Patent ID: 6237036
Filing Date: 2001-05-22
Classification: H04L

Abstract:
A method of generating access-control lists executable by a system and derived from access-control rules supplied for insuring security of an operation system, said method comprising the steps of:a) inputting, in a memory, access-manager-type-group information which defines relations between access managers of the system and access-manager types, access-target-type-group information which defines relations between access targets of the system and access-target types, and organizational-structure information which defines an organizational structure of the system encompassing organizations to which the access managers and the access targets belong;b) inputting, in the memory, access-control rules, each of which is comprised of an access-manager type, an access-target type, and an action in order to represent security guidelines of the system;c) inputting, in the memory, constraint conditions relating to the organizational structure of the system;d) extracting access managers and access targets from the access-manager-type-group information and the access-target-type-group information, respectively, with respect to the access-manager type and the access-target type included in each of the access-control rules;e) extracting, from the organizational-structure information, first locations of first organizations and second locations of second organizations to which the extracted access managers and the extracted access targets belong, respectively;f) checking the constraint conditions with regard to all combinations between the first locations and the second locations; andg) generating access-control lists which are comprised of such an access manager, an access target, and an action as to satisfy the constraint conditions.