Access right management system, access right management method and program therefor

A method for managing an access right management system in which a storage apparatus storing a plurality of pieces of data, a reference apparatus referring to the data stored in the storage apparatus, and a personal information storage apparatus storing a plurality of pieces of personal information used to determine an access right for accessing desired data from the reference apparatus are connected through transmission lines, the method comprising:

• a reference request transmission step of causing the reference apparatus to transmit a data name of data to which a person desires to refer and a personal information number of the person who desires to refer to the data, to the storage apparatus;
• a data acquisition step of causing the storage apparatus to acquire the data based on the data name transmitted in the reference request transmission step;
• a personal information acquisition step of causing the storage apparatus to acquire the personal information based on the personal information number, from the personal information storage apparatus;
• a determination step of causing the storage apparatus to determine whether or not the personal information acquired in the personal information acquisition step coincides with a reference condition allocated to the data acquired in the data acquisition step;
• and
• a transmission step of causing the storage apparatus to transmit the desired data to the reference apparatus if the personal information coincides with the reference condition, and to transmit a notification that an access is rejected to the reference apparatus if the personal information does not coincide with the reference condition.

A computer program product which is embodied on a computer-readable medium and provided for an access right management system, the system comprising:

• a storage apparatus storing a plurality of pieces of data;
• a reference apparatus referring to the data stored in the storage apparatus;
• and
• a personal information storage apparatus storing a plurality of pieces of personal information consisting of a plurality of categories used to determine an access right for accessing desired data from the reference apparatus, wherein
• the storage apparatus, the reference apparatus, and the personal information storage apparatus are connected through transmission lines, and wherein
• the computer program product causes the reference apparatus to execute a reference request transmission processing of transmitting a data name of data to which a person desires to refer and a personal information number of the person who desires to refer to the data, to the storage apparatus;
• the computer program product causes the storage apparatus to execute a data acquisition processing of acquiring the data based on the data name transmitted by the reference request transmission processing;
• the computer program product causes the storage apparatus to execute a personal information acquisition processing of acquiring the personal information based on the personal information number, from the personal information storage apparatus;
• the computer program product causes the storage apparatus to execute a determination processing of determining whether or not the personal information acquired in the personal information acquisition step coincides with a reference condition allocated to the data acquired by the data acquisition processing;
• and
• the computer program product causes the storage apparatus to execute a transmission processing of transmitting the desired data to the reference apparatus if the personal information coincides with the reference condition, and of transmitting a notification that an access is rejected to the reference apparatus if the personal information does not coincide with the reference condition.