Patent ID: 8141131

Claim:
A security policy generation device comprising: an application model generation part that generates an application model that defines communications for each of a plurality of messages that are communicated using a distributed application program processed by a plurality of information processing apparatuses, wherein the application model generation part by the performance of a computer processor individually determines a transmitter or receiver for each message part within each of the plurality of messages, and wherein the application model generation part automatically generates the application model according to interface setting information provided for a server; a security pattern storage part which stores a plurality of security patterns that are models of a plurality of security policies, such that the security polices have an undecided parameter of the security patterns set to an electronic signature appended to the one of the messages or a decoder for decoding an encrypted message, wherein the plurality of security patterns include a countermeasure to an attack to be guarded against, and wherein each of the plurality of security patterns includes a location of a program implementing an encryption algorithm of each of the models of a plurality of security policies; a security policy pattern pruning part that deletes those of the plurality of security patterns in which transmitter type is not set to itself, wherein the security policy pattern pruning part deletes those of the plurality of security patterns in which the receiver type is not set to itself, and wherein the security policy pruning part deletes those of the plurality of security patterns in which an intermediary exists for a selected message and in which the intermediary type is set to none; a security policy pattern selection part in which a user selects one of the plurality of security patterns for each message part of one of the messages; and a security policy generation part that generates each of the plurality of security policies by substituting identification information of transmitter or receiver of one of the message parts of one of the messages for the undecided parameter of the selected security pattern.