| 摘要 |
PROBLEM TO BE SOLVED: To prevent an access right from being transferred from a primary consignee to a secondary consignee unacceptable to the consignor who has assigned the access right to the primary consignee.SOLUTION: A consignor assigns to a primary consignee an access right to documents in a document management system 300, and sets in a the certificate conditions table 127 and a user attribute conditions table 129 conditions regarding a client certificate and user attributes to be satisfied by a secondary consignee. The primary consignee is authenticated by an authentication/approval server 100, acquires a primary token and delivers the primary token to the secondary consignee. The secondary consignee presents the authentication/approval server 100 to the primary token via an intermediate server 200 and requests for a secondary token. The authentication/approval server 100, if the secondary consignee satisfies the conditions of the certificate conditions table 127 and the user attribute conditions table 129, provides the secondary token. The secondary consignee presents the secondary token when requesting the documents to be accessed.SELECTED DRAWING: Figure 1 |
