Security system, information management system, encryption support system, and computer program product

An information management system for managing information by receiving support for encrypting information, the support being provided by an encryption support system, comprising:

• a receiving portion for receiving rule information that indicates an encryption rule of information defined for each secret level that is a level of wanting to keep information secret and encryption data that are necessary for encrypting information in accordance with the rule from the encryption support system;
• a classification secret level storing portion for storing classification of information managed by the information management system for each classification in connection with the secret level;
• an encrypting portion for encrypting information managed by the information management system by using the encryption data of the secret level corresponding to the classification of the information received by the receiving portion;
• an information storing portion for storing the information encrypted by the encrypting portion;
• and
• a process information transmitting portion for transmitting process information that indicates the encryption process performed by the encrypting portion to the encryption support system so as to receive a check whether or not the encryption of the information was performed in accordance with the rule.

An encryption support system for supporting an information management system for managing information to encrypt information, the encryption support system comprising:

• an encryption rule storing portion for storing rule information that indicates an encryption rule of the information for each secret level that is a level of wanting to keep information secret;
• a transmitting portion for transmitting encryption data that is necessary for encrypting information in accordance with the rule to the information management system;
• a receiving portion for receiving process information that indicates the encryption process performed by the information management system from the information management system;
• a monitoring portion for monitoring whether or not the encryption of information is performed in accordance with the rule by the information management system on the basis of the process information received from the information management system;
• and
• a warning portion for warning the information management system that was found to encrypt information not in accordance with the rule by the monitoring portion to do encryption of information in accordance with the rule.

A computer program product for use in a computer supporting encryption of information for an information management system that manages information, the computer program product comprising:

• means for transmitting rule information that indicates an encryption rule of the information for each secret level that is a level of wanting to keep information secret and encryption data that is necessary for encrypting information in accordance with the rule to the information management system;
• means for receiving process information that indicates the encryption process performed by the information management system from the information management system;
• means for monitoring whether or not the encryption of information is performed in accordance with the rule by the information management system on the basis of the process information received from the information management system;
• and
• means for warning the information management system that was found to encrypt information not in accordance with the rule by the monitoring means to do encryption of information in accordance with the rule.