JP2000215165A - Information access control method and apparatus, and recording medium recording information access control program - Google Patents

Abstract

(57) [Summary] [PROBLEMS] An information access control method and apparatus capable of easily changing an access right permitted to an accessor according to a change in a transaction phase, and a recording medium storing an information access control program. I will provide a. SOLUTION: An access ticket issuing means 1 issues an access ticket defining an access right to target information for each of a plurality of types of states to each accessor, and receives an access request from the accessor. And the access right corresponding to the type and state of the access ticket input with this request is read from the access ticket right information storage means 6, and it is determined whether or not the access request is permitted based on the access right. When the state transition request is received, the destination state is read from the state transition information storage unit 5 based on the type and state of the access ticket input together with the request, and the state of the access ticket is updated with the transition destination state.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information access control method and apparatus for controlling access of an accessor who accesses target information which is a resource to be protected, and more particularly to an information access control method for an unspecified number of users such as the Internet. In an open distributed system in which a user participates, an information access control method, an information access control program, and an information access control program are recorded in which a user controls access to target information, which is a resource to be protected, managed by the user, by another user. Related to a recorded medium.
In particular, the present invention allows the same accessor according to a change in the transaction phase because the purpose and role of each accessor changes in accordance with the transaction phase, such as commercial transactions on the Internet. The present invention relates to an information access control method and apparatus for controlling access to a resource to be protected in a system having a characteristic that access authority needs to be different, and a recording medium on which an information access control program is recorded.

[0002]

2. Description of the Related Art Generally, access control for a resource to be protected (target information) is performed by an access authority described by a set of a subject (accessor) attempting access, a protected resource to be accessed, and a type of access to the target information. Implemented based on information. As a method of access control based on access authority information, there are an access control method based on an access control list (ACL) and a method based on access qualifications (capabilities).

[0003] The former is a list (A) in which, for each target information, an accessor who is allowed to access the target information and a type of the access are paired.
This is a control method based on CL), and every time an access request is generated, an ACL is searched to determine whether to permit the access request. As an extended method, there is an access control method based on roles. In this method, when the same access authority is permitted to a plurality of access users, the access users are grouped into a unit called a role, and the access authority for each role is described and managed.

[0004] On the other hand, the latter is a method in which control is performed using data (capability) indicating an access right for performing a certain type of access to certain target information, and a capability indicating an access right including the contents of an access request is transmitted from an accessor. If presented, grant the access request. It is also possible to control the invalidity / validity of the issued capability using a capability invalidation list or the like. In the method based on the capability, it is not necessary to search the ACL every time an access request occurs.

[0005]

[0005] An unspecified number of accessers are assumed, as in the case of business transactions on the Internet where anyone can freely participate, and the purpose and role of each accessor is determined according to the transaction phase. In an environment in which it is necessary to allow different access rights according to changes in the transaction phase even for the same accessor in order to change, in the above-described conventional access control method, The following problems arise.

First, in an access control method based on an ACL or a role, assignment of an access right to an accessor, or assignment of a role to an accessor and assignment of an access right to a role are fixed. The access right granted to the same accessor cannot be changed according to changes in the transaction phase.

[0007] In the access control method based on capabilities, the same accessor is issued and granted a capability according to a new phase every time the transaction phase is changed, or is issued and granted. You may need to disable capabilities.

For this reason, issuance / grant processing costs increase due to an increase in the number of capabilities issued on the access control side,
And control and management of issued capabilities,
In addition, there arises a problem that the management cost of the capability due to the increase in the number of capabilities to be held on the side of the accessor and the processing cost for properly using appropriate capabilities increase.

[0009] The present invention has been made in view of the above,
It is an object of the present invention to provide an information access control method and apparatus capable of easily changing an access right permitted to an accessor according to a change in a transaction aspect, and a recording medium recording an information access control program. Is to do.

[0010]

According to one aspect of the present invention, there is provided an information access control method for controlling access of an accessor who accesses target information which is a resource to be protected. A plurality of states can be taken, and an access ticket defining access authority to the target information is issued to each accessor for each of the plurality of states, an access request from the accessor is accepted, and together with this request, It is determined whether or not to permit the access request based on the access authority defined in accordance with the state of the input access ticket, a state transition request from the accessor is accepted, and the access input together with this request is performed. A transition destination state is determined based on the ticket state, and the access ticket state is updated with the determined transition destination state. It is the gist of.

According to the first aspect of the present invention, an access ticket defining an access right to target information for each state is issued to each accessor, and when an access request is accepted, the access request is issued together with the request. It is determined whether to permit an access request based on the access authority defined for the state of the input access ticket, and when a state transition request from the accessor is received, the access input together with the request is performed. The destination state is determined based on the state of the ticket, and the state of the access ticket is updated based on the state of the destination, so that the access authority allowed to the accessor can be easily changed according to a change in the aspect of the transaction, Flexible access control can be realized.

According to a second aspect of the present invention, there is provided an information access control method for controlling access of an accessor who accesses target information which is a resource to be protected, wherein a plurality of types corresponding to the contents of the access are provided. And a plurality of states can be taken in each type, and an access ticket that defines access authority to target information is issued to each accessor for each of the plurality of states in each type, and an access ticket from the accessor is issued. An access request is received, and it is determined whether to permit the access request based on an access right defined corresponding to the type and state of the access ticket input with the request,
The gist is to accept a state transition request from an accessor, determine a destination state based on the type and state of the access ticket input together with the request, and update the state of the access ticket with the determined destination state. I do.

According to the present invention, an access ticket defining access authority to target information is issued to each accessor for each of a plurality of states of a plurality of types, and an access request is issued. If accepted, it is determined whether to permit the access request based on the access authority specified for the type and state of the access ticket, and if a state transition request is accepted, the type and state of the access ticket are determined. Determine the destination state based on the
Since the state of the access ticket is updated with the determined transition destination state, the access authority allowed to the accessor can be easily changed according to a change in the transaction phase, and flexible access control can be realized.

Further, the present invention according to claim 3 provides the invention according to claim 1.
In the invention described in the above, the process of updating the state of the access ticket stores a destination state to which each state of the access ticket transits in a state transition information storage table corresponding to each state, The gist is that a transition destination state corresponding to the state of the access ticket input together with the state transition request is read from the state transition information storage table, and the state of the access ticket is updated with the read destination state.

According to the third aspect of the present invention, the transition destination state of each state of the access ticket is stored in the state transition information storage table, and when a state transition request is input from the accessor, the state transition information is stored. The destination state corresponding to the state of the access ticket is read from the storage table, and the state of the access ticket is updated with this destination state.

