Authentication apparatus, authentication method, and non-transitory recording medium using biometric information and knowledge information

An authentication method comprising:

• performing a first authentication procedure using biometric information about an authentication target person;
• performing a second authentication procedure using first knowledge information indicating matters known by the authentication target person, or first possession information indicating matters had by the authentication target person;
• performing a third authentication procedure using second knowledge information that is different from the first knowledge information and that indicates matters known by the authentication target person, or second possession information that is different from the first possession information and that indicates matters had by the authentication target person;
• and
• performing a determination operation of determining that authentication of the authentication target person is successful in a case where both the first authentication procedure and the second authentication procedure are successful, and of determining that the authentication of the authentication target person is successful in a case where both the second authentication procedure and the third authentication procedure are successful even when the first authentication procedure is not successful.

A non-transitory recording medium on which a computer program that allows a computer to execute an authentication method is recorded, the authentication method including:

• performing a first authentication procedure using biometric information about an authentication target person;
• performing a second authentication procedure using first knowledge information indicating matters known by the authentication target person, or first possession information indicating matters had by the authentication target person;
• performing a third authentication procedure using second knowledge information that is different from the first knowledge information and that indicates matters known by the authentication target person, or second possession information that is different from the first possession information and that indicates matters had by the authentication target person;
• and
• performing a determination operation of determining that authentication of the authentication target person is successful in a case where both the first authentication procedure and the second authentication procedure are successful, and of determining that the authentication of the authentication target person is successful in a case where both the second authentication procedure and the third authentication procedure are successful even when the first authentication procedure is not successful.