Abstract: An access management apparatus, method and program storage device for permitting or prohibiting access to each of a plurality of nodes stored hierarchically, including means and steps for storing rule functions with a plurality of requesters to access a node, each of the rule functions for determining whether access should be permitted or rejected depending on the position of the node in the hierarchical structure or depending on the requester, receiving an access request from a requester, selecting the rule function, and executing the rule function which has been selected by the selector, and controlling permission of, or prohibition of, the access request on the basis of a result of executing the rule function.

Abstract: When determining whether or not access by a user should be permitted by using policies, an access control determination device of the present invention expresses the access by the user to the data source with a predetermined path, retrieves an appropriate policy out of stored policies on the basis of the predetermined path, calculates an access permission value on the basis of the predetermined path, calculates an access effect value on the basis of the predetermined path and the policy which the policy retrieving unit has retrieved, and determines whether or not the access by the user to the data source should be permitted on the basis of the access permission value and the access effect value.

Abstract: A setting apparatus sets any of authorization for and prohibition of access to data with a hierarchical structure. The setting apparatus includes: an object selection unit for selecting at least one object from a plurality of objects constituting the hierarchical structure; a pattern selection unit for selecting at least one pattern from a plurality of patterns, each of which determines a relative position in the hierarchical structure to the object selected by the object selection unit; and an access control policy setting unit for setting any of authorization for and prohibition of access to the object selected by the object selection unit and each of objects at the relative position to the selected object, which relative position is determined by the pattern selected by the pattern selection unit.

Abstract: Access control for each part in an HTML document constituting a Web page is performed according to the origin of the part in the document. Thereby, a content provided by a malicious user or server is prevented from fraudulently reading and writing other parts in the HTML document. More precisely, on a server side, each content (including a JavaScript program) is automatically provided with a label indicating the domain that is the origin of the content. Thereby, the control of accesses to multiple domains (cross domain access control) can be performed on a client side. Under this configuration, a combination of the contents, metadata and the access control policy is transmitted from the server side to the client side.

Abstract: An access management apparatus, method and program storage device for permitting or prohibiting access to each of a plurality of nodes stored hierarchically, including means and steps for storing rule functions with a plurality of requesters to access a node, each of the rule functions for determining whether access should be permitted or rejected depending on the position of the node in the hierarchical structure or depending on the requester, receiving an access request from a requester, selecting the rule function, and executing the rule function which has been selected by the selector, and controlling permission of, or prohibition of, the access request on the basis of a result of executing the rule function.

Abstract: A cellular phone issues a request for content from a server. The cellular requests and authorizes the content for use by another cellular phone. When the content is received by the second cellular phone, the first cellular phone is billed.

Abstract: When determining whether or not access by a user should be permitted by using policies, an access control determination device of the present invention expresses the access by the user to the data source with a predetermined path, retrieves an appropriate policy out of stored policies on the basis of the predetermined path, calculates an access permission value on the basis of the predetermined path, calculates an access effect value on the basis of the predetermined path and the policy which the policy retrieving unit has retrieved, and determines whether or not the access by the user to the data source should be permitted on the basis of the access permission value and the access effect value.

Abstract: A cellular phone issues a request for content from a server. The cellular requests and authorizes the content for use by another cellular phone. When the content is received by the second cellular phone, the first cellular phone is billed.

Abstract: A cellular phone issues a request for content from a server. The cellular requests and authorizes the content for use by another cellular phone. When the content is received by the second cellular phone, the first cellular phone is billed.

Abstract: A cellular phone issues a request for content from a server. The cellular requests and authorizes the content for use by another cellular phone. When the content is received by the second cellular phone, the first cellular phone is billed.