Security Measure Selection Under Subsystem and Component Constraints
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security measure determination techniques do not consider the constraints specific to subsystems and components within a system, leading to potential issues in implementing security measures that conform to regulatory requirements.
Innovation Solution
A security measure determination apparatus and method that includes a processor and memory to receive and process rule information, constraint condition information, and possible measure information, determining subsystem and component specific measures that satisfy both regulatory requirements and system constraints.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security measures are selected to satisfy regulatory requirements, then compliance with security rules is improved, but applicability to subsystems and components deteriorates
Solution Approach 1:
The patent applies local quality by determining security measures specifically tailored to each subsystem and component based on their individual constraint conditions. Instead of applying uniform security measures throughout the system, the apparatus identifies unique security measures for each component that satisfy both regulatory requirements and local constraints, thereby achieving compliance while maintaining applicability to specific subsystems and components
Solution Approach 2:
The patent utilizes parameter changes by dynamically adjusting security measure parameters based on constraint conditions of subsystems and components. The apparatus compares constraint conditions with proposed security measures and modifies the security measure parameters accordingly, selecting combinations that satisfy both regulatory requirements and system-specific constraints, thus resolving the contradiction between compliance and applicability
2Reliability
If comprehensive security measures are implemented to satisfy all regulatory requirements, then security compliance is improved, but implementation time and cost increase
Solution Approach 1:
The patent applies segmentation by dividing the security measure determination process into distinct steps: extracting security measures from regulatory requirements, comparing them with subsystem and component constraint conditions, and selecting appropriate combinations. This segmented approach allows the apparatus to systematically evaluate and select only the necessary security measures, reducing implementation time while maintaining compliance
Solution Approach 2:
The patent implements feedback by continuously comparing constraint conditions with proposed security measures and adjusting the selection accordingly. The apparatus uses the feedback from constraint condition comparisons to refine security measure selections, ensuring that only feasible and compliant measures are chosen, thereby reducing unnecessary implementation time and cost
3Reliability
If security measures are designed without considering subsystem constraints, then regulatory compliance is improved, but implementability deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-extracting security measures from regulatory requirements and pre-identifying constraint conditions for subsystems and components before final selection. The apparatus performs preliminary comparison and filtering to eliminate incompatible security measures early in the process, ensuring that only implementable measures are selected, thus improving both compliance and ease of implementation
Data Source
AI summary
A security measure determination apparatus: extract combinations to satisfy security requirements of a system, each combination including a subsystem specific measure and a component specific; and determine subsystem specific measures for a subsystem included in the system and component specific measures for components included in the subsystem from the extracted combinations, based on results of comparison of constraints on operating states assigned to subsystems included in the system and constraints to be satisfied by the subsystem to implement the subsystem specific measure and results of comparison of constraints on specifications assigned to components included in the system and constraints to be satisfied by the component to implement the component specific measure.