According to a fourth aspect of the present invention, in the invention according to the second aspect, the process of updating the state of the access ticket includes a plurality of transition destination states in which each state of each type of access ticket transits. Is stored in the state transition information storage table corresponding to each of the plurality of states of the type, and the destination state corresponding to the type and state of the access ticket input together with the state transition request from the accessor is referred to as the state transition. The gist is to read from the information storage table and update the state of the access ticket with the read transition destination state.

According to the present invention, the transition destination state of each state of each type of access ticket is stored in the state transition information storage table, and when a state transition request is input from the accessor, the access state is changed. The transition destination state corresponding to the type and state of the ticket is read from the state transition information storage table, and the state of the access ticket is updated with this transition destination state.

Further, the present invention described in claim 5 provides the invention according to claim 1.
In the invention described in any one of the above items (1) to (4), the processing for updating the state of the access ticket includes a state transition event in the state transition request from an accessor, and the transition is performed in consideration of the state transition event. The point is that the prior state has been determined.

According to the fifth aspect of the present invention, a state transition event is included in the state transition request from the accessor, and the transition destination state is determined in consideration of the state transition event.

[0020] Further, the present invention described in claim 6 is based on claim 1.
In the invention according to the second aspect, the gist is to verify whether an access ticket input together with the request is valid.

According to the present invention, it is verified whether an access ticket input together with a request such as a state transition request or an access request is valid.

According to a seventh aspect of the present invention, in the first aspect of the present invention, the processing for determining whether to permit the access request is performed based on an access right defined corresponding to each state of the access ticket. The access right stored in the access ticket right information storage table is read out from the access ticket right information storage table, and the access right defined corresponding to the state of the access ticket input together with the access request is read out. The gist of the present invention is to determine whether to permit the access request based on the request.

According to the present invention, the access authority corresponding to each state of the access ticket is stored in the access ticket authority information storage table, and when an access is requested, the access corresponding to the state of the access ticket is stored. The authority is read from the access ticket authority information storage table, and it is determined whether or not to permit the access request based on the access authority.

Further, the present invention described in claim 8 provides the present invention as claimed in claim 2.
In the invention described in the fourth aspect, the processing for determining whether to permit the access request is performed by using an access ticket defined in an access ticket authority information storage table corresponding to each of a plurality of types of states of an access ticket. The access right defined corresponding to the type and state of the access ticket input together with the access request is read from the access ticket right information storage table, and the access is performed based on the read access right. The gist of the present invention is to determine whether to permit the request.

According to the present invention, the access authority corresponding to each of the plurality of types of the access ticket is stored in the access ticket authority information storage table. The access authority corresponding to the type and state of the ticket is read from the access ticket authority information storage table, and it is determined whether or not to permit the access request based on the access authority.

Further, the present invention according to claim 9 is an information access control device for controlling access of an access person who accesses target information which is a resource to be protected, which can take a plurality of states. Access ticket issuing means for issuing to each accessor an access ticket that defines the access authority to the target information for each of the states, accepting an access request from the accessor, Access right determining means for determining whether or not to permit the access request based on an access right defined corresponding to a state, and a state transition request from an accessor, and an access ticket input together with the request The transition destination state is determined based on the state of the And summarized in that and a state updating means for updating the bets state.

According to the ninth aspect of the present invention, an access ticket defining an access right to target information for each state is issued to each accessor. It is determined whether to permit an access request based on the access authority defined for the state of the input access ticket, and when a state transition request from the accessor is received, the access input together with the request is performed. The destination state is determined based on the state of the ticket, and the state of the access ticket is updated with the destination state. Flexible access control can be realized.

According to a tenth aspect of the present invention, there is provided an information access control device for controlling access of an accessor who accesses target information which is a resource to be protected, wherein a plurality of types are provided according to the contents of the access. An access ticket issuing means for issuing, to each accessor, an access ticket defining an access right to target information for each of a plurality of states of each type, and for each of the plurality of states of each type; Access right determining means for receiving an access request from a user, and determining whether to permit the access request based on an access right defined corresponding to the type and state of the access ticket input with the request. Receives a state transition request from the accessor, and Based on the type and condition of the scan ticket to determine the target state, and summarized in that and a state updating means for updating the state of the access ticket in the determined target state.

According to the tenth aspect of the present invention, an access ticket defining access authority to target information is issued to each accessor for each of a plurality of states of a plurality of types, and an access request is issued. If accepted, it is determined whether to permit the access request based on the access authority specified for the type and state of the access ticket, and if a state transition request is accepted, the type and state of the access ticket are determined. Based on the transition destination state determined based on the determined transition destination state, the access ticket state is updated with the determined transition destination state. Access control can be realized.

According to a twelfth aspect of the present invention, in the ninth aspect of the present invention, the state updating means stores a transition destination state to which each state of the access ticket transits, corresponding to each state. A state transition information storage unit, and a destination state corresponding to the state of the access ticket input together with the state transition request from the accessor is read from the state transition information storage unit, and the state of the access ticket is read based on the read destination state. And means for updating.

According to the eleventh aspect of the present invention, the transition destination state of each state of the access ticket is stored in the state transition information storage means, and when a state transition request is input from an accessor, the state transition information is stored. The destination state corresponding to the state of the access ticket is read from the storage means, and the state of the access ticket is updated with the destination state.

Further, according to a twelfth aspect of the present invention, in the tenth aspect of the present invention, the state updating means determines a transition destination state to which each state of each type of access ticket transits, for a plurality of types of access tickets. State transition information storage means for storing a plurality of states corresponding to each of the plurality of states; and a state transition information storage means for storing a transition destination state corresponding to the type and state of an access ticket input together with the state transition request from an accessor. And means for updating the state of the access ticket with the read transition destination state.

According to the twelfth aspect of the present invention, the transition destination state of each state of each type of access ticket is stored in the state transition information storage means, and when an access user inputs a state transition request, the access state is changed. The transition destination state corresponding to the type and state of the ticket is read from the state transition information storage means, and the state of the access ticket is updated with the transition destination state.

According to a thirteenth aspect of the present invention, in the invention according to any one of the ninth to twelfth aspects, the state updating means considers a state transition event included in the state transition request from an accessor. And a means for determining the transition destination state.

According to the thirteenth aspect of the present invention, the state transition event is included in the state transition request from the accessor, and the transition destination state is determined in consideration of the state transition event.

