Patent ID: 7900262

Claim:
A security management program which is recorded in a computer readable recording medium and is used to control access to target data in accordance with a security level of a device and an access right of a user, comprising: a code of a user authentication step of setting the access right of the user with reference to a saved user authentication history when access to an authentication server cannot be made; a code of a security level setting step of determining a security level of the device in accordance with a state of the device, and saving the determined security level; and a code of a prior authentication step of receiving authentication of a case in which the security level is not to decrease by the authentication server in advance, and saving information that specifies the case, wherein the security level setting step includes a step of decreasing the security level when access to the authentication server cannot be made in the user authentication step, when the access right cannot be set for the user, when the access right granted to the user is not more than a predetermined rank, or when the device does not exist within a predetermined range, and wherein the security level setting step includes a step of not decreasing the security level when a case in which the security level is to decrease corresponds to the case authenticated in the prior authentication step.