Patent ID: 8302205

Claim:
An access control enforcing system, comprising: a storing part configured to store a security policy that regulates an access permit to subject information, a requirement enforced when access is allowed, and supplement information indicating character information or image information used by an access request originator to perform the requirement when the requirement is enforced; an abstraction processing part configured to acquire a first attribute associated with a first identification information for identifying the access request originator who requests the access to the subject information, and a second attribute associated with a second identification information for identifying the subject information to be accessed, the second attribute corresponding to a category of the subject information; an access control decision part configured to determine an access control for the subject information based on access control information that indicates a control of the access to the subject information, the access control information determined based on information regulated in the security policy, and a combination of the first attribute associated with the first identification information and the second attribute associated with the second identification information; and a decision result sending part configured to send a decision result information indicating the access control with respect to the subject information by the access control decision part, to the access request originator which conducts an access decision request, wherein said access control decision part further includes a requirement capability determining part determining whether or not the requirement to execute the access can be executed, the requirement indicated by the access control information, the access request originator, which conducts the access decision request, is required to perform the requirement including an image process using the supplemental information, based on the decision result information, and at least one of the storing part, the abstraction processing part, and the access control decision part is implemented as hardware or as a hardware/software combination.