According to a fourteenth aspect of the present invention, in the ninth or tenth aspect of the present invention, there is provided an access ticket verifying means for verifying whether an access ticket input with the request is valid. I do.

According to the present invention, it is verified whether an access ticket input together with a request such as a state transition request or an access request is valid.

Further, according to a fifteenth aspect of the present invention, in the ninth aspect of the present invention, the access right determining means comprises:
An access ticket right information storage unit storing access rights defined corresponding to each state of the access ticket; and an access right defined corresponding to the state of the access ticket input together with the access request. Read from the access ticket authority information storage means,
Means for determining whether to permit the access request based on the read access authority.

According to the fifteenth aspect of the present invention, the access authority corresponding to each state of the access ticket is stored in the access ticket authority information storage means, and when an access is requested, the access corresponding to the state of the access ticket is stored. Read the authority from the access ticket authority information storage means,
It is determined whether to permit the access request based on the access authority.

According to a sixteenth aspect of the present invention, in the tenth aspect of the present invention, the access right determination means stores an access right defined corresponding to each of a plurality of types of states of the access ticket. The access ticket authority information storage means that has read the access authority specified in accordance with the type and state of the access ticket input together with the access request from the access ticket authority information storage means; Means for determining whether or not to permit the access request based on the request.

According to the present invention, the access authority corresponding to each of the plurality of types of states of the access ticket is stored in the access ticket authority information storage means. The access authority corresponding to the type and status of the ticket is read from the access ticket authority information storage means, and it is determined whether or not to permit the access request based on the access authority.

According to a seventeenth aspect of the present invention, there is provided a recording medium recording an information access control program for controlling access of an accessor who accesses target information which is a resource to be protected, wherein the recording medium has a plurality of states. Issue an access ticket that specifies the access authority to the target information for each of the plurality of states to each accessor, accept an access request from the accessor, and enter the access ticket entered together with the request. It is determined whether to permit the access request based on the access authority defined corresponding to the state, accepts a state transition request from the accessor, and based on the state of the access ticket input together with the request. The information destination that determines the transition destination state and updates the state of the access ticket with the determined transition destination state And summarized in that to record the processes control program in a recording medium.

According to the seventeenth aspect of the present invention, an access ticket defining an access right to target information for each state is issued to each accessor, and when an access request is accepted, the access request is issued together with the request. It is determined whether to permit an access request based on the access authority defined for the state of the input access ticket, and when a state transition request from the accessor is received, the access input together with the request is performed. The destination state is determined based on the state of the ticket, and the information access control program for updating the state of the access ticket in the destination state is recorded on the recording medium. Can be enhanced.

Further, the present invention according to claim 18 is a recording medium which records an information access control program for controlling access of an access person who accesses target information which is a resource to be protected, the recording medium corresponding to the contents of the access. A plurality of types are provided, and a plurality of states can be taken in each type, and an access ticket defining an access right to target information is issued to each accessor for each of the plurality of states in each type. Receiving an access request from an accessor and determining whether to permit the access request based on an access right defined in accordance with the type and state of the access ticket input with the request, State change request, and the type and type of the access ticket entered with this request. A transition destination state is determined based on the state, and summarized in that recording information access control program to update the status of the access ticket in the determined target state on a recording medium.

According to the eighteenth aspect of the present invention, an access ticket defining access authority to target information is issued to each accessor for each of a plurality of states of a plurality of types, and an access request is issued. If accepted, it is determined whether to permit the access request based on the access authority specified for the type and state of the access ticket, and if a state transition request is accepted, the type and state of the access ticket are determined. Since the information access control program that determines the transition destination state based on the determined transition destination state and updates the state of the access ticket with the determined transition destination state is recorded on the recording medium, the distribution medium can be used to enhance its distribution. Can be.

According to a nineteenth aspect of the present invention, in the invention according to the seventeenth aspect, the processing for updating the state of the access ticket is performed by changing a destination state to which each state of the access ticket transits to a state corresponding to each state. Stored in the transition information storage table, read from the state transition information storage table a transition destination state corresponding to the state of the access ticket input with the state transition request from the accessor,
The gist is to record an information access control program for updating the state of the access ticket with the read destination state on a recording medium.

According to the present invention, the transition destination state of each state of the access ticket is stored in the state transition information storage table, and when a state transition request is input from an accessor, the state transition information is stored. The destination state corresponding to the state of the access ticket is read from the storage table, and the information access control program for updating the state of the access ticket with the destination state is recorded on the recording medium. Distribution can be improved.

According to a twentieth aspect of the present invention, in the invention according to the eighteenth aspect, the processing for updating the state of the access ticket includes the step of changing the destination state to which each state of each type of access ticket transits. Is stored in the state transition information storage table in correspondence with each of the plurality of states of the plurality of types, and the transition destination state corresponding to the type and state of the access ticket input together with the state transition request from the accessor is described above. The gist is that an information access control program for reading from the state transition information storage table and updating the state of the access ticket with the read destination state is recorded on a recording medium.

According to the twentieth aspect of the present invention, the transition destination state of each state of each type of access ticket is stored in the state transition information storage table, and when a state transition request is input from the accessor, the access state is changed. The destination state corresponding to the type and state of the ticket is read from the state transition information storage table, and the information access control program for updating the state of the access ticket with the destination state is recorded on the recording medium. It can be used to increase its distribution.

According to a twenty-first aspect of the present invention, in the invention according to any one of the seventeenth to twentieth aspects, the processing for updating the state of the access ticket includes a state transition in response to the state transition request from an accessor. An event is included, and the gist is that an information access control program that determines the transition destination state in consideration of the state transition event is recorded on a recording medium.

According to the twenty-first aspect of the present invention, a state transition event is included in a state transition request from an accessor, and an information access in which a transition destination state is determined in consideration of the state transition event. Since the control program is recorded on the recording medium, the distribution of the control program can be improved by using the recording medium.

According to a twenty-second aspect of the present invention, the information access control program for verifying whether or not the access ticket input together with the request is valid is recorded on a recording medium. Make a summary.

According to the present invention, an information access control program for verifying whether an access ticket input together with a request such as a state transition request or an access request is valid is recorded on a recording medium. Therefore, the distribution of the recording medium can be improved by using the recording medium.

According to a twenty-third aspect of the present invention, in the invention according to the seventeenth aspect, the processing for determining whether or not to permit the access request is performed in accordance with the access ticket defined corresponding to each state of the access ticket. The authority is stored in the access ticket authority information storage table, and the access authority defined corresponding to the state of the access ticket input together with the access request is read from the access ticket authority information storage table. The gist of the present invention is to record an information access control program for determining whether to permit the access request based on authority on a recording medium.

