Security policy generation

A security policy generation device for generating a security policy that decides at least one of an electronic signature to be appended to a message transmitted or received by an information processing apparatus and an encryption method for encrypting the message transmitted or received by the information processing apparatus, the security policy being set up for the information processing apparatus, said device comprising:

• an application model generation part for generating an application model having an information processing apparatus, which is a transmitter and a receiver of the message, decided, for each of a plurality of messages that are communicated using a distributed application program processed by cooperating a plurality of information processing apparatuses, according to an instruction of user;
• a security pattern storage part for storing a plurality of security patterns that are models of security policy with a signer of electronic signature appended to the message or a decoder for decoding the encrypted message as an undecided parameter;
• a security policy pattern selection part for selecting a security pattern that is a model of security policy to be set up for the information processing apparatus, which is the transmitter or receiver of the message, corresponding to each of the plurality of messages included in the application model, according to an instruction of the user;
• and
• a security policy generation part for generating a security policy by substituting the identification information of the information processing apparatus, which is the transmitter or receiver of each message included in the application model, for the undecided parameter of the security pattern selected corresponding to the message.

A program for enabling a computer to operate as a security policy generating device for generating a security policy that decides at least one of an electronic signature to be appended to a message transmitted or received by an information processing apparatus and an encryption method for encrypting the message transmitted or received by the information processing apparatus, the security policy being set up for the information processing apparatus, the program enabling the computer to operate as:

• an application model generation part for generating an application model having an information processing apparatus, which is a transmitter and a receiver of the message, decided, for each of a plurality of messages that are communicated using a distributed application program processed by cooperating a plurality of information processing apparatuses, according to an instruction of user;
• a security pattern storage part for storing a plurality of security patterns that are models of security policy with a signer of electronic signature appended to the message or a decoder for decoding the encrypted message as an undecided parameter;
• a security policy pattern selection part for selecting a security pattern that is a model of security policy to be set up for the information processing apparatus, which is the transmitter or receiver of the message, corresponding to each of the plurality of messages included in the application model, according to an instruction of the user;
• and
• a security policy generation part for generating a security policy by substituting the identification information of the information processing apparatus, which is the transmitter or receiver of each message included in the application model, for the undecided parameter of the security pattern selected corresponding to the message.