6 for details) that stores information about user behavior (behavior information), and a statistical information DB300 (see FIG. 7 for details) that stores statistical information calculated using the results of normal authentication and advanced authentication. Furthermore, the storage unit 13 temporarily stores programs for causing the control unit 11 to execute each function and information required for the processing of the control unit 11.

[0050] The control unit 11 is responsible for all the processing performed by the identity score calculation device 10, and as shown in Figure 4, is composed of an authentication result collection unit 111, a behavior information collection unit 112, an external server linkage unit 113, an advanced authentication control unit 114, a statistical processing unit 115, and a probability calculation unit 116.

[0051] When a user accesses an account, the authentication result collection unit 111 acquires the results of normal authentication performed by the authentication device 20 and, if advanced authentication is performed, the results of the advanced authentication from the authentication device 20, and stores information on the authentication result (authentication result information 110) in the authentication result DB 100.

[0052] FIG. 5 is a diagram showing an example of the data configuration of the authentication result information 110 stored in the authentication result DB 100 according to this embodiment. As shown in FIG. 5, the authentication result information 110 stores the time of access to the account, a normal authentication result indicating whether the normal authentication was successful or unsuccessful, and an advanced authentication result indicating the result of the advanced authentication, in association with the account name, which is an ID unique to each user. The advanced authentication result is stored as "success" or "failure" if advanced authentication was performed, and "not performed" if advanced authentication was not performed.

[0053] Returning to FIG. 4, the behavior information collection unit 112 acquires information about the user's service usage environment (access information) and information about the user's behavior history (behavior history information), and stores the information as behavior information 220 in the behavior information DB 200.

[0054] FIG. 6 is a diagram showing an example of the data configuration of the behavior information 220 (access information 221 and action history information 222) stored in the behavior information DB 200 according to this embodiment. 6, access information 221 stores information about the service usage environment when a user accesses an account, such as access time, terminal type, and location, in association with the account name, which is an ID unique to each user. In addition, if the terminal type is "smartphone," smartphone address information required for SMS authentication, and if the terminal type is "PC" and the user works from home, line information, etc., are stored in association with the user's account name. The behavior information collector 112 acquires this access information 221 by receiving information collected by the authentication device 20 from the user terminal 3.

[0055] Furthermore, the behavior information collection unit 112 acquires information (behavior history information 222) related to the behavior history of the user from the external server 40, which is an out-of-band system. For example, if the out-of-band system is an entry / exit management system for an office or the like, information on the entry / exit times of people associated with accounts (entry / exit management information) is acquired from the entry / exit management server, which is the external server 40, via the external server linkage unit 113, as shown in FIG. 6, and stored in the behavior information DB 200.

[0056] The external server linking unit 113 performs linking processing (out-of-band linking processing) with various external servers 40 to acquire the user's behavior history from a channel other than the channel (information transmission path) with the user terminal 3. For example, as described above, it performs processing such as generating request messages and response messages to transmit and receive information such as the entry and exit times of people linked to accounts to and from the entry and exit management server.

[0057] The advanced authentication control unit 114 determines whether to perform advanced authentication on users who access the site within a specified period. To ensure (premise 2) of Technical Concept 3 described above, the advanced authentication control unit 114 randomly selects users who will undergo advanced authentication from among users who have undergone normal authentication.

[0058] Furthermore, for a user who is to undergo advanced authentication, the advanced authentication control unit 114 uses behavior information 220 (Figure 6) to store a correspondence between access information 221 and behavior history information 222, which are information about the service usage environment, and the advanced authentication that the user is successful in among multiple advanced authentications, as a profile (analysis result) based on a predetermined logic. For example, if the user has just accessed the system from a smartphone, a profile will be created that uses SMS authentication as advanced authentication. If there is a record of the user entering and leaving the office, a profile will be created that uses authentication using a smart card such as an employee ID card based on the entry and exit management information of the office building, etc.

[0059] For a user for whom advanced authentication has been determined, the advanced authentication control unit 114 uses the profile to determine an advanced authentication method that will result in successful authentication for a person (user) associated with the account. Then, the advanced authentication control unit 114 notifies the authentication device 20 of the advanced authentication method determined for the user associated with the account.

[0060] The statistical processing unit 115 calculates statistical values ​​(number of users) as a result of normal authentication and various advanced authentications for all users who have accessed the site during a predetermined period, and stores the calculated values ​​in the statistical information DB 300 as statistical information 310.

[0061] FIG. 7 is a diagram showing an example of the data configuration of the statistical information 310 stored in the statistical information DB 300 according to this embodiment. 7, the statistical information 310 stores, for each advanced authentication method, the result of the advanced authentication (success / failure) and the result of normal authentication for the user who performed the advanced authentication in association with each other. It also stores the number of users who have not undergone advanced authentication and for whom the result of normal authentication (success / failure) is obtained.

