JP5035129B2 - Access control program - Google Patents

Description

  The present invention relates to an access control program for causing a computer to execute access control based on access control information indicating whether or not to permit access to a resource.

  Conventionally, in an open system such as a client server system or a local computer device, access control is performed in each layer such as access control by an OS (Operating System) and access control by an application (see Patent Document 1).

  Specifically, in the case of a local computer, the user activates the computer and logs in, and after logging in, activates a desired application and uses the application to access a resource such as a file. In this way, the computer performs OS level access control for determining whether or not to accept login for each user, and determines whether or not resources can be accessed for each application used by the logged-in user. Perform access control.

  Similarly, in the case of an open system, a user accesses a server using a client terminal, starts a desired application after logging in, and accesses a resource such as a file using the application. As described above, the server performs OS level access control for determining whether or not to accept login for each client terminal, and determines whether or not resources can be accessed for each application used by the logged-in client terminal. Perform application level access control.

JP 2007-48310 A

  However, the conventional technology described above has a problem that access control cannot be managed correctly. Specifically, in the prior art, the access control by the application and the access control by the OS are managed separately. In particular, when the access right by the application is managed, the OS strictly controls the access. Access control is impossible.

  For example, it is assumed that the user A logs in to the computer device and starts the application A in a situation where the access right that “user A cannot access (write / read) the resource C is not allowed” is managed in the OS. In this case, if “application A is permitted to access resource C” is managed as an access right on the application, user A cannot access resource C in the OS, but resource C can be obtained by using application A. Will be able to access.

  That is, even a user whose access right to a resource is denied on the OS can access the resource to be denied by using the application.

  SUMMARY OF THE INVENTION The present invention has been made to solve the above-described problems of the prior art, and an object of the present invention is to provide an access control program capable of correctly managing access control.

  In order to solve the above-described problems and achieve the object, the computer device disclosed in the present application executes the application from the operating environment in which the application is executed when the resource is accessed by the application. The computer executes a role specifying procedure for specifying a role stored in an operating environment storage unit that stores a user role in association with the operating environment. In addition, the computer device disclosed in the present application stores, from an access control information storage unit that stores access control information associated with the role specified by the role specifying procedure, in association with the role of the user. The computer is caused to execute an access control execution procedure for performing access control to the resource based on the specified access control information.

  According to the computer device disclosed in the present application, it is possible to correctly manage access control at the OS level.

  Embodiments of an access control program according to the present invention will be described below in detail with reference to the accompanying drawings.

[Outline of computer device]
First, the outline of the access device according to the first embodiment will be described with reference to FIG. FIG. 1 is a system configuration diagram illustrating the overall configuration of the computer apparatus according to the first embodiment.

  Conventionally, an OS manages access control information regarding a user who operates an application by user login or the like, and the application performs access control to resources based on the access control information managed in the application. As a result, the application performs access control based only on the access control information in the own application without using the access control information in the OS.

  The computer apparatus shown in FIG. 1 is an apparatus that executes the access control disclosed in the present application. Specifically, the operating environment of the application is separated for each user role (role, role-based access control), and the operating environment is separated. A user role is assigned to the operating environment to control access to resources. By doing so, the computer device can realize user role-based access control at the OS level, and as a result, can correctly manage access control.

  Specifically, as illustrated in FIG. 1, the computer apparatus according to the first embodiment permits an “operation environment DB” in which user roles and application operation environments are associated with each other, and access to the user roles and resources. It has an “access control information DB” that associates access control information indicating whether or not.

  Then, when the application accesses the information A (resource A), the computer apparatus acquires an operating environment in which the application is operating, and identifies a user role corresponding to the acquired operating environment. Subsequently, the computer apparatus performs access control from the application to the resource based on the access control information (R / W) to the information A corresponding to the acquired user role.

  In other words, the computer device according to the first embodiment can realize user role-based access control at the OS level separately from the access control information managed in the application. As a result, the access control can be correctly managed. It is.

[Configuration of computer device]
Next, the configuration of the computer apparatus shown in FIG. 1 will be described with reference to FIG. FIG. 2 is a block diagram illustrating the configuration of the computer apparatus according to the first embodiment. As shown in FIG. 2, the computer device 10 includes a communication control I / F unit 11, a storage unit 15, and a control unit 20.

  The communication control I / F unit 11 controls communication related to various information exchanged with other devices. Specifically, the communication control I / F unit 11 accepts a login request from a terminal operated by a user, or from the terminal. Accept various requests to run the application.

