Program, method, information processing device, and system

Abstract

To change the settings of devices owned by members of an organization to conform to security guidelines with little effort. [Solution] The program causes a processor to execute the following steps: a first step of acquiring an organization's security guidelines and a manual for a device owned by a member of the organization; a second step of inputting the acquired security guidelines and manual into a generation AI that has pre-configured instructions including instructions for referring to the manual and changing the settings of the device to conform to the security guidelines, and causing the generation AI to output an operation command for changing the settings of the device; and a third step of changing the settings of the device in accordance with the output operation command.

Description

[Technical Field]

[0001] The present disclosure relates to a program, a method, an information processing device, and a system. [Background technology]

[0002] Patent Document 1 describes a system that solves a given problem by including means for enabling the accuracy of security-related answers, security compliance rates, and application of security to the latest trends in system development, means for providing guidance for preparing security design before development, means for providing server development input, and means for enabling the setting of milestones based on internal and external data. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2025-059987 Summary of the Invention [Problem to be solved by the invention]

[0004] When allowing members of an organization to use devices such as PCs and smartphones, it is important to consider security. Some organizations set security guidelines to mitigate risks.

[0005] However, even if security guidelines are set, it takes a lot of effort to change the settings of the terminal to comply with the security guidelines.

[0006] An object of the present disclosure is to change the settings of devices owned by members of an organization to conform to security guidelines with little effort. [Means for solving the problem]

[0007] In order to solve the above problem, one embodiment of a program of the present disclosure is a program for operating a computer having a processor and a memory, the program causing the processor to execute the following steps: a first step of acquiring an organization's security guidelines and a manual for a device owned by a member of the organization; a second step of inputting the acquired security guidelines and the acquired manual to a generation AI that has pre-configured instructions including instructions for changing the settings of the device to settings that comply with the security guidelines by referring to the manual, and causing the generation AI to output an operation command to change the settings of the device; and a third step of changing the settings of the device in accordance with the output operation command. [Effects of the Invention]

[0008] According to the present disclosure, the settings of devices owned by members of an organization can be changed to conform to security guidelines with little effort. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a block diagram illustrating the configuration of an information processing system according to an embodiment. [Figure 2] FIG. 2 is a block diagram illustrating an example of the functional configuration of a terminal device. [Figure 3] FIG. 3 is a diagram illustrating an example of the functional configuration of the server. [Figure 4] FIG. 4 is a diagram showing the data structure of the member table. [Figure 5] FIG. 5 is a diagram showing the data structure of the manual table. [Figure 6] FIG. 6 is a diagram showing the data structure of the security guideline table. [Figure 7] FIG. 7 is a flowchart illustrating a device setting update process. [Figure 8] FIG. 8 is a diagram illustrating an example of a confirmation screen for the security guidelines and manual. [Figure 9] FIG. 9 is a diagram illustrating an example of a confirmation screen for the operation procedure. [Figure 10] FIG. 10 is a diagram illustrating an example of the setting completion notification screen. [Figure 11] FIG. 11 is a block diagram showing the basic hardware configuration of a computer. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. In all drawings describing the embodiments, common components are designated by the same reference numerals, and repeated description will be omitted. Note that the following embodiments do not unduly limit the content of the present disclosure described in the claims. Furthermore, not all components shown in the embodiments are necessarily essential components of the present disclosure. Furthermore, each drawing is a schematic diagram and is not necessarily a precise illustration.

[0011] In the following description, a "processor" refers to one or more processors. The at least one processor is typically a microprocessor such as a CPU (Central Processing Unit), but may also be another type of processor such as a GPU (Graphics Processing Unit). The at least one processor may be single-core or multi-core.

[0012] Furthermore, the at least one processor may be a processor in the broad sense, such as a hardware circuit (for example, a field-programmable gate array (FPGA) or an application-specific integrated circuit (ASIC)) that performs part or all of the processing.

[0013] In the following explanation, information that produces an output for an input may be described using expressions such as "xxx table," but this information may be data of any structure, or may be a learning model such as a neural network that produces an output for an input. Therefore, an "xxx table" may be referred to as "xxx information."

[0014] Furthermore, in the following description, the configuration of each table is an example, and one table may be divided into two or more tables, or all or part of two or more tables may be one table.

[0015] In addition, in the following explanation, processing may be described using the "program" as the subject, but since a program is executed by a processor to perform specified processing while appropriately using a memory unit and / or an interface unit, etc., the subject of the processing may also be the processor (or a device such as a controller that has that processor).

[0016] The program may be installed in a device such as a computer, or may be stored in, for example, a program distribution server or a computer-readable (e.g., non-transitory) recording medium. Also, in the following description, two or more programs may be realized as one program, or one program may be realized as two or more programs.

[0017] Furthermore, in the following description, identification numbers are used as identification information for various objects, but other types of identification information (for example, identifiers including alphabetic characters or symbols) may also be used.

