Patent Document ID: 8112786
Application ID: 12251313
Patent Status: 1

Claim One:
1. A security policy generation method for generating a security policy that decides at least one of an electronic signature to be appended to a message transmitted or received by a first information processing apparatus and an encryption method for encrypting the message transmitted or received by the first information processing apparatus, the security policy being set up for the first information processing apparatus, the security policy generation method comprising: storing, by a security pattern storage cart of a security policy generation device, a plurality of first security patterns, the plurality of first security patterns being models of the security policy, each of the plurality of first security patterns having an undecided first parameter, the undecided first parameter being replaceable to indicate a signer of at least one electronic signature appended to a first message or a decoder for decoding an encrypted message, the first security patterns including a presence attribute indicating a prohibition of the first information processing apparatus being indicated as a transmitter in the first message, the first security patterns including descriptive texts described in natural language indicating a threat or attack to guard against, at least one of the first security patterns including descriptive texts described in natural language describing a summary of the first security patterns, and at least one of the first security patterns including an interaction pattern indicating a transmitter type, a receiver type, and an intermediary type; defining a plurality of instances of the first message to be transmitted and received among a plurality of second information processing apparatuses during an operation of distributed application programs to be processed in association with the plurality of second information processing apparatuses; generating an application model having a transmitter and a receiver of the first message that is decided, for each of the plurality of instances of the first message, by the security policy generation device, wherein one of the plurality of instances of the first message includes a parameter type, wherein the parameter type defines information stored in a second parameter of one of the plurality of instances of the first message; selecting, by the security policy generation device, from the plurality of first security patterns, a second security pattern that is one of the models of security policy to be set up for the first information processing apparatus in association with each of the plurality of instances of the first message included in the application model, according to a instruction of the user and further based on the interaction pattern of at least one of the plurality of first security patterns, the selecting further including: filtering the plurality of first security patterns by excluding one or more first security patterns based on the interaction pattern of the one or more first security patterns as compared to characteristics of the first information processing apparatus, wherein the second security pattern includes a cipher type as the undecided first parameter, and wherein the first information processing apparatus is one of the transmitter of the message and the receiver of the message; generating the security policy by substituting identification information of the first information processing apparatus for the undecided first parameter of the second security pattern selected in association with the first message, wherein the first information processing apparatus is one of the transmitter of the first message and the receiver of the first message included in the application model; and further substituting a signature processing parameter in the first information processing apparatus for the undecided first parameter.