Patent ID: 7454421

Claim:
A database access control method for performing access control on a database in response to a request from a user apparatus through cooperation between a database access control apparatus and a proxy process server apparatus, comprising: sending, in the database access control apparatus, an address of a usable proxy process server apparatus to the user apparatus in response to the request from the user apparatus; connecting the user apparatus to the proxy process server apparatus of the address to make a database access request; making, in the proxy process server apparatus, a database process request to the database access control apparatus according to the database access request from the user apparatus; performing, in the database access control apparatus, a process on the database in response to the database process request from the proxy process server apparatus, and sending a process result to the proxy process server apparatus; and performing, in the proxy process server apparatus, an additional process on the process result sent from the database access control apparatus, and sending an additional process result to the user apparatus; generating, in the database access control apparatus when sending the address of the proxy process server apparatus to the user apparatus, an access key based on a user ID of the user apparatus, storing the access key and a server ID of the proxy process server apparatus in a storing part of the database access control apparatus associating the access key with the server ID and sending the access key and the address to the user apparatus; sending, in the user apparatus, the access key to the proxy process server apparatus when making the database access request to the proxy process server apparatus; sending, in the proxy process server apparatus, the access key and the server ID of the proxy process server apparatus to the database access control apparatus when making the database process request to the database access control apparatus; and determining, in the database access control apparatus, whether an access key the same as the access key received from the proxy process server apparatus exists in the storing part, if the access key exists in the storing part, determining whether an ID, associated with the access key, that is the same as the server ID received from the proxy process server apparatus exists in the storing part, and executing an access to data in the database within a limit permitted for the user ID corresponding to the access key only if the server ID exists in the storing part.