摘要 |
<P>PROBLEM TO BE SOLVED: To provide an information filter device capable of shortening the time necessary for determination of access authority while reducing labor hour for managing a number of user IDs, and an information filter control method. <P>SOLUTION: The information filter 100 comprises an access matrix DB 5 which stores access matrices; a mask matrix DB 6 which stores mask matrices; a permission change rule base 7 which stores an access rule; an inference engine 8 which determines, upon receipt of an access request, whether or not the access request is a covert channel according to the access rule; a correction access matrix DB 12 which registers, when a session with an object accessed by an access subject is opened, the access matrix applied thereto in association with the access subject; and an information filter part 1 which executes access control and analysis control for the access request to the DB 9. <P>COPYRIGHT: (C)2008,JPO&INPIT |