Technique for controlling access to data

Patent metadata

Field	Value
Publication number	US-8949202-B2
Application number	US-95076207-A
Country	US
Kind code	B2
Filing date	Dec 5, 2007
Priority date	Dec 27, 2006
Publication date	Feb 3, 2015
Grant date	Feb 3, 2015

Abstract

Access control with easy change/extension is implemented. Access to data is controlled by a first storage unit that stores a plurality of attribute values respectively selected from a plurality of integers which are relatively prime and identifying a plurality of attributes of users, in association with respective users a second storage unit that stores a product of at least two attribute values which are common to users belonging to a set of users, in association with respective data to be accessed, to show the set of users which are targets of controlling access to the data. A plurality of attribute values corresponding to a user who requests access are read from the first storage unit, and a product of at least two of the plurality of read attribute values is calculated. The user is accepted as a target of controlling access to the data, on condition that the calculated product of attribute values matches a product of attribute values stored in the second storage unit in association with the data to be accessed.

First claim

The invention claimed is:

1. A system for controlling access to data, comprising:
a first storage unit for storing a plurality of attribute values respectively selected from a plurality of integers which are relatively prime, each attribute value identifying one of a plurality of attributes of a user, the attributes describing a common property of the user in association with respective users;
a second storage unit for associating data to be accessed with products of at least tw…

Assignees

• Yoshida Ryo
• IBM

Inventors

• Yoshida Ryo

Classifications

• G06F2221/2141

  Physics · mapped topic

• G06F21/6218 Primary

  Physics · mapped topic