JP7716628B2 - Creation support device, creation support method, and creation support program - Google Patents

Description

Article 30, Paragraph 2 of the Patent Act applies. https://www.ieice.org/ken/paper/20210318sCdm/ Website publication date: March 11, 2021

The present invention relates to a creation support device, a creation support method, and a creation support program.

Conventionally, technologies that use operation logs to assist in the creation of manuals, technologies that display manuals in conjunction with operations, and technologies that generate the table of contents of a configuration manual based on the state of the target device are known (see non-patent literature 1 and 2).

Hiroki Nakanishi, Nagato Nawa, Ken Masuda, Haruo Oishi, Hiroyuki Nakamura, "Proposal of a Consistency Check Function and Feedback Function Between Operation Logs and Configuration Procedures in Network Configuration Operations," IEICE Technical Journal, Vol. 119, No. 299, ICM2019-29, 2019 Hiroki Nakanishi, Nagato Nawa, Haruo Oishi, Hiroyuki Nakamura, “A method for creating device configuration procedures for branching using PAD diagrams”, 2020 IEICE Society Conference, B14-6, 2020

However, with conventional technology, it was difficult to create a manual of operating procedures for referencing and configuring security-related items for individual information terminal products from a generic security document that was written so as not to be dependent on a specific information terminal product. For example, when creating a manual from a security document such as a security policy document, the manual creator had to look up the configuration and reference procedures for the specific product's operating system and browser that corresponded to the generic attribute names, which was not easy.

The present invention has been made in consideration of the above, and aims to easily create an operating procedure manual for referencing and setting security-related items for individual information terminal products from a general-purpose security-related document.

To solve the above-mentioned problems and achieve the objectives, the creation support device of the present invention is characterized by having a memory unit that stores an attribute name correspondence table that corresponds generic attribute names of an information terminal with specific attribute names, and an operation procedure correspondence table that corresponds the specific attribute names with operation procedures related to the attribute values of the specific attribute names; an extraction unit that extracts the specific attribute names from the attribute name correspondence table that correspond to the generic attribute names of a document written using generic attribute names of the information terminal; a presentation unit that presents the extracted specific attribute names in correspondence with the generic attribute names in conjunction with the presentation of the document; and an identification unit that identifies the operation procedure that corresponds to the specific attribute name selected in the operation procedure correspondence table from the presented specific attribute names.

According to the present invention, it is easy to create an operating procedure manual for referencing and setting security-related items for individual information terminal products from a general-purpose security-related document.

FIG. 1 is a diagram for explaining an outline of a creation support device according to this embodiment. FIG. 2 is a diagram for explaining an outline of the creation support device according to this embodiment. FIG. 3 is a schematic diagram illustrating the general configuration of the creation support device according to this embodiment. FIG. 4 is a diagram illustrating the configuration of the attribute name correspondence table. FIG. 5 is a diagram illustrating an example of the configuration of the operation procedure correspondence table. FIG. 6 is a diagram for explaining the processing of the creation support device. FIG. 7 is a diagram for explaining the processing of the presentation unit and the display unit. FIG. 8 is a flowchart showing the creation support processing procedure. FIG. 9 illustrates an example of a computer that executes a creation support program.

One embodiment of the present invention will be described in detail below with reference to the drawings. Note that the present invention is not limited to this embodiment. In addition, in the drawings, identical parts are designated by the same reference numerals.

[Outline of Creation Support Device]
1 and 2 are diagrams for explaining an overview of a creation support device according to this embodiment. The creation support device according to this embodiment supports the creation of security-related items in a business manual. The business manual shows specific methods for implementing business operations according to the system environment, product, and business of an individual information terminal.

As shown in Figure 1, governance-related documents are defined in a hierarchical structure, from top to bottom, in the order of charter, security policy document, and business manual. In other words, the security items in the business manual are created based on higher-level security documents, such as security policy documents established by a company's legal department, etc.

These security regulations documents are established based on a charter that sets out clear management principles and vision presented by management, and represent general business standards that are not dependent on specific system environments, products, or business operations. In order to create business manuals based on such high-level security documents, it is necessary to research the reference and configuration procedures for security-related items depending on the operating system, browser, etc. of each individual information terminal.

The creation support device replaces generic attribute names such as OS and browser in the security-related document with specific attribute names such as Windows (registered trademark) 10 and IE (Internet Explorer) 11 for individual information terminals as annotations, as shown in Figure 2. The creation support device then supports the creation of security-related items in the business manual by displaying the operating procedures corresponding to the specific attribute names selected by the manual creator.

