Patent ID: 8112786
Filing Date: 2012-02-07
Classification: G06F,H04L

Abstract:
1. A security policy generation method for generating a security policy that decides at least one of an electronic signature to be appended to a message transmitted or received by a first information processing apparatus and an encryption method for encrypting the message transmitted or received by the first information processing apparatus, the security policy being set up for the first information processing apparatus, the security policy generation method comprising: storing, by a security pattern storage cart of a security policy generation device, a plurality of first security patterns, defining a plurality of instances of the first message to be transmitted and received among a plurality of second information processing apparatuses during an operation of distributed application programs to be processed in association with the plurality of second information processing apparatuses; generating an application model having a transmitter and a receiver of the first message that is decided, for each of the plurality of instances of the first message, by the security policy generation device, wherein one of the plurality of instances of the first message includes a parameter type, wherein the parameter type defines information stored in a second parameter of one of the plurality of instances of the first message; selecting, by the security policy generation device, from the plurality of first security patterns, a second security pattern that is one of the models of security policy to be set up for the first information processing apparatus in association with each of the plurality of instances of the first message included in the application model, according to a instruction of the user and further based on the interaction pattern of at least one of the plurality of first security patterns, the selecting further including: generating the security policy by substituting identification information of the first information processing apparatus for the undecided first parameter of the second security pattern selected in association with the first message, further substituting a signature processing parameter in the first information processing apparatus for the undecided first parameter.