According to the twenty-third aspect of the present invention, the access authority corresponding to each state of the access ticket is stored in the access ticket authority information storage table, and when the access is requested, the access corresponding to the state of the access ticket is performed. The authority is read from the access ticket authority information storage table, and the information access control program that determines whether to permit the access request based on the access authority is recorded on the recording medium. , And its distribution can be improved.

According to a twenty-fourth aspect of the present invention, in the invention according to the eighteenth aspect, the processing for determining whether to permit the access request is performed for each of a plurality of types of access tickets. The access right defined correspondingly is stored in the access ticket right information storage table, and the access right defined corresponding to the type and state of the access ticket input together with the access request is stored in the access ticket right information. The gist of the present invention is to record an information access control program, which is read from a storage table and determines whether to permit the access request based on the read access authority, on a recording medium.

According to the present invention, the access authority corresponding to each of the plurality of types of the access ticket is stored in the access ticket authority information storage table. The access authority corresponding to the type and state of the ticket is read from the access ticket authority information storage table, and the information access control program which determines whether to permit the access request based on the access authority is recorded on the recording medium. Therefore, the distribution property can be improved by using the recording medium.

[0058]

Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a structure of an information access control device for implementing an information access control method according to one embodiment of the present invention.

In this embodiment, between the terminal of user A and the terminal of user B connected to the network, the information (target information) owned by user B stored in the terminal of user B is A case where the access by the user A is controlled by the access control system according to the present invention provided in the terminal of the user B will be described.

Also, in this embodiment, the user A and the user B are World Wide, which are information transmitting means on the network.
Assuming a situation where goods are bought and sold on a network using the Web (WWW), electronic mail, or the like, the seller user A is stored in the terminal of the buyer user B in accordance with the progress of the sales transaction. Access control for accessing information such as the address and name of the user B who is present will be described.

The information access control device shown in FIG. 1 will be described. In FIG. 1, 1 is an access ticket issuing means for issuing an access ticket, 2 is an access authority determining means for determining whether to permit an access request, and 3 is an access ticket for verifying whether the access ticket is valid. Reference numeral 4 denotes state transition executing means for executing state transition of the access ticket.
Reference numeral 5 denotes state transition information storage means for storing state transition information 105 describing the state of the access ticket and the manner of transition, and reference numeral 6 denotes access ticket authority information 106 describing the access authority corresponding to each state of the access ticket. Access ticket authority information storage means for storing
Reference numeral 8 denotes a valid access ticket information storage unit for storing valid access ticket information 107, which is information relating to a valid access ticket. Reference numeral 8 denotes a target information storage unit for storing target information 108.

Reference numeral 9 denotes an interactive terminal of a user B having an access control system, and reference numeral 10 denotes a DES (Data Enc.
and an access ticket generation verification key storage unit that stores an access ticket generation verification key k110 that is a common key based on a symmetric encryption method such as a ryption standard and is used for generation and verification of an access ticket. Access ticket generation verification auxiliary data storage means for storing access ticket generation verification auxiliary data d111 used for verification
2 is a terminal of the access user A who accesses the target information 108, 13 is a communication network connecting the terminal 9 of the target information owner and the terminal 12 of the accessor, and 14 is access control according to the present invention. Is a program in which the processing procedure is described. Reference numeral 15 denotes a CPU having a function of performing processing based on the program 14.

FIG. 2 shows the registered contents of the valid access ticket information 107 stored in the valid access ticket information storage means 7 of FIG. 1 at a certain point in time. The access ticket ID, the access ticket type, and the state at that time are stored.

FIG. 3 shows the contents of the state transition information 105 stored in the state transition information storage means 5 shown in FIG. 1. For each type of access ticket, a possible state 311, an initial state 312, a state transition rule 313 and a final state 314 are described. Also, each state transition rule is a transition source state 321,
It is composed of a state transition event name 322 and a transition destination state 323.

FIG. 4 shows the access ticket right information 10 stored in the access ticket right information storage means 6 of FIG.
6 shows the contents of each access ticket.
An access right corresponding to each possible state is described. Each access right is composed of a set of an identifier of the target information and an access type for the identifier.

FIG. 5 shows the target information storage means 8 of FIG.
3 shows the contents of the target information 108 stored in the storage unit 102. The target information 108 is composed of hierarchical items 501 and information (values) 502 corresponding to each item.

Next, the operation of the information access control device of the present embodiment configured as described above will be described. In this description, the user B who is the owner of the access ticket information describes in advance the state transition information 105 and the access ticket authority information 106 for each type of access ticket, and the state transition information storage unit 5 and the access ticket authority respectively. It is assumed that the information is stored in the information storage means 6.
It is assumed that the state transition information 105 and the access ticket authority information 106 are defined as shown in FIGS. 3 and 4, respectively.

First, issuance of an access ticket will be described with reference to a flowchart shown in FIG.

In this embodiment, the user B as the target information owner assigns an appropriate access ticket to the user A prior to the access by the user A as an appropriate access right and a corresponding access ticket. And instructs the access control system to generate an access ticket.

This is performed, for example, when the user B visits a homepage (electronic shop), which is a virtual store on the WWW established by the user A.

According to the present invention, the access control system instructed to generate an access ticket uses the access ticket issuing means 1 to newly generate and output an access ticket having the specified type.

In the access ticket issuing procedure shown in FIG. 6, first, in step S602, the type “type1” of the specified access ticket is acquired, and in step S603, a new unique access ticket IDid1 is paid out.

Here, as a method of generating and paying out the access ticket ID, the data size of the access ticket ID is set so as to facilitate the search for the access ticket ID and to reduce the area for storing the access ticket ID. Need to be as small as possible. For this reason, in the present embodiment, as a method of generating and paying out the access ticket ID in step S603, a method of paying out a continuous integer value from 0 (zero) is adopted.

Then, steps S604 and S6
05, the access ticket generation verification auxiliary data d111
And an access ticket generation verification key k110, and
In step S606, data in the format of (access ticket IDid1, access ticket generation search auxiliary data d111) is encrypted with the key k110, and this is set as a new access ticket t1.

Thereafter, in step S607, state transition information si1 corresponding to the access ticket type type1 is obtained from the state transition information 105, and step S608 is performed.
Then, an initial state s1 is obtained from si1.

