JP2010250558A - Configuration management supporting apparatus, and method and program for specifying evidentiary material - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a configuration management supporting apparatus, etc. which reduces workload for maintaining identification information of each evidentiary material as a reference described in each evidentiary material. <P>SOLUTION: The configuration management supporting apparatus 10 includes an evidentiary material preparation part 21 and a configuration management part 22. In the configuration management part 22, a deliverables database 123 for storing data on prepared and edited documents, and an evaluation manual information database 124 for storing in advance data on the categories of evidentiary materials to be referred to for evaluating guarantee requirements in a document, as well. The evidentiary material preparation part 21 includes an evidentiary material editing means 111 for storing the data on the prepared and edited documents, and an identification information acquisition means 114 for acquiring the guarantee requirements in the prepared document. The configuration management part 22 further includes a reference relation analysis means 122 for acquiring the categories of evidentiary materials required for evaluating the acquired guarantee requirements, and an edition management means 121 for storing the identification information of the evidentiary materials and the categories of the evidentiary materials. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to the creation of materials such as test specifications based on IT security evaluation criteria, and in particular, to the maintenance of up-to-date evidence materials cited in the creation of those materials.

  The IT security evaluation standards internationally standardized as ISO / IEC15408 are the security functional requirements that the products and information systems to be developed must have and the security to ensure that those functional requirements are implemented and reach the user. 7 levels are defined as Evaluation Assurance Level (EAL), which is the depth that guarantees the certainty of assurance requirements.

  Developers create multiple documents called documentation to show that their products and information systems meet the above requirements, and evaluate and certify the documentation with consistent design content. Must be presented to.

  Evidence materials include ST (security target) that describes the security policy that is the basis of the product and information system to be developed, a functional design document that describes the functional overview of the user, and physical specifications at a level close to implementation. In addition to the detailed design document that describes the test specifications, the test specifications that describe the test items for confirming that the design contents are correctly implemented, the developer itself that the products and information systems to be developed are not vulnerable It is a vulnerability analysis document that describes the results of the analysis.

  Among these evidence materials, Patent Document 1 and Patent Document 2 describe a tool that supports creation of a basic ST and a model PP (protection profile).

  On the other hand, each document has identification information such as the name, version number, issue date, creator, etc. of the dependent document in order to clarify that the content to be described has been refined based on the content of the superordinate concept. It is required to be described as a reference.

  Therefore, the developer has to maintain the identification information of the evidence materials listed as the reference document described in each evidence material using word processing software or the like as needed. However, for the following reasons, it took a lot of labor to maintain the identification information of the evidence materials listed as references in each evidence material up to date.

  First, because of the nature of IT security evaluation standards, each document is frequently revised not only in the development process but also in the evaluation / certification process. In addition, the number of documents that must be prepared as documentation is large, and the dependencies are complicatedly entangled, so it is not sufficient to modify one document alone.

  On the other hand, Patent Literature 3 and Patent Literature 4 describe support tools for presenting other evidence materials to be reviewed to the user in accordance with the contents described in the evidence materials. Patent Document 5 describes a technique of extracting and integratingly managing a plurality of documents managed by different applications.

JP 2001-222420 A JP 2004-220459 A JP 2007-241958 A JP 2008-152556 A JP 2001-265768 A

  Materials such as test specifications based on IT security evaluation standards should be maintained up-to-date with the identification information of the evidence materials listed as references listed in each evidence material. A lot of effort is required.

  The reason is that due to the nature of IT security evaluation standards, each document is frequently revised not only during the development process but also during the evaluation and certification process, and there are many documents that must be prepared as document. This is because the dependency relationship is intricately intertwined. Further, in the prior art, when editing the identification information of the reference document, the creator manually changed it using word processing software or the like.

  Among the evidence materials, the tools that support the creation of the basic ST and its model PP are described in Patent Document 1 and Patent Document 2, but the dependency between the evidence materials is not included in these technologies. No analysis function is provided.

  On the other hand, Patent Literature 3 and Patent Literature 4 describe support tools for presenting other evidence materials to be reviewed to the user in accordance with the contents described in the evidence materials. However, these techniques relate to corrections on the side of the documentation, not to edit the identification information of the references.

