SECURITY-FUNCTION-DESIGN SUPPORT DEVICE, SECURITY-FUNCTION-DESIGN SUPPORT METHOD, AND PROGRAM

• US 20150294107A1
• Filed: 07/18/2013
• Published: 10/15/2015
• Est. Priority Date: 10/15/2012
• Status: Active Grant

• Current Assignee: IP Wave Pte. Ltd.
• Original Assignee: NEC Corporation
• Inventors: Ashino, Yuki
• Granted Patent: US 9,767,269 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A display unit displays a configuration of a system in a display device. An implementation scheme configuration support unit provides a candidate of a security implementation scheme configurable for a component of the system and configures a security implementation scheme selected by a user to a component selected by a user. An associated function element configuration support unit provides a candidate of an associated function element configurable for a component of the system and configures an associated function element selected by a user to a component selected by a user. An evaluation unit determines whether or not the associated function element configured for the component of the system is appropriate based on a condition to determine appropriateness of the configuration of the certain associated function element. An output unit outputs a result of the determination by the associated function element evaluation unit.

Claims

1. A security-function-design support device comprising:

a system configuration data display unit that displays a configuration of a system in a display device;

an implementation scheme configuration support unit that, in order to implement a security function, provides a candidate of a security implementation scheme configurable for a component of the system and configures a security implementation scheme selected by an operation of a user to a component selected by an operation of a user;

an associated function element configuration support unit that, in order to protect the security implementation scheme, provides a candidate of an associated function element configurable for a component of the system and configures an associated function element selected by an operation of a user to a component selected by an operation of a user;

an associated function element evaluation unit that determines whether or not the associated function element configured for the component of the system is appropriate based on a condition to determine appropriateness of the configuration of the certain associated function element; and

an evaluation result output unit that outputs a result of the determination by the associated function element evaluation unit.

2. The security-function-design support device according to claim 1, wherein the associated function element evaluation unit obtains data of the associated function element configured by a user operation and determines appropriateness of the associated function element with reference to information on system configuration data and the security implementation scheme configured by a user operation based on the condition for determining the appropriateness.

3. The security-function-design support device according to claim 1, wherein the evaluation result output unit, in case that a user has not configured an essential associated function element, displays an image informing of being an essential element.

4. The security-function-design support device according to claim 1, wherein the evaluation result output unit, in case that a sub implementation scheme required for functioning the associated function element is not configured, displays an image to inform of failure together with the implementation scheme in which the associated function element is configured.

5. The security-function-design support device according to claim 1, wherein the evaluation result output unit displays information of a cost required for each configured implementation scheme.

6. A security-function-design support method comprising:

displaying a configuration of a system in a display device;

providing a candidate of a security implementation scheme configurable for a component of the system and configuring a security implementation scheme selected by an operation of a user to a component selected by an operation of a user in order to implement a security function;

providing a candidate of an associated function element configurable for a component of the system and configuring an associated function element selected by an operation of a user to a component selected by an operation of a user in order to protect the security implementation scheme;

determining whether or not the associated function element configured for the component of the system is appropriate based on a condition for determining appropriateness of configuring the associated function element; and

outputting a result of the determination.

7. A program for causing a computer to function as:

a system configuration data display unit that displays a configuration of a system in a display device;

an implementation scheme configuration support unit that, in order to implement a security function, provides a candidate of a security implementation scheme configurable for a component of the system and configures a security implementation scheme selected by an operation of a user to a component selected by an operation of a user;

an associated function element configuration support unit that, in order to protect the security implementation scheme, provides a candidate of an associated function element configurable for a component of the system and configures an associated function element selected by an operation of a user to a component selected by an operation of a user;

an associated function element evaluation unit that determines whether or not the associated function element configured for the component of the system is appropriate based on a condition to determine appropriateness of the configuration of the certain associated function element; and

an evaluation result output unit that outputs a result of the determination by the associated function element evaluation unit.

8. A security-function-design support device comprising:

system configuration data display means for displaying a configuration of a system in a display device;

implementation scheme configuration support means for, in order to implement a security function, providing a candidate of a security implementation scheme configurable for a component of the system and configuring a security implementation scheme selected by an operation of a user to a component selected by an operation of a user;

associated function element configuration support means for, in order to protect the security implementation scheme, providing a candidate of an associated function element configurable for a component of the system and configuring an associated function element selected by an operation of a user to a component selected by an operation of a user;

associated function element evaluation means for determining whether or not the associated function element configured for the component of the system is appropriate based on a condition to determine appropriateness of the configuration of the certain associated function element; and

evaluation result output means for outputting a result of the determination by the associated function element evaluation unit.