Then, in step S609, the access ticket type id1 and the initial state s1 are registered together with the access ticket IDid1 in the valid access ticket information 107, and in step S610, the access ticket t1 is output. FIG. 13 shows the structure of the output access ticket.

Here, the state transition information 105 is the state shown in FIG. 3, “purchase transaction 1” is specified as the type of the access ticket to be generated, and step S6
03, 00 as the new access ticket ID
Assuming that 04 is paid out, the above procedure generates an access ticket t2 having “purchase transaction 1” as its type and “viewing” as its state based on the contents of the state transition information 105 shown in FIG. Is registered in the valid access ticket information 107.

Here, t2 is the access ticket generation verification key obtained by converting the paid out access ticket ID 0004 and access ticket generation verification auxiliary data d111 into (access ticket ID 0004, access ticket generation verification auxiliary data d111). It is encrypted at k110.

FIG. 12 shows that the access ticket t2 is registered in the valid access ticket information 107.

When the access ticket t2 is issued in this way, the user B enters the SSL (Secure Socket La
yer), a secure communication path is established with the user A, and the access ticket is transmitted.

Next, the access request processing, access ticket verification processing, and access authority determination processing will be described with reference to the flowcharts of FIGS. 8, 9 and 10.

In this embodiment, when accessing the information (target information) of the user B, the user A, who is the accessor, receives an access request indicating the contents of the access and the access request previously acquired from the user B. And the ticket is transmitted to the access control system via a secure communication path.

The access request processing procedure in the access control system will be described in detail with reference to FIG.

First, steps S802 and S80
In step 3, the received access request req1 and access ticket t1 are acquired. Then, step S80
In step 4, the access ticket verification unit 3 determines whether the access ticket t1 is valid.

The access ticket verification procedure will be described in more detail with reference to FIG.

First, in step S702, an access ticket t1 is obtained, and in step S703, an access ticket generation verification key k110 is obtained. Then, step S
At 704, try decoding with k110 for t1,
If the access ticket t1 has failed, the access ticket t1 is determined to be invalid (step S709).

If decoding is successful, the data obtained as a result is set to m1 (step S705), and step S706 is executed.
To obtain the access ticket generation verification auxiliary data d111, and at step S707, m1 = (access ticket I
Did1, access ticket generation verification auxiliary data d11
1) It is confirmed whether the access ticket ID is registered in the valid access ticket information 107. If not registered, the access ticket t1 is determined to be invalid (step S709). If registered, the access ticket IDid1 is temporarily stored (until the access request processing procedure is completed) as the access ticket ID of the access ticket t1, and the access ticket t1 is determined to be valid (step S708).

If the access ticket verification procedure determines that the access ticket t1 is invalid, the access control system rejects the access request req1 and ends the processing for it. If it is determined that the request is valid, it is determined whether or not to reject the access request req1 by using the access right determination means 2 (step S80).
5).

This procedure will be described in more detail with reference to FIG.

First, steps S902 and S90
In step 3, the access request req1 and the access ticket t1 are acquired, and in step S904, the access ticket type type1 corresponding to the access ticket t1 and the state s1 of the access ticket t1 at that time are acquired from the valid access ticket information 107. In step S905, the access ticket authority information ri1 corresponding to the type type1 is obtained from the access ticket authority information 106.
In step S906, an access right R1 corresponding to the state s1 of the access ticket t1 is obtained from the access ticket right information ri1, and this is determined as the access right corresponding to the access ticket t1 at that time.

Then, in a step S907, it is checked whether or not the access right R1 includes the access content indicated by the access request req1. If not included, the access right R1 is invalid for the access request req1, and the access request req1 is rejected (step S909). If it is included, it is determined to be permitted (step S908).

When the access right req1 is judged by the access authority judging means 2 to be non-permitted, the access control system rejects the access request req1 and terminates the processing for it. If it is determined that the request is valid, the content of the access request req1 is processed in step S806, and the response is transmitted to the user A via a secure communication path.

Here, in the present embodiment, the user A
Is assumed to have transmitted an access request req2 of "reference to age" to the access control system of the terminal 9 of the user B together with the access ticket t2 acquired in advance.

It is assumed that the registered contents of the valid access ticket information 107 at this time are as shown in FIG. 12, and the contents of the access ticket authority information 106 are as shown in FIG.

First, the access control system acquires an access request req2 (= "age: see") and an access ticket t2 (steps S802, S80).
3) Whether the access ticket t2 is valid is determined by using the access ticket verification means 3 (step S8).
04).

The access ticket verifying means 3 performs the above-described procedure (steps S701 to S708)
Access ticket t2 is access ticket ID000
4 is determined as a valid access ticket.

Since the access ticket t2 is determined to be valid, it is next determined whether or not the access request req2 is permitted by using the access right determining means 2 (step S805).

In the access authority determining means 2, as described above, the access request req2 and the access ticket t2
(Step S902, step S903),
From the registered contents of the valid access ticket information 107 shown in FIG. 12, the type “purchase transaction 1” of t2 and the state “viewing”
Is acquired (step S904).

Next, access ticket authority information corresponding to the type “purchase transaction 1” of the access ticket t2 is obtained from the access ticket authority information 106 shown in FIG. 4 (step S905), and the state is changed to “viewing”. The corresponding access right (of FIG. 4) 401 is obtained, and this is determined as the access right corresponding to the access ticket t2 (step S906).

Since the access authority 401 includes the content “age: reference” of the access request req2,
It is valid for the access request req2,
The permission is determined for the access request req2 (step S
907, step S908).

Since the access request req2 is determined to be permitted, this content is processed last. That is, user B
Is read out from the target information 108 and returned to the user A via a secure communication path (step S8).
06).

Next, the state transition will be described with reference to the flowcharts of FIGS.

In this embodiment, the access user A,
Alternatively, the target information owner user B updates the access ticket status granted to the user A and changes the corresponding access right with the access ticket and status when the transaction phase of both parties changes. A state transition request specifying the transition event name is transmitted to the access control system via a secure communication path.

The state transition request processing procedure in the access control system will be described in detail with reference to FIG.

The access control system first executes step S
In step 1002, in step S1003, a state transition event name e1 and an access ticket t1 are obtained from the received state transition request sreq1. Then, in step S1004, the access ticket verification unit 3 determines whether the access ticket t1 is valid. This procedure is as described above, and thus will not be described.

When the access ticket t1 is determined to be invalid by the access ticket verification procedure, the access control system rejects the state transition request sreq1, and ends the processing for it. If it is determined to be valid,
The event name e1 and the access ticket t1 are input to the state transition executing means 4, and the state transition executing procedure is executed (step S1005).

