AUTHENTICATION APPARATUS, AUTHENTICATION SYSTEM, AND AUTHENTICATION METHOD

摘要

An authentication device which updates a risk determination condition on the basis of suspicious authentication requests, an authentication system and an authentication method are provided. This authentication device (2) is provided with: a risk determination table (23) which stores a risk determination condition; a determination unit (21) which receives an authentication type query together with user access information from a business device (1), determines the risk level on the basis of the access information and the risk determination condition and specifies the authentication type on the basis of the risk level; a response unit (22) which responds with the specified authentication type to the business device (1); an authentication processing unit (24) which receives an authentication request together with the user input password from the business machine (1) and performs user authentication processing on the basis of the user input password; a response unit (26) which responds with the authentication result to the business device (1); an update condition table (29) which stores an update condition for updating the risk determination condition; and an update unit (25) which updates the risk determination condition when the authentication request from the business device (1) satisfies the update condition.