Source: http://www.freepatentsonline.com/y2009/0044248.html
Timestamp: 2020-04-06 21:31:13
Document Index: 786808407

Matched Legal Cases: ['art.\n15', 'Application No. 2002', 'Application No. 2001', 'Application No. 2003', 'art 310', 'art 310', 'art 310', 'art 350', 'art 330', 'art 330', 'art1', 'art1']

SECURITY POLICY GENERATION - INTERNATIONAL BUSINESS MACHINES CORPORATION
United States Patent Application 20090044248
Nakamura, Yuhichi (Kanagawa-ken, JP)
Imamura, Takeshi (KANAGAWA-KEN, JP)
Makino, Satoshi (KANAGAWA-KEN, JP)
12/251313
711/E12.092, 713/176, 713/193
G06F21/00; G06F12/14; G06F17/00; H04L9/00; H04L29/06
Download PDF 20090044248 PDF help
20070199058 Method of using a security token August, 2007 Baumgart et al.
20090320107 SECURE PASSWORD RESET FOR APPLICATION December, 2009 Corella
20070250938 Signal Generator Based Device Security October, 2007 Suh et al.
9. A security policy generation method for generating a security policy that decides at least one of an electronic signature to be appended to a message transmitted or received by an information processing apparatus and an encryption method for encrypting the message transmitted or received by an information processing apparatus, the security policy being set up for the information processing apparatus, a step of generating security policy, comprising: a security pattern storage step of storing a plurality of security patterns that are models of security policy with a signer of electronic signature appended to the message or a decoder for decoding an encrypted message as an undecided parameter by a security pattern storage part of the security policy generation device; an application model generation step of defining a plurality of messages to be transmitted and received between/among information processing apparatuses during the operation of distributed application program to be processed in association with a plurality of information processing apparatuses, and generating an application model having a transmitter and a receiver of the message decided, for each of a plurality of message, by the security policy generation device; a security pattern selection step of selecting a security pattern that is a model of security policy to be set up for an information processing apparatus, which is the transmitter or receiver of the message, in association with each of the plurality of messages included in the application model, according to the instruction of the user, by the security policy generation device; a security policy generation step of generating the security policy by substituting identification information of an information processing apparatus, which is the transmitter or receiver of each message included in the application model, for the undecided parameter of the security pattern selected in association with the message.
10. The security policy generation method according to claim 9, wherein the security pattern storage step further comprises a candidate selection step, wherein the security pattern storage part stores the security pattern that includes a presence attribute indicating that the presence of the intermediary in a message of setting object or a presence inhibition attribute indicating the prohibition of the presence of the intermediary in the message of setting object, and the security policy generation device selects a candidate of the security patterns based upon the determination of whether or not there is the intermediary in the message of setting object.
11. The security policy generation method according to claim 10, wherein in the security pattern storage step, the security pattern storage part stores a security pattern for a transmitter, a security pattern for a receiver and a security pattern for an intermediary, which are models of security policies settable to a transmitter, a receiver and an intermediary of a message, respectively; and in the candidate selection step, the security policy generation device selects a candidate of the security pattern settable to the information processing apparatus, based upon which one of the transmitter, receiver and intermediary of a message, which are objects to be set the security policy, is the information processing apparatus, which is subject to be set the security policy; and in the security pattern selection step, the security policy generation device selects a security pattern from security pattern candidates of selected in the candidate selection step, based upon the instruction by the user.
12. The security policy generation method according to claim 9, wherein in the security pattern storage step, the security pattern storage part stores as the security pattern, the setting for the receiver of the message that includes the receiver of the message as the undecided parameter and indicates the reception of the message where an electronic signature of the transmitter is appended is permitted; and in the security policy generation step, the security policy generation device substitutes, in response that the security pattern is selected, the identification information of the receiver of the message corresponding to the security pattern for the undecided parameter of the security pattern regarding the receiver.
13. The security policy generation method according to claim 9, wherein in the security pattern storage step, the security pattern storage part stores as the security pattern, the setting for the receiver of the message that includes the receiver of the message as the undecided parameter and indicates the reception of the message encrypted using a cipher that the receiver can decode is permitted; and in the security policy generation step, the security policy generation device substitutes, in response that the security pattern is selected, the identification information of the receiver of the message corresponding to the security pattern for the undecided parameter of the security pattern regarding the receiver.
