| 摘要 |
PROBLEM TO BE SOLVED: To provide a more flexible access control policy by changing the access control policy depending on a location where a user uses a client machine.SOLUTION: A client machine 101 communicates with an authentication server 105 through a mobile terminal 102. The mobile terminal 102 transmits user authentication information transmitted from the client machine 101 and location information acquired by a GPS satellite 103 to the authentication server 105. An access control policy DB 106 of the authentication server 105 stores access control policies for respective users and locations. The authentication server 105 acquires an access control policy corresponding to a user identified by the authentication information and a location identified by the location information from the access control policy DB 106 and replies to the mobile terminal 102. The client machine 101 acquires the access control policy from the mobile terminal 102 and performs access control to a resource in accordance with the access control policy. |
