Access control apparatus, control method, and non-transitory computer readable medium

A control method to be executed by a computer, comprising:

• acquiring a request from a first user for access to data of a second user stored in a data storage area of a first storage apparatus allocated for the second user, the request including first authentication information used for authentication of the second user;
• acquiring privilege information from a second storage apparatus, the privilege information representing access privilege of the first user with respect to the data stored in the data storage area allocated for the second user;
• determining whether the access is within a range of the access privilege of the first user, by using the privilege information of the first user;
• executing the access to read second authentication information of the second user stored in the data storage area allocated for the second user, based on the access being determined to be within the range;
• performing authentication of the second user by comparing the first authentication information with the second authentication information;
• acquiring results of procedures after the authentication based on the authentication being successful;
• and
• storing, in the data storage area allocated for the second user, the results of procedures in association with identification information of the first user, wherein
• the second storage apparatus is a blockchain storage.

A non-transitory computer readable medium storing a program causing a computer to execute operations, comprising:

• acquiring a request from a first user for access to data of a second user stored in a data storage area of a first storage apparatus allocated for the second user, the request including first authentication information used for authentication of the second user;
• acquiring, privilege information from a second storage apparatus, the privilege information representing access privilege of the first user with respect to the data stored in the data storage area allocated for the second user;
• determining whether the access is within a range of the access privilege of the first user, by using the privilege information of the first user;
• executing the access to read second authentication information of the second user stored in the data storage area allocated for the second user, based on the access being determined to be within the range;
• performing authentication of the second user by comparing the first authentication information with the second authentication information;
• acquiring results of procedures after the authentication based on the authentication being successful;
• and
• storing, in the data storage area allocated for the second user, the results of procedures in association with identification information of the first user, wherein
• the second storage apparatus is a blockchain storage.