Access limit apparatus, access limit method, computer-readable program containing medium conataining access limit program, and access limit program

• US 20040059932A1
• Filed: 09/25/2003
• Published: 03/25/2004
• Est. Priority Date: 09/28/2001
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Yoshino, Takeshi, Takeuchi, Masayuki, Furuya, Nobutoshi, Kitoh, Shinichi
• Granted Patent: US 7,127,580 B2
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

An access restriction apparatus, an access restriction method, a computer readable program storage medium having a recorded access restriction program, and the access restriction program, all capable of making a terminal refer only to management information existing at a position designated by link position information. An access restriction apparatus 1 for limiting the access of terminals desiring access to managed management information 19B is provided with supply means for supplying the terminals 23A, 23B and 23C with partially or totally encrypted link position information 39a indicating a linking destination of the management information, and access management means 14 for managing the access of the terminals 23A, 23B and 23C to the management information 19B on a basis of the link position information 39a decoded by the terminals 23A, 23B and 23C.

Claims

1. An access restriction apparatus for restricting a terminal accessing managed management information, said access restriction apparatus characterized by comprising:

supply means for supplying said terminal with link position information indicating a linking destination of said management information, said link position information being partially or totally encrypted; and

access management means for managing access of said terminal to said management information on a basis of said link position information decoded by said terminal.

2. The access restriction apparatus according to claim 1, characterized wherein:

said apparatus is configured to make said link position information include any one of or a combination of some of page indication in said management information including a plurality of pages, access authority set in said terminal, and an attribute indicating whether to consider said access authority or not.

3. The access restriction apparatus according to claim 1, characterized wherein:

said access management means is configured to judge whether said terminal has authority to access said management information on a basis of access authority set in said terminal or not on the basis of access authority set in said terminal.

4. The access restriction apparatus according to claim 3, characterized wherein:

said apparatus is configured to make said management information include a plurality of pieces of unit information, and to make said link position information include specification information specifying whether said terminal can access each piece of said unit information or not.

5. The access restriction apparatus according to claim 1, characterized wherein:

said management information is configured to utilize;

a data aggregate that is formed by combining said plurality of data with delimiter information arranged in between said plurality of data constituting said management information; and

a related information aggregate that is formed by combining a plurality of related information, said plurality of related information being related to said plurality of data, respectively.

6. The access restriction apparatus according to claim 5, characterized wherein:

if said other data is to be added to said data aggregate, other data is added to an end of said plurality of data, and an order of said plurality of data and said other data are managed with said related information aggregate.

7. The access restriction apparatus according to claim 5, characterized wherein:

if said part in said plurality of data is to be deleted, deletion processing is performed to related information in said related information aggregate instead of actual deletion of said part in said data aggregate, said related information being corresponding to a part of said plurality of data to be deleted from said data aggregate.

8. An access restriction method for restricting a terminal accessing managed management information, said method characterized by including:

a supply step of supplying said terminal with link position information indicating a linking destination of said management information, said link position information being partially or totally encrypted; and

an access management step of managing access of said terminal to said management information on a basis of said link position information decoded by said terminal.

9. The access restriction method according to claim 8, characterized by comprising:

a first generating step for generating a data aggregate by combining and integrating a plurality of data constituting said management information with delimiter information arranged in between them; and

a second generating step for generating a related information aggregate by combining and integrating a plurality of related information related to said plurality of data included in said data aggregate, respectively.

10. A computer readable program storage medium having a recorded access restriction program for performing a function of restricting a terminal for accessing managed management information, said computer readable program storage medium characterized by having said recorded access restriction program that executes:

a supply step of supplying said terminal with link position information indicating a linking destination of said management information, said link position information being partially or totally encrypted; and

an access management step of managing access of said terminal to said management information on a basis of said link position information decoded by said terminal.

11. The computer readable program storage medium according to claim 10, characterized by recording said access restriction program that executes:

a first generating step for generating a data aggregate by combining and integrating a plurality of data constituting said management information with delimiter information arranged in between them; and

a second generating step for generating a related information aggregate by combining and integrating a plurality of related information related to said plurality of data included in said data aggregate, respectively.

12. An access restriction program for performing a function of restricting a terminal for accessing managed management information, characterized by executing:

a supply step of supplying said terminal with link position information indicating a linking destination of said management information, said link position information being partially or totally encrypted; and

an access management step of managing access of said terminal to said management information on a basis of said link position information decoded by said terminal.

13. The access restriction program according to claim 12, characterized by executing:

a first generating step for generating a data aggregate by combining and integrating a plurality of data constituting said management information with delimiter information arranged in between them; and

a second generating step for generating a related information aggregate by combining and integrating a plurality of related information related to said plurality of data included in said data aggregate, respectively.