  The storage unit 15 stores data and programs necessary for various types of processing by the control unit 20, various types of applications executed by the user, and the login DB 16 and the operating environment DB 17 particularly closely related to the present invention. And an access control DB 18. In addition, the application memorize | stored in the memory | storage part 15 implements access control based on the access control information memorize | stored in an own program.

  The login DB 16 stores information for authenticating the user. As a specific example, as shown in FIG. 3, the login DB 16 displays “AAA, XXX, Role” as “User ID” indicating a user, “Password” for authenticating the user, and “Role” to which the user belongs. -X "etc. are memorized. FIG. 3 is a diagram illustrating an example of information stored in the login DB.

  The operating environment DB 17 stores user roles in association with operating environments in which applications are executed. As a specific example, as shown in FIG. 4, the operating environment DB 17 includes “Role-X, environment X” and “Role” as “Role” to which the user belongs and “Operating environment” in which the application is executed. -Y, environment Y ", etc. are stored. FIG. 4 is a diagram illustrating an example of information stored in the operating environment DB.

  The access control DB 18 stores access control information in association with user roles. As a specific example, as shown in FIG. 5, the access control DB 18 stores “access control information” for a resource indicating an access destination in association with “Role” to which the user belongs. For example, the access control DB 18 stores “R / W, R, Deny” and the like as “Role, information A, information B, information C”. Here, R / W indicates that reading and writing to the information A are permitted, R indicates that only reading to the information B is permitted, and Deny also reads the information C. It also indicates that Write is not permitted. FIG. 5 is a diagram illustrating an example of information stored in the access control DB.

  The control unit 20 has a control program such as an OS, a program defining various processing procedures, and an internal memory for storing required data. In particular, the login control unit 21 is closely related to the present invention. A management unit 22, a role identification unit 23, and an access control unit 24, which execute various processes.

  The login control unit 21 performs login authentication for the user. For example, when the login control unit 21 receives a login request from a terminal used by the user, the login control unit 21 outputs a screen for inputting “user ID, password” to the terminal. Then, the login control unit 21 determines whether or not the “user ID and password” input by the terminal is stored in the login DB 16. If the login control unit 21 stores the login ID, the login is permitted. Respond to. The login control unit 21 permitted to log in acquires the “Role” to which the user belongs from the login DB 16 and notifies the management unit 22 described later that the acquired “Role” and the login are permitted. In addition, when the input “user ID” belongs to a plurality of roles, the login control unit 21 may further display a screen for selecting a role to be used.

  The management unit 22 provides an operating environment for the application and manages the executed application. For example, the management unit 22 provides an environment corresponding to the notified “Role” to the user (user ID) permitted to log in by the login control unit 21. For example, the management unit 22 provides a partition, a network, a VM (Virtual Machine), and the like corresponding to “Role” to each user who is permitted to log in.

  In addition, when the user permitted to log in by the login control unit 21 executes the application stored in the storage unit 15, the management unit 22 manages the “user ID” and the executed “application” in association with each other. To do. For example, the management unit 22 manages “application A, environment X” and the like as “application, operating environment”. As for the management method, a database or the like may be created and managed in the storage unit 15 or the like, or a temporary area in the control unit 20 may be managed.

  When the resource is accessed by the application, the role specifying unit 23 specifies the role stored in the operating environment DB 17 from the operating environment in which the application is executed. Specifically, when the application managed by the management unit 22 accesses a resource, the role specifying unit 23 acquires the operating environment in which the application is executed from the management unit 22 and corresponds to the acquired operating environment. The role to be specified is specified from the operating environment DB 17. Then, the role specifying unit 23 notifies the access control unit 24 described later of the specified role information and the access destination.

  For example, when the application A managed by the management unit 22 accesses the information A, the role specifying unit 23 acquires the operating environment “environment X” in which the application A is executed from the management unit 22 and acquires the information. The role “Role-X” corresponding to the operating environment “environment X” is specified from the operating environment DB 17. Then, the role specifying unit 23 notifies the access control unit 24 of the specified role information “Role-X” and the access destination “information A”.

  The access control unit 24 specifies the access control information associated with the role specified by the role specifying unit 23 from the access control DB 18, and performs access control to the resource based on the specified access control information. . Specifically, the access control unit 24 uses the access control information “R / X” associated with the role information “Role-X” notified by the role specifying unit 23 and the access destination “information A”. "W" is specified from the access control DB 18, and access control to the access destination "information A" is performed based on the specified access control information "R / W".