  Patent Document 5 describes a technique for managing a plurality of documents managed by different applications. To use this technique for creating a document based on the IT security evaluation standard, a document set for that is used. Must be created by the user. This is a complicated operation, and the possibility that the user sets an incorrect reference relationship or intentionally changes the set reference relationship cannot be denied.

  The purpose of the present invention is to create various materials based on IT security evaluation criteria, and to reduce the labor when maintaining the identification information of the evidence materials listed as reference documents described in each evidence material. It is an object of the present invention to provide a configuration management support device, a document identification method, and a document identification program.

  In order to achieve the above object, a configuration management support device according to the present invention is a configuration management support device that creates and edits a document by an operation from a user, and includes an evidence material creation unit and a configuration management unit. A product database in which the management unit stores data of the created and edited document, and an evaluation procedure document information database in which data on the type of evidence material to be referred to when evaluating the assurance requirements in the document is stored in advance And a document input / output means for receiving input from the user and displaying the processing result to the user, and storing the data of the created and edited document in the deliverable database. A configuration management unit comprising: an evidence material editing means; and an identification information obtaining means for obtaining a guarantee requirement in the created document from the evaluation procedure manual information database. , Reference relationship analysis means to acquire from the evaluation procedure document information database the type of evidence necessary for evaluating the acquired assurance requirements, and the identification information of the evidence and the type of the evidence are linked to the document data And version management means for storing in the product database.

  In order to achieve the above object, the document specifying method according to the present invention comprises an evaluation procedure document information database that stores in advance data on the type of document to be referred to when evaluating assurance requirements in a document, A configuration management support apparatus that creates and edits documents by user operations, and is a method for identifying evidence materials to be referred to when evaluating assurance requirements in documents, and is created and edited by user operations. The data of the acquired document is stored in the deliverable database, the assurance requirements in the created document are obtained from the evaluation procedure manual information database, and the type of documentation required for evaluating the acquired assurance requirements is evaluated. Acquired from the procedure manual information database and linked the document identification data and document type to the document data and stored in the product database And butterflies.

  In order to achieve the above object, the document specifying program according to the present invention includes an evaluation procedure document information database that stores in advance data on the type of document to be referred to when evaluating the assurance requirements in the document, A configuration management support apparatus for creating and editing a document by a user operation, a procedure for storing data of a document created and edited by a user operation in a product database in a computer, and the created document Of obtaining the assurance requirements from the evaluation procedure manual information database, the procedure for obtaining the type of evidence necessary for evaluating the acquired warranty requirements from the evaluation procedure documentation database, and identification information of the evidence And a procedure for linking the document type and document data to the document data and storing them in the deliverable database. That.

  Since the present invention is configured to acquire the type of necessary evidence material, these evidence materials can be definitely reflected in the document. As a result, the configuration management support apparatus and the evidence material having an excellent feature that it is possible to reduce the labor when maintaining the identification information of the evidence material listed as the reference document described in each evidence material. Identification methods and documentation identification programs can be provided.

It is explanatory drawing which shows the structure of the configuration management assistance apparatus which concerns on the 1st Embodiment of this invention. It is explanatory drawing which shows an example of the evaluation procedure manual in IT security evaluation reference | standard system. It is explanatory drawing which shows an example of the information which the evaluation procedure document information database shown in FIG. 1 manages. 3 is a flowchart showing an operation of creating a test specification in the configuration management support apparatus shown in FIG. FIG. 3 is an explanatory diagram showing an example of evidence data before and after a revision of a test specification performed by the configuration management support apparatus shown in FIG. 1 and registration data of a deliverable database. 3 is a flowchart showing an operation of revising a test specification in the configuration management support apparatus shown in FIG. It is explanatory drawing which shows the structure of the configuration management assistance apparatus which concerns on the 2nd Embodiment of this invention.

(First embodiment)
Hereinafter, the structure of the 1st Embodiment of this invention is demonstrated based on attached FIGS. 1-2.
First, the basic content of the present embodiment will be described, and then more specific content will be described.
The configuration management support apparatus 10 according to the present embodiment is a configuration management support apparatus that creates and edits a document by an operation from a user. The configuration management support apparatus 10 includes an evidence material creation unit 21 and a configuration management unit 22. The configuration management unit 22 stores a product database 123 that stores data of a created and edited document, and guarantee requirements in the document. In addition to an evaluation procedure manual information database 124 that stores in advance data on the type of evidence material to be referred to when evaluating, the evidence material creation unit 21 accepts input from the user, and the processing result is displayed to the user. Data input / output means 110 to be displayed on the document, evidence material editing means 111 for storing the data of the created and edited document in the product database, and obtaining the assurance requirements in the created document from the evaluation procedure manual information database Identification information acquisition means 114, and the configuration management unit 22 provides the documentation necessary for evaluating the acquired assurance requirements. It includes a reference relationship analysis means 122 for acquiring another from evaluation procedures information database, and a version management unit 121 to be stored in the result database in connection with the type of identification information and documentation of evidence to document data.

