| CPC H04L 9/3231 (2013.01) [H04L 9/321 (2013.01); H04L 9/50 (2022.05)] | 7 Claims |
|
1. An access control apparatus, comprising:
at least one memory storing instructions; and
at least one processor configured to execute the instructions to perform operations comprising:
acquiring a request from a first user for access to data of a second user stored in a data storage area of a first storage apparatus allocated for the second user, the request including first authentication information used for authentication of the second user;
acquiring privilege information from a second storage apparatus, the privilege information representing access privilege of the first user with respect to the data stored in the data storage area allocated for the second user;
determining whether the access is within a range of the access privilege of the first user, by using the privilege information of the first user;
executing the access to read second authentication information of the second user stored in the data storage area allocated for the second user, based on the access being determined to be within the range;
performing authentication of the second user by comparing the first authentication information with the second authentication information;
acquiring results of procedures after the authentication based on the authentication being successful; and
storing, in the data storage area allocated for the second user, the results of procedures in association with identification information of the first user, wherein
the second storage apparatus is a blockchain storage.
|