公开(公告)号：JP2001184264A

公开(公告)日：2001-07-06

申请号：JP35817899

申请日：1999-12-16

Applicant: IBM

Inventor： NUMAO MASAYUKI ,  KUDO MICHIYA ,  AMANO TOMIO

IPC: G06F12/14 ,  G06F12/00 ,  G06F21/00 ,  G06F21/24

Abstract: PROBLEM TO BE SOLVED: To make the permission of a conditional access possible to be evaluated in access control. SOLUTION: This access control system 100 is provided with a resource document 40 for storing policy description, a policy evaluating module 10 for accepting an access request 110 for performing access from the outside part to a data file and for extracting and evaluating policy description related with data to be accessed of the access request 110 from the resource document 40 and for deciding whether or not the access request 110 should be permitted, an executing function verifying module 20 for judging whether or not the evaluation or realization of a condition which can not be evaluated only from the information of the policy evaluating module 10 is possible when the condition is present in the extracted policy description, and an executing module 30 for executing the evaluation or realization of the condition whose evaluation or execution is determined as possible by the executing function verifying module 20.