Authentication device, authentication system, and authentication method
In order to improve the safety and reliability of services provided by a computer, an authentication device ( 1 ) equipped with a transmission unit ( 15 ) and a determination unit ( 16 ) is provided. The transmission unit ( 15 ) transmits a challenge to a terminal device ( 7 ) where the challenge is presented to a user ( 8 ) to be authenticated, the challenge being information serving as the basis on which the user inputs information to be used for authentication processing. At this time, the transmission unit ( 15 ) transmits a plurality of different challenges to the terminal device ( 7 ). The determination unit ( 16 ) determines not only whether or not a response input to the terminal device ( 7 ) by the user ( 8 ) in response to each challenge is correct, but also whether or not time information regarding the challenge and the response thereto satisfies a condition regarding the response.
1. An authentication device comprising:
a memory configured to store instructions; and
a processor configured to execute the instructions to:
output at least three instructions in a sequence corresponding to an authentication request from a user, the at least three instructions comprise:
output a first instruction, the first instruction comprising first information and second information, the first information requesting the user to perform a first challenge, wherein the first challenge requesting the user to move the face of the user in a first direction, and the second information corresponding to a first period of time the face of the user continuously keeps facing in the first direction of the first information; and
output a second instruction, the second instruction comprising third information and fourth information, the third information requesting the user to perform a second challenge, and the fourth information corresponding to a second period of time the user has to perform the second challenge;
output a third instruction, the third instruction comprising fifth information and sixth information, the fifth information requesting the user to perform a third challenge, wherein the third challenge requesting the user to move the face of the user in a second direction different from the first direction, and the sixth information corresponding to a third period of time the face of the user continuously keeps facing in the second direction of the fifth information;
capture a first facial image of the user in response to the first instruction;
capture biometrics information of the user in response to the second instruction;
capture a second facial image of the user in response to the third instruction; and
Output a result indicating that the user is a real human in a case where an amount of time the user continuously keeps facing in the first direction after moving the face of the user towards the first direction satisfies the second information, an amount of time the user spent performing the second challenge satisfies the fourth information, an amount of time the user continuously keeps facing in the second direction after moving the face of the user towards the second direction satisfies the sixth information, and a response to the first challenge, a response to the second challenge and a response to the third challenge are correct.
2. The authentication device according to claim 1 , wherein the first facial image and the second facial image are live motion images captured by a camera.
3. The authentication device according to claim 1 , wherein the first instruction indicates a first facial icon image representing the first information, and the third instruction indicates a second facial icon image representing the fifth information.
4. The authentication device according to claim 1 , wherein the first facial image of the user and the second facial image of the user comprise a plurality of frames.
5. The authentication device according to claim 1 , wherein the processor is further configured to display a direction corresponding to a movement of the face of the user performed according to the first information or the fifth information using a facial icon image.
6. The authentication device according to claim 1 , wherein the first challenge, the second challenge and the third challenge are different operations to be performed by the user.
7. The authentication device according to claim 1 , wherein the first instruction, the second instruction and the third instruction are continuously presented to the user.
8. The authentication device according to claim 1 , wherein each of the first facial image of the user and the second facial image of the user is a video.
9. The authentication device according to claim 5 , wherein each of the second information and the sixth information is associated with different periods of time.
10. The authentication device according to claim 1 , wherein the result does not indicate that the user is a real human when the amount of time the user continuously keeps facing in the first direction after moving the face of the user towards the first direction does not satisfy the second information, when the amount of time the user spent performing the second challenge does not satisfy the fourth information, when the amount of time the user continuously keeps facing in the second direction after moving the face of the user towards the second direction does not satisfy the sixth information, when a movement of the face of the user in a direction represented in the first facial image corresponding to the first instruction, when a movement of the face of the user in a direction represented in the second facial image corresponding to the third instruction, or when the response to the second challenge is incorrect.
11. The authentication device according to claim 1 , wherein the first instruction, the second instruction and the third instruction comprise requests for biometric information of the user.
12. The authentication device according to claim 11 , wherein the processor is further configured to determine that the user is a pre-registered user based on the biometric information included in any response.
13. The authentication device according to claim 11 , wherein the processor is further configured to determine that the user is a pre-registered user based on the biometric information included in any response when the result does not indicate that the user is a real human.
14. The authentication device according to claim 11 , wherein the processor is further configured to determine that the user is not a pre-registered user based on the biometric information included in any response when the result does not indicate that the user is a real human.
15. The authentication device according to claim 1 , wherein the second period of time is different from the first period of time.
