Apparatus and method for authentication based on cognitive information

• US 10,805,285 B2
• Filed: 05/31/2016
• Issued: 10/13/2020
• Est. Priority Date: 04/05/2016
• Status: Active Grant

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Park, CheolYong, Yoon, HanJun
• Primary Examiner(s): Poltorak, Piotr
• Application Number:
  US15/168,430
• Publication Number:
  US 20170289130A1
• Time in Patent Office: 1,596 Days
• Field of Search: None
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06N 5/022 Knowledge engineering; Knowledge acquisition
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 12/65 Environment-dependent, e.g. using captured environmental data
• CPC Class Codes: H04W 12/68 Gesture-dependent or behaviour-dependent

Abstract

An authentication apparatus and method based on cognitive information. The authentication apparatus based on cognitive information includes an authentication request reception unit for receiving a request to authenticate an authentication target, a behavioral and contextual information collection unit for collecting behavioral and contextual information corresponding to the authentication target, a cognitive information extraction unit for extracting cognitive information corresponding to the request from previously stored big data, and an authentication processing unit for authenticating the authentication target in consideration of the behavioral and contextual information based on the extracted cognitive information.

Claims

1. An authentication apparatus based on cognitive information, comprising:

a server device comprising one or more units which are executed by a processor, the one or more units comprising;

an authentication request reception unit for receiving a request to perform a primary authentication for an authentication target;

a behavioral and contextual information collection unit for collecting behavioral and contextual information corresponding to the authentication target;

a cognitive information extraction unit for extracting cognitive information corresponding to the request from previously stored big data; and

an authentication processing unit for performing a secondary authentication for the authentication target in consideration of the behavioral and contextual information based on extracted cognitive information, wherein the authentication processing unit blocks the request of performing the primary authentication or cancels an already performed primary authentication when the secondary, authentication fails,

wherein the primary authentication is performed using authentication information other than the cognitive information,

wherein the authentication information is at least one of an ID/password-based authentication method, an authentication token-based authentication method, and a biometric authentication method, and

wherein the authentication processing, unit is configured to execute the following;

predicting possible transactions by the authentication target based on recent location information and the type of transactions that should occur near a location identified by the recent location information, wherein the authentication processing unit, provides the secondary authentication when the transaction that occurs is one of the predicted transactions and not providing the secondary authentication when the transaction that occurs is not one of the predicted transactions.

2. The authentication apparatus of claim 1, wherein the authentication processing unit determines the continuity of the behavioral and contextual information by determining whether a number of times that the behavioral and contextual information is received is equal to or greater than a threshold number of times.

3. The authentication apparatus of claim 1, wherein the authentication processing unit determines the authenticity of the behavioral and contextual information in consideration of whether the behavioral and contextual information is authentic information such that a change in the behavioral and contextual information is equal to or less than a threshold variation.

4. The authentication apparatus of claim 1, wherein the previously stored big data are collected using at least one of a location sensor, a beacon signal collection sensor, a bio-signal collection sensor, and an environment sensor, or the previously stored big data are at least one of a kind of a network, a kind of an access network, and information about execution of an application, corresponding to the authentication target.

5. The authentication apparatus of claim 1, wherein the authentication target is at least one of a user to be authenticated and a device to be authenticated.

6. The authentication apparatus of claim 1, further comprising,

an authentication result output unit for outputting a result of authentication of the authentication target.

7. An authentication method based on cognitive information, performed by an authentication apparatus based on cognitive information, the method comprising:

receiving a request to perform a primary authentication for an authentication target;

collecting behavioral and contextual information corresponding to the authentication target;

extracting cognitive information corresponding to the request from previously stored big data; and

performing a secondary authentication for the authentication target in consideration of the behavioral and contextual information based on the extracted cognitive information, wherein the authentication apparatus blocks the request of performing the primary authentication or cancels an already performed primary authentication when the secondary authentication fails,

wherein the primary authentication is performed using authentication information other than the cognitive information,

wherein the authentication information is at least one of an ID/password-based authentication method, an authentication token-based authentication method, and a biometric authentication method,

wherein the secondary authentication comprises;

predicting possible transactions by the authentication target based on recent location information and the type of transactions that should occur near a location identified by the recent location information, and providing the secondary authentication when the transaction that occurs is one of the predicted transactions and not providing the secondary authentication when the transaction that occurs is not one of the predicted transactions, and

wherein the above authentication steps are implemented by at least one device.

8. The method of claim 7, wherein authenticating the authentication target includes determining the continuity of the behavioral and contextual information by determining whether a number of times that the behavioral and contextual information is received is equal to or greater than a threshold number of times.

9. The method of claim 7, wherein authenticating the authentication target includes determining the authenticity of the behavioral and contextual information in consideration of whether the behavioral and contextual information is authentic information such that a change in the behavioral and contextual information is equal to or less than a threshold variation.

10. The method of claim 7, wherein the previously stored big data are collected using at least one of a location sensor, a beacon signal collection sensor, a bio-signal collection sensor, and an environment sensor, or the previously stored big data are at least one of a kind of a network, a kind of an access network, and information about execution of an application, corresponding to the authentication target.

11. The method of claim 7, wherein the authentication target is at least one of a user to be authenticated and a device to be authenticated.

12. The method of claim 7, further comprising,

outputting a result of authentication of the authentication target.