Abstract: A technique for acquiring information. In response to receiving a request to read data stored in a database, said data is read from said database. In response to receiving a request to deliver particular data among said read data at a point in time when said particular data is to be used, it is determined whether said delivery request satisfies predetermined criteria. Said particular data is delivered in response to determining that said delivery request satisfies said predetermined criteria.

Abstract: An access management system includes an access administration apparatus which permits access to a database when the access request satisfies an access permission condition, and a policy determination apparatus which determines whether the access permission condition is satisfied by the access request; in which the access administration apparatus stores decision information containing a decision as to whether the access permission condition is satisfied, determines that the access request satisfies the access permission condition if the decision information has a predetermined inclusion relation with the access request, receives a decision as to whether the access permission condition is satisfied by the access request from the policy determination apparatus if it is determined that the decision information does not have the inclusion relation with the access request, and permits access to the database if it is determined that the access request satisfies the access permission condition.

Abstract: Information acquisition is rapidly performed while judging whether the access to the information stored in a database by an application program satisfies a predetermined reference. A database system includes: an application (10) for processing personal information; a personal information DB (20) for storing personal information; a policy server (30) for performing policy-based check according to a personal information protection policy; and a privacy protection module (40). Upon reception of a read request of personal information stored in the personal information DB (20) from the application (10), the privacy protection module (40) reads out the personal information from the personal information database (20). When the privacy protection module (40) receives from the application (10) a passing request of particular personal information among the personal information which has been read out, it asks the policy server (30) whether the passing request is based on the personal information protection policy.

Abstract: An access management system includes an access administration apparatus which permits access to a database when the access request satisfies an access permission condition, and a policy determination apparatus which determines whether the access permission condition is satisfied by the access request; in which the access administration apparatus stores decision information containing a decision as to whether the access permission condition is satisfied, determines that the access request satisfies the access permission condition if the decision information has a predetermined inclusion relation with the access request, receives a decision as to whether the access permission condition is satisfied by the access request from the policy determination apparatus if it is determined that the decision information does not have the inclusion relation with the access request, and permits access to the database if it is determined that the access request satisfies the access permission condition.