KR102710773B1 - Method and system for adaptively responding to security risks - Google Patents

Abstract

According to one aspect of the present invention, a method for adaptively responding to a security risk is provided, comprising: a step of obtaining risk information associated with user authentication in a service providing server operating a target service; a step of performing an evaluation as to whether there is a security risk regarding the user authentication using a risk detection model; and a step of determining a security policy to be applied to the user authentication based on a result of the evaluation.

Description

METHOD AND SYSTEM FOR ADAPTIVELY RESPONDING TO SECURITY RISKS

The present invention relates to a method and system for adaptively responding to security risks.

As the risk of security breaches due to unauthorized access increases, it has become increasingly important for businesses to implement strong security measures to protect users' accounts and sensitive data.

Although it may be best to maintain the highest level of security against all security risks that could cause security breaches in the system, it is difficult to achieve this considering practical issues such as maintenance costs.

Accordingly, the inventor(s) of the present invention propose a technology that supports adaptive response to security risks in a cost-effective manner.

Patent Registration No. 10-0785715 (December 7, 2007)

The present invention aims to solve all of the problems of the above-mentioned prior art.

In addition, the present invention has another purpose of obtaining risk information associated with user authentication in a service providing server operating a target service, performing an evaluation on whether there is a security risk regarding user authentication using a risk detection model, and determining a security policy to be applied to user authentication based on the evaluation result.

In addition, another purpose of the present invention is to strengthen the security of the login system, minimize the risk of unauthorized access, and protect the user's account and data.

In addition, another object of the present invention is to support adaptive response to security risks in a cost-effective manner.

A representative configuration of the present invention to achieve the above purpose is as follows.

According to one aspect of the present invention, a method is provided, including the steps of obtaining risk information associated with user authentication in a service providing server operating a target service, the step of performing an evaluation as to whether there is a security risk with respect to the user authentication using a risk detection model, and the step of determining a security policy to be applied to the user authentication based on the evaluation result.

According to another aspect of the present invention, a system is provided, including a risk information acquisition unit for acquiring risk information associated with user authentication in a service providing server operating a target service, a security risk management unit for performing an evaluation as to whether there is a security risk regarding the user authentication using a risk detection model, and a security policy management unit for determining a security policy to be applied to the user authentication based on the evaluation result.

In addition, a non-transitory computer-readable recording medium recording another method for implementing the present invention, another system and a computer program for executing the method are further provided.

According to the present invention, it is possible to obtain risk information associated with user authentication in a service providing server operating a target service, perform an evaluation on whether there is a security risk regarding user authentication using a risk detection model, and determine a security policy to be applied to user authentication based on the evaluation result.

In addition, according to the present invention, the security of the login system can be strengthened, the risk of unauthorized access can be minimized, and the user's account and data can be protected.

In addition, according to the present invention, it is possible to support adaptive response to security risks in a cost-effective manner.

FIG. 1 is a diagram schematically illustrating the configuration of an entire system for adaptively responding to security risks according to one embodiment of the present invention.
FIG. 2 is a drawing detailing the internal configuration of a security risk response system according to one embodiment of the present invention.

The detailed description of the present invention set forth below refers to the accompanying drawings which illustrate specific embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention. It should be understood that the various embodiments of the present invention, while different from each other, are not necessarily mutually exclusive. For example, specific shapes, structures, and characteristics described herein may be modified and implemented from one embodiment to another without departing from the spirit and scope of the invention. It should also be understood that the positions or arrangements of individual components within each embodiment may be changed without departing from the spirit and scope of the invention. Accordingly, the detailed description set forth below is not to be taken in a limiting sense, and the scope of the present invention is to be taken to encompass the scope of the claims and all equivalents thereof. Like reference numerals in the drawings represent the same or similar elements throughout the several aspects.

Hereinafter, various preferred embodiments of the present invention will be described in detail with reference to the attached drawings so that a person having ordinary skill in the art to which the present invention pertains can easily practice the present invention.

Composition of the entire system

FIG. 1 is a diagram schematically illustrating the configuration of an entire system for adaptively responding to security risks according to one embodiment of the present invention.

As illustrated in FIG. 1, the entire system according to one embodiment of the present invention may include a communication network (100), a service providing server (200), a device (300), and a security risk response system (400).