[Processing by computer device]
Next, processing by the computer apparatus will be described with reference to FIG. FIG. 6 is a flowchart illustrating the flow of access control processing in the computer apparatus according to the first embodiment.

  As illustrated in FIG. 6, when the computer device 10 permits a user to log in (Yes in step S101), the computer device 10 acquires “Role” to which the user belongs from the login DB 16, and corresponds to the acquired “Role”. The operating environment “environment X” is separated and provided to the user (step S102).

  Then, when there is an access to the resource “information A” from the application being executed (Yes at step S103), the computer apparatus 10 acquires the operating environment “environment X” in which the application is executed (step S103). S104). Thereafter, the computer apparatus identifies the access control information “R / W” corresponding to the acquired operating environment “environment X” from the access control DB 18, and based on the identified access control information “R / W”, the resource “ Access control to “information A” is performed (step S105).

[Effects of Example 1]
As described above, according to the first embodiment, when a resource is accessed by an application, the computer device associates the operating environment in which the application is executed with the operating environment in which the application is executed. The role stored in the operating environment DB 17 storing the role is specified. Then, the computer device identifies the access control information associated with the identified role from the access control DB 18 that stores the access control information in association with the user role, and based on the identified access control information, Implement access control to resources. As a result, access control according to the user role can be realized at the OS level, so that access control can be correctly managed.

  By the way, in the first embodiment, the case where the access environment is implemented by separating the operation environment such as the partition, the network, and the VM (Virtual Machine) for each user role (role) has been described. In the second embodiment, in particular, An example in which the access control is performed by separating the operating environment based on the VM will be described.

(Overview (Example 2))
First, with reference to FIG. 7, an outline of the operating environment separation when a VM is used will be described. Unlike the first embodiment, the computer apparatus according to the second embodiment is configured such that “Role” to which the user belongs, “Role-X, VM1”, “Role-Y, VM2”, etc. And stored in the operating environment DB. 7 and 8 are diagrams for explaining the outline of the computer apparatus according to the second embodiment.

  As shown in FIG. 7, the computer apparatus accepts login (Login with Role) from the user with a Role-Dispatcher (VM-A). Here, an example in which Role is specified at the time of login is shown, but the present invention is not limited to this, and may be stored as login information as in the first embodiment.

  Then, the computer device configures a virtual network Switch for starting up the VM corresponding to the Role designated by the user at the time of login and connecting to the application on the VM for the user permitted to log in. Provide to users. Thereafter, the computer device that has received access to the resource A from the application started in the VM specifies “Role” corresponding to the operation environment from the operation environment (VM) of the application. Then, the computer apparatus performs access control based on the access control information of the resource A corresponding to the specified “Role”.

  Here, the access control for the VM will be described in detail with reference to FIG. As shown in FIG. 8, the computer apparatus according to the second embodiment manages the VM 1 for authority A, the VM 2 for authority B, and the VM 3 for performing access control on the virtual machine software “XEN”. (Resource group 1, resource group 2) are stored.

  Here, the authority A in the VM 1 is an authority to which the application using the VM 1 belongs, and the access control information managed in the VM 3 stores the access control to the resource determined based on the authority in each VM. Will be.

  Under such a configuration, an application running on the VM1 and the VM2 accesses the resource (resource group 1, resource group 2) via access control on the VM3. Become.

  Therefore, when an application running on the VM1 and the VM2 accesses a resource, the computer apparatus according to the second embodiment accepts access to the resource and corresponds to the VM on which the application is executed. Access control can be implemented based on access control.

(Processing flow (Example 2))
Next, the flow of processing in the computer apparatus according to the second embodiment will be described with reference to FIG. FIG. 9 is a flowchart illustrating the flow of the VM activation process in the computer apparatus according to the second embodiment. As for the access control process in the computer apparatus according to the second embodiment, the operation environment is VM, and the flow of the process itself is the same as that of the first embodiment. The process up to will be described.

  As illustrated in FIG. 9, when the computer apparatus according to the second embodiment permits a user to log in (Yes in step S201), whether or not there is an application connection (application activation by the user) from the user. Determination is made (step S202).

  Then, when there is an application connection from the user (Yes at Step S202), the computer device acquires “Role” to which the user belongs based on information at the time of login of the user (Step S203).

