Access control apparatus, access control method, access control program, recording medium, access control data, and relation description data

摘要

An access control apparatus is disclosed that controls access to a predetermined resource. The access control apparatus includes entity relationship definition information defining a predetermined relationship of a first entity attempting to access the predetermined resource with a second entity, indirect access control information defining an access right to the predetermined resource based on the predetermined relationship, and an indirect access right determining unit that detects the second entity with which the first entity has the predetermined relationship based on the entity relationship definition information, and determines an access right of the first entity based on the predetermined relationship with the detected second entity and the indirect access control information.