[0018] In addition, in the following description, when describing elements of the same type without distinguishing between them, reference symbols (or common symbols among the reference symbols) may be used, and when describing elements of the same type with distinction between them, the identification numbers (or reference symbols) of the elements may be used.

[0019] In the following description, the control lines and information lines are those that are considered necessary for the description, and do not necessarily represent all the control lines and information lines in the product. All components may be interconnected.

[0020] Each information processing device is configured by a computer equipped with an arithmetic unit and a storage device. The basic hardware configuration of the computer and the basic functional configuration of the computer realized by the hardware configuration will be described later. For each of the terminal device 10 and the server 20, descriptions that overlap with the basic hardware configuration and basic functional configuration of the computer will be omitted.

[0021] <Overall system configuration> The configuration of an information processing system 1 according to an embodiment will be described below. Fig. 1 is a block diagram illustrating the configuration of an information processing system 1 according to an embodiment.

[0022] The information processing system 1 is a system for changing the settings of devices owned by members of an organization to settings that comply with security guidelines with little effort. As shown in Figure 1, the information processing system 1 includes a terminal device 10, a server 20, and a generation AI system 30. The terminal device 10, the server 20, and the generation AI system 30 are connected to each other so that they can communicate with each other via a communication network 80 such as the Internet or a LAN (Local Area Network).

[0023] For simplicity of illustration, FIG. 1 shows an example in which the system 1 includes one terminal device 10, but this is not limited thereto, and in reality, the system 1 may include multiple terminal devices 10 for use by multiple members of an organization. Similarly, the server 20 and the generative AI system 30 may each be configured as a single device, or may be configured as a collection of multiple devices. For example, the multiple functions required to realize the server 20 may be distributed to one or multiple physical servers depending on the processing capabilities of each hardware.

[0024] The terminal device 10 is a device carried by a member of an organization and is an information processing device operated by the member. A member carrying the terminal device 10 may also be referred to as a user of the terminal device 10. The terminal device 10 is realized by, for example, a mobile terminal such as a smartphone or a tablet, a desktop personal computer (PC), or a laptop PC. The terminal device 10 is realized by a computer including hardware such as a processor 11, a memory 12, a storage 13, an output device 14, a communication interface (IF) 15, and an input device 16.

[0025] The server 20 manages the terminal devices 10 of each member of the organization. The server 20 is realized by a computer including hardware such as a processor 21, a memory 22, a storage 23, a communication IF (Interface) 24, and an input / output IF 25.

[0026] The generative AI system 30 is, for example, a cloud server having an LLM (large-scale language model). The generative AI system 30 may be provided as an external cloud service, or may be an AI model in an on-premise environment running on a server within an organization. Also, while FIG. 1 shows an example in which the generative AI system 30 is independent from the server 20, the server 20 may also be configured to include the functions of the generative AI system 30 (for example, the LLM). The number of LLMs included in the generative AI system 30 may be one or more.

[0027] LLM is a single-modal natural language model constructed by learning from large amounts of text data, and is used in many NLG (Natural Language Generation) tasks, such as generating answers to specific questions, automatically generating sentences, and summarizing text. LLM is an example of a generative AI model. Examples of LLMs include: OpenAI: GPT-4 Google: Gemini 1.5 Flash ·Anthropic: Claude 3.5 Sonnet

[0028] The generative AI system 30 inputs text data sent from the server 20 into the LLM, and causes the LLM to output an answer to the input prompt. The generative AI system 30 transmits the answer output from the LLM to the server 20. Note that the generative AI system 30 may also input text data sent from the terminal device 10 into the LLM, cause the LLM to output an answer to the prompt input to the LLM, and transmit the answer output from the LLM to the terminal device 10.

[0029] <Configuration of terminal device> Fig. 2 is a block diagram showing an example of the functional configuration of terminal device 10. As shown in Fig. 2, terminal device 10 includes a communication unit 110, an input device 16, an output device 14, an audio processing unit 18, a microphone 181, a speaker 182, a camera 120, a position information sensor 130, an acceleration sensor 140, a storage unit 150, a control unit 160, and a generation AI 170. The blocks included in terminal device 10 are electrically connected by, for example, a bus or the like.

[0030] The communication unit 110 is realized by the communication IF 15. The communication unit 110 performs processing such as modulation and demodulation processing for the terminal device 10 to communicate with other devices. The communication unit 110 performs transmission processing on a signal generated by the control unit 160 and transmits the signal to the outside (for example, the server 20). The communication unit 110 performs reception processing on a signal received from the outside and outputs the signal to the control unit 160.

[0031] The input device 16 is a device for a user operating the terminal device 10 to input instructions or information. The input device 16 is realized, for example, by a touch-sensitive device 165 or the like, which inputs instructions by touching the operation surface. If the terminal device 10 is a PC or the like, the input device 16 may be realized by a reader, keyboard, mouse, or the like. The input device 16 converts instructions input by the user into electrical signals and outputs the electrical signals to the control unit 160. The input device 16 may also include, for example, a receiving port that receives electrical signals input from an external input device.

