Access control management method, access control management system and terminal device with access control management function

An access control management method which limits a request from an application program to access resources for use in realizing functions owned by a terminal device mounted with an operating system and said application program, comprising the steps of:

• in said terminal device,
• storing at least one access policy in a storage region in advance,
• externally receiving environment information which is information that can specify an environment in which said terminal device is placed,
• requesting, to a conversion device which provides said terminal device with correspondence between environment information and access policies, specific information which specifies an access policy that indicates for which resource from which application program access should be limited and that is adapted to received environment information,
• selecting an access policy indicated by specific information provided by said conversion device from said storage unit which stores at least one access policy, and
• executing access control of limiting an access request from said application program according to a selected access policy.

An access control management system which limits a request from an application program to access resources for use in realizing functions owned by a terminal device mounted with said application program, comprising:

• an environment information transmission device which transmits environment information as information that can specify an environment in which said terminal device is placed, wherein
• said terminal device comprises
• an environment information reception unit which receives environment information from said environment information transmission device,
• an access policy selection unit which selects an access policy that indicates for which resource from which application program access should be limited and that is adapted to said environment information, and
• an access control management unit which executes access control of limiting an access request from said application program according to an access policy selected by said access policy selection unit.

An access control management system which limits a request from an application program to access resources for use in realizing functions owned by a terminal device mounted with said application program, comprising:

• an environment information transmission device which transmits environment information as information that can specify an environment in which said terminal device is placed, and
• a conversion device which provides correspondence between environment information and access policies, wherein
• said terminal device includes
• a storage unit which stores at least one access policy,
• an environment information reception unit which receives environment information from said environment information transmission device,
• an environment information notification unit which requests, from said conversion unit, specific information that specifies an access policy that indicates for which resource from which application program access should be limited and that is adapted to received environment information,
• an access policy selection unit which selects, from said storage unit, an access policy indicated by specific information provided from said conversion device, and
• an access control management unit which executes access control of limiting an access request from said application program according to an access policy selected by said access policy selection unit.

A terminal device with an access control management function which is mounted with an application program and limits a request from said application program to access resources for use in realizing functions, comprising:

• a storage unit which stores at least one access policy,
• an environment information reception unit which receives environment information from said environment information transmission device,
• an environment information notification unit which requests, to a conversion unit which provides correspondence between environment information and access policies, specific information which specifies an access policy that indicates for which resource from which application program access should be limited and that is adapted to received environment information,
• an access policy selection unit which selects, from said storage unit, an access policy indicated by specific information provided from said conversion device, and
• an access control management unit which executes access control of limiting an access request from said application program according to an access policy selected by said access policy selection unit.