First, a communication network (100) according to an embodiment of the present invention may be configured regardless of a communication mode such as wired communication or wireless communication, and may be configured with various communication networks such as a local area network (LAN), a metropolitan area network (MAN), and a wide area network (WAN). Preferably, the communication network (100) referred to in the present specification may be the well-known Internet or the World Wide Web (WWW). However, the communication network (100) is not necessarily limited thereto, and may include at least a part of a well-known wired and wireless data communication network, a well-known telephone network, or a well-known wired and wireless television communication network.

For example, the communication network (100) may be a wireless data communication network that implements, at least in part, a conventional communication method such as WiFi communication, WiFi-Direct communication, Long Term Evolution (LTE) communication, 5G communication, Bluetooth communication (including Bluetooth Low Energy (BLE) communication), infrared communication, or ultrasonic communication. As another example, the communication network (100) may be an optical communication network that implements, at least in part, a conventional communication method such as LiFi (Light Fidelity).

Next, the service providing server (200) according to one embodiment of the present invention may be a server including a function capable of communicating after connecting to a device (300) or a security risk response system (400).

Next, a device (300) according to one embodiment of the present invention is a digital device that includes a function for communicating after connecting to a service providing server (200) or a security risk response system (400), and any digital device equipped with a memory means and a microprocessor and having a computing capability, such as a smart phone, a tablet, a smart watch, a smart band, smart glasses, a desktop computer, a notebook computer, a workstation, a PDA, a web pad, a mobile phone, etc., can be adopted as the device (300) according to the present invention.

In particular, the device (300) may include an application (not shown) that supports a user to receive a service from a service providing server (200) or a security risk response system (400). Such an application may be downloaded from the service providing server (200), the security risk response system (400), or an external application distribution server (not shown). Meanwhile, the nature of such an application may be generally similar to the risk information acquisition unit (410), the security risk management unit (420), the security policy management unit (430), the communication unit (440), and the control unit (450) of the security risk response system (400) which will be described later. Here, at least a part of the application may be replaced with a hardware device or firmware device that can perform functions substantially identical to or equivalent thereto, as necessary.

Next, a security risk response system (400) according to one embodiment of the present invention may perform a function of obtaining risk information associated with user authentication in a service providing server operating a target service, performing an evaluation on whether there is a security risk regarding user authentication using a risk detection model, and determining a security policy to be applied to user authentication based on the evaluation result.

The configuration and function of the security risk response system (400) according to the present invention will be described in detail below.

Composition of a security risk response system

Below, the internal configuration and functions of each component of the security risk response system (400) that performs important functions for implementing the present invention will be examined.

FIG. 2 is a drawing detailing the internal configuration of a security risk response system (400) according to one embodiment of the present invention.

As illustrated in FIG. 2, a security risk response system (400) according to one embodiment of the present invention may be configured to include a risk information acquisition unit (410), a security risk management unit (420), a security policy management unit (430), a communication unit (440), and a control unit (450). According to one embodiment of the present invention, at least some of the risk information acquisition unit (410), the security risk management unit (420), the security policy management unit (430), the communication unit (440), and the control unit (450) may be program modules that communicate with a service providing server (200) or an external system (not shown). Such program modules may be included in the security risk response system (400) in the form of an operating system, an application program module, or other program modules, and may be physically stored in various known memory devices. In addition, such program modules may be stored in a remote memory device that can communicate with the security risk response system (400). Meanwhile, these program modules include, but are not limited to, routines, subroutines, programs, objects, components, data structures, etc. that perform specific tasks or execute specific abstract data types according to the present invention.

Meanwhile, although the security risk response system (400) has been described as above, this description is exemplary, and it is obvious to those skilled in the art that at least some of the components or functions of the security risk response system (400) may be realized within the service providing server (200), device (300), or external server (not shown) or included within an external system (not shown) as needed.

First, the risk information acquisition unit (410) according to one embodiment of the present invention can perform a function of acquiring risk information associated with user authentication in a service providing server (200) that operates a target service.

Specifically, according to one embodiment of the present invention, a user who wishes to use a target service, such as a financial service, an SNS service, an e-commerce platform service, etc., through a service providing server (200) may be required to perform user authentication. A risk information acquisition unit (410) according to one embodiment of the present invention may acquire risk information associated with such user authentication and process and/or store the same as necessary. The risk information according to one embodiment of the present invention may include information regarding various events, such as an action that raises suspicion as to whether user authentication is attempted by a true (or legitimate) user, a security vulnerability being discovered in user authentication, or an increased risk of password leakage.