  Subsequently, the computer apparatus determines whether a VM corresponding to the acquired “Role” exists in the apparatus, that is, whether the VM has already been activated (step S204).

  When the VM corresponding to the acquired “Role” exists in the apparatus (Yes in step S204), the computer apparatus reconfigures the virtual network switch to connect to the application on the VM (step S204). In step S205, the user and the application are connected (step S206). In other words, when a VM corresponding to the acquired “Role” exists in the apparatus, the computer apparatus provides the user with the application so that the user can use the application.

  On the other hand, when the VM corresponding to the acquired “Role” does not exist in the apparatus (No at Step S204), the computer apparatus newly starts the VM corresponding to “Role” (Step S207), The process of step S206 is executed.

(Effects of Example 2)
As described above, according to the second embodiment, the computer device stores the user role in association with the virtual area (VM) in which the application is executed, and when the resource is accessed by the application, The role of the user who executes the application is specified from the virtual area where the application is executed. As a result, even when a VM is used or a virtual area is used, access control according to the user role can be realized at the OS level, so that access control can be managed correctly.

  Although the embodiments of the present invention have been described so far, the present invention may be implemented in various different forms other than the embodiments described above. Therefore, as shown below, (7) Program, (1) Role, (2) Flow control, (3) VM configuration, (4) Session control, (5) Application to DB, (6) System configuration, etc. Different embodiments will be described below.

(1) Role
The Role used in the first embodiment and the second embodiment is a role used for role-based access control, and is information classified according to roles such as managers and general employees.

(2) Flow Control The computer apparatus disclosed in the present application can also perform flow control on information once read by an application. In general, information flow control was possible in the era of general-purpose machines, but server access control in open systems controls access to resources such as files, but access is once permitted. As a result, access control cannot be performed for the information after being read.

  On the other hand, in the present application, flow control can be performed even in an open system. This will be specifically described with reference to FIG. FIG. 10 is a diagram illustrating an example of MLS (Multi Level Security) as information flow control.

  FIG. 10 shows a model that prevents information with a high security level from flowing into an area with a low security level. This model cannot be realized only by OS access control. For example, once the user A can read the information of the security level X by OS access control, the user A can pass the read information of the security level X1 to the user B. This is because the security level X information can be moved to the security level Y area through such a path.

  For this reason, the computer device disclosed in the present application separates the operating environment of the security level A user from the operating environment of the security level B, so that data cannot be exchanged between the separated operating environments. Store the access control. By doing so, the computer apparatus performs access control based on the access control information for each Role that is stored in association with the operating VM, so that the security level X information is moved to the security level Y area. Can not be done.

(3) VM Configuration In the second embodiment, the configuration in which virtual machines are executed from VM1 to VM3 has been described. However, the number of executed virtual machines is not limited. In addition, the computer device disclosed in the present application can start a new XEN on the VM to be started and configure a new VM.

  Specifically, as shown in FIG. 11, the computer apparatus further activates a new XEN on VM1 activated on XEN, and further executes VMs (VM-A1 to VM) on the new XEN. -Start A3). Then, the computer device associates the role of the user with each VM (VM-A1 to VM-A3) indicating the operating environment, and stores the access control information for the resource for each of the roles, so that the VM (VM-A1) is stored. Access control can be performed every VM-A3). FIG. 11 is a diagram illustrating an example of a VM configuration.

(4) Session control The computer device disclosed in the present application can perform accurate access control even when the user A belongs to a plurality of Roles. Specifically, when the user A belongs to a plurality of Roles such as “Role1, Role2, Role3”, the computer device inquires to the user which Role to use at the login stage. As a method of this inquiry, various methods such as displaying a list for selecting a Role on the login screen or displaying a screen for inputting a Role in the same manner as a password for the login screen can be used.

  Then, the computer device establishes a session between the user A terminal and the VM1 by starting the VM1 corresponding to the Role “Role1” designated by the user A at the time of login, and in the application executed on the VM1 , Access control is performed based on the access control information of “Role 1”.

  In addition, when the user A who is operating the application on the VM 1 newly logs in with “Role 2”, the computer device newly starts the VM 2 corresponding to “Role 2”, so that the user A terminal and the VM 2 Establish a new session. In the application executed on the VM 2, the computer apparatus performs access control based on the access control information “Role 2”.

  As described above, even when a user belongs to a plurality of Roles, it is possible to establish a session for each Role and perform access control.

