METHOD AND DEVICE FOR GENERATING ACCESS-CONTROL LISTS

A method of generating access-control lists executable by a system and derived from access-control rules supplied for insuring security of an operation system is presented. The method includes the steps of inputting access-manager-type-group information, access-target-type-group information, and organizational-structure information, inputting access-control rules each comprised of an access-manager type, an access-target type, and an action in order to represent security guidelines of the system, inputting constraint conditions relating to the organizational structure of the system, extracting access managers and access targets from the access-manager-type-group information and the access-target-type-group information, respectively, with respect to the access-manager type and the access-target type included in each of the access-control rules, checking the constraint conditions with regard to all the combinations between the extracted access managers and the extracted access targets, and generating access-control lists comprised of such an access manager, an access target, and an action as to satisfy the constraint conditions.