Patent ID: 8359633

Claim:
An access control system comprising: a providing unit that provides a virtual-desktop-service, which was selected on the basis of an identification information acquired from a terminal apparatus, to the terminal apparatus, and sends a message that includes an address of the providing unit as a source address and an address of an application program booted by a process of the virtual-desktop-service as a destination address; a first storage unit that stores the identification information associated with the address of the providing unit; a second storage unit that stores an access control information associated with a set of a identification information and an address of an application program; and a relay unit that receives a message sent by the providing unit, acquires an identification information, which was associated with an address corresponding to a source address included in the received message, from the first storage unit, acquires an access control information, which was associated with a set of the acquired identification information and an address corresponding to a destination address included in the received message, from the second storage unit, and controls relaying the message depending on the acquired access control information.