[0032] The output device 14 is a device for presenting information to a user operating the terminal device 10. The output device 14 is realized, for example, by a display 141 or the like. The display 141 displays data according to the control of the control unit 160. The display 141 is realized, for example, by an LCD (Liquid Crystal Display) or an organic EL (Electro-Luminescence) display or the like.

[0033] The audio processing unit 18 performs, for example, digital-to-analog conversion processing of an audio signal. The audio processing unit 18 converts a signal provided from the microphone 181 into a digital signal and provides the converted signal to the control unit 160. The audio processing unit 18 also provides the audio signal to the speaker 182. The audio processing unit 18 is realized, for example, by a processor for audio processing. The microphone 181 receives audio input and provides an audio signal corresponding to the audio input to the audio processing unit 18. The speaker 182 converts the audio signal provided from the audio processing unit 18 into audio and outputs the audio to the outside of the terminal device 10.

[0034] The camera 120 is a device that receives light with a light receiving element and outputs the light as an image capturing signal.

[0035] The position information sensor 130 is a sensor that detects the position of the terminal device 10, and is, for example, a GPS (Global Positioning System) module. The GPS module is a receiving device used in a satellite positioning system. In the satellite positioning system, signals are received from at least three or four satellites, and the current position of the terminal device 10 equipped with the GPS module is detected based on the received signals. The position information sensor 130 may detect the current position of the terminal device 10 from the position of the wireless base station to which the terminal device 10 is connected.

[0036] The acceleration sensor 140 is a sensor that detects the acceleration vector of the terminal device 10, that is, the acceleration and its direction.

[0037] The storage unit 150 is realized by, for example, the memory 12 and the storage 13, and stores data and programs used by the terminal device 10. The storage unit 150 stores, for example, user information 151 and device information 152.

[0038] The user information 151 includes, for example, information about the user (member) who uses the terminal device 10. The information about the user includes, for example, the user's ID, the user's name, age, address, date of birth, contact information, and the like.

[0039] The device information 152 is information about the terminal device 10, which is a device owned by the user. The device information 152 includes, for example, the device name, manufacturer, model number, OS (operating system) type and version, serial number, hardware information (e.g., CPU, memory (RAM), storage capacity, etc.), network information (e.g., MAC address), etc.

[0040] The control unit 160 is realized by the processor 11 reading a program stored in the storage unit 150 and executing instructions included in the program. The control unit 160 controls the operation of the terminal device 10. The control unit 160 functions as an operation reception unit 161, a transmission / reception unit 162, and a presentation control unit 163 by operating in accordance with the program.

[0041] The operation reception unit 161 performs processing for receiving instructions or information input from the input device 16. For example, the operation reception unit 161 receives instruction information input from the touch-sensitive device 165 or the like. The operation reception unit 161 receives audio instructions input from the microphone 181. For example, the operation reception unit 161 receives an audio signal input from the microphone 181 and converted into a digital signal by the audio processing unit 18.

[0042] The transmitting / receiving unit 162 performs processing for the terminal device 10 to transmit and receive data to and from an external device such as the server 20 in accordance with a communication protocol. For example, the transmitting / receiving unit 162 transmits information input by a user or instructions from the user to the server 20. The transmitting / receiving unit 162 also receives information provided by the server 20.

[0043] The presentation control unit 163 controls the output device 14 to present visual information to the user. For example, the presentation control unit 163 causes various types of information to be displayed on the display 141. The presentation control unit 163 also causes the speaker 182 to output various types of information.

[0044] The generation AI 170 is an edge AI, and the terminal device 10 has the function of the generation AI. This allows the AI ​​function to be completed locally without going through the server 20, achieving low latency and low communication costs. The generation AI 170 includes, for example, an LLM (large-scale language model). The LLM is a single-modal natural language model constructed by learning large-scale text data, and is used in many NLG (natural language generation) tasks, such as generating answers to specific questions, automatically generating sentences, and summarizing text.

[0045] <Server configuration> 3 is a diagram showing an example of the functional configuration of the server 20. As shown in FIG. 3, the server 20 performs the functions of a communication unit 201, a storage unit 202, and a control unit 203.

[0046] The communication unit 201 performs processing for the server 20 to communicate with external devices such as the terminal device 10 or the generation AI system 30 via the communication network 80.

[0047] The storage unit 202 stores, for example, various conditions or data related to the use of the generation AI. Specifically, the storage unit 202 stores a user table 2021, a manual table 2022, a manual 2023, a security guideline table 2024, a security guideline 2025, a security policy 2026, etc.

[0048] The user table 2021 stores information about each user. The manual table 2022 stores the correspondence between each terminal device 10 (device) owned by each user and the manual. The manual 2023 is a manual collected by crawling the server 20 or saved by a user.

