Patent ID: 8296821

Claim:
A system comprising an access right management device, which is provided in each domain, for creating a resource-sharing policy for sharing computer equipment resources, and performing resource-sharing policy negotiation between a plurality of domain administrators, wherein the access right management device comprises a computer and performs: for each policy unit to be negotiated of the resource-sharing policy, separately identifying an access right management device which is a negotiating partner about each policy unit to be negotiated; generating negotiation information including an identification name of the identified access right management device and the policy unit to be negotiated; and transmitting the negotiation information to the identified access right management device, wherein each policy unit comprises an access subject, an access object, and an access action; and setting the resource-sharing policy on shared resource when having received an instruction to agree on every policy unit from the identified access right management device to which the negotiation information was sent, wherein, when a first domain administrator has agreed on a policy unit with a second domain administrator, the first domain administrator affixes its own digital signature to the policy unit, wherein the instruction to agree on the policy unit is verified by digital signatures of both the first domain administrator and the second domain administrator affixed to the policy unit.