16. An authentication device comprising:
a memory configured to store instructions; and
a processor configured to execute the instructions to:
output at least three instructions in a sequence corresponding to an authentication request from a user, the at least three instructions comprise:
output a first instruction, the first instruction comprising first information and second information, the first information requesting the user to perform a first challenge, wherein the first challenge requesting the user to move the face of the user in a first direction, and the second information corresponding to a first period of time the face of the user continuously keeps facing in the first direction of the first information; and
output a second instruction, the second instruction comprising third information and fourth information, the third information requesting the user to perform a second challenge, and the fourth information corresponding to a second period of time the user has to perform the second challenge;
output a third instruction, the third instruction comprising fifth information and sixth information, the fifth information requesting the user to perform a third challenge, wherein the third challenge requesting the user to move the face of the user in a second direction different from the first direction, and the sixth information corresponding to a third period of time the face of the user continuously keeps facing in the second direction of the fifth information;
capture a first facial image of the user in response to the first instruction;
capture biometrics information of the user in response to the second instruction;
capture a second facial image of the user in response to the third instruction; and
authenticate an access to an external device in a case where an amount of time the user continuously keeps facing in the first direction after moving the face of the user towards the first direction satisfies the second information, an amount of time the user spent performing the second challenge satisfies the fourth information, an amount of time the user continuously keeps facing in the second direction after moving the face of the user towards the second direction satisfies the sixth information, and a response to the first challenge, a response to the second challenge and a response to the third challenge are correct.
17. The authentication device according to claim 16 , wherein the processor is further configured to deny access to the external device when the amount of time the user continuously keeps facing in the first direction after moving the face of the user towards the first direction does not satisfy the second information, when the amount of time the user has to perform the second challenge does not satisfy the fourth information, when the amount of time the user continuously keeps facing in the second direction after moving the face of the user towards the second direction does not satisfy the sixth information, when a movement of the face of the user in a direction represented in the first facial image corresponding to the first instruction, when a movement of the face of the user in a direction represented in the second facial image corresponding to the third instruction, or when the response to the second challenge is incorrect.
18. A method of authenticating a user comprising:
outputting at least three instructions in a sequence corresponding to an authentication request from the user, the at least three instructions comprise:
outputting a first instruction, the first instruction comprising first information and second information, the first information requesting the user to perform a first challenge, wherein the first challenge requesting the user to move the face of the user in a first direction, and the second information corresponding to a first period of time the face of the user continuously keeps facing in the first direction of the first information; and
outputting a second instruction, the second instruction comprising third information and fourth information, the third information requesting the user to perform a second challenge, and the fourth information corresponding to a second period of time the user has to perform the second challenge;
outputting a third instruction, the third instruction comprising fifth information and sixth information, the fifth information requesting the user to perform a third challenge, wherein the third challenge requesting the user to move the face of the user in a second direction different from the first direction, and the sixth information corresponding to a third period of time the face of the user continuously keeps facing in the second direction of the fifth information;
capturing a first facial image of the user in response to the first instruction;
capturing biometrics information of the user in response to the second instruction;
capturing a second facial image of the user in response to the third instruction; and
Outputting a result indicating that the user is a real human in a case where an amount of time the user continuously keeps facing in the first direction after moving the face of the user towards the first direction satisfies the second information, an amount of time the user spent performing the second challenge satisfies the fourth information, an amount of time the user continuously keeps facing in the second direction after moving the face of the user towards the second direction satisfies the sixth information, and a response to the first challenge, a response to the second challenge and a response to the third challenge are correct.
19. The method according to claim 18 , wherein the result does not indicate that the user is a real human when the amount of time the user continuously keeps facing in the first direction after moving the face of the user towards the first direction does not satisfy the second information, when the amount of time the user spent performing the second challenge does not satisfy the fourth information, when the amount of time the user continuously keeps facing in the second direction after moving the face of the user towards the second direction does not satisfy the sixth information, when a movement of the face of the user in a direction represented in the first facial image corresponding to the first instruction, when a movement of the face of the user in a direction represented in the second facial image corresponding to the third instruction, or when the response to the second challenge is incorrect.
20. A non-transitory computer readable medium having stored therein a program executed by one or more processors for performing a method of authenticating a user comprising:
outputting at least three instructions in a sequence corresponding to an authentication request from the user, the at least three instructions comprise:
outputting a first instruction, the first instruction comprising first information and second information, the first information requesting the user to perform a first challenge, wherein the first challenge requesting the user to move the face of the user in a first direction, and the second information corresponding to a first period of time the face of the user continuously keeps facing in the first direction of the first information; and
outputting a second instruction, the second instruction comprising third information and fourth information, the third information requesting the user to perform a second challenge, and the fourth information corresponding to a second period of time the user has to perform the second challenge;
outputting a third instruction, the third instruction comprising fifth information and sixth information, the fifth information requesting the user to perform a third challenge, wherein the third challenge requesting the user to move the face of the user in a second direction different from the first direction, and the sixth information corresponding to a third period of time the face of the user continuously keeps facing in the second direction of the fifth information;
capturing a first facial image of the user in response to the first instruction;
capturing biometrics information of the user in response to the second instruction;
capturing a second facial image of the user in response to the third instruction; and
Outputting a result indicating that the user is a real human in a case where an amount of time the user continuously keeps facing in the first direction after moving the face of the user towards the first direction satisfies the second information, an amount of time the user spent performing the second challenge satisfies the fourth information, an amount of time the user continuously keeps facing in the second direction after moving the face of the user towards the second direction satisfies the sixth information, and a response to the first challenge, a response to the second challenge and a response to the third challenge are correct.