[0049] The security guideline table 2024 stores information on multiple security guidelines within an organization. If there is only one security guideline within an organization, the security guideline table 2024 can be omitted. The security guideline 2025 is a document that summarizes specific implementation procedures and recommendations for realizing the security policy of the organization. The security policy 2026 is a document that defines the basic policy regarding information security of the organization.

[0050] The control unit 203 is realized by the processor 21 executing a program stored in the storage unit 202, and controls the overall operation of the server 20. The control unit 203 operates in accordance with the program, thereby functioning as a reception control module 2031, a transmission control module 2032, and a security management module 2033.

[0051] The reception control module 2031 performs processing to receive signals sent from the terminal device 10 and the generation AI system 30 to the communication unit 201 via the communication network 80 .

[0052] The transmission control module 2032 uses the communication unit 201 to perform processing to transmit signals to the terminal device 10 and the generation AI system 30 via the communication network 80.

[0053] The security management module 2033 performs processing to change the settings of the terminal device 10 to settings that comply with the security guidelines. Based on the identification information received from the terminal device 10, the security management module 2033 obtains the manual 2023 corresponding to the terminal device 10 from the memory unit 202 of the server 20 or an external storage device. The external storage device may be connected to the server 20 via the communication network 80. The security management module 2033 causes the generation AI system 30 to create the security guidelines 2025 based on the organization's security policy 2026. The security management module 2033 uses the transmission control module 2032 to transmit the organization's security guidelines 2025 and the manual for the terminal device 10 to the terminal device 10.

[0054] <Data Structure> FIG. 4 is a diagram showing the data structure of the user table 2021. The user table 2021 is a data structure that specifies the correspondence between information about users who are members of an organization and information about the terminal devices 10 (devices) owned by each user. The user table 2021 may be configured with items (columns) such as "name," "device ID," "device information," and "department," with "user ID" as a primary key that serves as a unique identifier. One record stores, for example, various types of information about the same person.

[0055] 5 is a diagram showing the data structure of the manual table 2022. The manual table 2022 is a data structure that specifies the correspondence between the manual 2023 and the device. The manual table 2022 is composed of items such as "Name," "Device ID," "Device Information," and "Update Date," with a "Manual ID" as a primary key that serves as a unique identifier. One record stores, for example, various types of information about the same manual.

[0056] FIG. 6 is a diagram showing the data structure of the security guideline table 2024. The security guideline table 2024 stores various information about security guidelines. The security guideline table 2024 is composed of items such as "Name," "Department Information," "Version Information," and "Update Date," with a "Security Guideline ID" as a primary key that serves as a unique identifier. One record stores, for example, various pieces of information about the same security guideline. If an organization has only one security guideline, the security guideline table 2024 can be omitted.

[0057] <Operation> The operation of the information processing system 1 will be described. FIG. 7 is a flowchart illustrating a device setting update process. The terminal device 10 (device) automatically starts the setting update process of FIG. 7 in response to a predetermined trigger. For example, when a user logs into a predetermined site from the terminal device 10 via the communication network 80 and inputs a predetermined instruction, the setting update process of FIG. 7 is automatically started. The site may be a site provided by the server 20, or may be a site provided by another server connected to the server 20 so as to be able to communicate with it.

[0058] In step S1, the terminal device 10 acquires the security guidelines and the manual for the terminal device 10 from the server 20 via the communication network 80.

[0059] The terminal device 10 transmits identification information for identifying the manual for the terminal device 10 to the server 20, and the server 20 acquires the manual corresponding to the terminal device 10 based on the identification information and transmits the acquired manual to the terminal device 10. The identification information for identifying the manual for the terminal device 10 may be the device information of the terminal device 10 or other information capable of identifying the device information of the terminal device 10.

[0060] As an example, the terminal device 10 transmits a user ID that identifies the user of the terminal device 10 to the server 20. The server 20 refers to the user table 2021 and acquires a device ID that corresponds to the received user ID. The server 20 refers to the manual table 2022 and acquires a manual ID that corresponds to the acquired device ID, and acquires the manual 2023 that corresponds to the acquired manual ID. The server 20 transmits the acquired manual to the terminal device 10.

[0061] As another example, the terminal device 10 may transmit the device ID of the terminal device 10 to the server 20. In this case, the server 20 refers to the manual table 2022, acquires the manual ID corresponding to the acquired device ID, and acquires the manual 2023 corresponding to the acquired manual ID.

[0062] If the manual corresponding to the terminal device 10 is not stored in the storage unit 202 of the server 20, the server 20 crawls the Internet to acquire the manual corresponding to the device information identified based on the information received from the terminal device 10. The manual acquired by crawling is saved in the storage unit 202, and information related to the manual is recorded in the manual table 2022.

