# US 2017/0286648 A1 · Authentication system and method > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2017/0286648 A1 - Document ID: US20170286648A1 - Status: Published application - Kind: A1 - Application number: 15/506,198 - Filed: 2015-08-24 - Published: 2017-10-05 - Earliest claimed: 2014-08-25 - Assignees: The University of Tokyo - Applicants: The University of Tokyo - Inventors: Rie YAMAGUCHI; Hideki NAKAYAMA; Tatsuya HARADA; Daisuke SAKAMOTO - Web page: https://patentgrep.com/patent/US20170286648A1 ## CPC - G06F 21/30: Authentication, i.e. establishing the identity or authorisation of security principals - G06F 21/31: User authentication - G06F 21/316: {by observing the pattern of computer usage, e.g. typical user behaviour} - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract An object of the present invention is to provide an authentication system and method which can reduce a burden on a user while ensuring security by using a combination of a plurality of authentication methods. A method for authentication of the present invention comprises the steps of: obtaining a first authentication performance value for each transaction based on initial input information at a transaction; determining whether or not additional authentication is required for authentication of a person by comparing the first authentication performance value and the authentication performance threshold value required for authentication of a person; presenting, if the additional authentication is required, a plurality of authentication methods from which one authentication method or a combination of authentication methods can be selected so as to satisfy an additional authentication performance value obtained using the first authentication performance value and the authentication performance threshold value; and obtaining a second authentication performance value based on additional input information using the one or more authentication methods selected from the plurality of presented authentication methods, and determining whether to authenticate by comparing the additional authentication performance value and the second authentication performance value. ## Claims ### Claim 1 An authentication system comprising: a storage storing a plurality of authentication methods and authentication performance values thereof; a first authentication performance value calculator calculating a first authentication performance value for each transaction based on initial input information at each transaction; an additional authentication performance value calculator, in response to determination whether or not additional authentication is required to authenticate a person by comparing a predetermined authentication performance threshold value required for authentication of a person and said first authentication performance value, calculating an additional authentication performance value using said authentication performance threshold value and said first authentication performance value if the additional authentication is required; an additional authentication menu provider presenting a plurality of authentication methods from which one authentication method or a combination of authentication methods can be selected to satisfy said additional authentication performance value; and an authentication determinator, in response to calculation of a second authentication performance value based on said selected one or more authentication methods from the plurality of authentication methods presented by said additional authentication menu provider, determining whether to authenticate by comparing said second authentication performance value and said additional authentication performance value. ### Claim 2 (depends on 1) The authentication system of claim 1 comprising a historical database; and said first authentication performance value comprising an authentication performance value of historical data authentication which is obtained based on input information for each transaction and historical information obtained from said historical database. ### Claim 3 (depends on 2) The authentication system of claim 2, wherein said input information comprises identification information of a user terminal, said historical data authentication comprises terminal authentication using user terminal identification information included in the historical information, and said authentication performance value of the historical data authentication comprises an authentication performance value of the terminal authentication. ### Claim 4 (depends on 2) The authentication system of claim 2, if the plurality of authentication methods include an authentication method, other than said historical data authentication, whose authentication performance value can be obtained based on the initial input information, said first authentication value obtained based on said initial input information comprises said authentication performance value obtained based on said initial input information. ### Claim 5 (depends on 1) The authentication system of claim 1, wherein part or all of the authentication performance values of the plurality of the authentication methods are changeable. ### Claim 6 (depends on 1) The authentication system of claim 1, wherein part or all of the authentication performance values for the plurality of the authentication methods are changeable depending on a user. ### Claim 7 (depends on 1) The authentication system of claim 1, wherein said authentication threshold value required for authentication of a person is changeable. ### Claim 8 A method for authentication comprising the steps of: obtaining a first authentication performance value based on initial input information at each transaction; determining whether or not additional authentication is required to authenticate a person by comparing the first authentication performance value and an authentication performance threshold value required for authentication of a person; if the additional authentication is required, presenting a plurality of authentication methods from which one authentication method or a combination of authentication methods can be selected to satisfy an additional authentication performance value which is obtained using the first authentication performance value and the authentication performance threshold value; and obtaining a second authentication performance value based on additional input information using said one or more authentication methods selected from the plurality of presented authentication methods, and determining whether to authenticate by comparing the additional authentication performance value and the second authentication performance value. ### Claim 9 (depends on 8) The method of claim 8, wherein said first authentication performance value comprises an authentication performance value of historical data authentication which is obtained based on input information for each transaction and historical information obtained from historical database. ### Claim 10 (depends on 8) The method of claim 8, wherein said first authentication performance value comprises an authentication performance value of terminal authentication. ### Claim 11 (depends on 9) The method of claim 9, wherein said first authentication performance value comprises an authentication performance value obtained based on the initial input information for an authentication method other than said historical data authentication. ### Claim 12 An authentication system comprising: a storage storing a plurality of authentication methods, authentication performance values thereof and an authentication performance threshold value required for user authentication; a first authentication performance value calculator calculating a first authentication performance value for each transaction based on initial input information at each transaction; a first authentication determinator determining whether or not additional authentication is required to authenticate a user by comparing said authentication performance threshold value and said first authentication performance value; a second authentication performance value calculator, if the additional authentication is required, calculating an additional authentication performance value using said authentication performance threshold value and said first authentication performance value; an additional authentication menu provider presenting an additional authentication menu comprising a plurality of authentication methods to the user and allowing the user to select one or more authentication methods from the additional authentication menu and enter additional information; a third authentication performance value calculator calculating a second authentication performance value based on said additional information; and a second authentication determinator determining whether to authenticate the user by comparing said second authentication performance value and said additional authentication performance value. ### Claim 13 (depends on 12) The authentication system of claim 12, wherein said first authentication determinator authenticates the user if the additional authentication is not required. ### Claim 14 (depends on 12) The authentication system of claim 12, wherein said additional authentication menu is presented on a screen. ### Claim 15 (depends on 12) The authentication system of claim 12, wherein said storage comprises a historical database and said first authentication performance value comprises an authentication performance value of historical data authentication which is obtained based on input information for each transaction and historical information obtained from said historical database.