Open information based access control method

• US 20020147509A1
• Filed: 04/01/2002
• Published: 10/10/2002
• Est. Priority Date: 04/04/2001
• Status: Active Grant

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Nakano, Toshihiko, Kawano, Katsumi, Funabashi, Motohisa, Sameshima, Shigetoshi, Kobayashi, Nobuhisa
• Granted Patent: US 7,228,561 B2
• Time in Patent Office: Days
• US Class Current: 700/32
• CPC Class Codes: G05B 19/0425 Safety, monitoring
• CPC Class Codes: G05B 2219/24167 Encryption, password, user access privileges

Abstract

In distributed system for operating devices in association with one another, a device responsible for determining whether or not an access is permitted, and criteria for determination are hidden from accessing device or user, and flexible access control is provided among devices without need for previously defining accessible devices or user'"'"'s identifiers. Communication process opens data communications which are interactions between devices to permit indefinite number of other devices to monitor data. A behavior monitoring process acquires interaction within particular device or between other devices in system for storage in behavior log table. Access control process matches the behavior log table with access control policy to determine whether or not device should be associated with target device from which process request is received, or with a target device to which a process program of the particular device attempts to access.

Claims

1. An open information based access control method for use in a system which comprises a plurality of devices, each of said plurality of devices including one or a plurality of processors incorporated therein, each said processor having a function of executing a predetermined information process and a communication function, said method comprising the steps of:

presenting a data communication performed by at least one of said plurality of devices from said device to other devices; and

determining in said other device of said plurality of devices, to which data is presented, whether or not said other device permits an access thereto, using the communicated data.

2. An open information based access control method according to claim 1, wherein:

said processor receives broadcast data of data transmitted from said other device.

3. An open information based access control method according to claim 1, wherein:

said step of presenting includes presenting the received data by broadcasting the data to said other devices.

4. An open information based access control method according to claim 1, wherein:

said step of determining includes additionally using results of determinations for devices other than said device to determine whether or not said other device permits an access thereto.

5. An information device which is one of a plurality of devices constituting a system, said information device having one or a plurality of processors incorporated therein, each said processor having a function of executing a predetermined information process and a communication function, said information device comprises:

means for presenting a data communication performed by said information device; and

means for determining whether or not said information device permits an access thereto from another device of said plurality of devices, using communicated data presented from said other device.

6. An information device according to claim 5, wherein:

said information device receives broadcast data of data transmitted from said other device.

7. An information device according to claim 5, wherein:

said means for presenting presents received data to said other devices by broadcasting the received data.

8. An information device according to claim 5, wherein:

said means for determining additionally uses results of determinations for other devices than said information device to determine whether or not said information device permits an access thereto.