14. The security policy generation method according to claim 9, wherein the message includes a plurality of message parts; in the application model generation step, the security policy generation device generates, for each message part, the application model having the transmitter and the receiver of the message part decided; in the security pattern selection step, the security policy generation device selects the security pattern that is a model of security policy to be set up for the transmitter or receiver of the message part, in association with each of the plurality of message parts; and in the security policy generation step, the security policy generation device generates the security policy by substituting the identification information of the transmitter or receiver of each message part for the undecided parameter of the security pattern selected in association with the message part.
15. The security policy generation method according to claim 9, further comprising a platform model storage step of storing an encryption processing parameter used in a process of encryption or decoding by the information processing apparatus or a signature processing parameter used in a process of generating electronic signature or in a process of authenticating the electronic signature by the information processing apparatus, each parameter being specific in advance for each information processing apparatus, wherein in the security pattern storage step, the security pattern storage part stores a security pattern that includes, as an additional undecided parameter, the encryption processing parameter to be used in the process of encryption or decoding or the signature processing parameter to be used in the process of generating the electronic signature to be appended to the message of in the process of authenticating the electronic signature, and in the security policy generation step, the security policy generation device further substitutes the encryption processing parameter or the signature processing parameter in the information processing apparatus of security policy setting object for the undecided parameter of the security pattern.
The present invention relates to a security policy generation method, a security policy generation device, a program and a recording medium. More particularly, this invention relates to a security policy generation method, a security policy generation device, a program and a recording medium for generating a security policy that is set up for a transmitting or receiving message in at least one of a plurality of information processing apparatuses connected via a network.
In recent years, it is common that an information processing apparatus such as a server apparatus is communicated with another information processing apparatus connected via a network.
[Patent Document 1] Published Unexamined Patent Application No. 2002-1008818
[Patent Document 2] Published Unexamined Patent Application No. 2001-101135
[Patent Document 3] Published Unexamined Patent Application No. 2003-196476
[Non-Patent Document 1] A. Nadalin, “Web Services Security Policy (WS-SecurityPolicy)”, 2002. HomepageURL “http://www-106.ibm.com/developerworks/webservices/library/w s-secpol”
[Non-Patent Document 2] E. Christensen, F. Curbera, G. Meredith, and S. Weerawarana, “Web Services Description Language (WSDL)1.1”, W3C Note, 2001. HomepageURL “http://www.w3.org/TR/wsdl”
Along with the spread of the network such as the Internet, an unfair practice of using altered or falsified data has become a problem. On the contrary, a technique has been conventionally offered in which a security policy defining the restriction on data access, encryption, or electronic signature is generated and set up in the information processing apparatus (refer to patent documents 1 to 3).
Accordingly, an object of the invention is to provide a security policy generation method, security policy generation device, program and recording medium that can solve the above problem. To solve these problems, according to the invention, there is provided a security policy generation method for generating a security policy that decides at least one of an electronic signature to be appended to a message transmitted or received by an information processing apparatus and an encryption method for encrypting the message transmitted or received by the information processing apparatus. The security policy is set up for the information processing apparatus. A security policy generation method includes: an application model generation step of generating for each of a plurality of messages that are communicated using a distributed application program, an application model having a transmitter and a receiver of the message decided, according to an instruction of the user; a security pattern storage step of storing in advance a plurality of security patterns that are models of security policy having a signer of an electronic signature appended to the message or a decoder for decoding the encrypted message as an undecided parameter; a security pattern selection step of selecting according to an instruction of the user, a security pattern that is a model of security policy to be set up for the transmitter or receiver of the message, corresponding to each of the plurality of messages included in the application model; and a security policy generation step of generating a security policy by substituting the identification information of the transmitter or receiver of each message included in the application model for the undecided parameter of the security pattern selected corresponding to the message.
FIG. 4 shows an example of a security pattern 400a;
FIG. 5 shows an example of a security pattern 400b;
FIG. 6 shows an exemplary application model;
The present invention provides security policy generation methods, security policy generation devices, and program and recording medium that can solve the above problem. To solve the above problem, according to the invention, there are provided (1) a security policy generation method for generating a security policy (2) a security policy generation device using the security policy generation method, (3) a program for enabling a computer to operate as the security policy generation device and (4) a recording medium on which the program is recorded.
