Patent ID: 8448217

Claim:
A computer-readable, non-transitory medium containing an access control program for performing access control to resources, the access control program causing a computer to execute a procedure comprising: collecting access control information and resource information on the resources, which are set for each unit of processing that executes prescribed processing and are stored in a memory unit of the each unit of processing; storing the access control information and the resource information in an access control information memory; combining the access control information stored in the access control information memory to create combined access control information including a plurality of access control settings; examining the resource information stored in the access control information memory to detect inclusion relations between the resources, and creating resource inclusion relation information describing the detected inclusion relations which indicate a parent resource that includes a child resource; analyzing the combined access control information to detect inconsistency between two access control settings specifying an identical subject, one further specifying the parent resource and the other further specifying the child resource included in the parent resource, based on the detected inclusion relations described in the inclusion relation information; correcting, if inconsistency is detected, the inconsistent access control settings in accordance with an inconsistency measure policy describing measures against the inconsistency to make the combined access control information consistent; and storing the consistent combined access control information in a filtering master information memory as filtering master information.