[0062] Returning to FIG. 4, the probability calculation unit 116 refers to the statistical information 310 stored in the statistical information DB 300 to calculate the probability that the user who has accessed the account is the real person. The probability calculation unit 116 calculates the probability (P S P ) is calculated using the above formula (5). The probability calculation unit 116 calculates the probability of authenticity (P t ) may be calculated using equation (9).

[0063] It is determined in advance whether the probability calculation unit 116 will use Equation (5) or Equation (9) as the formula for calculating the probability that the user accessing the account is the real person. Then, the probability calculation unit 116 transmits the calculated probability (estimated value) of the user's real person to the authentication device 20.

[0064] <Authentication device> Next, the authentication device 20 according to this embodiment will be described. FIG. 8 is a functional block diagram showing an example of the configuration of the authentication device 20 according to this embodiment. The authentication device 20 is equipped with multiple types of normal authentication methods (normal authentication methods) with different strengths, and multiple types of advanced authentication methods (advanced authentication methods). The authentication device 20 accepts an authentication request from the user terminal 3, performs pre-set normal authentication, and acquires information about the user's service usage environment (access information 221). The authentication device 20 then transmits the result of the normal authentication and the access information 221 to the identity score calculation device 10. Furthermore, the authentication device 20 receives information about the determined advanced authentication method from the identity score calculation device 10 for a user for whom advanced authentication has been determined, performs the advanced authentication method, and then transmits the authentication result to the identity score calculation device 10. In addition, the authentication device 20 obtains information on the user's identity probability (estimated value) from the identity score calculation device 10, and selects the optimal normal authentication method taking into consideration the threat posed by an increase in the proportion of non-identical users and the convenience of the user. The identity score calculation device 10 is configured by a computer including a control unit 21, an input / output unit 22, and a storage unit .

[0065] The input / output unit 22 inputs and outputs information between the identity score calculation device 10, the terminal 3, the web server 51, the in-house system 52, the cloud service 53, etc. The input / output unit 22 is composed of a communication interface that transmits and receives information via a communication line, and an input / output interface that inputs and outputs information between an input device such as a keyboard and an output device such as a monitor, which are not shown.

[0066] The storage unit 23 is configured by a hard disk, a flash memory, a RAM (Random Access Memory), or the like. In this storage unit 23, information required for normal authentication of an accessing user is stored in a user information DB 400. For example, information such as the account name (user ID) and password of the accessing user, and address information of the user terminal 3 is stored. In addition, this user information DB 400 also stores information required for authentication when advanced authentication is performed. Note that the information required for this advanced authentication may be obtained from an external server 40 or the like via the external server linkage unit 113 (FIG. 4) of the identity score calculation device 10 and stored in the user information DB 400. Furthermore, the storage unit 23 temporarily stores programs for executing the functions of the control unit 21 and information required for the processing of the control unit 21.

[0067] The control unit 21 is responsible for all the processing performed by the authentication device 20, and as shown in FIG. 8, is composed of an access information acquisition unit 211, an authentication processing unit 212, a normal authentication selection unit 213, an authentication control unit 214, and a centralized information management unit 215.

[0068] The access information acquisition unit 211 acquires, from the user terminal 3 that has accepted the login request, information (access information 221) relating to the user's service usage environment, such as the terminal type and location information. Then, the access information acquisition unit 211 transmits the access information 221, such as the terminal type and location information, together with the access time (for example, the time when the login request was received), to the identity score calculation device 10.

[0069] The authentication processing unit 212 holds multiple types of normal authentication methods and multiple types of advanced authentication methods for users who access an account. The authentication processing unit 212 authenticates the accessing user using the set normal authentication method. In addition, the authentication processing unit 212 receives information on the determined advanced authentication method for the user for whom advanced authentication has been determined from the identity score calculation device 10, and selects the determined advanced authentication method from multiple advanced authentication means to perform authentication. The authentication processing unit 212 transmits the results (success / failure) of the normal authentication and the advanced authentication to the identity score calculation device 10.

[0070] The normal authentication selection unit 213 acquires the probability (estimated value) of the user's identity at predetermined intervals from the identity score calculation device 10. Then, depending on the acquired probability of the user's identity, the normal authentication selection unit 213 selects the most appropriate normal authentication method from multiple normal authentication methods, taking into consideration the threat of an increase in the rate of non-identical users and user convenience.

[0071] As shown in FIG. 9, the normal authentication methods are set in stages, from a high-strength normal authentication method "1" to a low-strength (standard) normal authentication method "n." When the normal authentication selection unit 213 acquires an estimate of the probability of the user's identity from the identity score calculation device 10, for example, if the estimate of the probability of the user's identity is equal to or greater than a predetermined threshold, the normal authentication selection unit 213 selects a standard normal authentication method (for example, normal authentication method "n") that takes user convenience into consideration. The standard normal authentication method "n" is, for example, authentication using a user ID and password. On the other hand, if the estimate of the probability of the user's identity is lower than the predetermined threshold, the normal authentication selection unit 213 selects a relatively strong normal authentication method (for example, normal authentication method "1") that sacrifices user convenience. The relatively strong normal authentication method "1" is, for example, biometric authentication or two-step authentication. The normal authentication selection unit 213 notifies the authentication processing unit 212 of information about the selected normal authentication method, thereby setting the normal authentication method.