The authentication server 60 manages encryption key or electronic certificate for the process of encrypting a message or appending an electronic signature to a message. The authentication server 60 issues the encryption key or electronic certificate, etc. in response to a request from the terminal 35, server 40 and server 50. An example of the authentication server 60 is Certified Authority (CA) which issues an X.509—compliant encryption key, etc.
The 22nd to 28th lines of the interface setting information 20 define a program performing the service processing and the I/O of the program. Specifically, my services1 specified in operation tag indicates the name of program; message1 specified in input tag indicates the identification information of a message inputted into the program; message4 specified in output tag indicates the identification information of a message outputted from the program. The 30th to 32nd lines of the interface setting information 20 define the communication protocol, etc. specifically used in the transmitting or receiving process with respect to the transmitting or receiving of each message. The interface setting information 20 is described using interface description language. For example, it may be described using WSDL (Web Services Description Language). The details of WSDL are described in non-patent document 2, and hence repeated explanation thereof is omitted here.
The security pattern storage part 310 stores a plurality of security patterns that are models of security policy with a signer of electronic signature appended to a message or a decoder for decoding the encrypted message as an undecided parameter. For example, the security pattern storage part 310 may store each of a security pattern for transmitter, a security pattern for receiver and a security pattern for intermediary, each being a model of security pattern settable in each of the transmitter, receiver and intermediary of the message. The security pattern may further include a parameter used in a process of encrypting or decoding a message, a parameter used in a process of generating an electronic signature appended to a message or a parameter used in a process of authenticating the electronic signature as an undecided parameter. As specific examples, a security pattern 400a and a security pattern 400b each stored in the security pattern storage part 310 will be described later.
FIG. 4 shows an example of a security pattern 400a. The name of the security pattern 400a is “encrypted message (ET1)”. With the security pattern 400a, a security policy that allows the information processing apparatus to receive only a message encrypted according to a predetermined method can be generated.
Specifically, the security pattern 400a includes descriptive texts described in natural language. A descriptive text “provision of secret message” describing the summary of the security pattern is included in the security pattern 400a. Also, a descriptive text “information leaks” describing the presumed situation with respect to the security pattern is included in the security pattern 400a. This descriptive text indicates the attack or threat to be guarded against using the security policy to be set up, or the countermeasure against these practices.
In addition, the security pattern 400a includes transmitter type, receiver type and intermediary type. Specifically, the security pattern 400a includes as the transmitter type any one of the presence attribute (any) indicating the presence of an information processing apparatus for transmitter in the message of security pattern 400a setting object, the presence inhibition attribute (none) indicating the prohibition of the presence of an information processing apparatus for transmitter in the message of security pattern 400a setting object, and the self attribute (self) indicating that the security pattern 400a is a security pattern for transmitter.
Similarly, the security pattern 400a includes as the receiver type any one of the presence attribute (any) indicating the presence of an information processing apparatus for receiver in the message of security pattern 400a setting object, the presence inhibition attribute (none) indicating the prohibition of the presence of an information processing apparatus for receiver in the message of security pattern 400a setting object and the self attribute (self) indicating that the security pattern 400a is a security pattern for a receiver.
Similarly, the security pattern 400a includes as the intermediary type any one of the presence attribute (any) indicating the presence of an information processing apparatus for intermediary in the message of security pattern 400a setting object, the presence inhibition attribute (none) indicating the prohibition of the presence of an information processing apparatus for intermediary in the message of security pattern 400a setting object, and the self attribute (self) indicating that the security pattern 400a is a security pattern for an intermediary.
More specifically, referring to the drawing, the intermediary type is none; therefore the security pattern 400a indicates the inhibition of the presence of an intermediary in the message of security pattern 400a setting object. In the drawing, the transmitter type is any; therefore the security pattern 400a indicates the presence of a transmitter in the message of security pattern 400a setting object. In the drawing, the receiver type is self; therefore the security pattern 400a indicates that it is a security pattern for receiver.
In addition, the security pattern 400a includes a model of security policy with the name of a message of setting object, the encryption algorithm, the type of cipher and the identification information regarding Certified Authority as an undecided parameter. For example, referring to the drawing, a string of characters enclosed in braces with $ mark indicates an undecided parameter. More specifically, ${ALGORITHM URL} indicates the location of a program implementing the encryption algorithm. ${TOKEN_TYPE_QNAME} indicates the type of cipher, which specifically indicates the kind of electronic certificate, etc. ${TOKEN_ISSUER_NAME} indicates the identification information regarding the authentication server 60, etc. being an issuer of encryption key.