(5) Application to DB When the access control destination resource is a DB, unlike the normal file access, the access control that is normally applied in the OS has access control in units of DB (Table). turn into. The computer device disclosed in the present application interprets the contents of access to the DB and stores access control information corresponding to the contents, thereby enabling access control for each query to the DB and for each column.

(6) System Configuration The components of the illustrated devices are functionally conceptual, and need not be physically configured as illustrated. In other words, the specific form of distribution / integration of each device is not limited to that shown in the figure, and all or a part thereof may be functionally or physically distributed or arbitrarily distributed in arbitrary units according to various loads or usage conditions. It can be configured by integrating (for example, integrating the management unit 22 and the role specifying unit 23). Further, all or any part of each processing function performed in each device may be realized by a CPU and a program analyzed and executed by the CPU, or may be realized as hardware by wired logic.

  In addition, the processing procedures, control procedures, specific names, information including various data and parameters (for example, FIG. 3 to FIG. 5) shown in the above-mentioned document and drawings are arbitrary unless otherwise specified. Can be changed.

(7) Program By the way, the various processes described in the above embodiments can be realized by executing a program prepared in advance on a computer system such as a personal computer or a workstation. Therefore, hereinafter, a computer system that executes a program having the same function as that of the above embodiment will be described as another embodiment.

  FIG. 12 is a diagram illustrating an example of a computer system that executes an access control program. As shown in FIG. 12, the computer system 100 includes a RAM 101, an HDD 102, a ROM 103, and a CPU 104. Here, the ROM 103 stores a program that exhibits the same function as that of the above-described embodiment, that is, as shown in FIG. 12, a login control program 103a, a management program 103b, a role specifying program 103c, and an access control program 103d. Is stored in advance.

  Then, by reading and executing these programs 103a to 103d, the CPU 104 becomes a login control process 104a, a management process 104b, a role specifying process 104c, and an access control process 104d as shown in FIG. . The login control process 104a corresponds to the login control unit 21 shown in FIG. 2, and similarly, the management process 104b corresponds to the management unit 22, and the role identification process 104c corresponds to the role identification unit 23. The access control process 104d corresponds to the access control unit 24.

  The HDD 102 also has a login table 102a that stores information for authenticating the user, an operating environment table 102b that stores the user's role in association with the operating environment in which the application is executed, and the user's role. An access control table 102c that stores access control information is provided.

  The login table 102a corresponds to the login DB 16 shown in FIG. 2, similarly, the operating environment table 102b corresponds to the operating environment DB 17, and the access control table 102c corresponds to the access control DB 18.

  By the way, the above-described programs 103a to 103d are not necessarily stored in the ROM 103. For example, a flexible disk (FD), a CD-ROM, an MO disk, a DVD disk, a magneto-optical disk inserted into the computer system 100, In addition to “portable physical media” such as IC cards, “fixed physical media” such as hard disk drives (HDDs) provided inside and outside the computer system 100, public lines, the Internet, LAN, WAN, etc. The program may be stored in “another computer system” connected to the computer system 100 via the computer system 100 so that the computer system 100 reads and executes the program.

  The following appendices are further disclosed with respect to the embodiments including the first to third embodiments.

(Supplementary note 1) An access control program for causing a computer to execute access control based on access control information indicating whether or not to permit access to a resource,
When an application accesses a resource, a role stored in an operating environment storage unit that stores a user role in association with the operating environment in which the application is executed is changed from the operating environment in which the application is executed. A role identification procedure to identify;
Based on the identified access control information, the access control information associated with the role identified by the role identifying procedure is identified from the access control information storage unit that stores the access control information in association with the role of the user. An access control execution procedure for performing access control to the resource;
An access control program for causing a computer to execute.

(Additional remark 2) The said access control information storage part matches with the said user's role, and further memorize | stores the access control information which shows whether the communication between the said applications is prohibited, The additional remark 1 characterized by the above-mentioned. Access control program.

(Supplementary note 3) The resource is a database storing various data,
The access control information storage unit stores access control information for each column of a query or a column indicating a control command to the database in association with the role of the user. Access control program.

(Supplementary Note 4) The operating environment storage unit stores a user role in association with a virtual area in which the application is executed,
The role specifying procedure stores an operating environment storage that stores a user role in association with a virtual area in which the application is executed from a virtual area in which the application is executed when a resource is accessed by the application. The access control program according to any one of appendices 1 to 3, wherein a role stored in the unit is specified.