  Here, the data on the type of the evidence material stored in advance in the evaluation procedure manual information database 124 is based on the IT security evaluation standard. Then, the evidence material creation unit 21 includes evidence material registration means 113 for displaying that the data input / output means 110 is updated when the evidence material is updated.

By providing the above configuration, the configuration management support apparatus 10 can reduce the labor when maintaining the identification information of the evidence material.
Hereinafter, this will be described in more detail.

  FIG. 1 is an explanatory diagram showing a configuration of a configuration management support apparatus 10 according to the first embodiment of the present invention. The configuration management support apparatus 10 is a general computer apparatus, and is a CPU (Central Processing Unit) 11 that is a main body that executes a computer program, and a RAM (Random Access Memory) in which a computer program executed by the CPU 11 is read and stored. 12, an HDD (Hard Disk Unit) 13 which is a nonvolatile mass storage device in which programs and data are stored, and a user interface 14 for inputting and outputting data to and from the user. Specifically, the user interface 14 is a data input device such as a keyboard and an output device such as a display.

  The computer program according to the present embodiment executed by the CPU 11 has a configuration having a documentation material creation unit 21 having a function of creating documentation in response to a request from a user and a function of performing configuration management of the created documentation. It is roughly divided into the management unit 22.

  The evidence material creation unit 21 receives a request from the user via the user interface 14 and returns a processing result to the user, a data input / output means 110 for editing the content of the evidence material, a configuration management Evidence material acquisition means 112 for acquiring evidence material to be edited from the section 22, evidence material registration means 113 for registering the edited evidence material in the configuration management section 22, and identification information of other evidence materials in the configuration management section The identification information acquisition means 114 acquired from 22 is provided.

  The evidence material editing unit 111 has a function of requesting the evidence material to be edited from the evidence material acquisition unit 112 in response to a request from the user. Further, it has a function of editing the contents of the evidence material obtained from the evidence material acquisition means 112. Furthermore, it has a function of presenting the edited contents to the user via the data input / output means 110.

  The evidence material acquisition unit 112 has a function of acquiring the evidence material to be edited from the configuration management unit 22 in response to a request from the user, and further presenting the acquired evidence material to the evidence material editing unit 111.

  The evidence material registration unit 113 has a function of registering the evidence material edited by the evidence material editing unit 111 in the configuration management unit 22. Further, when registering the edited evidence material in the configuration management unit 22, the identification information of other evidence material cited as a reference document of the evidence material to be registered is obtained via the identification information acquisition means 114, It has a function to replace with the latest identification information. Further, it has a function of changing the typeface of the replaced identification information portion (for example, changing italics, bold, underline, color, etc.) and presenting it to the user via the data input / output means 110.

  The identification information acquisition unit 114 has a function of acquiring identification information of other evidence materials cited as reference documents of evidence materials from the configuration management unit 22.

  The configuration management unit 22 includes an interface unit 120 that performs a request and data exchange with the evidence material creation unit 21, a version management unit 121 that acquires and stores the evidence material in the product database 123, and the type of the evidence material And a reference relationship analyzing means 122 for managing. Further, the HDD 13 stores a product database 123 that stores evidence materials and an evaluation procedure manual information database 124 that stores information on the types of evidence materials.

  The interface unit 120 has a function of receiving a request from the evidence material creation unit 21 and returning the result to the evidence material creation unit 21.

  The version management unit 121 has a function of registering the evidence material received from the interface unit 120 in the product database 123 and acquiring the evidence material stored in the product database 123 in response to a request from the interface unit 120. Further, in response to a request from the reference relationship analysis unit 122, the document has a function of acquiring evidence material corresponding to the requested type of evidence material from the deliverable database 123 and presenting identification information of the corresponding evidence material.

