Patent ID: 8719950
Filing Date: 2014-05-06
Classification: G06F

Abstract:
1. A storage medium which is a non-transitory computer-readable storage medium comprising: attribute management device; first policy storage device; and second policy storage device, and storing an access control program which is executed by a processor of an access control apparatus that controls access to a resource constituted of a document file or an operation execution unit as a control target, the access control program comprising: first program code which allows the processor to execute processing of updating and writing items of attribute information each including at least a value of a current data item and a value of an access subject identifier to the attribute management device; second program code which allows the processor to execute processing of writing one or more access control policies to the first policy storage device, each access controlling policy including: a deny-type policy which represents permission when attribute conditions and an acquisition source of any attribute information are written in advance and attribute information acquired from the attribute management device as the acquisition source meets the attribute conditions, and represents denial when the permission is not represented; and an obligation-type policy which is used when the permission is represented and in which obligation information including designation of an obligation execution subject, an obligation action, and an access control policy in subsequent stage is written; third program code which allows the processor to execute processing of writing in the second policy storage device an access control policy which is designated in any obligation information, the access control policy including a deny-type policy in which attribute conditions including a value of a resource identifier, a value of an action identifier, and a value of an access subject identifier, a resource identifier and an action identifier read from an access decision request, and an access subject identifier read from the attribute management device are written in advance, and which represents permission when the read value of the resource identifier, the read value of the action identifier, and the read value of the access subject identifier coincide with the attribute conditions and represents denial when the permission is not represented, the access control policy including no obligation-type policy; fourth program code which allows the processor to execute request acceptance processing of accepting an access request including a value of a resource identifier indicative of the resource and a value of an action identifier indicative of access request contents with respect to the resource; fifth program code which allows the processor to execute access event start processing of starting a resource access event for accessing the resource based on the accepted access request; sixth program code which allows the processor to execute resource access processing of accessing the resource based on the access request if the started resource access event is not suspended or canceled; seventh program code which allows the processor to execute suspension processing of suspending the resource access event prior to access gained in the resource access processing when the resource access event is started; eighth program code which allows the processor to execute decision request generation processing of acquiring an access request from the resource access processing and generating an access decision request including the access request; ninth program code which allows the processor to execute policy acquisition processing of acquiring an access control policy in an initial stage designated in association with a resource identifier in the attribute management device in advance and an access control policy in a subsequent stage designated an access control policy in a previous stage when the access decision request is generated; tenth program code which allows the processor to execute first supply processing of supplying the generated access decision request and the acquired access control policy; eleventh program code which allows the processor to execute access decision processing of acquiring attribute information from the attribute management device by using a deny-type policy in the access control policy when the supplied access decision request and access control policy are received, and deciding permission or denial of the access based on the attribute information and the deny-type policy; twelfth program code which allows the processor to execute second supply processing of supplying an access decision response generated to include a result of the decision and further include an obligation-type policy when the obligation-type policy is present in the access control policy used for this decision; thirteenth program code which allows the processor to execute third supply processing of supplying an obligation execution request including obligation information in an obligation-type policy when a result of the decision in the access decision response represents permission and the obligation-type policy is present in the access decision response; fourteenth program code which allows the processor to execute obligation execution request processing of supplying an obligation action execution request including an obligation action in obligation information to an obligation execution subject designated in the obligation information in the obligation execution request; fifteenth program code which allows the processor to execute access subject authentication processing as the obligation execution subject of comparing a value of an access subject identifier and access subject authentication information acquired from an access subject with a value of an access subject identifier and access subject authentication information which are previously set based on the obligation action execution request, and authenticating that the access subject is valid when both the values and the information coincide with each other; sixteenth program code which allows the processor to execute fourth supply processing of writing the value of the access subject identifier used for the authentication to the attribute management device and supplying an obligation execution result indicative of success of obligation execution when both the values and the information coincide with each other and the authentication is successful, and supplying an obligation execution result indicative of failure of the obligation execution when both the values and the information do not coincide with each other and the authentication is unsuccessful; seventeenth program code which allows the processor to execute designation processing of designating an access control policy in a subsequent stage in the policy acquisition processing based on obligation information of the obligation-type policy in the access decision response when the obligation execution result is indicative of success; eighteenth program code which allows the processor to execute release processing of releasing the suspension if no obligation-type policy is present in the access decision response in a situation where a result of the decision in the supplied access decision response represents permission; and nineteenth program code which allows the processor to execute cancel processing of canceling the suspended resource access event when a result of the decision in the supplied access decision response represents denial or when the obligation execution result represents failure.