(Additional remark 5) When the said user logs in, it further comprises the isolation | separation procedure which isolate | separates the operating environment which the said user performs an application based on the said user's role,
The role specifying procedure specifies a role stored in the operation environment storage unit from an operation environment separated by the separation unit in which the application is executed when a resource is accessed by the application. The access control program according to any one of appendices 1 to 4, characterized by:

(Supplementary Note 6) The access control program according to Supplementary Note 5, wherein the separation procedure connects the operating environment and the application using a virtual network switch.

(Appendix 7) In the separation procedure, when the operating environment corresponding to the role of the user is not actually separated, the separation is performed after starting a new operating environment corresponding to the role of the user. The access control program according to attachment 5.

(Supplementary note 8) The access control program according to supplementary note 5, wherein the separation procedure separates an operating environment based on a role designated by the user when the user logs in.

(Supplementary note 9) An access control apparatus that performs access control based on access control information indicating whether or not to permit access to a resource,
An operating environment storage means for storing the role of the user in association with an operating environment in which the application is executed;
An access control information storage means for storing the access control information in association with the role of the user;
A role specifying procedure for specifying a role stored in the operating environment storage means from an operating environment in which the application is executed when a resource is accessed by the application;
Implementation of access control that identifies access control information associated with the role identified by the role identification procedure from the access control information storage means, and performs access control to the resource based on the identified access control information Procedure and
An access control device comprising:

(Supplementary Note 10) An access control method for causing a computer to execute access control based on access control information indicating whether or not to permit access to a resource,
When an application accesses a resource, a role stored in an operating environment storage unit that stores a user role in association with the operating environment in which the application is executed is changed from the operating environment in which the application is executed. Roll identification process to identify;
Based on the identified access control information, the access control information associated with the role identified in the role identifying step is identified from the access control information storage unit that stores the access control information in association with the role of the user. An access control execution step for performing access control to the resource;
An access control method characterized by causing a computer to execute.

1 is a system configuration diagram illustrating an overall configuration of a computer apparatus according to Embodiment 1. FIG. 1 is a block diagram illustrating a configuration of a computer device according to a first embodiment. It is a figure which shows the example of the information memorize | stored in login DB. It is a figure which shows the example of the information memorize | stored in operating environment DB. It is a figure which shows the example of the information memorize | stored in access control DB. 6 is a flowchart illustrating a flow of access control processing in the computer apparatus according to the first embodiment. FIG. 9 is a diagram for explaining an outline of a computer apparatus according to a second embodiment. FIG. 9 is a diagram for explaining an outline of a computer apparatus according to a second embodiment. 12 is a flowchart illustrating a flow of VM activation processing in the computer apparatus according to the second embodiment. It is a figure which shows the example of MLS as information flow control. It is a figure which shows the example of VM structure. It is a figure which shows the example of the computer system which performs an access control program.

Explanation of symbols

10 Computer device 11 Communication control I / F unit 15 Storage unit 16 Login DB
17 Operating environment DB
18 Access control DB
DESCRIPTION OF SYMBOLS 20 Control part 21 Login control part 22 Management part 23 Role specific part 24 Access control part 100 Computer system 101 RAM
102 HDD
102a Login table 102b Operating environment table 102c Access control table 103 ROM
103a Login control program 103b Management program 103c Role identification program 103d Access control program 104 CPU
104a Login control process 104b Management process 104c Role identification process 104d Access control process

Claims (3)

An access control program for causing a computer to execute access control based on access control information indicating whether or not to permit access to a resource,
A determination procedure for determining whether or not a virtual machine corresponding to a user role is activated;
When it is determined that the virtual machine is not activated by the determination procedure, from the storage unit that holds the virtual machine and the access control information in association with each other to separate the user role and the operating environment of the application, Identifying the virtual machine corresponding to the role of the user, and starting the identified virtual machine;
When the resource is accessed by the application, access control information corresponding to the virtual machine on which the application is executed is identified from the storage unit , and access control to the resource is performed based on the identified access control information An access control program for causing a computer to execute an access control execution procedure for executing The access control program according to claim 1, wherein the storage unit further stores access control information indicating whether or not communication between the applications is prohibited in association with the role of the user. The resource is a database storing various data,
Wherein the storage unit, the access control program according to claim 1 or 2, characterized in that for storing access control information for each column of the query or the database indicating a control command to the previous SL database.

Images