[0072] Returning to FIG. 8, the authentication control unit 214 executes authentication processing with the user terminal 3 based on a user authentication protocol such as RADIUS (Remote Authentication Dial-In User Service).

[0073] The unified information management unit 215 uses, for example, LDAP (Lightweight Directory Access Protocol) to realize single sign-on (SSO) that enables a plurality of services to be used with one ID and password.

[0074] <Processing flow> Next, the flow of processing executed by the personal authentication system 1 according to this embodiment will be described. FIG. 10 is a sequence diagram showing the flow of processing executed by the personal authentication system 1. Note that, in this description, it is assumed that the behavior history information 222 acquired from the external server 40 is information acquired from an entry / exit management system such as an office. That is, it is assumed that the identity score calculation device 10 acquires information on the entry and exit times of people associated with accounts (entrance / exit management information) as shown in the behavior history information 222 in Fig. 6 from the entry / exit management server, which is the external server 40.

[0075] The entry and exit management system manages the entry and exit of users, for example, as follows. When a person associated with an account comes to the office, they enter the office by passing through a flapper gate or the like using an employee ID card (smart card) with IC card functionality. The entry / exit management server obtains the ID and entry / exit time of the user who entered the office from the employee ID card and records them on its own server. In this way, the entry / exit management server records the user's behavior history information 222.

[0076] First, a user accesses the Web server 51 using the user terminal 3 (for example, a PC) to make a login request in order to use the Web service. The Web server 51 redirects the user to the authentication device 20 via the user terminal 3 to authenticate the user.

[0077] When the authentication device 20 receives a redirect of the login request (step S10), the access information acquisition unit 211 acquires the terminal type, location information, etc. as information about the user's service usage environment (access information 221) from the user terminal 3 (step S11). Then, the access information acquisition unit 211 transmits the access information 221, such as the terminal type and location information, together with the access time (for example, the time when the login request was received), to the identity score calculation device 10. Then, the behavior information collection unit 112 of the identity score calculation device 10 acquires the access information 221 from the authentication device 20 and stores it in the behavior information DB 200 (step S12).

[0078] Next, the authentication processing unit 212 of the authentication device 20 performs normal authentication of the accessing user using a predetermined (initial setting) normal authentication method (step S13). Then, the authentication processing unit 212 transmits the result of the normal authentication (success / failure) to the identity score calculation device 10. When the authentication result collection unit 111 of the identity score calculation device 10 acquires the result of the normal authentication, it stores it in the authentication result DB 100 as authentication result information 110 (FIG. 5) (step S14).

[0079] Next, the advanced authentication control unit 114 of the identity score calculation device 10 determines whether to perform advanced authentication in addition to normal authentication for users who have accessed within a predetermined period of time (step S15). The advanced authentication control unit 114 randomly determines whether or not a user should be subjected to advanced authentication.

[0080] For a user who is to undergo advanced authentication, the behavior information collection unit 112 of the identity score calculation device 10 acquires information on the user's behavior history (behavior history information 222) from the external server 40 (step S16) and stores it in the behavior information DB200. Here, the behavior information collector 112 acquires, as the behavior history information 222, information on the entry and exit times of people associated with the account (entrance and exit management information) from the entry and exit management server (external server 40).

[0081] Next, the advanced authentication control unit 114 of the identity score calculation device 10 refers to the behavior information 220 (FIG. 6) for the user for whom advanced authentication has been determined, and determines a method of advanced authentication that will result in successful authentication for a person (user) linked to the account (step S17).Then, the advanced authentication control unit 114 notifies the authentication device 20 of whether advanced authentication is required for that user (here, "required") and the determined advanced authentication method.

[0082] Here, by referring to the behavior history information 222 (entrance / exit management information), for example, as shown by symbol y in Figure 6, if there is a record of entry time but no record of exit time, that is, if it is presumed that the user is in the office, the advanced authentication control unit 114 decides to use advanced authentication using an employee ID card (smart card) as an advanced authentication method that will be successful for anyone linked to the account.

[0083] The authentication processing unit 212 of the authentication device 20 performs high-level authentication on the relevant user using the notified high-level authentication method (step S18). Here, the authentication processing unit 212 performs high-level authentication on the user using an employee ID card.

[0084] Then, for users who have been successfully authenticated by the authentication processing unit 212, the authentication control unit 214 and the unified information management unit 215 control the Web server 51 and permit them to log in to their accounts.