In the example shown in Figure 2, in response to the statement in the security parent document that "The terminal's OS and browser should be versions with security measures implemented," the confirmation and setting procedure for "How to check the version of IE11 for Windows 10 on the information terminal" is displayed. In this way, the creation support device converts the generic attribute names contained in the text written in the security parent document, which is written generically, into specific attribute names specific to each individual product, and displays the procedures for referencing and setting those attribute values. In this way, the creation support device supports the creation of security-related items in the business manual.

[Configuration of the Creation Support Device]
3 is a schematic diagram illustrating the overall configuration of a creation support device according to this embodiment. As illustrated in FIG. 3, the creation support device 10 according to this embodiment is implemented by a general-purpose computer such as a personal computer, and includes an input unit 11, an output unit 12, a communication control unit 13, a storage unit 14, and a control unit 15.

The input unit 11 is implemented using input devices such as a keyboard and mouse, and inputs various instruction information, such as starting processing, to the control unit 15 in response to input operations by the operator. The output unit 12 is implemented by a display device such as an LCD display, a printing device such as a printer, etc. For example, the output unit 12 displays the operating procedures and other results of the creation support processing described below.

The communication control unit 13 is realized using a NIC (Network Interface Card) or the like, and controls communication between the control unit 15 and external devices via telecommunications lines such as a LAN (Local Area Network) or the Internet. For example, the communication control unit 13 controls communication between the control unit 15 and a management device that manages higher-level security documents such as security policy documents.

The storage unit 14 is realized by a semiconductor memory element such as RAM (Random Access Memory) or flash memory, or a storage device such as a hard disk or optical disk. The storage unit 14 stores in advance the processing programs that operate the creation support device 10 and data used during execution of the processing programs, or stores them temporarily each time processing is performed. The storage unit 14 may also be configured to communicate with the control unit 15 via the communication control unit 13.

In this embodiment, the memory unit 14 stores an attribute name correspondence table 14a, an operation procedure correspondence table 14b, etc., which are used in the creation support process described below.

Here, Figure 4 is a diagram illustrating the configuration of an attribute name correspondence table. Attribute name correspondence table 14a is information that associates generic attribute names of an information terminal with specific attribute names. Specifically, as illustrated in Figure 4, attribute name correspondence table 14a is a table that associates generic attribute names of components such as the information terminal's OS, memory, browser, mailer, etc. with specific, specific attribute names that correspond to each of the attribute names.

Figure 4 shows examples of generic attribute names, such as the above-mentioned OS, memory, browser, mailer, security software, application, and screen lock. Additionally, examples of specific attribute names corresponding to the generic attribute name OS include Windows 7, Windows 10, and Mac.

Figure 5 is a diagram illustrating the configuration of an operation procedure correspondence table. The operation procedure correspondence table 14b is information that associates unique attribute names with operation procedures related to the attribute values of the unique attribute names. For example, the operation procedure correspondence table 14b stores information indicating the order in which the operation screen transitions as operation procedures. The operation procedures in the operation procedure correspondence table 14b include at least one of a procedure for referencing or setting the attribute values of the unique attribute names.

Specifically, the operation procedure correspondence table 14b is a table that associates unique attribute names with information such as paths that indicate the order of transitions between operation screens that show operation procedures such as procedures for referencing and setting attribute values for items with the attribute names, as illustrated in Figure 5(a).

Figure 5(a) shows an example of the operation screen transition path "AAA/BBB/CCC" as an operation procedure for checking the version for the specific attribute name Windows 8, which corresponds to the generic attribute name OS. This path "AAA/BBB/CCC" displays the operation screens in transition order, as shown in Figure 5(b). Note that the path may be a URL or the like that displays the operation screens in transition order. Furthermore, it is assumed that these operation procedures are set in advance for each attribute value of the specific attribute name.

Returning to the explanation of Figure 3, the control unit 15 is realized using a CPU (Central Processing Unit) or the like, and executes processing programs stored in memory. As a result, the control unit 15 functions as an acquisition unit 15a, an extraction unit 15b, a presentation unit 15c, an identification unit 15d, and a display unit 15e, as illustrated in Figure 3. Note that each of these functional units, or some of them, may be implemented in different hardware. For example, the acquisition unit 15a and the extraction unit 15b may be implemented in hardware that is different from the presentation unit 15c and the display unit 15e. The control unit 15 may also have other functional units.

