摘要 |
PROBLEM TO BE SOLVED: To ensure that access control over an object is properly performed. SOLUTION: An electronic document management system 10 when receiving a request to access an electronic document from a user authenticates the user to check whether there is the right to access the document and then a document access processing means 12 performs access processing requested by the user. An access right DB 16 holds access control data specifying the access right of the user and further a message authenticator (and electronic signature) for detecting access control history data being tampered is recorded. Furthermore, tampering history data of an account constituting a subject are recorded and a message authenticator (and electronic signature) is further recorded so that tampering of history data can be detected. Consequently, while it is confirmed that the access control history data are not tampered, the access control data are updated. COPYRIGHT: (C)2003,JPO |