| 摘要 |
<P>PROBLEM TO BE SOLVED: To provide an access control device satisfying all of (1) strict permission determination, (2) diversification of permission determination results and (3) access control policy with high description availability and readability. <P>SOLUTION: Use request information of a resource and a use permission condition of the resource are feature-structured and further converted into a logical expression, and unification processing is performed between the feature structure of the use request information and the feature structure of the use permission condition, which are converted into the logical expression, by equivalent conversion using a predetermined equation set. When the unification succeeds, the resource in the use permission range which is extracted from the unified logical expression is output, and if the unification fails, an access rejection notification is output. <P>COPYRIGHT: (C)2011,JPO&INPIT |