The acquisition unit 15a acquires a security-level document written using the general-purpose attribute names of the information terminal. For example, the acquisition unit 15a acquires a security-level document to be used in the creation support process described below via the input unit 11 or from a management device that manages security policy documents, etc., via the communication control unit 13. The acquisition unit 15a may store the acquired security-level document in the memory unit 14 prior to the process described below.

Here, Figure 6 is a diagram for explaining the processing of the creation support device 10. As illustrated in Figure 6 (1), the acquisition unit 15a acquires a security-level document to be used in the creation support processing described below. In the example shown in Figure 6 (1), the acquired security-level document states that "The OS, applications including browsers used on the client terminal should use versions that have been implemented to prevent known security holes."

Returning to the explanation of Figure 3, the extraction unit 15b extracts, in the attribute name correspondence table 14a, specific attribute names that correspond to the generic attribute names of documents written using generic attribute names of information terminals. Specifically, the extraction unit 15b first extracts generic attribute names from the acquired security-higher document, as illustrated in Figure 6 (2). In the example shown in Figure 6 (2), OS, browser, and version are extracted as generic attribute names.

Next, the extraction unit 15b refers to the attribute name correspondence table 14a and extracts specific attribute names corresponding to the extracted generic attribute names, as illustrated in FIG. 6(3). In the example shown in FIG. 6(3), a table showing the correspondence between the extracted generic attribute names and the corresponding specific attribute names is generated as an information terminal setting item. For example, in the table illustrated in FIG. 6(3), Windows 8 and version, Windows 10 and version, and Android and version are associated as specific attribute names corresponding to the generic attribute name OS.

Returning to the explanation of Figure 3, the presentation unit 15c presents the extracted unique attribute names in correspondence with the generic attribute names in conjunction with the presentation of the security-higher document. Specifically, as shown in Figure 6 (4), the presentation unit 15c displays a list of the extracted unique attribute names in correspondence with the display positions of the generic attribute names of the security-higher document. For example, Figure 6 (4) lists Windows 7, Windows 10, and Android in correspondence with the OS. Also, IE11 and Chrome in correspondence with the browser.

The presentation unit 15c then accepts operational input from the manual creator to select an attribute name unique to the information terminal for which the manual is to be created from the presented list of unique attribute names. For example, in the example shown in Figure 6 (4), Windows 10 and IE 11 are selected.

Returning to the explanation of Figure 3, the identification unit 15d identifies the operation procedure corresponding to the selected unique attribute name in the operation procedure correspondence table 14b from among the presented unique attribute names. Specifically, the identification unit 15d first narrows down the information terminal setting items using the unique attribute name selected by the manual creator, as shown in Figure 6 (5). In the example shown in Figure 6 (5), the OS is narrowed down to Windows 10 and the browser is narrowed down to IE11.

Next, the identification unit 15d identifies the operation procedure corresponding to the narrowed-down unique attribute name, as shown in Figure 6 (6). For example, the identification unit 15d refers to the operation procedure correspondence table 14b and identifies the operation procedure for checking the version of Windows 10 corresponding to the OS. In the example shown in Figure 6 (6), the operation screen transition path "/AAA/BBB/CCC" is identified as the operation procedure for checking the version of Windows 10.

The display unit 15e displays the identified operation procedure. Specifically, the display unit 15e displays the operation procedure corresponding to the identified unique attribute name on the output unit 12 or on another device such as a user terminal via the communication control unit 13. For example, the display unit 15e displays a path indicating the transition order of the operation screen. Alternatively, the display unit 15e may display the transition order of the operation screen according to the path.

The display unit 15e may also output display data that displays operation screens in transition order on other devices, etc. In this case, the output display data can be processed on the other devices, etc. to create a manual.

Here, Figure 7 is a diagram for explaining the processing of the presentation unit and display unit. As shown in Figure 6 (4) and Figures 7 (1) and (2), the presentation unit 15c displays a list of unique attribute names extracted corresponding to the display positions of the generic attribute names of the security-higher document. The presentation unit 15c also accepts operational input from the manual creator to select an attribute name unique to the information terminal for which the manual is to be created from the presented list of unique attribute names. In Figure 7 (1), Windows 10 is selected as the OS, and in Figure 7 (2), IE11 is selected as the browser.

Then, the display unit 15e displays a list of the operation procedures identified by the identification unit 15d in association with the display position of the general attribute name "version" of the security-related document, as shown in Figure 7 (3). Figure 7 (3) displays "How to check the version of Windows 10" and "How to check the version of IE11."

