# US 2017/0289130 A1 · Apparatus and method for authentication based on cognitive information > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2017/0289130 A1 - Document ID: US20170289130A1 - Status: Published application - Kind: A1 - Application number: 15/168,430 - Filed: 2016-05-31 - Published: 2017-10-05 - Earliest claimed: 2016-04-05 - Assignees: Electronics and Telecommunications Research Institute - Applicants: Electronics and Telecommunications Research Institute - Inventors: CheolYong PARK; HanJun YOON - Web page: https://patentgrep.com/patent/US20170289130A1 ## CPC - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - G06F 21/316: {by observing the pattern of computer usage, e.g. typical user behaviour} - G06N 5/022: Knowledge engineering; Knowledge acquisition - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)} - H04W 12/06: Authentication - H04L 2463/082: applying multi-factor authentication - H04W 12/61: Time-dependent - H04W 12/63: Location-dependent; Proximity-dependent - H04W 12/65: Environment-dependent, e.g. using captured environmental data - H04W 12/68: Gesture-dependent or behaviour-dependent - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06N: COMPUTING ARRANGEMENTS BASED ON SPECIFIC COMPUTATIONAL MODELS - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract An authentication apparatus and method based on cognitive information. The authentication apparatus based on cognitive information includes an authentication request reception unit for receiving a request to authenticate an authentication target, a behavioral and contextual information collection unit for collecting behavioral and contextual information corresponding to the authentication target, a cognitive information extraction unit for extracting cognitive information corresponding to the request from previously stored big data, and an authentication processing unit for authenticating the authentication target in consideration of the behavioral and contextual information based on the extracted cognitive information. ## Claims ### Claim 1 An authentication apparatus based on cognitive information, comprising: an authentication request reception unit for receiving a request to authenticate an authentication target; a behavioral and contextual information collection unit for collecting behavioral and contextual information corresponding to the authentication target; a cognitive information extraction unit for extracting cognitive information corresponding to the request from previously stored big data; and an authentication processing unit for authenticating the authentication target in consideration of the behavioral and contextual information based on extracted cognitive information. ### Claim 2 (depends on 1) The authentication apparatus of claim 1, wherein the authentication processing unit is configured to authenticate the authentication target by determining at least one of continuity, authenticity, validity, and correctness of the behavioral and contextual information. ### Claim 3 (depends on 2) The authentication apparatus of claim 2, wherein the authentication processing unit determines the continuity of the behavioral and contextual information in consideration of at least one of whether the behavioral and contextual information is continuously received for a time longer than a threshold time and whether a number of times that the behavioral and contextual information is received is equal to or greater than a threshold number of times. ### Claim 4 (depends on 2) The authentication apparatus of claim 2, wherein the authentication processing unit determines the authenticity of the behavioral and contextual information in consideration of whether the behavioral and contextual information is authentic information such that a change in the behavioral and contextual information is equal to or less than a threshold variation. ### Claim 5 (depends on 2) The authentication apparatus of claim 2, wherein the authentication processing unit determines the validity of the behavioral and contextual information by comparing a result of a change in the behavioral and contextual information with a result of a prediction corresponding to the behavioral and contextual information. ### Claim 6 (depends on 2) The authentication apparatus of claim 2, wherein the authentication processing unit determines the correctness by checking whether a change in a pattern of the behavioral and contextual information is correct based on the extracted cognitive information. ### Claim 7 (depends on 1) The authentication apparatus of claim 1, wherein the previously stored big data are collected using at least one of a location sensor, a beacon signal collection sensor, a bio-signal collection sensor, and an environment sensor, or the previously stored big data are at least one of a kind of a network, a kind of an access network, and information about execution of an application, corresponding to the authentication target. ### Claim 8 (depends on 1) The authentication apparatus of claim 1, wherein the authentication target is at least one of a user to be authenticated and a device to be authenticated. ### Claim 9 (depends on 1) The authentication apparatus of claim 1, further comprising, an authentication result output unit for outputting a result of authentication of the authentication target. ### Claim 10 (depends on 1) The authentication apparatus of claim 1, wherein the authentication processing unit performs multi-factor authentication in combination with at least one of an ID/password-based authentication method, an authentication token-based authentication method, and a biometric authentication method. ### Claim 11 An authentication method based on cognitive information, performed by an authentication apparatus based on cognitive information, the method comprising: receiving a request to authenticate an authentication target; collecting behavioral and contextual information corresponding to the authentication target; extracting cognitive information corresponding to the request from previously stored big data; and authenticating the authentication target in consideration of the behavioral and contextual information based on the extracted cognitive information. ### Claim 12 (depends on 11) The method of claim 11, wherein authenticating the authentication target is configured to authenticate the authentication target by determining at least one of continuity, authenticity, validity, and correctness of the behavioral and contextual information. ### Claim 13 (depends on 12) The method of claim 12, wherein authenticating the authentication target is configured to determine the continuity of the behavioral and contextual information in consideration of at least one of whether the behavioral and contextual information is continuously received for a time longer than a threshold time and whether a number of times that the behavioral and contextual information is received is equal to or greater than a threshold number of times. ### Claim 14 (depends on 12) The method of claim 12, wherein authenticating the authentication target is configured to determine the authenticity of the behavioral and contextual information in consideration of whether the behavioral and contextual information is authentic information such that a change in the behavioral and contextual information is equal to or less than a threshold variation. ### Claim 15 (depends on 12) The method of claim 12, wherein authenticating the authentication target is configured to determine the validity of the behavioral and contextual information by comparing a result of change in the behavioral and contextual information with a result of prediction corresponding to the behavioral and contextual information. ### Claim 16 (depends on 12) The method of claim 12, wherein authenticating the authentication target is configured to determine the correctness by checking whether a change in a pattern of the behavioral and contextual information is correct based on the extracted cognitive information. ### Claim 17 (depends on 12) The method of claim 12, wherein the previously stored big data are collected using at least one of a location sensor, a beacon signal collection sensor, a bio-signal collection sensor, and an environment sensor, or the previously stored big data are at least one of a kind of a network, a kind of an access network, and information about execution of an application, corresponding to the authentication target. ### Claim 18 (depends on 11) The method of claim 11, wherein the authentication target is at least one of a user to be authenticated and a device to be authenticated. ### Claim 19 (depends on 11) The method of claim 11, further comprising, outputting a result of authentication of the authentication target. ### Claim 20 (depends on 11) The method of claim 11, wherein authenticating the authentication target is configured to authenticate the authentication target in combination with at least one of an ID/password-based authentication method, an authentication token-based authentication method, and a biometric authentication method.