An authentication apparatus based on cognitive information, comprising: an authentication request reception unit for receiving a request to authenticate an authentication target; a behavioral and contextual information collection unit for collecting behavioral and contextual information corresponding to the authentication target; a cognitive information extraction unit for extracting cognitive information corresponding to the request from previously stored big data; and an authentication processing unit for authenticating the authentication target in consideration of the behavioral and contextual information based on extracted cognitive information, wherein the authentication processing unit is configured to execute at least one of the following: determining a validity of the behavioral and contextual information by comparing a result of a change in the behavioral and contextual information with a result of a prediction corresponding to the behavioral and contextual information, and authenticating the authentication target if the validity of the behavioral and contextual information is given and not performing the authenticating of the authentication target if the validity of the behavioral and contextual information is not given; and determining a correctness of the behavioral and contextual information by checking whether a change in a pattern of the behavioral and contextual information is correct based on the extracted cognitive information, and authenticating the authentication target if the correctness of the behavioral and contextual information is given and not performing the authenticating of the authentication target if the correctness of the behavioral and contextual information is not given. an authentication request reception unit for receiving a request to authenticate an authentication target; a behavioral and contextual information collection unit for collecting behavioral and contextual information corresponding to the authentication target; a cognitive information extraction unit for extracting cognitive information corresponding to the request from previously stored big data; and an authentication processing unit for authenticating the authentication target in consideration of the behavioral and contextual information based on extracted cognitive information, wherein the authentication processing unit is configured to execute at least one of the following: determining a validity of the behavioral and contextual information by comparing a result of a change in the behavioral and contextual information with a result of a prediction corresponding to the behavioral and contextual information, and authenticating the authentication target if the validity of the behavioral and contextual information is given and not performing the authenticating of the authentication target if the validity of the behavioral and contextual information is not given; and determining a correctness of the behavioral and contextual information by checking whether a change in a pattern of the behavioral and contextual information is correct based on the extracted cognitive information, and authenticating the authentication target if the correctness of the behavioral and contextual information is given and not performing the authenticating of the authentication target if the correctness of the behavioral and contextual information is not given. determining a validity of the behavioral and contextual information by comparing a result of a change in the behavioral and contextual information with a result of a prediction corresponding to the behavioral and contextual information, and authenticating the authentication target if the validity of the behavioral and contextual information is given and not performing the authenticating of the authentication target if the validity of the behavioral and contextual information is not given; and determining a correctness of the behavioral and contextual information by checking whether a change in a pattern of the behavioral and contextual information is correct based on the extracted cognitive information, and authenticating the authentication target if the correctness of the behavioral and contextual information is given and not performing the authenticating of the authentication target if the correctness of the behavioral and contextual information is not given.