The display unit 15e also accepts input from the manual creator, such as a click, to select the operation procedure they want to display from the list of displayed operation procedures, and displays the selected operation procedure. Figure 7 (4) illustrates an example of a path indicating the transition order of operation screens and the transition order of operation screens according to the path.

This allows manual creators to easily check the operation procedures related to the attribute values of attribute names specific to information processing terminals from the security-related document. For example, by stating that "OS, browser, and other applications used on client terminals should use versions that have been modified to address known security holes," it becomes possible to easily check the sequence of transitions on the operation screens for "How to check the version of Windows 10" and "How to check the version of IE11."

[Creation support process]
Next, Fig. 8 is a flowchart showing the procedure of the production support process. The flowchart of Fig. 8 is started, for example, at the timing when an inspector gives an instruction on the production support device.

First, the acquisition unit 15a accepts input of a security-related document written using generic attribute names of the information terminal (step S1). The extraction unit 15b then extracts generic attribute names from the acquired security-related document (step S2). The extraction unit 15b then refers to the attribute name correspondence table 14a and extracts unique attribute names that correspond to the extracted generic attribute names.

Next, the presentation unit 15c presents the extracted unique attribute names corresponding to the generic attribute names in conjunction with the presentation of the security-higher document. For example, the presentation unit 15c displays a list of the extracted unique attribute names corresponding to the display positions of the generic attribute names of the security-higher document (step S3).

The identification unit 15d then identifies the operation procedure corresponding to the selected unique attribute name in the operation procedure correspondence table 14b from among the presented unique attribute names. The display unit 15e then displays the identified operation procedure on the output unit 12, etc. (Step S4). This completes the creation support process.

[effect]
As described above, in the creation support device 10 of this embodiment, the storage unit 14 stores an attribute name correspondence table 14a that associates generic attribute names of an information terminal with specific attribute names, and an operation procedure correspondence table 14b that associates specific attribute names with operation procedures related to the attribute values of the specific attribute names. The extraction unit 15b extracts specific attribute names from the attribute name correspondence table 14a that correspond to generic attribute names of a document written using generic attribute names of the information terminal. The presentation unit 15c presents the extracted specific attribute names in correspondence with the generic attribute names in conjunction with the presentation of the document. The identification unit 15d identifies an operation procedure that corresponds to a selected specific attribute name from the presented specific attribute names in the operation procedure correspondence table 14b.

Specifically, the operation procedure correspondence table 14b stores information indicating the transition order of the operation screen as the operation procedure. The operation procedures in the operation procedure correspondence table 14b also include at least one of a procedure for referencing or setting the attribute value of a unique attribute name.

This allows manual creators to easily check the operation procedures related to the attribute values of attribute names specific to an information processing terminal from the security parent document. For example, from the security policy document, it becomes easy to check the sequence of operation screen transitions for "How to check the version of Windows 10" and "How to check the version of IE 11." In this way, the creation support device 10 makes it easy to create operation procedure manuals for referencing and setting security-related items for individual information terminal products from generically written security parent documents.

The display unit 15e also displays the identified operating procedures, making it easy for the manual creator to create a manual using the displayed operating procedures.

[program]
A program written in a computer-executable language may be created to execute the processes executed by the creation support device 10 according to the above embodiment. In one embodiment, the creation support device 10 can be implemented by installing a creation support program that executes the above-described creation support processes as package software or online software on a desired computer. For example, by executing the creation support program on an information processing device, the information processing device can function as the creation support device 10. The information processing device referred to here includes desktop and notebook personal computers. Other examples of information processing devices include mobile communication terminals such as smartphones, mobile phones, and PHS (Personal Handyphone Systems), as well as slate terminals such as PDAs (Personal Digital Assistants). The functions of the creation support device 10 may also be implemented on a cloud server.

Figure 9 shows an example of a computer that executes a creation support program. The computer 1000 includes, for example, memory 1010, a CPU 1020, a hard disk drive interface 1030, a disk drive interface 1040, a serial port interface 1050, a video adapter 1060, and a network interface 1070. These components are connected by a bus 1080.

The memory 1010 includes a ROM (Read Only Memory) 1011 and a RAM 1012. The ROM 1011 stores a boot program such as a BIOS (Basic Input Output System). The hard disk drive interface 1030 is connected to a hard disk drive 1031. The disk drive interface 1040 is connected to a disk drive 1041. A removable storage medium such as a magnetic disk or optical disk is inserted into the disk drive 1041. The serial port interface 1050 is connected to, for example, a mouse 1051 and a keyboard 1052. The video adapter 1060 is connected to, for example, a display 1061.