[0085] Subsequently, the authentication processing unit 212 of the authentication device 20 transmits the result of the advanced authentication (success / failure) to the identity score calculation device 10. Then, when the authentication result collection unit 111 of the identity score calculation device 10 acquires the result of the advanced authentication, it stores it in the authentication result DB 100 as authentication result information 110 (FIG. 5) (step S19).

[0086] Next, the statistical processing unit 115 of the identity score calculation device 10 calculates statistical values ​​(number of users) as a result of normal authentication and various advanced authentications for all users who have accessed the system during a specified period, and stores the values ​​in the statistical information DB 300 as statistical information 310 (Figure 7).

[0087] Next, the probability calculation unit 116 of the authenticity score calculation device 10 uses the statistical information 310 (FIG. 7) to calculate the probability of authenticity for all users, including those who have not undergone advanced authentication (step S20).

[0088] Here, the probability calculation unit 116 calculates the probability (P SP ) is calculated using the above formula (5). For example, the probability calculation unit 116 calculates the probability of identity (P S P ) is calculated using equation (5), the following score (estimated value) is obtained:

[0089]

number

[0090] Here, β1 = (2 + 3) / (2 + 10 + 3 + 9) = 5 / 24. γ1 = (2 + 10 + 3 + 9) / (80 + 50) = 24 / 130. N2 = 80 + 50 + 1000 = 1130.

[0091] As another example, the probability calculation unit 116 calculates the probability of authenticity (P t ) is calculated using equation (9). For example, the probability calculation unit 116 calculates the probability of identity (P t ) is calculated using equation (9), the following score is obtained:

[0092]

number

[0093] Then, the probability calculation unit 116 transmits to the authentication device 20 the calculated probability that the user who has accessed the account is the real person.

[0094] The normal authentication selection unit 213 of the authentication device 20 acquires an estimated value of the probability of the user's authenticity at predetermined intervals from the authenticity score calculation device 10. Then, the normal authentication selection unit 213 selects the most appropriate normal authentication method from multiple types of normal authentication methods according to the acquired estimated value of the probability of the user's authenticity (step S21).

[0095] For example, if the estimated value of the probability of the user's identity is equal to or greater than a predetermined threshold, the normal authentication selection unit 213 selects a standard normal authentication method that takes user convenience into consideration (e.g., normal authentication method "n"). On the other hand, if the estimated value of the probability of the user's identity is lower than the predetermined threshold, the normal authentication selection unit 213 selects a normal authentication method with a relatively high level of strength (e.g., normal authentication method "1") at the expense of user convenience. The normal authentication selection unit 213 notifies the authentication processing unit 212 of information about the selected normal authentication method, thereby setting the normal authentication method (step S22).

[0096] When using the estimated value calculated by "the probability of authenticity of users who have succeeded in normal authentication" (Equation (5)), the normal authentication selection unit 213 evaluates threats based on the proportion of non-identical users among users who have succeeded in normal authentication and selects normal authentication. On the other hand, when using the estimated value calculated by "the probability of authenticity when users who have failed normal authentication are also included" (Equation (9)), if the proportion of actual users among users who have failed normal authentication is high, the normal authentication selection unit 213 switches from a normal authentication method with relatively high strength to a normal authentication method with standard strength, taking into account the above threats, from the perspective of user convenience.

[0097] In this way, the personal authentication system 1 according to this embodiment can select the most suitable authentication method based on the estimated personal identities of all users who have accessed the system during a predetermined period.

[0098] <Modification> The identity score calculation device 10 (advanced authentication control unit 114) of the identity authentication system 1 according to this embodiment randomly determines a user for whom advanced authentication is to be performed in addition to normal authentication, determines an advanced authentication method that will result in successful authentication for the determined user, and notifies the authentication device 20. In contrast, in a modified example of the identity score calculation device 10, for users who are to undergo randomly determined advanced authentication, the advanced authentication control unit 114 refers to the authentication result DB100 and controls the system so that advanced authentication is not performed for users who have failed normal authentication.

[0099] As mentioned above, for a user who has successfully completed normal authentication within a given period, the probability that the user is the correct person (P S P ) (Equation (5)) is used to estimate the identity of the person, and the probability that the person is not the person (P S n ) (Equation (6)) is used to estimate the identity. Here, β1γ1 can be expressed by the following equation (10).

[0100]

number

[0101] In equation (10), (x1+z1) is the number of randomly sampled users (N1=x1+z1). Also, (z1') is the number of users who passed regular authentication but failed advanced authentication (z1') in the user group. These numbers can be observed by performing advanced authentication only on users who passed regular authentication in the user group. In order to calculate N1, the users to be randomly sampled are assumed to include users who failed normal authentication. However, in the modified example, the advanced authentication control unit 114 controls so that advanced authentication is not performed on users who failed normal authentication even if they are sampled. Even in this way, the probability calculation unit 116 can calculate an estimate of the identity of all users.

