Access control decision system, access control enforcing system, and security policy

Abstract

In an access control decision system, first information indicated by an access decision request is converted into second information being higher abstract when the access decision request is received. Next, the access control for the subject information is determined by referring a security policy being abstractly regulated based on the second information and a decision result showing the access control for the subject information is sent to a request originator that sent the access decision request.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention generally relates to an access control decision system, an access control enforcing system, and a security policy, in which an organizational security policy can be applied to an information processing system and an organizational security can be improved for not only digitalized documents but also a paper documents. 2. Description of the Related Art While office works have been digitalized in business, importance of managing a digital document such as a confidential document has been increased. Thus, recently, an access control for the digital document is conducted in accordance with a predetermined security policy. In a viewpoint in that the security for the digital document is secured by the security policy being uniformed over an organization, a describing method of a security policy and an apparatus for transmitting the security policy is proposed (for example, refer to Japanese Laid-open Patent Ap...

AI Technical Summary

Benefits of technology

In the security policy according the present invention, it is possi

Problems solved by technology

Moreover, since a system which object to sell digital contents mainly such as music data, image data, and the likes has a problem similar to a company secret management, similar technologies are applied to this system (for example, refer to Japanese Laid-open Patent Application No. 8-263441, U.S. Pat. No. 5,715,403, Japanese Laid-open Patent Application No. 8-263438, and U.S. Pat. No. 6,236,971).

However, these inventions described above do not take the company secret management at an office into account but do aim at sales of the digital contents.

However, the above-described conventional technologies have the following problems such as a lack of flexibility of an operation and a like:

In addition, the conventional technologies cannot control an access in accordance with an abstract description such as the organizational security policy.

Images