[0063] Before step S1, the server 20 inputs the organization's security policy 2026 into the generation AI system 30 (second generation AI), causes the generation AI system 30 to output security guidelines 2025 in accordance with the security policy 2026, and obtains the security guidelines 2025 from the generation AI system 30.

[0064] In step S1, the terminal device 10 acquires security guidelines from the server 20. If the server 20 has a plurality of security guidelines 2025, the server 20 selects a security guideline that suits the terminal device 10 and transmits it to the terminal device 10.

[0065] For example, if the storage unit 202 of the server 20 stores only one security guideline, the server 20 transmits the security guideline to the terminal device 10 in response to a request from the terminal device 10. If the storage unit 202 of the server 20 stores multiple security guidelines with different update dates, the server 20 transmits the security guideline with the most recent update date to the terminal device 10. Alternatively, security guidelines may differ depending on groups (e.g., departments) within an organization. In this case, for example, the terminal device 10 may transmit a user ID to the server 20, and the server 20 may identify the department corresponding to the user ID, refer to the security guideline table 2024, obtain the security guideline 2025 corresponding to the identified department, and transmit it to the terminal device 10.

[0066] In step S2, the terminal device 10 inputs the acquired security guidelines and the acquired manual to the generation AI 170 (first generation AI). When the security guidelines and the manual are input, the generation AI 170 outputs an operation procedure for the terminal device 10 to change the settings of the terminal device 10 to settings that comply with the security guidelines. The generation AI 170 is, for example, an AI agent to which an instruction sentence as a prompt is set in advance.

[0067] The instruction includes an instruction to change the settings of the device (terminal device 10) to conform to the security guidelines by referring to the manual. Specifically, the instruction includes an instruction to refer to the device configuration description in the manual. The instruction includes an instruction to refer to the operation description related to changing the device settings in the manual. The instruction includes an instruction to refer to the device setting requirements in the security guidelines. The instruction statement includes an instruction to output an operation procedure for the device based on the device configuration, the operation content of the device, and the setting requirements of the device. That is, the instruction statement includes an instruction to output an operation procedure for changing the device settings to settings that comply with the security guidelines by referring to a manual, for example, an instruction to display the operation procedure on the display 141. The instruction sentence includes an instruction to generate a device operation command according to the approved operation procedure when the operation procedure is approved by the user, and an instruction to generate a device operation command according to the modified operation procedure when the operation procedure is modified by the user.

[0068] In step S3, the terminal device 10 causes the display 141 to display the operation procedure output by the generation AI 170.

[0069] In step S4, the terminal device 10 determines whether the user has operated the terminal device 10 to approve the operation procedure or to modify the operation procedure.

[0070] In step S5, if the operation procedure is approved, the generation AI 170 outputs an operation command in accordance with the approved operation procedure. In step S6, if the operation procedure is modified, the generation AI 170 outputs an operation command in accordance with the modified operation procedure. That is, the instruction text preset in the generation AI 170 includes an instruction to have the generation AI 170 output an operation command in accordance with the operation procedure confirmed by approval or modification.

[0071] In step S7, the terminal device 10 automatically changes the device settings in accordance with the operation command. Specifically, the settings to be changed include, for example, access restriction settings, selection of setting items, and security condition settings.

[0072] The access restriction setting may include a setting for specifying a data area among the data areas of the organization's server to which access from the terminal device 10 is prohibited. The access restriction setting may include a setting for specifying a type of website to which access from the terminal device 10 via the communication network 80 is prohibited.

[0073] The selection of a setting item may include the selection of a network connection setting item. The selection of a network connection setting item may include, for example, the selection of an item for disabling the tethering function. The selection of a setting item may include the selection of an item for disabling the pairing function of a Bluetooth (registered trademark) device. The selection of a setting item may include the selection of an item for disabling the camera 120 of the terminal device 10. The selection of a setting item may include the selection of an item for disabling the microphone 181 of the terminal device 10. The selection of a setting item may include the selection of an item for selecting one or more authentication methods from a plurality of candidate authentication methods. The candidate authentication methods include, for example, password authentication, biometric authentication, PIN authentication, device authentication, two-step authentication, etc. The selection of a setting item may include the selection of an item for automatically locking the screen of the terminal device 10 after a predetermined time has elapsed.

[0074] The security condition settings may include setting a condition for password setting rules (e.g., minimum number of characters, etc.). The security condition settings may include a condition for password expiration. The security condition settings may include setting a condition for forcibly installing a specified app. The security condition settings may include a setting condition for a specified app. The security condition settings may include setting a condition for prohibiting installation of an app other than a specified app.

[0075] In step S8, when the setting change is completed, the terminal device 10 outputs a notification indicating that the setting change is completed. For example, the terminal device 10 causes the display 141 to display a setting completion notification.

