SECURITY CONTROL METHOD FOR COMPUTER SYSTEM

摘要

PROBLEM TO BE SOLVED: To provide a security control method for limiting access to a function and data on a computer system. SOLUTION: The entire computer function is divided into the sets of events having related capability sets 101 (101a and 101b)-104 (104a and 104b)-105-108 and corresponding to a specified job to be executed on the computer system by a user, different capability is allocated for each user. Security labels are arranged on respective data files, other system resources and respective processes. The hierarchy/category label (MAC label) of a certain range is allocated to each process, and sub-grating is defined for applying a special capability.