Patent ID: 8434127

Claim:
An access control system, comprising: an electronic device; and an access control unit which controls an access between devices mounted on said electronic device; wherein said access control unit which applies unique secret information set for each said device as a right to access said device on a basis of each task operable on said electronic device and determines whether to allow an access to said device or not according to whether an access requesting task which requests an access to said device has secret information of said device, wherein said access control unit has an access control table in which existence/non-existence of said secret information of said device is set on a basis of said each task, and determines whether to allow an access to said device based on said access control table, wherein said access control table includes an access right setting table indicative of allowance/non-allowance of an access to said device, and a change authorization table indicative of allowance/non-allowance of setting change of said access right setting table according to said secret information, and said access control unit has an access right setting table changing unit configured to set, based on an access right setting request from a device having said access requesting task to which said secret information is applied and said change authorization table, a right to access an access target device to be accessed at a task corresponding to the access right setting request to change said access right setting table, and allows a device at which an access right is set to make an access based on said access right setting table as of after change, wherein said access control unit further comprises: a pseudo secret information generating unit configured to generate, by using random numbers, pseudo secret information from said secret information applied to said access requesting task, a change authorization table changing unit configured to change, in said change authorization table, said secret information of said access target device corresponding to said secret information into said pseudo secret information generated, and a pseudo secret information notifying unit configured to notify said access requesting task of said pseudo secret information generated, wherein said access control unit uses said pseudo secret information in place of said secret information.