Access control decision system, access control enforcing system, and security policy

摘要

An access control enforcing system, method, and computer-readable storage medium, the system including an access control enforcing part enforcing an access control for subject information based on access control information, the access control information indicating a control of an access to the subject information in accordance with a security policy. The security policy regulates an access permit to the subject information, a requirement enforced when the access is allowed, and supplement information indicating character information or image information used to enforce the requirement. The access control enforcing part further includes a requirement capability determining part determining whether or not the requirement to execute the access can be executed, the requirement indicated by the access control information. The access control is enforced for the subject information based on a determination result by the requirement capability determining part to satisfy the requirement, by using the supplement information.