[0102] <Hardware configuration> The identity score calculation device 10 and the authentication device 20 according to this embodiment are realized by a computer 900 having a configuration as shown in FIG. 11, for example. 11 is a hardware configuration diagram showing an example of a computer 900 that realizes the functions of the identity score calculation device 10 and the authentication device 20 according to this embodiment. The computer 900 has a CPU (Central Processing Unit) 901, a ROM (Read Only Memory) 902, a RAM 903, an HDD (Hard Disk Drive) 904, an input / output I / F (Interface) 905, a communication I / F 906, and a media I / F 907.

[0103] The CPU 901 operates based on a program stored in the ROM 902 or the HDD 904, and performs control by the control unit. The ROM 902 stores a boot program executed by the CPU 901 when the computer 900 starts up, programs related to the hardware of the computer 900, and the like.

[0104] The CPU 901 controls an input device 910 such as a mouse or keyboard, and an output device 911 such as a display or printer, via an input / output I / F 905. The CPU 901 acquires data from the input device 910 via the input / output I / F 905, and outputs generated data to the output device 911. Note that a GPU (Graphics Processing Unit) or the like may be used as a processor together with the CPU 901.

[0105] The HDD 904 stores programs executed by the CPU 901 and data used by the programs. The communication I / F 906 receives data from other devices via a communication network (e.g., NW (Network) 920) and outputs the data to the CPU 901, and also transmits data generated by the CPU 901 to other devices via the communication network.

[0106] The media I / F 907 reads a program or data stored in the recording medium 912 and outputs it to the CPU 901 via the RAM 903. The CPU 901 loads a program related to a target process from the recording medium 912 onto the RAM 903 via the media I / F 907, and executes the loaded program. The recording medium 912 is an optical recording medium such as a DVD (Digital Versatile Disc) or a PD (Phase Change Rewritable Disc), a magneto-optical recording medium such as an MO (Magneto Optical Disk), a magnetic recording medium, a semiconductor memory, or the like.

[0107] For example, when the computer 900 functions as the identity score calculation device 10 and authentication device 20 of the present invention, the CPU 901 of the computer 900 executes a program loaded onto the RAM 903 to realize the functions of the identity score calculation device 10 and the authentication device 20. In addition, the HDD 904 stores data in the RAM 903. The CPU 901 reads and executes a program related to the target processing from the recording medium 912. Alternatively, the CPU 901 may read a program related to the target processing from another device via a communication network (NW 920).

[0108] <Effects> The effects of the personal authentication system 1 according to the present invention will be described below. The identity authentication system according to the present invention is an identity authentication system 1 comprising an identity score calculation device 10 that calculates a score indicating the identity of a user, and an authentication device 20 that performs user authentication, wherein the authentication device 20 has a plurality of types of normal authentication means for normal authentication that performs authentication of standard authentication strength, and a plurality of types of advanced authentication means for advanced authentication that performs authentication of authentication strength that suppresses authentication failure below a first predetermined level if the user is the identity of the user, and suppresses authentication success below a second predetermined level if the user is not the identity of the user, and the identity score calculation device 10 comprises a behavior information collection unit 112 that collects access information 221 that indicates the service usage environment in which the user accessed the account using the user terminal 3, and behavior information 220 that indicates user behavior history information 222, an authentication result collection unit 111 that collects authentication result information 110 that indicates success or failure of the normal authentication and the advanced authentication from the authentication device 20, and and a high-level authentication control unit (114) that determines whether to perform authentication for a user for whom it has been determined that advanced authentication should be performed, and that, for a user for whom it has been determined that advanced authentication should be performed, determines, by referring to behavior information (220), from among multiple types of high-level authentication means, which high-level authentication means will suppress authentication failure below a first predetermined level if the user is the real person, and notifies the authentication device (20) of the high-level authentication means determined for the user for whom it has been determined that advanced authentication should be performed; and a probability calculation unit (116) that calculates the probability that the user who has accessed the account is the real person based on statistical values ​​using the number of users who have succeeded and failed in normal authentication and the number of users who have succeeded and failed in advanced authentication, obtained from the authentication result information (110), and is characterized in that the authentication device (20) performs normal authentication using the predetermined normal authentication means for the user who has accessed the account, and performs high-level authentication for the user for whom it has been determined that advanced authentication should be performed using the advanced authentication means notified by the identity score calculation device (10), and is further characterized in that it comprises an authentication processing unit (212) that performs authentication result information of the normal authentication and the advanced authentication to the identity score calculation device (10).