According to one embodiment of the present invention, risk information associated with user authentication in the service providing server (200) that operates the target service may be attack information associated with user authentication for a third-party service. Here, according to one embodiment of the present invention, user authentication for a third-party service may mean user authentication for using a service other than the target service of a third party.

For example, if the target service is a specific e-commerce platform service, it can be assumed that a situation is detected where an abnormal increase in failed login attempts is detected in an e-commerce platform service other than the specific e-commerce platform (i.e., a third-party service), that is, the other e-commerce platform is attacked. In this case, since there is a risk that a similar attack may also be applied to the target service, the risk information acquisition unit (410) according to one embodiment of the present invention can acquire the detected attack information as risk information associated with user authentication in the service providing server (200).

As another example, if the target service is a financial service in a first country (e.g., domestic), it can be assumed that an abnormality is detected in the login location or pattern for multiple accounts in a banking service (i.e., a third-party service) in a second country (e.g., foreign). In this case, since there is a risk that a similar attack may also be applied to the financial service in the first country, i.e., the target service, the risk information acquisition unit (410) according to one embodiment of the present invention can acquire the detected attack information as risk information associated with user authentication in the service providing server (200).

Meanwhile, as described above with respect to risk information associated with user authentication in the service providing server (200) that operates the target service, the attributes of the third-party service and the target service do not necessarily need to match. For example, the target service may be a financial service that requires emphasis on security, and the third-party service may be an SNS service that requires encouragement of free participation by users.

Meanwhile, the risk information acquisition unit (410) according to one embodiment of the present invention can acquire risk information associated with user authentication in a service providing server (200) operating a target service for each of a plurality of parameters.

Specifically, according to one embodiment of the present invention, a parameter may mean a specific risk type or attack type that is classified or clustered according to a predetermined criterion. According to one embodiment of the present invention, these parameters may have as values a value assigned to at least one account (e.g., a value between 0 and 1), a flag (e.g., 0 or 1), a count number, etc., but are not limited to this format.

For example, parameters according to one embodiment of the present invention may include:

1. Abnormal login times: When a user attempts to log in at a time when he or she does not normally log in.

2. Sudden increase in login attempts: When repeated login attempts occur within a short period of time.

3. Failed login attempts: If login attempts fail consecutively.

4. Unusual login location: If the user attempts to log in from a location that is significantly different from the usual login area.

5. Simultaneous login attempts from multiple locations: If login attempts occur at an unusually high rate from multiple locations.

6. Unusual device, browser, or OS changes: If the user attempts to log in from a device that he or she does not normally use.

7. Use a VPN or proxy: If you are trying to hide your login location.

8. Frequent password changes: If the user changes his/her password unusually frequently.

9. Attempting to log in to multiple accounts: If you repeatedly attempt to log in to multiple accounts on the same device.

10. Increased password reset requests: If multiple password reset requests occur within a short period of time.

11. Multiple requests to the server: When there is a sudden surge of requests to the server from a single account within a short period of time.

12. Using weak passwords: When users set passwords that are considered weak, such as being too short, easily guessable, or not containing a combination of uppercase and lowercase letters, numbers, or special characters.

13. Leaked Password: If you use a password similar to a password leaked from a third-party service

However, parameters according to one embodiment of the present invention are not limited to those listed above, and may be variously changed within a range that can achieve the purpose of the present invention.

In addition, although the risk information and parameters associated therewith associated with user authentication in the service providing server (200) operating the target service have been described primarily in relation to a situation in which a login attempt is made, they are not limited thereto, and in some cases, information regarding the user's behavior while logged in, for example, information regarding abnormal keyboard/mouse input patterns, etc., may also correspond to such risk information and/or parameters.

Next, the security risk management unit (420) according to one embodiment of the present invention can perform a function of evaluating whether there is a security risk regarding user authentication in a service providing server (200) that operates a target service using a risk detection model.