[0076] <Screen example> An example of a screen used in the information processing system 1 will be described. Fig. 8 is a diagram illustrating a confirmation screen 1411 for security guidelines and manuals. This screen 1411 is displayed on the display 141 of the terminal device 10. This screen 1411 displays the security guidelines and manuals that the terminal device 10 has acquired from the server 20. If the user approves the security guidelines and manuals displayed on the confirmation screen 1411, the user selects the OK button.

[0077] 9 is a diagram illustrating an example of an operation procedure confirmation screen 1412. This screen 1412 is displayed on the display 141 of the terminal device 10. This screen 1412 displays an operation procedure for changing device settings. The user can approve the operation procedure by selecting the OK button after modifying it, or can approve the operation procedure by selecting the OK button without modifying it.

[0078] 10 is a diagram illustrating a setting completion notification screen 1413. This screen 1412 is displayed on the display 141 of the terminal device 10. This screen 1413 is a screen that notifies the user that the setting of the terminal device 10 has been changed to a setting that complies with the security guidelines.

[0079] <Summary> As described above, according to the information processing system 1, the settings of the terminal devices 10 owned by members of an organization can be changed to settings that comply with security guidelines with little effort.

[0080] (Variation) The identification information of the terminal device 10 (device) may be input together with the security guidelines and the manual to the generation AI 170. In this way, when the manual includes descriptions of multiple types of devices, the generation AI 170 can identify the part of the manual that corresponds to the identification information of the terminal device 10.

[0081] The generation AI 170 may be connected to the terminal device 10 via a communication network 80 instead of being disposed inside the terminal device 10 .

[0082] Steps S1 and S2 may be executed by the server 20 instead of by the terminal device 10. In this case, the generation AI 170 that inputs the security guidelines and manual and outputs the operation procedure and operation command may be located in the server 20 or may be connected to the server 20 via the communication network 80.

[0083] The generation AI 170 is configured to perform desired output by tweaking the instruction sentences through prompt tuning, but the generation AI 170 may also be configured to perform desired output by cooperating with an external tool. For example, a tool that reads security guidelines, a tool that reads relevant parts of a manual, a tool that creates operation procedures, a tool that creates operation commands, etc. may cooperate with the generation AI 170. In other words, the generation AI 170 may use, for example, the so-called Model Context Protocol (MCP).

[0084] When the terminal device 10 has completed the setting change to a setting that complies with the organization's security guidelines, the terminal device 10 may transmit a setting completion notification to the server 20 indicating that the setting change has been completed. If the server 20 has not received a setting completion notification from the terminal device 10, the server 20 may send a command to the terminal device 10 to cause the terminal device 10 to display a notification urging the user to change the setting of the terminal device 10 to a setting that complies with the security guidelines. When the user instructs the terminal device 10 to change the setting in accordance with the notification, the terminal device 10 may transmit an approval signal to the server 20 approving the start of the setting change. Upon receiving the approval signal, the server 20 may transmit the security guidelines and a manual to the terminal device 10 to start the setting change. If the server 20 has not received a setting completion notification from the terminal device 10, the server 20 may notify the terminal of the organization's system administrator of information indicating that the setting of the terminal device 10 has not been changed to a setting that complies with the organization's security guidelines.

[0085] 7, steps S3 to S6 may be omitted. The instruction sentence preset in the generation AI 170 may include an instruction to output an operation command for changing the device settings to conform to the security guidelines by referring to a manual, without causing the generation AI 170 to output an operation procedure.

[0086] <Basic computer hardware configuration> 11 is a block diagram showing the basic hardware configuration of a computer 90. The computer 90 includes at least a processor 901, a main memory device 902, an auxiliary memory device 903, and a communication IF 991 (interface), which are electrically connected to one another by a communication bus 921.

[0087] The processor 901 is hardware for executing an instruction set written in a program, and is composed of an arithmetic unit, registers, peripheral circuits, and the like.

[0088] The main memory device 902 is used to temporarily store programs, data to be processed by the programs, etc. For example, it is a volatile memory such as a DRAM (Dynamic Random Access Memory).

[0089] The auxiliary storage device 903 is a storage device for saving data and programs, such as a flash memory, a hard disk drive (HDD), a magneto-optical disk, a CD-ROM, a DVD-ROM, or a semiconductor memory.

[0090] The communication IF 991 is an interface for inputting and outputting signals for communicating with other computers via a network using wired or wireless communication standards. The network is composed of the Internet, a LAN, various mobile communication systems constructed by wireless base stations, etc. For example, the network includes 3G, 4G, and 5G mobile communication systems, LTE (Long Term Evolution), and wireless networks (e.g., Wi-Fi (registered trademark)) that can connect to the Internet via a predetermined access point. In the case of a wireless connection, communication protocols include, for example, Z-Wave (registered trademark), ZigBee (registered trademark), and Bluetooth (registered trademark). In the case of a wired connection, the network also includes a direct connection using a USB (Universal Serial Bus) cable, etc.

