To provide an access control system capable of easily introducing the access control for Web.

An access control filter module 206 of a Web server 103 previously forms a virtual path name array 210 from a virtual path name information table 202, and registers it. When a terminal device 104 accesses, an authentication server 102 formes a ticket 205 containing the access right information on the basis of the access right information table 203, and transmits it to the terminal device 104. The terminal device 104 transmits the ticket 205 to the Web server 103, and the access control filter module 206 references the ticket 205 and the virtual path name array 210, and permits the only virtual file, which is specified possible to access by the access right information, to access.