Specifically, when risk information associated with user authentication in a service providing server (200) operating a target service is acquired by a risk information acquisition unit (410) according to an embodiment of the present invention, a security risk management unit (420) according to an embodiment of the present invention may process such risk information using a risk detection model to output at least one of a probability, a vector, a matrix, a logit, and a coordinate associated with whether there is a security risk regarding user authentication. In addition, the security risk management unit (420) according to an embodiment of the present invention may perform an evaluation of whether there is a security risk regarding user authentication based on such output.

Here, according to one embodiment of the present invention, the risk detection model may be configured to include an input layer, a hidden layer, and an output layer based on an artificial neural network. Meanwhile, the risk detection model according to the present invention is not necessarily limited to the artificial neural network model described above, and may be changed to a model capable of implementing various learning algorithms included in supervised learning, unsupervised learning, reinforcement learning, or deep learning within the scope that can achieve the purpose of the present invention. As another example, the risk detection model according to one embodiment of the present invention may be implemented as a rule-based model.

Meanwhile, according to one embodiment of the present invention, the risk detection model can be customized based on the properties of the service providing server (200) or the properties of the target service provided by the service providing server (200).

For example, if the target service is a financial service that requires an emphasis on security, the risk detection model according to an embodiment of the present invention may be trained and customized to strictly detect whether there is a security risk regarding user authentication. For another example, if the target service is an SNS service that requires the free participation of users, the risk detection model according to an embodiment of the present invention may be trained and customized to loosely detect whether there is a security risk regarding user authentication.

By doing so, even if the risk information associated with user authentication is the same, the evaluation result regarding whether there is a security risk regarding user authentication can be made to vary depending on the properties of the target service.

Meanwhile, the security risk management unit (420) according to one embodiment of the present invention can identify the type of security risk related to user authentication using a risk detection model.

Specifically, as described above, the security risk management unit (420) according to one embodiment of the present invention can process risk information using a risk detection model so that at least one of a probability, a vector, a matrix, a logit, and a coordinate associated with whether there is a security risk regarding user authentication is output. In addition, the security risk management unit (420) according to one embodiment of the present invention can classify or cluster such output into a type of specific security risk according to a predetermined criterion. Here, the criterion used in classifying or clustering the output may be preset or dynamically updated during the learning process.

In addition, when risk information associated with user authentication in a service providing server (200) that operates a target service is acquired for each of a plurality of parameters, the security risk management unit (420) according to one embodiment of the present invention may specify the type of security risk related to user authentication based on the risk information for each of a plurality of parameters.

Meanwhile, according to one embodiment of the invention, types of security risks may include, but are not limited to, brute force password attacks, phishing attacks, credential stuffing attacks, password spray attacks, etc.

Next, the security policy management unit (430) according to one embodiment of the present invention can perform a function of determining a security policy to be applied to user authentication in a service providing server (200) operating a target service based on the evaluation result by the security risk management unit (420) according to one embodiment of the present invention.

Specifically, the security risk management unit (420) according to one embodiment of the present invention may provide an evaluation result (e.g., score, probability, etc.) regarding whether there is a security risk regarding user authentication or what type of security risk it corresponds to, to the security policy management unit (430) according to one embodiment of the present invention and/or the service providing server (200). In addition, the security policy management unit (430) according to one embodiment of the present invention may determine a security policy to be applied to user authentication based on the evaluation result.

For example, the security risk management unit (420) according to one embodiment of the present invention may calculate a probability (0.7) of whether there is a security risk regarding user authentication or what type of security risk it corresponds to by using a risk detection model and provide the probability to the security policy management unit (430) and/or the service providing server (200) according to one embodiment of the present invention. Then, the security policy management unit (430) according to one embodiment of the present invention may refer to the received probability (0.7) and determine a security policy to be applied to user authentication based on its own judgment criteria.

Here, according to one embodiment of the present invention, the security policy to be applied to user authentication may be a concept including a security level (for example, whether to strictly or loosely determine whether the user's behavior is abnormal during user authentication, etc.), the number of authentication steps to be configured, whether to perform an additional authentication procedure such as a CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart), whether to provide an appropriate notification to the user and/or the service providing server (200), the monitoring speed for a specific attack pattern or parameter, a password policy, the application (or validity) period of the current or to be changed security policy, etc.

However, the security policy according to one embodiment of the present invention is not limited to those listed above, and may be variously changed within the scope that can achieve the purpose of the present invention.

