Patent ID: 7596803

Claim:
A method of generating security rules for an enterprise system associated with a semiconductor fabrication facility comprising: receiving a security policy from a security officer; indicating a first operation through a graphical user interface, the first operation associated with a first set of equipment of the enterprise system, wherein the enterprise system comprises a plurality of tangible equipment associated with the fabrication of semiconductor devices that includes the first set of equipment, wherein the first operation is included in a table of operations, the first operation selected from the group consisting of at least one of: a sensor read, FTP access, equipment register access, routine definition, routine deletion, routine activation, routine deactivate, remote operation, data collection plan, work pieces, data models, and equipment logon, and wherein the graphical user interface is configured to represent the plurality of tangible equipment, the first operation, the security policy, and users of the semiconductor fabrication facility; indicating through the graphical user interface a second set of equipment from a graphical representation of the first set of equipment, the second set of equipment being a subset of the first set of equipment; and generating a security policy rule indicating accessibility to information at each equipment of the second set of equipment, the security policy rule constructed from information associated with the first set of equipment, the second set of equipment, and the first operation.