| 摘要 |
PROBLEM TO BE SOLVED: To easily realize complicated allocation of authorities in the case of conducting access control by pluralities of users to pluralities of access objects. SOLUTION: An authentication device 10 sends essential information denoting authority attribute required for an access object to a certificate device 20 with authentication data, modulus number information of public key. An essential information check section 204 of a the certificate device 20 acquires essential information stored in a reception data storage section 201 and control information denoting its own authority attribute stored in a control information storage section 203 and checks whether or not the identifier described in the essential information is in existence in a list described in the control information. When existence, authentication data are generated. Valid certificate data are generated only when the authentication data, the essential information, an access ticket, limit information and user specific information are valid. |