More specifically, the security policy management unit (430) according to one embodiment of the present invention may determine a security policy so that the security level of user authentication is temporarily strengthened in response to an evaluation that there is a security risk regarding user authentication. In addition, the security policy management unit (430) according to one embodiment of the present invention may determine a security policy so that an additional authentication procedure is performed during user authentication at the service providing server (200) as the security level is temporarily strengthened.

Meanwhile, the security policy management unit (430) according to one embodiment of the present invention, as described above, when the type of security risk is specified by the security risk management unit (420) according to one embodiment of the present invention, can determine a security policy to be applied to user authentication in the service providing server (200) operating the target service based on the type of the security risk.

For example, it can be assumed that a situation is detected in which an abnormal increase in failed login attempts to a third-party service is detected by the risk information acquisition unit (410) according to one embodiment of the present invention. In this case, the security risk management unit (420) according to one embodiment of the present invention can specify the type of security risk as a brute force password attack. In addition, the security policy management unit (430) according to one embodiment of the present invention can increase sensitivity to fast sequential login attempts and additionally perform a CAPTCHA when authenticating a user.

As another example, it may be assumed that a risk information acquisition unit (410) according to one embodiment of the present invention has detected that a customer of a specific European bank has received an email guiding to a fake login page, and that abnormalities have been detected in the login locations and patterns of multiple accounts. In this case, the security risk management unit (420) according to one embodiment of the present invention may specify the type of security risk as a phishing attack. In addition, the security policy management unit (430) according to one embodiment of the present invention may increase sensitivity to abnormal login patterns, send appropriate notifications to users and/or service provision servers (200), and perform additional authentication steps during user authentication. In addition, the security risk management unit (420) according to one embodiment of the present invention may cause the corresponding fake login page to be added to a blacklist.

As another example, it can be assumed that multiple login attempts using different user name (account)-password combinations are detected by the risk information acquisition unit (410) according to one embodiment of the present invention on multiple Australian medical portals. In this case, the security risk management unit (420) according to one embodiment of the present invention can specify the type of security risk as a credential stuffing attack. In addition, the security policy management unit (430) according to one embodiment of the present invention can increase the speed of monitoring for credential stuffing attacks and adjust the threshold used when detecting login abnormalities so that the criteria for abnormality detection become stricter. In addition, the security risk management unit (420) according to one embodiment of the present invention can send a notification to the user and/or the service providing server (200) to change the password and temporarily require multi-step authentication for all users.

As another example, it can be assumed that a simultaneous login attempt using a common password is detected by the risk information acquisition unit (410) according to one embodiment of the present invention on multiple Asian educational institution portals. In this case, the security risk management unit (420) according to one embodiment of the present invention can specify the type of security risk as a password spray attack. In addition, the security policy management unit (430) according to one embodiment of the present invention can apply a stricter password policy and temporarily lock the user account if it is determined that the number of login failures due to the password spray attack has decreased. In addition, the security policy management unit (430) according to one embodiment of the present invention can send a message to the user and/or the service providing server (200) along with a warning to create a stronger and unique password, and in addition, can initiate a campaign on password security.

Meanwhile, the security policy management unit (430) according to one embodiment of the present invention can provide a user interface to the operating entity of the target service that allows the determined security policy to be adjusted in response to the application of the determined security policy to user authentication. By doing so, the operating entity of the target service, for example, the operating entity of the service providing server (200), can use this user interface to check which security policy is being applied, and can set or adjust variables or conditions related to the security policy according to the situation.

Next, the communication unit (440) according to one embodiment of the present invention can perform a function that enables data transmission and reception from/to the risk information acquisition unit (410), the security risk management unit (420), and the security policy management unit (430).

Finally, the control unit (450) according to one embodiment of the present invention can perform a function of controlling the flow of data between the risk information acquisition unit (410), the security risk management unit (420), the security policy management unit (430), and the communication unit (440). That is, the control unit (450) according to one embodiment of the present invention can control the flow of data from/to the outside of the security risk response system (400) or the flow of data between each component of the security risk response system (400), thereby controlling the risk information acquisition unit (410), the security risk management unit (420), the security policy management unit (430), and the communication unit (440) to perform their own functions.