This procedure will be described in more detail with reference to FIG.

In the state transition executing means 4, step S11 is executed.
02, in step S1103, the state transition event name e
1 and the access ticket t1 are acquired, and in step S1104, the type type1 corresponding to the access ticket t1 is obtained from the valid access ticket information 107.
And the state s1 of the access ticket t1 at that time
In step S115, state transition information si1 corresponding to the access ticket type type1 is acquired from the state transition information 105.

Next, in step S1106, it is checked whether or not a state transition rule having the state s1 as the transition source state and the event name e1 as the transition event exists in the state transition information si1. If not, the state transition execution procedure for the state transition request sreq1 ends. In this case, the state of the access ticket t1 is not changed at all.

If the state transition rule exists, the state transition rule is acquired as the state transition rule rule1 (step S1).
1107).

In step S1108, the state of the access ticket t1 stored in the valid access ticket information 107 is updated to the transition destination state s2 specified by the state transition rule rule1.

Further, in step S1109, the state s2 after the transition of the access ticket t1 is stored in the state transition information si1.
Check if is defined as the final state in. If it is defined as the final state, all items related to the access ticket t1 are deleted from the valid access ticket information 107 to invalidate the access ticket (step S1110), and the state transition execution procedure ends. If e1 is not defined as the final state, the state transition execution procedure ends.

Here, in this embodiment, the user B
Makes an application for a product purchase to user A, and in response to this, user A receives an event name of “purchase”,
It is assumed that the state transition request sreq2 including the access ticket t2 acquired in advance is transmitted to the access control system of the terminal 9 of the user B.

The contents of the valid access ticket information 107 at this time are as shown in FIG. 12, and the contents of the state transition information 105 are as shown in FIG.

First, the access control system acquires the event name “purchase” and the access ticket t2 (step S1002, step S1003), and determines whether the access ticket t2 is valid or not using the access ticket verification means 3. (Step S1004).

In the access ticket verifying means 3, the access ticket t2 is set to the access ticket ID0 by the procedure (steps S701 to S708) already described.
004 is determined as a valid access ticket.

Next, the event name “purchase” and the access ticket t2 are input to the state transition executing means 4, and the state transition executing procedure is executed (step S1005).

The state transition executing means 4 acquires the event name “purchase” and the access ticket t2 as described above (steps S1102 and S1103).
From the registered contents of the valid access ticket information 107 shown in FIG. 12, the type “purchase transaction 1” of t2 and the state “viewing”
Is acquired (step S1104).

Next, the state transition information corresponding to the type “purchase transaction 1” of the access ticket t2 is read from the state transition information 105 shown in FIG. 3 (step S1105).
From now on, the state transition rule is that the state “viewing” is the transition source state and the event “purchase” is the transition event (FIG. 3).
301 (step S1106, step S11)
07), the state of the access ticket t2 held in the valid access ticket information 107 is
The status is updated to the transition destination state “ordering” designated by 01 (step S1108).

Further, it is checked whether or not the state “under order” after the transition of the access ticket t2 is defined as the final state (step S1109). Since the same state is not defined as the final state, the state transition execution procedure ends as it is.

At this point, the access right corresponding to the state “on order” of the access ticket t2 is obtained from the access ticket right information 106 shown in FIG.
02, which is different from the access authority (FIG. 4) 401 corresponding to the access ticket t2 when the access request processing procedure was described earlier.

As described above, by changing the state of the access ticket by the state transition request, the access authority to the same access ticket can be easily changed. That is, it is possible to easily change the access authority permitted to the same accessor without reissuing or reassigning an access ticket.

As described above, in the present embodiment, the access right determination auxiliary data (access ticket) in which different access rights are associated with each of a plurality of states is issued and given to the accessor, and the access state is determined. By changing the state of the access ticket based on the state transition event sent in response to the change, the access right corresponding to the access ticket, that is, the access ticket is retained according to the change in the transactional aspect Change the access rights allowed for the accessing user.

For this reason, when the capability is used, it is necessary to issue and grant a plurality of capabilities for each phase, for example, to the same accessor of the same transaction, but according to the present invention, the access ticket Issuance / grant only once. Therefore, the costs for issuing and granting these are greatly reduced.

Similarly, when the capability is used, it is necessary to control and manage the validity / invalidity of a plurality of capabilities given for each phase. According to the present invention,
Since the status of one access ticket is controlled and managed,
The complexity of those controls and management is reduced.

Similarly, when the capability is used, the accessor has to hold a plurality of capabilities given for each phase and use the same according to the phase. , The accessor holds one access ticket and can use it,
The management and usage costs are greatly reduced.

In the above embodiment, as a method of generating an access ticket, data obtained by encrypting data obtained by combining an access ticket ID with fixed data (access ticket generation verification auxiliary data d111) using a secret key is used. The method used as a ticket (method A) is employed, which is advantageous in the following points.

First, as described earlier, the data size of the access ticket ID needs to be sufficiently small in order to improve the search efficiency and save the storage area. In such a case, the access ticket ID is directly used as the access ticket (method). B1) or a method of adding fixed data to an access ticket ID to form an access ticket (method B
In 2), the fear that another access ticket ID is analogized from one access ticket ID increases. That is, another access ticket is inferred from one access ticket, and the possibility of forgery is increased.

On the other hand, in the method A, even if the data size of the access ticket ID is small, if a sufficient length of the access ticket generation verification auxiliary data d111 is added and encrypted, a certain access ticket can It is difficult to analogize an access ticket.

In the above embodiment, a common key based on the symmetric encryption method is used as the access ticket generation verification key k110.
Instead of 0, a key pair (pair) of a key using an asymmetric encryption method such as RSA is prepared, and the encryption key of the same key pair is used in the access ticket generation procedure, and the key pair is used in the access ticket verification procedure. An access control system can be configured by using the other decryption key.

Further, in the above embodiment, the access ticket generation verification key k110 and the access ticket generation verification auxiliary data d111 are fixed data. However, every time one access ticket or several access tickets are issued, Change each of these to new ones,
At the time of access ticket verification, it is also possible to adopt a method and configuration in which the access ticket generation verification key k110 and the access ticket generation verification auxiliary data d111 used for issuing the access ticket are obtained and used.

According to this method, each access ticket,
Alternatively, although it is necessary to generate and hold information that associates a set of several access tickets with a set of the access ticket generation verification key k110 and the access ticket generation verification auxiliary data d111 used for the generation, It is sometimes convenient to make counterfeiting more difficult.

