6,985,955 B2 * 1/2006 Gullottaetal 709/229
7,092,942 B2* 8/2006 Friedenetal 707/9
7,249,369 B2 * 7/2007 Knouseetal 726/1
7,272,625 Bl * 9/2007 Hannel et al 709/200
7,366,724 B2 * 4/2008 Friedenetal 707/10
7,464,162 B2* 12/2008 Chan 709/225
7,484,237 B2 * 1/2009 Jolyetal 726/1
2002/0169876 Al * 11/2002 Curie etal 709/226
2005/0138411 Al* 6/2005 Griffin etal 713/200
FOREIGN PATENT DOCUMENTS
JP 03-006640 1/1991
JP 11-313102 11/1999
JP 2003-513513 4/2003
JP 2003-140968 5/2003
JP 2003-241901 8/2003
JP 2003-316742 11/2003
* cited by examiner
Primary Examiner—Christopher A Revak
(74) Attorney, Agent, or Firm—Foley & Lardner LLP
A policy storage stores an access control policy as a set of setting information items to make resources (access destinations) shared by an adhoc group. When a part of the access control policy is edited, a policy analyzer updates a rule generated from the edited access control policy. At this time, the rule is updated with use of object knowledge having a data configuration capable of expressing a user as belonging to plural user groups. An access control list setting means updates a part of an access control list, based on the updated rule. Accordingly, an access control list can be generated with respect to a user group including a user who belongs to plural organizations, and the access control list can be updated efficiently.
23 Claims, 55 Drawing Sheets
