Information processing apparatus, method, and medium

• US 9,787,708 B2
• Filed: 09/18/2013
• Issued: 10/10/2017
• Est. Priority Date: 10/26/2012
• Status: Active Grant

• Current Assignee: PFU Limited (Fujitsu Limited)
• Original Assignee: PFU Limited (Fujitsu Limited)
• Inventors: Koide, Kazuhiro, Okuda, Hiroshi, Ando, Shoko
• Primary Examiner(s): Pyzocha, Michael
• Application Number:
  US14/030,281
• Publication Number:
  US 20140123294A1
• Time in Patent Office: 1,483 Days
• Field of Search: 726 25
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1433 Vulnerability analysis

Abstract

An inspection server is provided with a related-information acquisition unit which acquires program-related information related to a program installed in a node connected to a network segment, a condition determination unit which determines whether or not the program-related information satisfies a security condition, and a measure information acquisition unit which acquires, when it is determined that the program-related information does not satisfy the security condition, measure information for allowing the node to satisfy the security condition in accordance with an attribute of the program.

Claims

1. An information processing apparatus, comprising:

a memory; and

a processor configured to;

acquire program-related data related to a program installed in a terminal connected to a network;

determine whether or not the program-related data satisfies a predetermined security condition;

determine a grade of the program as an attribute which represents a character of the program, the grade being evaluated in a plurality of grades depending on a level of compatibility between the program, to be upgraded, in a pre-update version and the program, to be upgraded, in a post-update version based on a style of behavior of the program or an installer for the program;

acquire, when it is determined that the program-related data does not satisfy the security condition, measure information for allowing the terminal to satisfy the security condition in accordance with the attribute of the program, the attribute allowing the level of compatibility to be recognized; and

notify the terminal of the measure information by generating a data including the measure information and sending the data to the terminal the measure information being acquired in accordance with the determination of the grade of the program as the attribute which allows the level of compatibility of the programs to be recognized.

2. The information processing apparatus according to claim 1, wherein, when there are a plurality of update versions available for the program installed in the terminal, the processor acquires measure information including information showing a recommended update version determined in accordance with the attribute of the program.

3. The information processing apparatus according to claim 1, the processor further configured to:

acquire dictionary data including the security condition and the measure information, wherein

the processor determines whether or not the program-related data satisfies the security condition included in the dictionary data, and

the processor acquires the measure information in accordance with the attribute of the program from the dictionary data.

4. The information processing apparatus according to claim 3, wherein

the dictionary data further includes version range information which allows a plurality of version ranges for managing target versions to each of which a correction program is to be provided by a program provider, to be discriminated from each other, and

the processor measure information in which a latest version in the version range including a version currently installed in the terminal or a latest version in the latest version range provided for the program is the recommended update version for the program in accordance with the attribute of the program.

5. The information processing apparatus according to claim 4, wherein the attribute further allows a support period during which the correction program is provided by the program provider, to be recognized.

6. The information processing apparatus according to claim 5, wherein, when it is determined that the version currently installed in the terminal is included in the version range for which the provision of the correction program is finished based on the support period that can be recognized from the program attribute, the processor acquires measure information in which the latest version in the latest version range is the recommended update version or measure information including a notification of no available update in accordance with the compatibility that can be recognized from the program attribute.

7. The information processing apparatus according to claim 5, wherein, when it is determined that the version currently installed in the terminal is included in the version range for which the provision of the correction program is finished based on the support period that can be recognized from the program attribute, the processor acquires measure information in which the latest version in the latest version range is the recommended update version or measure information in which a given version set in advance is the recommended update version in accordance with the compatibility that can be recognized from the program attribute.

8. The information processing apparatus according to claim 1, wherein

the attribute allows a possibility that the program in a newer version can be installed in the same terminal without removing the program in an older version therefrom, to be recognized, and

when it is determined that the program is a program which allows a newer version thereof to be installed in the same terminal without involving removal of an older version thereof based on the attribute of the program, the processor acquires measure information including an instruction to uninstall the older version.

9. The information processing apparatus according to claim 1, wherein the processor compares the behavior of the program or the installer for the program with behavior information associated with the attribute of the program to determine the attribute of the program.

10. The information processing apparatus according to claim 1, the processor further configured to:

authorize, when it is determined that the program-related data satisfies the security condition, communication by the terminal via the network.

11. A method to be implemented by a computer, comprising:

acquiring program-related data related to a program installed in a terminal connected to a network;

determining whether or not the program-related data satisfies a predetermined security condition;

determining a grade of the program as an attribute which represents a character of the program, the grade being evaluated in a plurality of grades depending on a level of compatibility between the program, to be upgraded, in a pre-update version and the program, to be upgraded, in a post-update version based on a style of behavior of the program or an installer for the program;

acquiring, when it is determined that the program-related data does not satisfy the security condition, measure information for allowing the terminal to satisfy the security condition in accordance with the attribute of the program, the attribute allowing the level of compatibility to be recognized; and

notifying the terminal of the measure information by generating a data including the measure information and sending the data to the terminal the measure information being acquired in accordance with the determination of the grade of the program as the attribute which allows the level of compatibility of the programs to be recognized.

12. A non-transitory computer-readable medium recorded with a program for causing a computer to function as:

a related information acquisition unit which acquires program-related data related to a program installed in a terminal connected to a network;

a condition determination unit which determines whether or not the program-related data satisfies a predetermined security condition;

an attribute determination unit which determines a grade of the program as an attribute which represents a character of the program, the grade being evaluated in a plurality of grades depending on a level of compatibility between the program, to be upgraded, in a pre-update version and the program, to be upgraded, in a post-update version based on a style of behavior of the program or an installer for the program;

a measure information acquisition unit which acquires, when it is determined that the program-related data does not satisfy the security condition, measure information for allowing the terminal to satisfy the security condition in accordance with the attribute of the program, the attribute allowing the level of compatibility to be recognized; and

a notification unit which notifies the terminal of the measure information by generating a data including the measure information and sending the data to the terminal the measure information being acquired in accordance with the determination of the grade of the program as the attribute which allows the level of compatibility of the programs to be recognized.