Patent ID: 7853613

Claim:
An access control method for controlling access to a data source, said method comprising steps of: storing a plurality of access control policies for controlling access to a part of the data source in a database server, when said plurality of policies are inputted; generating a plurality of tree-structured data from said plurality of policies; merging said plurality of tree-structured data by performing steps of: extracting a common part of said plurality of tree-structured data; placing the extracted common part on an upper node of the tree structure; and increasing said common part of said plurality of tree-structured data; determining that a user is attempting access to the part of the data source; determining from the merged tree-structured data whether or not the access to the part of the data source should be permitted, comprising steps of: reading out a data value from the data source in response to the access attempt to the data source; and using the data value, determining whether or not the access should be permitted from the merged tree-structured data; verifying consistency of the determination; storing the merged tree-structured data in the database server and reducing an amount of data stored in a portion of the database server constituting policies; and designating the part of the data source by an XPath expression; wherein the generating step generates the plurality of tree structured data from the path expression and an attribute of the user who attempts to access the part of the data source.