US Patent 8099509 Access control unit

[Means for Solution] Access-control-rule application means (310), upon receiving an access request, refers to an access control rule DB (350) and resource information DB (360), to judge whether the attribute of a rule matched with the request is permitted, denied, or manual approval. The access-control-rule application means (310) requests manual-access-control application means (320) to input a result of approval, if the attribute is manual approval. The manual-access-control application means (320) inputs the result of approval input from a resource administrator's terminal (104) into access-control-rule application means (310), which outputs the result of approval.