In the drawing, a model of security policy is represented as text data. Alternatively, the security pattern 400a may hold a model of security policy being divided into a plurality of segments. For example, the security pattern 400a may hold an undecided-parameter segment and a non-undecided parameter segment as fragmentary text data. In this case, a process of retrieving an undecided parameter from the security policy can be made more efficient.
FIG. 5 shows an example of a security pattern 400b. The name of the security pattern 400b is “signed message (SI1)”. The security pattern 400b, which is a setting for the receiver of a message, includes the transmitter of the message as an undecided parameter and indicates that only the reception of the message with the electronic signature of the transmitter appended thereto is permitted.
Specifically, the security pattern 400b includes descriptive texts described in natural language. A descriptive text “provision of complete message” describing the summary of the security pattern is included in the security pattern 400b. In addition, a descriptive text “message forgery” describing the presumed situation with respect to the security pattern is included in the security pattern 400b. This descriptive text indicates the attack or threat to be guarded against using the security policy to be set up, or the countermeasure against these practices.
Also, the security pattern 400b decides transmitter type, receiver type and intermediary type. More specifically, referring to the drawing, the intermediary type is any; therefore, the security pattern 400b indicates the presence of an intermediary in the message of setting object. Referring to the drawing, the transmitter type is any; therefore, the security pattern 400b indicates the presence of a transmitter in the message of setting object. Referring to the drawing, the receiver type is self; therefore, the security pattern 400b indicates that it is a security pattern for receiver.
In addition, the security pattern 400b includes a model of security policy with the name of a message of setting object, the encryption algorithm, the type of cipher and the identification information regarding Certified Authority as an undecided parameter. For example, referring to the drawing, a string of characters enclosed in braces with $ mark indicates an undecided parameter. More specifically, ${ALGORITHM_URI} indicates the location of a program implementing the encryption algorithm. ${TOKEN_TYPE_QNAME} indicates the type of cipher, which specifically indicates the kind of electronic certificate, etc. ${TOKEN_ISSUER_NAME} indicates the identification information regarding the authentication server 60, etc. being an issuer of encryption key. ${INITIAL_SENDER_NAME} indicates the identification information regarding the transmitter of a message.
In response that the security pattern 400b is selected corresponding to the message, the security policy generation part 350 substitutes the identification information of the transmitter of the message corresponding to the security pattern 400b for the undecided parameter of the security pattern 400b regarding the transmitter. In this way, according to the security policy generation device 30 according to the embodiment, the tag information, etc. indicating the security policy format are prepared in advance as security pattern, thus setting only a different part as undecided parameter according to the message of setting object. Accordingly, a suitable security pattern can be quickly created.
In the drawing, a model of security policy is shown as single text data described in a description language called WS-SecurityPolicy (refer to non-patent document 1). Alternatively, the security pattern 400b may hold a model of security policy using another data format. For example, the security pattern 400b may hold a fragment of that part of security policy that identifies an undecided parameter.
The user selects security patterns from a tool box storing a plurality of security patterns on the GUI and arranges the selected security patterns corresponding to the message parts. Consequently, the security pattern selection part 330 can select a security pattern that is a model of security policy set up for the transmitter or receiver of a message part, corresponding to each message part. For example, the security pattern selection part 330 can select security pattern ET1 corresponding to message part part1-a, and can select security pattern SI1 corresponding to message part part1-c.
An example of a process of the information processing system 10 sequentially substituting a value for each undecided parameter of security pattern will now be explained.
Security pattern NT1 includes ${TOKEN_TYPE_QNAME}, ${TOKEN_ISSUER_NAME} and ${MESSAGE_PARTS} as undecided parameters. ${TOKEN_TYPE_QNAME} indicates the type of cipher, and specifically indicates the kind, etc. of electronic certificate. ${TOKEN_ISSUER_NAME} indicates the identification information regarding the authentication server 60, etc. serving as the issuer of encryption key or electronic certificate. ${MESSAGE_PARTS} indicates message parts to which electronic signature is applied. Specifically, the order information of a transmitter ordering commodities, etc. from a receiver is substituted for ${MESSAGE_PARTS}.
Next Patent: SYSTEMS, METHODS AND COMPUTER PRODUCTS FOR A SECURITY FRAMEWORK TO REDUCE ON-LINE COMPUTER EXPOSURE