Risk-based authentication system and risk information acquisition server, as well as risk-based authentication method

摘要

PROBLEM TO BE SOLVED: To provide a risk base authentication system for achieving flexible risk base authentication, by changing an evaluation result of a risk level in response to a risk on the Internet so as to change a determination level for executing additional authentication.;SOLUTION: The risk base authentication system evaluates the risk level about an access by applying mail analysis, action analysis and a policy, and changes an authentication level, based on the evaluation result. The risk base authentication system includes a risk base authentication server 300 having an authentication rule 321, and a risk base authentication part 310 for evaluating the risk level about the access according to the authentication rule 321, and a risk information acquiring server 100 having a risk information acquiring part 110 for acquiring periodically up-to-date risk information from an external server of providing the risk information, and an authentication rule generating part 120 for generating the second authentication rule, based on the risk information, and for updating the authentication rule 321 by the second authentication rule.;COPYRIGHT: (C)2010,JPO&INPIT