[0091] It should be noted that the computer 90 can be virtually realized by distributing all or part of each hardware configuration across multiple computers 90 and interconnecting them via a network. In this way, the computer 90 is a concept that includes not only a computer 90 housed in a single housing or case, but also a virtualized computer system.

[0092] <Basic functional configuration of computer 90> The following describes the functional configuration of a computer realized by the basic hardware configuration (FIG. 11) of the computer 90. The computer includes at least the functional units of a control unit, a storage unit, and a communication unit.

[0093] The functional units of the computer 90 can also be realized by distributing all or part of the functional units among multiple computers 90 interconnected via a network. The computer 90 is a concept that includes not only a single computer 90 but also a virtualized computer system.

[0094] The control unit is realized by the processor 901 reading out various programs stored in the auxiliary storage device 903, expanding them in the main storage device 902, and executing processing in accordance with the programs. The control unit can realize functional units that perform various types of information processing depending on the type of program. In this way, the computer is realized as an information processing device that performs information processing.

[0095] The storage unit is realized by a main storage device 902 and an auxiliary storage device 903. The storage unit stores data, various programs, and various databases. Furthermore, the processor 901 can allocate a storage area corresponding to the storage unit in the main storage device 902 or the auxiliary storage device 903 in accordance with the programs. Furthermore, the control unit can cause the processor 901 to execute processes for adding, updating, and deleting data stored in the storage unit in accordance with the various programs.

[0096] A database refers to a relational database, which manages data sets called masters and tables in a tabular format structurally defined by rows and columns, by relating them to each other. In a database, a table is called a table, a master, a column in a table is called a column, and a row in a table is called a record. In a relational database, relationships between tables and masters can be set and associated. Typically, each table and each master has a column set as a primary key to uniquely identify a record, but setting a primary key to a column is not essential. The control unit can cause the processor 901 to add, delete, or update records in specific tables and masters stored in the storage unit according to various programs. Furthermore, by storing data, various programs, and various databases in the storage unit, it can be considered that the information processing device and information processing system according to the present disclosure have been manufactured.

[0097] Note that the databases and masters in this disclosure may include any data structure in which information is structurally defined (such as a list, dictionary, associative array, or object). The data structure also includes data that can be considered as a data structure by combining data with functions, classes, methods, etc. written in any programming language.

[0098] The communication unit is realized by the communication IF 991. The communication unit realizes a function of communicating with other computers 90 via a network. The communication unit can receive information transmitted from other computers 90 and input the information to the control unit. The control unit can cause the processor 901 to execute information processing on the received information in accordance with various programs. In addition, the communication unit can transmit information output from the control unit to other computers 90.

[0099] Furthermore, the above-described configurations, functions, processing units, processing means, etc. may be partially or entirely implemented in hardware, for example, by designing them as integrated circuits. The present invention can also be realized by software program code that implements the functions of the embodiments. In this case, a storage medium on which the program code is recorded is provided to a computer, and a processor included in the computer reads the program code stored in the storage medium. In this case, the program code itself read from the storage medium implements the functions of the above-described embodiments, and the program code itself and the storage medium on which it is stored constitute the present invention. Examples of storage media for providing such program code include flexible disks, CD-ROMs, DVD-ROMs, hard disks, SSDs, optical disks, magneto-optical disks, CD-Rs, magnetic tape, non-volatile memory cards, and ROMs.

[0100] Furthermore, the program code that realizes the functions described in this embodiment can be implemented in a wide range of program or script languages, such as assembler, C / C++, perl, Shell, PHP, and Java (registered trademark).

[0101] Furthermore, the program code of the software that realizes the functions of the embodiments may be distributed via a network and stored in a storage means such as a computer's hard disk or memory, or in a storage medium such as a CD-RW or CD-R, and the processor of the computer may read and execute the program code stored in the storage means or storage medium.

[0102] The functions performed by the components described herein may be implemented in circuitry or processing circuitry, including general-purpose processors, application-specific processors, integrated circuits, ASICs (Application Specific Integrated Circuits), a CPU (a Central Processing Unit), conventional circuits, and / or combinations thereof, programmed to perform the described functions. A processor includes transistors and other circuits and is considered to be circuitry or processing circuitry. A processor may also be a programmed processor that executes programs stored in memory. In this specification, a circuitry, unit, or means is hardware that is programmed to realize or performs the described functions, which may be any hardware disclosed herein or any hardware known to be programmed to realize or perform the described functions. If the hardware is a processor considered to be a type of circuitry, the circuitry, means, or unit is a combination of the hardware and software used to configure the hardware and / or processor.

[0103] Although several embodiments of the present disclosure have been described above, these embodiments can be embodied in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and modifications are intended to be included in the scope of the inventions and their equivalents as defined in the claims, as well as in the scope and spirit of the inventions.

[0104] (Addendum) The matters described in the above embodiments will be supplemented below.

