Patent ID: 8413211
Filing Date: 2013-04-02
Classification: G06F

Abstract:
1. A computer-readable non-transitory medium storing a program that causes a processor to execute a control of an information processing device to execute a procedure, the procedure comprising: obtaining access right management information from an access right management information storing unit for storing the access right management information that collectively or partially restricts an access to an arbitrary resource; obtaining a policy from a policy storing unit for storing the policy set for the resource or the access to the resource, for checking whether the access right management information complies with the policy, and for detecting access right management information, which does not comply with the policy, as a violation; calculating a risk score for evaluating a degree of risk of the violations detected by the process of detecting the access right management information, the violations are detected when user information included in the access right management information corresponds to any of an unused user account, an account of an unidentifiable user, and an account that is to be deleted but remains, when a role assignment included in the access right management information corresponds to any of an unused role assignment, and a role assignment violating a rule that prohibits a role assignment, when a permission assignment included in the access right management information corresponds to any of an unused permission assignment, and a permission assignment violating a rule that prohibits a permission assignment, when a role included in the access right management information corresponds to any of an unused role, a role violating a rule that prohibits a role-to-user assignment, and a role violating a rule that prohibits a permission-to-role assignment, and when any one of a role assignment violating a rule that prohibits a role-to-user assignment, permission violating a rule that prohibits a permission-to-role assignment, and permission violating a rule that prohibits a permission-to-user assignment exists, and calculating a compliance level which represents a degree in which the policy was complied with from the calculated risk score by calculating the sum of the degree of risk of the violations; and outputting a result of the calculating the compliance level.