Patent ID: 8689278

Claim:
A web service provision system, comprising: a web application server that executes a web application; a client terminal on which a web browser is installed; and a database server connected to the client terminal through an intranet, wherein the web application server includes: a user information management unit that manages user IDs and attributes such that each of the user IDs is associated with at least one of the attributes, a security policy management unit that manages security policies such that each of the security policies is associated with at least one of the attributes, each of the security policies defining the web application server or the database server as a storage destination of personal data of at least one of users, a security policy acquisition unit that acquires one of the security policies based on one of the attributes associated with one of the user IDs transmitted from the web browser, and an HTML file generation unit that generates an HTML file based on the one of the security policies acquired by the security policy acquisition unit, the HTML file including, based on at least one of the attributes associated with a user, information identifying whether to access the web application server or the database server to acquire the personal data of the user.