Here, the hard disk drive 1031 stores, for example, an OS 1091, an application program 1092, a program module 1093, and program data 1094. Each piece of information described in the above embodiment is stored, for example, in the hard disk drive 1031 or memory 1010.

The creation support program is stored on the hard disk drive 1031, for example, as a program module 1093 that describes instructions to be executed by the computer 1000. Specifically, the program module 1093 that describes each process executed by the creation support device 10 described in the above embodiment is stored on the hard disk drive 1031.

In addition, data used for information processing by the creation support program is stored, for example, on the hard disk drive 1031 as program data 1094. The CPU 1020 then reads the program module 1093 and program data 1094 stored on the hard disk drive 1031 into the RAM 1012 as needed, and executes each of the procedures described above.

The program module 1093 and program data 1094 related to the creation support program are not limited to being stored on the hard disk drive 1031, but may be stored, for example, on a removable storage medium and read by the CPU 1020 via the disk drive 1041, etc. Alternatively, the program module 1093 and program data 1094 related to the creation support program may be stored in another computer connected via a network such as a LAN or WAN (Wide Area Network), and read by the CPU 1020 via the network interface 1070.

The above describes an embodiment of the invention made by the inventor, but the present invention is not limited to the descriptions and drawings that form part of the disclosure of the present invention according to this embodiment. In other words, all other embodiments, examples, operational techniques, etc. made by those skilled in the art based on this embodiment are included in the scope of the present invention.

REFERENCE SIGNS LIST 10 Creation support device 11 Input unit 12 Output unit 13 Communication control unit 14 Storage unit 14a Attribute name correspondence table 14b Operation procedure correspondence table 15 Control unit 15a Acquisition unit 15b Extraction unit 15c Presentation unit 15d Identification unit 15e Display unit

Claims (6)

a storage unit for storing an attribute name correspondence table in which general attribute names of the information terminal are associated with unique attribute names, and an operation procedure correspondence table in which the unique attribute names are associated with operation procedures relating to the attribute values of the unique attribute names;
an extracting unit that extracts, from the attribute name correspondence table, the unique attribute name corresponding to the general-purpose attribute name of a document written using the general-purpose attribute name of an information terminal;
a presentation unit that presents the extracted unique attribute name in correspondence with the general attribute name in accordance with the presentation of the document;
an identifying unit that identifies the operation procedure corresponding to a selected unique attribute name in the operation procedure correspondence table from among the presented unique attribute names;
A creation support device comprising: The creation support device described in claim 1, characterized in that the operation procedure correspondence table stores information indicating the order of transitions between operation screens as the operation procedures. A creation support device as described in claim 1, characterized in that the operation procedures in the operation procedure correspondence table include at least one of a reference procedure or a setting procedure for the attribute value. The creation support device described in claim 1 further comprises a display unit that displays the identified operating procedure. A creation support method executed by a creation support device,
the creation support device has a storage unit that stores an attribute name correspondence table that associates general-purpose attribute names of an information terminal with unique attribute names, and an operation procedure correspondence table that associates the unique attribute names with operation procedures related to attribute values of the unique attribute names;
an extraction step of extracting, from the attribute name correspondence table, the unique attribute name corresponding to the general-purpose attribute name of a document written using the general-purpose attribute name of an information terminal;
a presentation step of presenting the extracted unique attribute names in correspondence with the general attribute names in accordance with the presentation of the document;
a specifying step of specifying the operation procedure corresponding to a selected unique attribute name in the operation procedure correspondence table from among the presented unique attribute names;
A creation support method comprising: refer to a storage unit that stores an attribute name correspondence table that associates general attribute names of the information terminal with unique attribute names, and an operation procedure correspondence table that associates the unique attribute names with operation procedures related to the attribute values of the unique attribute names;
an extraction step of extracting, from the attribute name correspondence table, the unique attribute name corresponding to the general-purpose attribute name of a document written using the general-purpose attribute name of an information terminal;
a presentation step of presenting the extracted unique attribute names in correspondence with the general attribute names in accordance with the presentation of the document;
a specifying step of specifying the operation procedure corresponding to a selected unique attribute name in the operation procedure correspondence table from among the presented unique attribute names;
A creation support program to execute the above on a computer.