In the above embodiment, the state transition request is sent from the user A.
(Ie, the accessor) or user B (ie, the owner of the target information).

Conversely, it is determined whether the state transition request is sent from the user A or the user B, and it is determined whether the state transition request is to be made according to the accessor or the target information. This is convenient because it is possible to prevent an unauthorized change of the access authority due to the sending of an inappropriate state transition request by the accessor.

This is because, in each state transition rule in the state transition information 105, an item called an event source condition is provided and described as "target information owner" or "accessor". Before changing the state of the target access ticket t1 in step S1108 of the state transition execution procedure executed by the means 4, whether the input state transition request sreq1 was transmitted from the target information owner or the accessor The source is identified, the source is compared with the event source condition of the state transition rule rule1, and if they do not match, the state transition request sreq1 is rejected and the processing for the request is stopped. This can be achieved by:

Also, the status of the transaction between the user A and the user B is monitored, and when a change in the situation occurs, it is automatically detected, and an appropriate state transition request for the access ticket granted to the user A is issued. It is more convenient to use a software process to send to the access control system.
This is, for example, incorporated in WWW browsing software (browser) used by the user D to access the user A's electronic shop, monitors the operation of the user B, and detects a change in the transaction phase according to the operation. For example, auxiliary software for a browser that sends a state transition request can be used.

In the description of the above embodiment,
In the description that information such as an access ticket is transmitted via a secure communication channel, a secure communication channel is a communication channel that has been protected against eavesdropping, tampering, etc. by a third party. Realized by technology. The communication path includes, for example, SSL which is widely used in the World Wide Web, which is an information distribution system on the Internet.
(Secure Socket Layer) or the like is used.

[0138]

As described above, according to the present invention,
An access ticket that specifies the access authority to the target information for each state is issued to each accessor, and when an access request is accepted, it is determined whether to permit the access request based on the access authority for the state of the access ticket. When the state transition request is received, the state of the access ticket is determined based on the state of the access ticket, and the state of the access ticket is updated with the state of the transition destination. It can be easily changed according to the change of the situation, and flexible access control can be realized.

According to the present invention, an access ticket defining access authority to target information is issued to each accessor for each of a plurality of types of states.
When accepting an access request, determine whether to permit the access request based on the access authority for the type and state of the access ticket. When accepting a state transition request, determine the transition destination state based on the type and state of the access ticket. Is determined and the state of the access ticket is updated with this transition destination state, so that the access authority permitted to the accessor can be easily changed according to the change of the transaction phase, and flexible access control can be realized. it can.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of an information access control device that implements an information access control method according to an embodiment of the present invention.

FIG. 2 is an explanatory diagram showing an example of registered contents of valid access ticket information used in the information access control device shown in FIG. 1;

FIG. 3 is an explanatory diagram showing the contents of state transition information stored in state transition information storage means used in the information access control device shown in FIG.

FIG. 4 is an explanatory diagram showing contents of access ticket authority information stored in an access ticket authority information storage means used in the information access control device shown in FIG.

FIG. 5 is an explanatory diagram showing the contents of target information stored in target information storage means used in the information access control device shown in FIG.

6 is a flowchart showing an access ticket issuing procedure in an access ticket issuing unit of the information access control device shown in FIG.

7 is a flowchart showing an access ticket verification procedure in an access ticket verification unit of the information access control device shown in FIG.

8 is a flowchart showing an access request processing procedure of the information access control device shown in FIG.

9 is a flowchart showing an access authority determination procedure in an access authority determination unit of the information access control device shown in FIG.

FIG. 10 is a flowchart showing a state transition request processing procedure of the information access control device shown in FIG. 1;

FIG. 11 is a flowchart showing a state transition execution procedure in a state transition execution unit of the information access control device shown in FIG. 1;

FIG. 12 is an explanatory diagram showing registered contents of valid access ticket information used in the information access control device shown in FIG. 1;

13 is an explanatory diagram showing a structure of an access ticket generated by an access ticket issuing procedure in the information access control device shown in FIG.

[Explanation of symbols]

 1 access ticket issuing means 2 access authority determining means 3 access ticket verifying means 4 state transition executing means 5 state transition information storing means 6 access ticket authority information storing means 7 valid access ticket information storing means 8 target information storing means 9 target information owner Terminal 10 access ticket generation verification key storage means 11 access ticket generation verification auxiliary data storage means

Continued on the front page F-term (reference)

Claims (24)

