Security Function Design Support Device for Ancillary Element Evaluation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing security-function-design support methods struggle to effectively select and design ancillary-function elements necessary for implementing security functions, as their suitability varies with system configuration, leading to inefficient security function implementation and potential security incidents.

Innovation Solution

A security-function-design support device that includes a system-configuration data storage unit, implementation-method storage unit, ancillary-function-element storage unit, ancillary-function-element definition storage unit, ancillary-function-element evaluation unit, and evaluation-result output unit, which evaluates the suitability of ancillary-function elements based on system configuration and security implementation methods, ensuring appropriate ancillary-function element selection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a security implementation method is selected for a configuring element, then a security function is implemented, but ancillary-function elements must be additionally selected and designed, increasing design complexity and effort

Engineering Contradiction:
Improvesecurity function implementationVSAvoiddesign complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by pre-defining ancillary-function elements and their relationships with security implementation methods in a database before actual security design. When a security implementation method is selected, the corresponding ancillary-function elements are automatically retrieved and presented, eliminating the need for designers to manually identify and design these elements from scratch.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary security design support device that mediates between the security implementation method selection and the ancillary-function element configuration. This intermediary system automatically manages the complex relationships between security methods and their required ancillary elements, reducing the burden on designers while ensuring proper configuration.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If ancillary-function elements are selected based on system configuration, then security function efficiency is improved, but designers need extensive knowledge of both system configuration and security principles, increasing the difficulty of operation

Engineering Contradiction:
Improvesecurity function efficiencyVSAvoiddesigner operation difficulty
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent applies self-service by enabling the security design support device to automatically retrieve system configuration information and autonomously determine appropriate ancillary-function elements based on pre-stored relationships. The system serves itself by automatically matching security implementation methods with their required ancillary elements, reducing the need for designers to manually analyze system configuration and security requirements.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The intermediary security design support device bridges the gap between system configuration and security implementation by automatically interpreting system configuration data and translating it into appropriate security designs. This intermediary system handles the complexity of matching security methods with ancillary elements based on system characteristics, making the process accessible to designers with varying levels of expertise.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Loss of time

If insufficient design of ancillary-function elements occurs, then design effort is reduced, but security function does not work efficiently and security incidents may occur

Engineering Contradiction:
Improvedesign effortVSAvoidsecurity function efficiency
Core Design Contradiction:
Loss of timeVSReliability

Solution Approach 1:

The patent applies preliminary anti-action by proactively identifying and configuring all necessary ancillary-function elements before security implementation. The system pre-defines the relationships between security implementation methods and their required ancillary elements, ensuring that no critical security component is overlooked. This preliminary configuration prevents security deficiencies before they can cause incidents.

Inventive Principle:
Principle #9Preliminary anti-action

Solution Approach 2:

The patent implements feedback by automatically verifying whether the selected ancillary-function elements are appropriate for the given system configuration and security implementation method. The security design support device provides feedback information to designers about the suitability and completeness of the selected elements, ensuring that the security design meets required standards before implementation.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS9602542B2Security-function-design support device, security-function-design support method, and program storage medium
Publication Date: 2017.03.21 NEC CORP
  • US9602542B2 patent drawing
  • US9602542B2 patent drawing
  • US9602542B2 patent drawing

AI summary

A security-function-design support device is provided. The security-function-design support device includes a system-configuration data storage unit that stores information indicating a configuration of a system; an implementation-method storage unit that stores data indicating a security implementation method set for a configuring element of the system in order to implement a security function; an ancillary-function-element storage unit that stores data indicating an ancillary-function element set for the configuring element of the system in order to ensure a function of the security implementation method; an ancillary-function-element definition storage unit that stores a condition for determining a suitability of a setting of a given ancillary-function element; an ancillary-function-element evaluation unit that determines whether the ancillary-function element set for the configuring element of the system is suitable, on the basis of the condition for determining the suitability; and an evaluation-result output unit that outputs a result of the determination by the ancillary-function-element evaluation unit.