[0105] (Appendix 1) A program for operating a computer having a processor and memory, the program causing the processor to execute the following steps: a first step of acquiring the security guidelines of an organization and the manual of a device owned by a member of the organization; a second step of inputting the acquired security guidelines and the acquired manual to a generation AI that has pre-configured instructions including instructions for referring to the manual and changing the device settings to settings that comply with the security guidelines, and causing the generation AI to output an operation command to change the device settings; and a third step of changing the device settings in accordance with the output operation command. (Appendix 2) A program as described in (Appendix 1), wherein the instruction text further includes an instruction to output an operation procedure to change the device settings, and the second step includes, if the operation procedure output from the generation AI is approved, causing the generation AI to output an operation command in accordance with the approved operation procedure. (Appendix 3) A program described in (Appendix 1) or (Appendix 2), wherein the instruction text further includes an instruction to output an operation procedure to change the device settings, and the second step includes, when the operation procedure output from the generation AI is modified, causing the generation AI to output an operation command in accordance with the modified operation procedure. (Appendix 4) A program described in any one of (Appendix 1) to (Appendix 3), which causes a processor to execute a fourth step of outputting a notification indicating that the device setting change has been completed when the device setting change has been completed. (Appendix 5) A program described in any of (Appendix 1) to (Appendix 4), wherein the generation AI is a first generation AI, and before the first step, the processor executes a fifth step of inputting the organization's security policy into a second generation AI and causing the second generation AI to output security guidelines in accordance with the security policy, and the first step includes obtaining the security guidelines output by the second generation AI. (Appendix 6) The program according to any one of (Appendix 1) to (Appendix 5), wherein a first step includes obtaining a manual transmitted from a server. (Appendix 7) A program described in any one of (Appendix 1) to (Appendix 6), wherein the server crawls a manual corresponding to device information indicating information about the device before the first step, and the first step includes obtaining the manual collected by the server through crawling. (Appendix 8) A method implemented on a computer having a processor and a memory, wherein the processor performs all of the steps recited in any one of (Appendix 1) to (Appendix 7). (Appendix 9) An information processing device including a control unit and a storage unit, wherein the control unit executes all of the steps described in any one of (Supplementary Note 1) to (Supplementary Note 7). (Appendix 10) A system having a configuration for executing all the steps described in any one of (Appendix 1) to (Appendix 7), the configuration including a terminal device and a server connected to the terminal device via a network, the server or the terminal device executing the first step and the second step, and the terminal device executing the third step. (Appendix 11) The system described in (Supplementary Note 10), wherein, before the first step, the server crawls a manual corresponding to device information indicating information about the device. [Explanation of symbols]

[0106] 10 Terminal equipment (device) 11 processors 12 Memory 20 servers 30 Generative AI System (Second Generative AI) 170 Generation AI (1st generation AI)

Claims

1. A program for operating a computer having a processor and a memory, The program causes the processor to: a first step of obtaining security guidelines for an organization and manuals for devices owned by members of said organization; a second step of inputting the acquired security guidelines and the acquired manual to a generation AI that is preset with an instruction sentence including an instruction to change the device settings to settings that comply with the security guidelines by referring to the manual, and causing the generation AI to output an operation command to change the device settings; a third step of changing the setting of the device in accordance with the output operation command; A program that executes.

2. the instruction text further includes an instruction to output an operation procedure for changing the setting of the device; The program according to claim 1, wherein the second step includes, when the operation procedure output from the generation AI is approved, causing the generation AI to output the operation command in accordance with the approved operation procedure.

3. the instruction text further includes an instruction to output an operation procedure for changing the setting of the device; The program of claim 1, wherein the second step includes, when the operation procedure output from the generation AI is modified, causing the generation AI to output the operation command in accordance with the modified operation procedure.

4. 2. The program according to claim 1, further comprising a fourth step of outputting a notification indicating that the setting change of the device has been completed when the setting change of the device has been completed.

5. The generated AI is a first generated AI, before the first step, causing the processor to execute a fifth step of inputting a security policy of the organization into a second generation AI and outputting the security guidelines according to the security policy to the second generation AI; The program according to claim 1 , wherein the first step includes obtaining the security guidelines output by the second generation AI.

6. 2. The program according to claim 1, wherein the first step includes acquiring the manual transmitted from a server.

7. The server crawls a manual corresponding to device information indicating information of the device before the first step; 2. The program according to claim 1, wherein the first step includes acquiring the manuals collected by crawling the server.

8. A computer-implemented method comprising a processor and a memory, wherein the processor performs all the steps of any one of claims 1 to 7.

9. An information processing device comprising a control unit and a storage unit, wherein the control unit executes all of the steps according to any one of claims 1 to 7.

10. 10. A system comprising a configuration for performing all the steps of claim 1, The configuration includes a terminal device and a server connected to the terminal device via a network, the server or the terminal device executes the first step and the second step, The terminal device executes the third step.

11. The system according to claim 10 , wherein the server crawls a manual corresponding to device information indicating information about the device before the first step.

Images