[0109] In this way, the identity authentication system 1 can calculate the identity of all users accessing an account as an objective numerical probability using observable information, without relying on the device's own standards or know-how that differs from product to product. In other words, because it is possible to evaluate the rate of account access by unauthorized individuals, there is no need for unique, advanced know-how regarding other products or devices that score identity when an increase in unauthorized access occurs, etc. Furthermore, because observable information about people linked to accounts (authentication results of standard authentication and advanced authentication) is used to quantify the user's identity as a probability, there is no need for advanced knowledge or expertise on the part of maintenance personnel, such as past service operation results.

[0110] The identity authentication system 1 is also characterized in that the probability calculation unit 116 of the identity score calculation device 10 transmits the calculated probability of identity to the authentication device 20 at predetermined intervals, and the authentication device 20 is provided with a normal authentication selection unit 213 that selects a newly set predetermined normal authentication means from multiple types of normal authentication means according to the probability of identity obtained from the identity score calculation device 10.

[0111] By doing this, the identity authentication system 1 can select the normal authentication method with the optimal strength, taking into consideration user convenience and security, based on the probability of identity among all users who have accessed the system over a specified period of time. Furthermore, the personal authentication system can automatically select the most appropriate normal authentication method without the intervention of an administrator, depending on the probability of identity calculated at predetermined intervals.

[0112] Furthermore, the identity authentication system 1 is characterized in that the probability calculation unit 116 calculates the probability that a user who has successfully passed normal authentication within a specified period is the user himself / herself as the probability that the user who has accessed the account is the real user.

[0113] This allows the personal authentication system 1 to estimate the identity of a user who has successfully passed normal authentication. Specifically, the personal authentication system 1 can calculate the probability that a user who has successfully passed normal authentication is the real user using the above formula (5). Therefore, the personal authentication system 1 can evaluate threats based on the proportion of non-identical users among those who have successfully passed normal authentication, and select a normal authentication method.

[0114] Furthermore, the identity authentication system 1 is characterized in that, for a user for whom the advanced authentication control unit 114 has determined that advanced authentication should be performed in addition to normal authentication, the advanced authentication control unit 114 refers to authentication result information, and if normal authentication for that user fails, the authentication device is not notified of the advanced authentication means.

[0115] As a result, the identity authentication system 1 refers to the authentication result of the normal authentication, and if the normal authentication fails, even if the user is determined to perform advanced authentication, the system does not decide which advanced authentication means to execute and does not notify the authentication device. Therefore, when calculating the probability of identity for a user who has successfully passed normal authentication, the authentication device does not perform advanced authentication for users who have failed normal authentication, which is not necessary for calculating the identity, thereby reducing the processing load on the authentication device.

[0116] Furthermore, the identity authentication system 1 is characterized in that the probability calculation unit 116 calculates the probability that a user who has accessed an account is the real user, including users who have failed normal authentication within a specified period of time.

[0117] This allows the identity authentication system 1 to calculate the probability that a user is the real user among all users, including users who failed normal authentication during a specified period. Specifically, the identity authentication system 1 can use the above formula (9) to calculate the probability that a user is the real user among all users, including users who failed normal authentication.If a high proportion of users who failed normal authentication are the real user, the system can make configuration changes, such as changing from a normal authentication method with a relatively high strength to a normal authentication method with a standard strength, from the perspective of user convenience, while taking into account the above threats.

[0118] The identity score calculation device according to the present invention is an identity score calculation device 10 that is connected to an authentication device 20 that performs user authentication and calculates a score indicating the identity of a user, wherein the authentication device 20 has a plurality of types of normal authentication means for normal authentication that performs authentication of standard authentication strength, and a plurality of types of advanced authentication means for advanced authentication that performs authentication of authentication strength that suppresses authentication failure below a first predetermined level if the user is the identity of the user and suppresses authentication success below a second predetermined level if the user is not the identity of the user, and the identity score calculation device 10 has a behavior information collection unit 112 that collects access information 221 that indicates the service usage environment in which the user accessed the account using the user terminal and behavior information 220 that indicates user behavior history information 222, and a behavior information collection unit 113 that collects the access information 221 that indicates the service usage environment in which the user accessed the account using the user terminal and behavior history information 222 from the authentication device 20. The authentication system is characterized by comprising: an authentication result collection unit 111 that collects authentication result information 110 indicating success or failure; an advanced authentication control unit 114 that determines whether to perform advanced authentication in addition to normal authentication for a user who has accessed the account within a specified period of time; and, for a user for whom it is determined that advanced authentication should be performed, determines, by referring to behavior information 220, from among multiple types of advanced authentication means, an advanced authentication means that will suppress authentication failure for the user to a first predetermined level or below if the user is the user himself / herself; and notifies the authentication device 20 of the determined advanced authentication means for the user for whom it is determined that advanced authentication should be performed; and a probability calculation unit 116 that calculates the probability that the user who has accessed the account is the real person, based on statistical values ​​obtained from the authentication result information 110 using the number of users who succeeded and failed normal authentication and the number of users who succeeded and failed advanced authentication.