The embodiments of the present invention described above may be implemented in the form of program commands that can be executed through various computer components and recorded on a computer-readable recording medium. The computer-readable recording medium may include program commands, data files, data structures, etc., alone or in combination. The program commands recorded on the computer-readable recording medium may be those specially designed and configured for the present invention or those known and available to those skilled in the art of computer software. Examples of the computer-readable recording medium include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical recording media such as CD-ROMs and DVDs, magneto-optical media such as floptical disks, and hardware devices specially configured to store and execute program commands, such as ROMs, RAMs, and flash memories. Examples of the program commands include not only machine language codes generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter, etc. The hardware devices may be changed into one or more software modules to perform processing according to the present invention, and vice versa.

Although the present invention has been described above with reference to specific details such as specific components and limited examples and drawings, these have been provided only to help a more general understanding of the present invention, and the present invention is not limited to the above examples, and those with common knowledge in the technical field to which the present invention pertains may make various modifications and changes based on this description.

Therefore, the idea of the present invention should not be limited to the embodiments described above, and not only the scope of the patent claims described below but also all scopes equivalent to or equivalently modified from the scope of the patent claims are included in the scope of the idea of the present invention.

100: Communication network
200: Service Provider Server
300: Device
200: Security Risk Response System
410: Hazard Information Acquisition Unit
420: Security Risk Management Department
430: Security Policy Management Department
440: Communications Department
450: Control Unit

Claims (15)

As a method for adaptively responding to security risks,
A step for obtaining risk information associated with user authentication on a service providing server that operates the target service, and
A step of performing an evaluation on whether there is a security risk regarding the user authentication using a risk detection model, and
A step of determining a security policy to be applied to the user authentication based on the evaluation result is included.
In the above execution step, the type of security risk is identified using the risk detection model,
In the above decision step, the security policy is determined based more on the type of security risk,
In the above decision step, in response to the evaluation that there is a security risk regarding the user authentication, the security policy is determined so that the security level of the user authentication is temporarily strengthened.
In the above decision step, as the security level is temporarily strengthened, the security policy is determined so that when authenticating a user on the service providing server, whether the user's behavior is abnormal is judged more strictly than the existing security level, so that an additional authentication procedure is performed when authenticating a user on the service providing server, and so that the monitoring speed for the type of security risk is increased compared to the existing speed.
method. In the first paragraph,
In the above acquisition step, attack information associated with user authentication for a third-party service is acquired as the risk information.
method. delete In the first paragraph,
In the above acquisition step, the risk information is acquired for each of multiple parameters,
In the above execution step, the type of security risk is specified based on the risk information for each of the plurality of parameters.
method. delete delete In the first paragraph,
In response to the application of the above-determined security policy to the above-determined user authentication, a user interface is provided to the operator of the above-determined target service that allows the operator to adjust the above-determined security policy.
method. A non-transitory computer-readable recording medium recording a computer program for executing the method according to claim 1. As a system for adaptively responding to security risks,
A risk information acquisition unit that acquires risk information associated with user authentication on a service providing server that operates the target service, and
A security risk management department that performs an evaluation on whether there is a security risk related to the above user authentication using a risk detection model, and
Includes a security policy management unit that determines a security policy to be applied to the user authentication based on the evaluation results;
The above security risk management department uses the risk detection model to identify the type of security risk,
The above security policy management department determines the security policy based further on the type of security risk,
The above security policy management unit, in response to the evaluation that there is a security risk regarding the user authentication, determines the security policy to temporarily strengthen the security level of the user authentication,
The above security policy management unit determines the security policy so that, as the security level is temporarily strengthened, whether the user's behavior is abnormal is judged more strictly than the existing security level at the time of user authentication at the service providing server, an additional authentication procedure is performed at the time of user authentication at the service providing server, and the monitoring speed for the type of security risk is increased compared to the existing speed.
System. In Article 9,
The above risk information acquisition unit acquires attack information related to user authentication for a third-party service as the above risk information.
System. delete In Article 9,
The above risk information acquisition unit acquires the risk information by multiple parameters,
The above security risk management department identifies the type of security risk based on the risk information for each of the plurality of parameters.
System. delete delete In Article 9,
The above security policy management unit provides the operator of the target service with a user interface that allows the operator to adjust the above determined security policy in response to the above determined security policy being applied to the user authentication.
System.

Images