Patent ID: 6371377
Filing Date: 2002-04-16
Classification: G06F,G06Q,G07F

Abstract:
A recording medium comprising a storage unit to store data being access objects and an access control unit to control an access to said data by an access subject, wherein said access control unit comprises:an access subject identification information generating unit for generating an access subject identification information which is comprised of a collating access subject identification information for collating an operator and an authenticating access subject identification information for authenticating an application, the collating access subject identification information and the authenticating access subject identification information each being expressed by a matrix of at least one category information and a level information having hierarchies; an access authority information read-in unit for reading in access authority information which is different from said access subject identification which is different from said access subject identification information for obtaining an access authority set in correspondence with said data that said access subject requests to access, said access authority information is comprised of access authority elements determined on the condition of the collating access subject identification information and the authenticating access subject identification information for each of the elements of said matrix and an arithmetic function using said access authority elements; and a control unit for obtaining an access authority in correspondence with said access subject identification from the access subject identification information and the access authority information, which are not identical with each other, and for controlling an access to said data by said access subject on the basis of said access authority obtained.