Patent ID: 7792861

Claim:
An access control rule generation method, for generating an access control rule for controlling another access control relative to an access request for an object that is an information resource, comprising the steps of: receiving a request for generating an access control rule; upon the receipt of the request for generating an access control rule, extracting said object and the access control rule for said object, wherein said access control rule includes designation information specifying a higher level control rule used for access control, wherein said higher level control rule is a rule permitting one part of an access right for said access control rule to be provided for a specific subject; extracting an access control tagged object that represents the access control rule for the object; determining, based on said access control rule relative to said generation request, whether said generation request should be granted; and generating said access control rule, when said generation request is granted, in accordance with said generation request, and adding information to said access control rule that, relative to said generation request, designates said access control rule; performing one of generating, changing and deleting said access control rule and said higher level control rule thereof, in accordance with an access request that is granted; storing a set of access control rules in computer readable memory as objects in an object storage unit, the access control rules including the access control rule, and the access control rule defining an access right for the access control rule; and managing a correlation between a target object for which an access request is issued and an access control rule for said target object.