[Claims] An information access control method for controlling access of an accessor who accesses target information which is a resource to be protected, wherein the information access control method can take a plurality of states, and the target information is transmitted to each of the plurality of states. Issues an access ticket that specifies the access right to each accessor, receives an access request from the accessor, and, based on the access right specified in accordance with the state of the access ticket entered with this request. It is determined whether or not to permit the access request, a state transition request from the accessor is accepted, and a transition destination state is determined based on the state of the access ticket input together with the request. An information access control method characterized by updating a state of an access ticket. 2. An information access control method for controlling access of an accessor who accesses target information which is a resource to be protected, wherein a plurality of types are provided according to the contents of the access, and a plurality of states are provided for each type. Issue an access ticket that specifies the access authority to the target information for each of a plurality of states of each type to each accessor, accept an access request from the accessor, and enter the request together with this request. It is determined whether or not to permit the access request based on the access authority defined in accordance with the type and state of the access ticket, and a state transition request from the accessor is accepted. A transition destination state is determined based on the type and state of the access ticket, and the determined transition destination is determined. An information access control method characterized by updating a state of an access ticket with a state. 3. The process of updating the state of an access ticket includes storing a destination state to which each state of the access ticket transits in a state transition information storage table corresponding to each state, 2. The state of the access ticket corresponding to the state of the access ticket input together with the state transition request is read from the state transition information storage table, and the state of the access ticket is updated with the read state of the transition destination. Information access control method. 4. The process of updating the state of an access ticket includes the step of changing a destination state to which each state of each type of access ticket transits to a state transition information corresponding to each of a plurality of types of states of the access ticket. The access state is stored in a storage table, and the type of the access ticket input from the accessor together with the state transition request and the transition destination state corresponding to the state are read from the state transition information storage table. 3. The information access control method according to claim 2, wherein the status is updated. 5. The processing for updating the state of the access ticket includes a state transition event included in the state transition request from an accessor, and determining the transition destination state in consideration of the state transition event. The information access control method according to any one of claims 1 to 4, wherein: 6. The information access control method according to claim 1, wherein whether the access ticket input together with the request is valid or not is verified. 7. The process for determining whether to permit an access request includes storing an access right defined corresponding to each state of an access ticket in an access ticket right information storage table, Reading an access right defined corresponding to the state of the access ticket inputted together with the access ticket from the access ticket right information storage table, and determining whether to permit the access request based on the read access right. 2. The information access control method according to claim 1, wherein: 8. The process for determining whether to permit an access request includes storing an access right defined corresponding to each of a plurality of states of an access ticket in an access ticket right information storage table. In addition, an access right defined corresponding to the type and state of the access ticket input together with the access request is read from the access ticket right information storage table, and the access request is determined based on the read access right. 3. The information access control method according to claim 2, wherein whether to permit is determined. 9. An information access control device for controlling access of an accessor who accesses target information which is a resource to be protected, wherein the information access control device can take a plurality of states, and the target information is obtained for each of the plurality of states. Access ticket issuing means for issuing an access ticket that defines the access authority of each access person to each accessor, accepting an access request from the accessor, and defining the access ticket according to the state of the access ticket input with this request. An access right determining unit that determines whether to permit the access request based on the access right; and a state transition request from an accessor, and determines a transition destination state based on a state of the access ticket input together with the request. State update that determines and updates the state of the access ticket with this determined destination state And an information access control device. 10. An information access control device for controlling access of an accessor who accesses target information which is a resource to be protected, wherein a plurality of types corresponding to the contents of the access are provided, and a plurality of states are provided for each type. Access ticket issuance means for issuing to each accessor an access ticket defining access authority to target information for each of a plurality of states of each type, and accepting an access request from the accessor Access right determining means for determining whether to permit the access request based on an access right defined corresponding to the type and state of the access ticket input with the request, and a state transition from the accessor Accepts the request and identifies the type of access ticket entered with this request. And a state updating means for determining a transition destination state based on the determined transition destination state and updating the state of the access ticket with the determined transition destination state. 11. The state updating means inputs state transition information storing means for storing a transition destination state to which each state of an access ticket transits, corresponding to each state, and the state transition request from an accessor. 10. A means for reading a transition destination state corresponding to the read access ticket state from the state transition information storage means, and updating the access ticket state with the read transition destination state. Information access control device. 12. The state updating means stores state transition information in which a transition destination state to which each state of each type of access ticket transits is stored corresponding to each of a plurality of types of access ticket. Means for reading from the state transition information storage means a destination state corresponding to the type and state of the access ticket input together with the state transition request from the accessor, and updating the state of the access ticket with the read destination state 11. The information access control device according to claim 10, comprising means. 13. The state updating unit according to claim 9, further comprising: a unit that determines the transition destination state in consideration of a state transition event included in the state transition request from an accessor. 13. The information access control device according to any one of 12. 14. The information access control device according to claim 9, further comprising an access ticket verification unit that verifies whether an access ticket input together with the request is valid. 15. An access ticket authority information storage unit that stores an access authority defined corresponding to each state of an access ticket;
An access right defined corresponding to the state of the access ticket input together with the access request is read from the access ticket right information storage means, and whether or not the access request is permitted is determined based on the read access right. The information access control device according to claim 9, further comprising a determination unit. 16. An access ticket authority information storage unit that stores access authority defined corresponding to each of a plurality of states of an access ticket, the access authority determination unit includes: An access right defined according to the type and state of the input access ticket is read from the access ticket right information storage means, and it is determined whether or not the access request is permitted based on the read access right. 11. The information access control device according to claim 10, comprising means. 17. A recording medium recording an information access control program for controlling access of an accessor who accesses target information which is a resource to be protected, wherein the information access control program can take a plurality of states. An access ticket that specifies the access authority to the target information is issued to each accessor for each access request, an access request from the accessor is accepted, and the access request is specified in accordance with the state of the access ticket input with the request. Determining whether to permit the access request based on the access authority, accepting a state transition request from the accessor, determining a transition destination state based on the state of the access ticket input with the request; Characterized in that the access ticket status is updated with the changed transition destination status. A recording medium on which a program is recorded. 18. A recording medium storing an information access control program for controlling access of an accessor who accesses target information which is a resource to be protected, wherein a plurality of types according to the contents of the access are provided. A plurality of states can be taken for each type, and an access ticket that specifies the access authority to target information is issued to each accessor for each of the plurality of states for each type, and an access request from the accessor is accepted Determining whether to permit the access request based on the access authority defined in accordance with the type and state of the access ticket input with the request, and accepting a state transition request from an accessor; The destination state is determined based on the type and state of the access ticket entered with the request. A recording medium storing an information access control program, wherein the information access control program is determined and the state of the access ticket is updated with the determined transition destination state. 19. The processing for updating the state of the access ticket includes storing a destination state to which each state of the access ticket transits in a state transition information storage table corresponding to each state. 18. The state of the access ticket corresponding to the state of the access ticket input together with the state transition request is read from the state transition information storage table, and the state of the access ticket is updated with the read state of the destination. Recording medium on which the information access control program is recorded. 20. The process of updating the state of an access ticket includes the step of changing a destination state to which each state of each type of access ticket transits to state transition information corresponding to each of a plurality of types of access ticket. The access state is stored in a storage table, and the type of the access ticket input from the accessor together with the state transition request and the transition destination state corresponding to the state are read from the state transition information storage table. 19. The recording medium storing the information access control program according to claim 18, wherein the state of the information access control program is updated. 21. The processing for updating the state of the access ticket includes a state transition event included in the state transition request from an accessor, and determining the transition destination state in consideration of the state transition event. 21. A recording medium on which the information access control program according to claim 17 is recorded. 22. A recording medium recording an information access control program according to claim 17, wherein it is verified whether an access ticket input together with said request is valid. 23. The processing for determining whether to permit an access request includes storing an access right defined corresponding to each state of an access ticket in an access ticket right information storage table, Reading an access right defined corresponding to the state of the access ticket inputted together with the access ticket from the access ticket right information storage table, and determining whether to permit the access request based on the read access right. A recording medium on which the information access control program according to claim 17 is recorded. 24. The process of determining whether to permit an access request includes storing an access right defined for each of a plurality of types of states of an access ticket in an access ticket right information storage table. In addition, an access right defined corresponding to the type and state of the access ticket input together with the access request is read from the access ticket right information storage table, and the access request is determined based on the read access right. 19. The recording medium storing the information access control program according to claim 18, wherein it is determined whether to permit.