This invention provides an authorization method and system based on eye movement behavior, which offers a user to watch the user’s preset visual stimulus materials, and detects the user’s eye movement behavior, after that, compares the users eye movement behavior and the authorization rules set corresponding to the visual stimulus materials, so that determines whether to get an authorization command, and if the eye movement behavior falls in an allowable error range of the authorization rules set, then getting the authorization command. Finally, the corresponding authorization content is provided according to the authorization command. By the authorization mechanism based on eye movement behavior of this invention, the disadvantage of a manner of alphanumeric characters as password might be stolen can be reduced, and the authorization rule and protection mechanism with more variations can be provided.本發明是一種基於眼動行為之授權方法及授權系統,係提供使用者觀看使用者預設之視覺刺激材料,並偵測該使用者之眼動行為,之後,比對使用者之眼動行為與該視覺刺激材料對應之授權規則集合以判斷是否取得授權指令,若眼動行為落於該授權規則集合的可容許誤差範圍內,則取得授權指令。最後,依據授權指令提供對應的授權內容。通過本發明之基於眼動行為之授權機制,可降低以文數字為密碼的方式下可能被竊取的缺點,並提供更多變化的授權規則及防護機制。1‧‧‧基於眼動行為之授權系統11‧‧‧顯示模組12‧‧‧眼動模組13‧‧‧判斷模組14‧‧‧授權模組15‧‧‧儲存模組