[0119] By doing this, the identity score calculation device 10 can calculate the identity of all users accessing the account as an objective numerical probability using observable information, without relying on the device's own standards or know-how that differs for each product.

[0120] The authentication device of the present invention is an authentication device 20 that is connected to an identity score calculation device 10 that calculates a score indicating the identity of a user and performs user authentication, wherein the authentication device 20 has multiple types of normal authentication means for normal authentication that performs authentication of standard authentication strength, and multiple types of advanced authentication means for advanced authentication that performs authentication strength that prevents authentication failure for the user if the user is the user himself / herself from falling below a first predetermined level, and prevents authentication success for a non-user if the user is not the user himself / herself from falling below a second predetermined level, and is characterized in that the authentication device 20 is equipped with an authentication processing unit 212 that performs normal authentication using the predetermined normal authentication means for users who access an account, and performs advanced authentication for users who are determined to perform advanced authentication using the advanced authentication means notified by the identity score calculation device, and sends authentication result information indicating the success or failure of the normal authentication and advanced authentication to the identity score calculation device 10, and a normal authentication selection unit 213 that selects a newly set normal authentication means from multiple types of normal authentication means depending on the probability of identity obtained from the identity score calculation device 10.

[0121] By doing this, the authentication device can select the normal authentication method with the optimal strength, taking into account user convenience and security, based on the probability of authenticity among all users who have accessed the system over a specified period of time. Furthermore, the authentication device can automatically select the most appropriate normal authentication method without the intervention of an administrator, depending on the probability of authenticity calculated at predetermined intervals.

[0122] The present invention is not limited to the above-described embodiments, and many modifications can be made by a person having ordinary skill in the art within the technical concept of the present invention. [Explanation of symbols]

[0123] 1. Identity authentication system 3. User terminal 10 Identity score calculation device 20 Authentication Device 40 External Servers 51 Web Server 52 Internal Systems 53 Cloud Services 11,21 Control unit 12,22 Input / output section 13,23 Storage part 100 Authentication result DB 110 Authentication result information 111 Authentication result collection unit 112 Behavioral Information Collection Department 113 External Server Linkage Unit 114 Advanced authentication control unit 115 Statistical Processing Unit 116 Probability Calculation Unit 200 Behavioral Information DB 211 Access Information Acquisition Unit 212 Authentication processing unit 213 Normal authentication selection section 214 Authentication control unit 215 Centralized Information Management Department 220 Behavioral Information 221 Access Information 222 Behavioral History Information 300 Statistics information DB 400 User Information DB

Claims

1. An identity authentication system including an identity score calculation device that calculates a score indicating the identity of a user, and an authentication device that performs user authentication, the authentication device has a plurality of types of normal authentication means for normal authentication that performs authentication of standard authentication strength, and a plurality of types of advanced authentication means for advanced authentication that performs authentication of authentication strength that suppresses authentication failure below a first predetermined level if the user is the authorized user and suppresses authentication success below a second predetermined level if the user is not the authorized user, The identity score calculation device a behavior information collection unit that collects access information indicating a service usage environment in which a user accesses an account using a user terminal and behavior information indicating the user's behavior history information; an authentication result collection unit that collects authentication result information indicating success or failure of the normal authentication and the advanced authentication from the authentication device; an advanced authentication control unit that determines whether to execute the advanced authentication in addition to the normal authentication for a user who has accessed an account within a predetermined period of time, and for a user for whom it is determined that the advanced authentication should be executed, determines, by referring to the behavior information, from among the plurality of types of advanced authentication means, an advanced authentication means that suppresses authentication failure for the user to a first predetermined level or below, and notifies the authentication device of the determined advanced authentication means for the user for whom it is determined that the advanced authentication should be executed; a probability calculation unit that calculates the probability that the user accessing the account is the real person based on a statistical value using the number of users who have succeeded and failed in the normal authentication and the number of users who have succeeded and failed in the advanced authentication, which are obtained from the authentication result information; The authentication device An authentication processing unit is provided which performs normal authentication by a predetermined normal authentication means for a user who has accessed the account, and performs advanced authentication for a user who has been determined to be required to perform the advanced authentication by an advanced authentication means notified by the identity score calculation device, and transmits the authentication result information of the normal authentication and the advanced authentication to the identity score calculation device. An identity authentication system characterized by the above.

2. the probability calculation unit of the authenticity score calculation device transmits the calculated probability of authenticity to the authentication device every predetermined period; The authentication device a normal authentication selection unit that selects the predetermined normal authentication means to be newly set from among the plurality of types of normal authentication means according to the probability of the authenticity acquired from the authenticity score calculation device; 2. The personal authentication system according to claim 1,

3. The probability calculation unit calculates the probability that a user who has successfully passed the normal authentication within a predetermined period is the user himself / herself as the probability that the user who has accessed the account is the real user.

