Computer, method for controlling access to computer resource, and access control program

• US 20090031418A1
• Filed: 04/21/2005
• Published: 01/29/2009
• Est. Priority Date: 04/21/2005
• Status: Abandoned Application

• Current Assignee: Mitsubishi Electric Corporation
• Original Assignee: Mitsubishi Electric Corporation
• Inventors: Koyasu, Takehiko, Kohno, Atsushi, Matsuda, Nori, Yoneda, Takeshi
• Application Number:
  US11/918,789
• Publication Number:
  US 20090031418A1
• Time in Patent Office: Days
• US Class Current: 726/21
• CPC Class Codes: G06F 12/1483 using an access-table, e.g. matrix or list
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

Valid state judging means judging a valid state of an access permission based on state of an execution environment; an access permission management table specifying an access permission to computer resource based on the valid state by the valid state judging means; and an access control execution environment conducting access control based on the access permission management table are provided.

Further, external access control means having the valid state judging means and verifying the access permission including the valid state; and external access control means registration means registering the external access control means so as to be internally called when the access control execution environment authorizes the access permission using the access permission management table are provided.

Claims

1. A computer comprising:

valid state judging means judging a valid state of an access permission based on a state of an execution environment;

an access permission management table specifying the access permission to computer resource based on the valid state by the valid state judging means; and

an access control execution environment conducting access control based on the access permission management table.

2. The computer of claim 1, further comprising:

external access control means having the valid state judging means and verifying the access permission including the valid state; and

external access control means registration means registering the external access control means so as to be internally called when the access control execution environment authorizes the access permission using the access permission management table.

3. The computer of claim 1, further comprising:

state verification means verifying if the access permission is in the valid state or not,

wherein the valid state judging means dynamically changes a condition for the valid state based on verification result by the state verification means.

4. The computer of claim 1, further comprising:

access permission using state managing means storing a history of using the access permission,

wherein the valid state judging means judges the valid state based on access permission using state by the access permission using state managing means.

5. The computer of claim 1, wherein a Java (registered trademark) Runtime Environment is used as the access control execution environment.

6. A method for controlling access to computer resource comprising:

judging a valid state of an access permission based on a state of an execution environment;

specifying the access permission to computer resource based on the valid state judged; and

conducting access control based on the access permission specified.

7. An access control program for controlling a computer to conduct access control, the program having the computer execute the processes of:

judging a valid state of an access permission based on a state of an execution environment;

specifying the access permission to computer resource based on the valid state judged; and

conducting access control based on the access permission specified.