Data access control program, data access control method, and authorization server

摘要

PROBLEM TO BE SOLVED: To reduce the burden of consent of a user. In a data management system, an authorization server 300 controls access to data of a plurality of users (U1 to U3) accumulated by a resource server 400. The authorization server 300 has a storage unit that stores the correspondence between the plurality of users who are the owners of the data and the consent portal 200 in which each of the plurality of users registers as a user. When the client 500 requests the user's consent to access the data of the first condition, the target user who is the owner of the data matching the first condition is detected, and the consent portal 200 in which the target user registers as a user is supported. The consent portal 200 extracted from the relationship is used to obtain the consent or disagreement of access to the data from the target user. The authorization server 300 controls access to the data of the resource server 400 by the client 500 according to the acquired intention. [Selection diagram] Fig. 1