Authentication and authorization system, authentication and authorization means determination method, and authentication and authorization means determination program

An authentication and authorization means determination method for determining authentication and authorization means to be used for performing authentication and/or authorization on an asset associated with a target system, the method causing a computer to perform:

• acquiring an authentication and authorization request for requesting the authentication and/or authorization when a request source asset requests a request destination asset to execute predetermined processing;
• analyzing the authentication and authorization request to specify at least one of asset statuses indicating target matters of the authentication and/or authorization for the request source asset and the request destination asset, a request level indicating a degree of confirmation required for the authentication and/or authorization in response to the authentication and authorization request, and a relationship between the request source asset and the request destination asset;
• and
• determining the authentication and authorization means to be used for the authentication and/or authorization in response to the authentication and authorization request, based on the specified at least one of the asset statuses, the request level, and the relationship.

An authentication and authorization means determination program that determines authentication and authorization means to be used for performing authentication and/or authorization on an asset associated with a target system, the program causing a computer to perform:

• acquiring an authentication and authorization request for requesting the authentication and/or authorization when a request source asset requests a request destination asset to execute predetermined processing;
• analyzing the authentication and authorization request to specify at least one of asset statuses indicating target matters of the authentication and/or authorization for the request source asset and the request destination asset, a request level indicating a degree of confirmation required for the authentication and/or authorization in response to the authentication and authorization request, and a relationship between the request source asset and the request destination asset;
• and
• determining the authentication and authorization means to be used for the authentication and/or authorization in response to the authentication and authorization request, based on the specified at least one of the asset statuses, the request level, and the relationship.