System, method and article of manufacture for security management in a development architecture framework

• US 6,324,647 B1
• Filed: 08/31/1999
• Issued: 11/27/2001
• Est. Priority Date: 08/31/1999
• Status: Expired due to Term

• Current Assignee: Accenture Global Services Limited (Accenture PLC)
• Original Assignee: Accenture LLP (Accenture PLC)
• Inventors: Bowman-Amuah, Michel K.
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): Baderman, Scott T.
• Application Number:
  US09/388,137
• Time in Patent Office: 819 Days
• Field of Search: 713/201, 713/202, 713/200, 713/153, 713/154, 709/223, 709/224, 709/225, 709/229, 705/39, 705/67, 705/75
• US Class Current: 726/23
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A system, method, and article of manufacture are provided for providing security management in a development architecture framework. Unauthorized attempts to access a network are detected and when an unauthorized attempt to access the network is detected, a user is notified. Access from the network is restricted to a separate wide area network. The identities of users of credit cards are verified during transactions carried out over the network. The content of electronic mail communicated over the network is also monitored so that the communication of the electronic mail over the network is prevent when the content thereof being deemed inappropriate. The electronic mail is also encrypted during the communication thereof over the network.

Claims

1. A method for providing security management in a development architecture framework comprising the steps of:

(a) detecting unauthorized attempts to access a network;

(b) notifying a user upon detection of at least one of the unauthorized attempts to access the network;

(c) restricting access from the network to a separate wide area network;

(d) verifying identities of users of credit cards during transactions carried out over the network;

(e) monitoring content of information transmittal;

(f) preventing transmittal of information if the content does not adhere to standards; and

(g) encrypting electronic mail before transmission utilizing a network.

2. A method as recited in claim 1, and further comprising the step of providing a system administrator which performs at least one of the duties consisting of:

maintaining user access to the network, implementing tools on the network, analyzing security logs, investigating security violations over the network, and configuring a security system on a plurality of technology platforms.

3. A method as recited in claim 1, and further comprising the step of providing a security project and planning component which performs at least one of the duties consisting of:

assessing threats and risks over the network, implementing security polices and procedures over the network, implementing a disaster recovery plan over the network, and providing security training for the users of the network.

4. A method as recited in claim 1, and further comprising the step of providing a business process security component which performs at least one of the duties consisting of:

defining requirements over the network, and monitoring security indicators for processes carried out over the network.

5. A method as recited in claim 1, and further comprising the step of employing a cryptography engine for security features utilizing a network.

6. A method as recited in claim 1, and further comprising the step of providing a firewall for enforcing security utilizing a network.

7. A computer program embodied on a computer readable medium for providing security management in a development architecture framework comprising:

(a) a code segment that detects unauthorized attempts to access a network;

(b) a code segment that notifies a user upon detection of at least one of the unauthorized attempts to access the network;

(c) a code segment that restricts access from the network to a separate wide area network;

(d) a code segment that verifies identities of users of credit cards during transactions carried out over the network;

(e) a code segment that monitors content of information transmittal;

(f) a code segment that prevents transmittal of information if the content does not adhere to standards; and

(g) a code segment that encrypts electronic mail before transmission utilizing a network.

8. A computer program as recited in claim 7, and further comprising a code segment that provides a system administrator which performs at least one of the duties consisting of:

maintaining user access to the network, implementing tools on the network, analyzing security logs, investigating security violations over the network, and configuring a security system on a plurality of technology platforms.

9. A computer program as recited in claim 7, and farther comprising a code segment that provides a security project and planning component which performs at least one of the duties consisting of:

assessing threats and risks over the network, implementing security polices and procedures over the network, implementing a disaster recovery plan over the network, and providing security training for the users of the network.

10. A computer program as recited in claim 7, and further comprising a code segment that provides a business process security component which performs at least one of the duties consisting of:

defining requirements over the network, and monitoring security indicators for processes carried out over the network.

11. A computer program as recited in claim 7, and further comprising a code segment that employs a cryptography engine for security features utilizing a network.

12. A computer program as recited in claim 7, and further comprising a code segment that provides a firewall for enforcing security utilizing a network.

13. A system for providing security management in a development architecture framework comprising:

(a) logic that detects unauthorized attempts to access a network;

(b) logic that notifies a user upon detection of at least one of the unauthorized attempts to access the network;

(c) logic that restricts access from the network to a separate wide area network;

(d) logic that verifies identities of users of credit cards during transactions carried out over the network;

(e) logic that monitors content of information transmittal;

(f) logic that prevents transmittal of information if the content does not adhere to standards; and

(g) logic that encrypts electronic mail before transmission utilizing a network.

14. A system as recited in claim 13, and further comprising logic that provides a system administrator which performs at least one of the duties consisting of:

maintaining user access to the network, implementing tools on the network, analyzing security logs, investigating security violations over the network, and configuring a security system on a plurality of technology platforms.

15. A system as recited in claim 13, and further comprising logic that provides a security project and planning component which performs at least one of the duties consisting of:

assessing threats and risks over the network, implementing security polices and procedures over the network, implementing a disaster recovery plan over the network, and providing security training for the users of the network.

16. A system as recited in claim 13, and further comprising logic that provides a business process security component which performs at least one of the duties consisting of:

defining requirements over the network, and monitoring security indicators for processes carried out over the network.

17. A system as recited in claim 13, and further comprising logic that employs a cryptography engine for security features utilizing a network.

18. A system as recited in claim 13, and further comprising logic that provides a firewall for enforcing security utilizing a network.