Authentication system and method
View Patent ↗An authentication apparatus and technology operable to change a response time based on a degree of authentication failure is disclosed. A degree of authentication failure can be determined in response to an authentication failure. A response time such as an authentication response time can be changed based on the degree of authentication failure. Intervals between entries of a password may be increased logarithmically based on the number of failed login attempts to deter unauthorized access.
1. An authentication apparatus comprising:
an operation module operable to accept input of authentication information;
an authentication module operable to authenticate the authentication information;
a determination module operable to determine, by a processor, a degree of authentication failure in response to one or more authentication failures indicated by the authentication module; and
a response module operable to change a response time based on the degree of authentication failure, wherein the response time is a time to respond to an operation of the operation module,
wherein the degree of the authentication failure is a number of authentication failures obtained by counting the one or more authentication failures, and
the response time is calculated based on the following relationship:
D =log n ( C+ 1),
where D is the response time, C is the degree of the authentication failure, and n is a number greater than or equal to 2.
2. The authentication apparatus according to claim 1 , wherein the authentication information is an inputted password.
3. The authentication apparatus according to claim 2 , wherein the degree of authentication failure is determined by a difference between the inputted password and a correct password.
4. The authentication apparatus according to claim 3 , wherein the difference between the inputted password and the correct password is a number of different alphanumeric digits between the inputted password and the correct password.
5. The authentication apparatus according to claim 1 , wherein the authentication information is biological information.
6. The authentication apparatus according to claim 5 , wherein the degree of authentication failure is determined by a corresponding ratio of the authentication information and correct biological information.
7. The authentication apparatus according to claim 1 , wherein the response module is further operable to increase the response time as the degree of authentication failure increases.
8. The authentication apparatus according to claim 1 , wherein the response module is further operable to change the response time if the degree of authentication failure exceeds a predetermined threshold value.
9. The authentication apparatus according to claim 1 , wherein the response module is further operable to reset the response time if the authentication module determines an authentication success.
10. The authentication apparatus according to claim 1 , wherein the response time is a time from when a key operation is inputted to the operation module to a time when a response is generated.
11. An authentication apparatus comprising:
an operation module operable to accept input of authentication information;
an authentication module operable to authenticate the authentication information;
a determination module operable to determine, by a processor, a degree of authentication failure in response to one or more authentication failures indicated by the authentication module; and
a response module operable to change a response time based on the degree of authentication failure, wherein the response time is a time to respond to an operation of the operation module,
wherein the degree of the authentication failure is a number of authentication failures obtained by counting the one or more authentication failures, and
the response time is calculated based on the following relationship
D=S ·log n ( C+ 1),
where D is the response time, S is a coefficient, C is the degree of the authentication failure, and n is a number greater than or equal to 2.
12. The authentication apparatus according to claim 11 , wherein S is a value of security level.
13. The authentication apparatus according to claim 11 , wherein S is set by the operation module.
14. The authentication apparatus according to claim 11 , wherein S is set by an authenticated user.
15. An authentication method comprising:
accepting input of authentication information into an operation module;
authenticating the authentication information to determine whether one or more authentication failures occur;
determining, by a processor, a degree of authentication failure in response to the one or more authentication failures; and
changing a response time based on the degree of authentication failure, wherein the response time is a time to respond to an operation of the operation module,
wherein the degree of the authentication failure is a number of authentication failures obtained by counting the one or more authentication failures, and
the response time is calculated based on the following relationship:
D =log n ( C+ 1),
where D is the response time, C is the degree of the authentication failure, and n is a number greater than or equal to 2.
16. A non-transitory computer readable medium for an authentication apparatus, comprising program code for:
accepting input of authentication information into an operation module;
authenticating the authentication information to determine whether one or more authentication failures occur;
determining a degree of authentication failure in response to the one or more authentication failures; and
changing a response time based on the degree of failure, wherein the response time is a time to respond to an operation of the operation module,
wherein the degree of the authentication failure is a number of authentication failures obtained by counting the one or more authentication failures, and
the response time is calculated based on the following relationship:
D =log n ( C+ 1),
where D is the response time, C is the degree of the authentication failure, and n is a number greater than or equal to 2.
17. An authentication method comprising:
accepting input of authentication information into an operation module;
authenticating the authentication information to determine whether one or more authentication failures occur;
determining, by a processor, a degree of authentication failure in response to the one or more authentication failures; and
changing a response time based on the degree of authentication failure, wherein the response time is a time to respond to an operation of the operation module,
wherein the degree of the authentication failure is a number of authentication failures obtained by counting the one or more authentication failures, and
the response time is calculated based on the following relationship
D=S ·log n ( C+ 1),
where D is the response time, S is a coefficient, C is the degree of the authentication failure, and n is a number greater than or equal to 2.
18. A non-transitory computer readable medium for an authentication apparatus, comprising program code for:
accepting input of authentication information into an operation module;
authenticating the authentication information to determine whether one or more authentication failures occur;
determining a degree of authentication failure in response to the one or more authentication failures; and
changing a response time based on the degree of failure, wherein the response time is a time to respond to an operation of the operation module,
wherein the degree of the authentication failure is a number of authentication failures obtained by counting the one or more authentication failures, and
the response time is calculated based on the following relationship
D=S ·log n ( C+ 1),
where D is the response time, S is a coefficient, C is the degree of the authentication failure, and n is a number greater than or equal to 2.