International Business Machines Corporation

Naizhen Qi

Michiharu Kudo

Xiaozhou Wang

An access management apparatus, method and program storage device for permitting or prohibiting access to each of a plurality of nodes stored hierarchically, including means and steps for storing rule functions with a plurality of requesters to access a node, each of the rule functions for determining whether access should be permitted or rejected depending on the position of the node in the hierarchical structure or depending on the requester, receiving an access request from a requester, selecting the rule function, and executing the rule function which has been selected by the selector, and controlling permission of, or prohibition of, the access request on the basis of a result of executing the rule function.

Access management apparatus, access management method and program

When determining whether or not access by a user should be permitted by using policies, an access control determination device of the present invention expresses the access by the user to the data source with a predetermined path, retrieves an appropriate policy out of stored policies on the basis of the predetermined path, calculates an access permission value on the basis of the predetermined path, calculates an access effect value on the basis of the predetermined path and the policy which the policy retrieving unit has retrieved, and determines whether or not the access by the user to the data source should be permitted on the basis of the access permission value and the access effect value.

Method of determining access control effect by using policies

A setting apparatus sets any of authorization for and prohibition of access to data with a hierarchical structure. The setting apparatus includes: an object selection unit for selecting at least one object from a plurality of objects constituting the hierarchical structure; a pattern selection unit for selecting at least one pattern from a plurality of patterns, each of which determines a relative position in the hierarchical structure to the object selected by the object selection unit; and an access control policy setting unit for setting any of authorization for and prohibition of access to the object selected by the object selection unit and each of objects at the relative position to the selected object, which relative position is determined by the pattern selected by the pattern selection unit.

Setting apparatus, setting method, program, and recording medium

A cellular phone issues a request for content from a server. The cellular requests and authorizes the content for use by another cellular phone. When the content is received by the second cellular phone, the first cellular phone is billed.

Growing community of inventors

Kanagawa-ken, Japan

Naizhen Qi