# US 12,223,058 B2 · Security inspection apparatus, security inspection method, and program > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,223,058 B2 - Document ID: US12223058B2 - Status: Granted - Kind: B2 - Application number: 17/918,157 - Filed: 2020-04-24 - Published: 2023-05-04 - Granted: 2025-02-11 - Earliest claimed: 2020-04-24 - Assignees: NEC Corporation - Applicants: NEC Corporation - Inventors: Kentaro Sonoda - Web page: https://patentgrep.com/patent/US12223058B2 ## CPC - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - G06F 2221/033: Test or assess software - G06F 2221/034: Test or assess a computer or a system - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract In order to appropriately detect flaws in a structure related to security of a system related to at least one of software and hardware, a security inspection apparatus includes an obtaining unit that obtains one or more pieces of configuration information related to configuration of a system to be inspected in security inspection, the system being related to at least one of software and hardware, a determining unit that determines whether or not each of the one or more pieces of configuration information is associated with any of one or more types of security functions set as inspection items for the security inspection, and a generating unit that generates information related to the determination. ## Claims ### Claim 1 A security inspection apparatus comprising: a memory storing instructions; and one or more processors configured to execute the instructions to: obtain one or more pieces of configuration information related to configuration of a system to be inspected in security inspection, the system being related to at least one of software and hardware; determine whether or not each of the one or more pieces of configuration information is associated with any of one or more types of security functions set as inspection items for the security inspection; and generate information related to the determination, wherein each of the one or more types of security functions belongs to one or more item sets out of a plurality of item sets, the plurality of item sets include a plurality of first item sets and a plurality of second item sets subdivided from each of the plurality of first item sets, and each of the one or more types of security functions belongs to one first item set out of the plurality of first item sets and one second item set out of the plurality of second item sets subdivided from the one first item set. ### Claim 2 (depends on 1) The security inspection apparatus according to claim 1, wherein each of the one or more pieces of configuration information indicates text data related to the configuration of the system, and the determination regarding the association is performed through comparison between text data indicated by each of the one or more pieces of configuration information and text data related to each of the one or more types of security functions set as the inspection items for the security inspection. ### Claim 3 (depends on 1) The security inspection apparatus according to claim 1, wherein the one or more pieces of configuration information include information related to configuration of a source code for operating the system. ### Claim 4 (depends on 1) The security inspection apparatus according to claim 1, wherein the one or more pieces of configuration information include information related to a bill of materials configuring the system. ### Claim 5 (depends on 1) The security inspection apparatus according to claim 1, wherein the information related to the determination includes information indicating whether or not each of the one or more pieces of configuration information is associated with any of the one or more types of security functions. ### Claim 6 (depends on 1) The security inspection apparatus according to claim 1, wherein the information related to the determination includes information indicating number of appearances of the configuration information in each of the plurality of item sets, the one or more pieces of configuration information being associated with the one or more types of security functions belonging to a corresponding item set. ### Claim 7 (depends on 1) The security inspection apparatus according to claim 1, wherein the information related to the determination includes information indicating whether or not there is a piece of configuration information associated with the one or more types of security functions belonging to each of a predetermined number or more of second item sets out of the plurality of second item sets subdivided from the one first item set. ### Claim 8 (depends on 1) The security inspection apparatus according to claim 1, the one or more processors are configured to execute the instructions to update the one or more types of security functions to be set as the inspection items for the security inspection. ### Claim 9 A security inspection method performed by a computer and comprising: obtaining, by the computer, one or more pieces of configuration information related to configuration of a system to be inspected in security inspection, the system being related to at least one of software and hardware; determining, by the computer, whether or not each of the one or more pieces of configuration information is associated with any of one or more types of security functions set as inspection items for the security inspection; and generating, by the computer, information related to the determination, wherein each of the one or more types of security functions belongs to one or more item sets out of a plurality of item sets, the plurality of item sets include a plurality of first item sets and a plurality of second item sets subdivided from each of the plurality of first item sets, and each of the one or more types of security functions belongs to one first item set out of the plurality of first item sets and one second item set out of the plurality of second item sets subdivided from the one first item set. ### Claim 10 A non-transitory computer readable recording medium storing a program for causing a computer to execute: obtaining one or more pieces of configuration information related to configuration of a system to be inspected in security inspection, the system being related to at least one of software and hardware; determining whether or not each of the one or more pieces of configuration information is associated with any of one or more types of security functions set as inspection items for the security inspection; and generating information related to the determination, wherein each of the one or more types of security functions belongs to one or more item sets out of a plurality of item sets, the plurality of item sets include a plurality of first item sets and a plurality of second item sets subdivided from each of the plurality of first item sets, and each of the one or more types of security functions belongs to one first item set out of the plurality of first item sets and one second item set out of the plurality of second item sets subdivided from the one first item set.