3. The personal authentication system according to claim 1 or 2, wherein:

4. The advanced authentication control unit refers to the authentication result information for a user for whom it has been determined that the advanced authentication should be performed in addition to the normal authentication, and if the normal authentication for the user fails, does not notify the authentication device of the advanced authentication means.

4. The personal authentication system according to claim 3, wherein:

5. The probability calculation unit calculates the probability that the user who accessed the account is the real user, based on the probability that the user is the real user among all users, including users who failed the normal authentication during a predetermined period.

3. The personal authentication system according to claim 1 or 2, wherein:

6. An identity authentication method for an identity authentication system including an identity score calculation device that calculates a score indicating the identity of a user and an authentication device that performs user authentication, the authentication device has a plurality of types of normal authentication means for normal authentication that performs authentication of standard authentication strength, and a plurality of types of advanced authentication means for advanced authentication that performs authentication of authentication strength that suppresses authentication failure below a first predetermined level if the user is the authorized user and suppresses authentication success below a second predetermined level if the user is not the authorized user, The authentication device performing normal authentication by a predetermined normal authentication means for a user who has accessed an account, and transmitting authentication result information indicating success or failure of the normal authentication to the identity score calculation device; The identity score calculation device collecting the authentication result information for the normal authentication from the authentication device; collecting access information indicating a service usage environment in which a user accessed an account using a user terminal and behavior information indicating the user's behavior history information; determining whether to execute the advanced authentication in addition to the normal authentication for a user who has accessed an account within a predetermined period of time, and for a user for whom it has been determined that the advanced authentication should be executed, determining, by referring to the behavior information, from among the plurality of types of advanced authentication means, an advanced authentication means that will suppress authentication failure for the user to a first predetermined level or below, and notifying the authentication device of the determined advanced authentication means for the user for whom it has been determined that the advanced authentication should be executed; The authentication device a step of performing advanced authentication for the user who has been determined to perform the advanced authentication by the advanced authentication means notified by the identity score calculation device, and transmitting the authentication result information of the advanced authentication to the identity score calculation device; The identity score calculation device collecting the authentication result information for the advanced authentication from the authentication device; and calculating the probability that the user accessing the account is the real person based on statistics obtained from the authentication result information using the number of users who succeeded and failed in the normal authentication and the number of users who succeeded and failed in the advanced authentication. A method for authenticating an individual, characterized by:

7. An identity score calculation device that is connected to an authentication device that performs user authentication and calculates a score indicating the identity of a user, the authentication device has a plurality of types of normal authentication means for normal authentication that performs authentication of standard authentication strength, and a plurality of types of advanced authentication means for advanced authentication that performs authentication of authentication strength that suppresses authentication failure below a first predetermined level if the user is the authorized user and suppresses authentication success below a second predetermined level if the user is not the authorized user, The identity score calculation device a behavior information collection unit that collects access information indicating a service usage environment in which a user accesses an account using a user terminal and behavior information indicating the user's behavior history information; an authentication result collection unit that collects authentication result information indicating success or failure of the normal authentication and the advanced authentication from the authentication device; an advanced authentication control unit that determines whether to execute the advanced authentication in addition to the normal authentication for a user who has accessed an account within a predetermined period of time, and for a user for whom it is determined that the advanced authentication should be executed, determines, by referring to the behavior information, from among the plurality of types of advanced authentication means, an advanced authentication means that suppresses authentication failure for the user to a first predetermined level or below, and notifies the authentication device of the determined advanced authentication means for the user for whom it is determined that the advanced authentication should be executed; a probability calculation unit that calculates the probability that the user accessing the account is the real person based on a statistical value using the number of users who succeeded and failed in the normal authentication and the number of users who succeeded and failed in the advanced authentication, which are obtained from the authentication result information; An identity score calculation device comprising:

8. An authentication device that is connected to an identity score calculation device that calculates a score indicating the identity of a user and performs user authentication, the authentication device has a plurality of types of normal authentication means for normal authentication that performs authentication of standard authentication strength, and a plurality of types of advanced authentication means for advanced authentication that performs authentication of authentication strength that suppresses authentication failure below a first predetermined level if the user is the authorized user and suppresses authentication success below a second predetermined level if the user is not the authorized user, The authentication device an authentication processing unit that performs normal authentication using a predetermined normal authentication means for a user who has accessed an account, and performs advanced authentication for a user who has been determined to perform the advanced authentication using an advanced authentication means notified by the identity score calculation device, and transmits authentication result information indicating the success or failure of the normal authentication and the advanced authentication to the identity score calculation device; a normal authentication selection unit that selects the normal authentication means to be newly set from the plurality of types of normal authentication means according to the probability of the authenticity acquired from the authenticity score calculation device; An authentication device comprising:

9. A program for causing a computer to function as the identity score calculation device according to claim 7.

10. A program for causing a computer to function as the authentication device according to claim 8.

Images