Security-function-design support device, security-function-design support method, and program

• US 9,767,269 B2
• Filed: 07/18/2013
• Issued: 09/19/2017
• Est. Priority Date: 10/15/2012
• Status: Active Grant

• Current Assignee: Cloud BYTE LLC
• Original Assignee: NEC Corporation
• Inventors: Ashino, Yuki
• Primary Examiner(s): Cribbs, Malcolm
• Application Number:
  US14/431,999
• Publication Number:
  US 20150294107A1
• Time in Patent Office: 1,524 Days
• Field of Search: None
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A display unit displays a configuration of a system in a display device. An implementation scheme configuration support unit provides a candidate of a security implementation scheme configurable for a component of the system and configures a security implementation scheme selected by a user to a component selected by a user. An associated function element configuration support unit provides a candidate of an associated function element configurable for a component of the system and configures an associated function element selected by a user to a component selected by a user. An evaluation unit determines whether or not the associated function element configured for the component of the system is appropriate based on a condition to determine appropriateness of the configuration of the certain associated function element. An output unit outputs a result of the determination by the associated function element evaluation unit.

Claims

1. A security-function-design support device comprising:

a memory storing instructions;

a processor, that when executing the instructions, configured to;

provide a candidate of a security implementation scheme configurable for a component of a system being targeted to a display device;

provide a candidate of an associated function element configurable for the component of the system to the display device;

determine whether the associated function element configurable for the component of the system using the candidate of the associated function element is appropriate based on a condition which determines whether the associated function element is appropriate for the component of the system;

output a result of the determination in order to display the result of the determination on the display device; and

display information of a cost required for the security implementation scheme configurable for the component of the system,

wherein, after determining that a sub implementation scheme required for the associated function is not configured, the processor controls the display device so as to display an image informing of failure with respect to the security implementation scheme including the associated function element for the component of the system.

2. The security-function-design support device according to claim 1, wherein the processor refers to further information on system configuration when determining whether the associated function element is appropriate for the component of the system.

3. The security-function-design support device according to claim 1, wherein, when the associated function element is not configured in spite of it being an essential element, the processor controls the display device so as to display an image which informs that the associated function element is not configured.

4. A security-function-design support method executed by a processor comprising:

providing a candidate of a security implementation scheme configurable for a component of a system of being targeted to a display device;

providing a candidate of an associated function element configurable for the component of the system to the display device;

determining whether the associated function element configurable for the component of the system using the candidate of the associated function element is appropriate based on a condition which determines whether the associated function element is appropriate for the component of the system;

displaying a result of the determination on the display device;

displaying information of a cost required for the security implementation scheme configurable for the component of the system; and

after determining that a sub implementation scheme required for the associated function element is not configured, controlling the display device so as to display an image informing of failure with respect to the security implementation scheme including the associated function element for the component of the system.

5. A non-transitory computer-readable medium storing a program for causing a computer to execute:

providing a candidate of a security implementation scheme configurable for a component of a system of being targeted to a display device;

providing a candidate of an associated function element configurable for the component of the system to the display device;

determining whether the associated function element configurable for the component of the system using the candidate of the associated function element is appropriate based on a condition which determines whether the associated function element is appropriate for the component of the system;

displaying a result of the determination on the display device;

displaying information of a cost required for the security implementation scheme configurable for the component of the system; and

after determining that a sub implementation scheme required for the associated function element is not configured, controlling the display device so as to display an image informing of failure with respect to the security implementation scheme including the associated function element for the component of the system.

6. A security-function-design support device comprising:

implementation scheme configuration support means for providing a candidate of a security implementation scheme configurable for a component of a system being targeted to a display device;

associated function element configuration support means for providing a candidate of an associated function element configurable for the component of the system to the display device;

associated function element evaluation means for determining whether the associated function element configurable for the component of the system using the candidate of the associated function element is appropriate based on a condition which determines whether the associated function element is appropriate for the component of the system;

evaluation result output means for outputting a result of the determination in order to display the result of the determination on the display device,

wherein, after a sub implementation scheme required for the associated function element is not configured, an image informing of failure with respect to the security implementation scheme including the associated function element for the component of the system is displayed, and

wherein information of a cost required for the security implementation scheme configurable for component of the system is displayed.