  The reference relationship analysis unit 122 has a function of acquiring from the evaluation procedure manual information database 124 a list of other types of evidence material on which the evidence material received from the interface unit 120 depends. Further, it has a function of acquiring the identification information of the evidence material corresponding to the acquired list of other evidence material types from the version management means 121. Further, it has a function of presenting identification material identification information acquired from the version management unit 121 to the evidence material creation unit 21 via the interface unit 120.

  The deliverable database 123 manages the created evidence materials. At this time, it is managed by linking to which type of evidence material to be registered corresponds. In addition, identification information such as the version number, creation date, and registrant of the document to be registered is linked and managed.

  The evaluation procedure document information database 124 manages a list of types of evidence materials to be referred to when evaluating certain assurance requirements based on the evaluation procedure document in the IT security evaluation standard system.

  FIG. 2 is an explanatory diagram showing an example of the evaluation procedure manual 30 in the IT security evaluation standard system. Here, the assurance requirement ADV_FSP. As other evidence materials 31 to be referred to when 1 is evaluated, three documents of ST, functional specification, and user operation guidance are shown.

  FIG. 3 is an explanatory diagram showing an example of information managed by the evaluation procedure manual information database 124 shown in FIG. For each assurance requirement, the “○” item indicates the main document type to be referred to when evaluating the applicable assurance requirement, the “×” item indicates the sub-document type, and is blank. The item of indicates the document type that is not explicitly stated as reference.

  In the example shown in FIG. 3, the guarantee requirement ADV_FSP. 1 is mainly referred to the evidence material corresponding to the “functional specification” shown in the row 124b, and based on the content, “ST (security target)” shown in the row 124c and “user operation” shown in the row 124d. It is shown that the documentation corresponding to “Guidance” must also be referred to.

(Create test specifications)
Next, the operation of the present embodiment in a situation where the user creates a test specification for the corresponding function based on the function design document will be described. FIG. 4 is a flowchart showing the operation of creating this test specification in the configuration management support apparatus 10 shown in FIG.

  The user creates a test specification via the user interface unit 110 of the evidence material creation unit 21 and the evidence material editing unit 111 (FIG. 4: step S201). At this time, keywords such as “reference document” and “functional design document” for quoting the identification information of the functional design document previously registered in the configuration management support apparatus 10 are used as reference documents of the test specification document. It describes. Specific keywords may be appropriately determined in each system program that implements the present invention.

  When the user finishes editing the test specification, the user attempts to register the created test specification. Upon receiving the registration request for the test specification created from the user, the evidence preparation unit 21 uses the “references” “function” described in the test specification to the identification information acquisition unit 114 in the evidence registration unit 113. A keyword such as “design document” is read, and it is requested to acquire identification information of a document that matches the keyword, here, “functional design document” (FIG. 4: step S202).

  Upon receiving the identification information acquisition request from the identification information acquisition unit 114, the configuration management unit 22 first performs a test in the reference relationship analysis unit 122 based on information managed by the evaluation procedure manual information database 124 as shown in FIG. The guarantee requirement corresponding to the specification is specified (FIG. 4: step S203). If there is no corresponding guarantee requirement, the process ends. In the example shown in FIG. 3, the guarantee requirement indicated by a circle corresponds to the column corresponding to the document type “functional specification” corresponding to the functional design document to be registered. At this time, when a plurality of assurance requirements are applicable, which assurance requirement is to be supported is determined according to the evaluation assurance level EAL of the evidence material desired by the user (FIG. 4: steps S203a to 203b).

  Next, the reference relationship analysis unit 122 acquires the type of other evidence material required when evaluating the assurance requirement (FIG. 4: step S204). In the example shown in FIG. 3, the evidence material type indicated by the cross is acquired with reference to the column corresponding to the guarantee requirement specified by the previous procedure. Then, the reference relationship analysis unit 122 acquires identification information of each evidence material corresponding to the type of other evidence material from the version management unit 121, and returns the acquired identification information to the evidence material creation unit 21.

  The document registration means 113 that has obtained the identification information of each document corresponding to the type of other document includes the keyword part for quoting the information of the functional design document described as the reference in the test specification. The identification information of the functional design document is replaced with identification information such as the version number, issue date, creator, etc., and the replaced test specification is registered in the configuration management unit 22 (FIG. 4: step S205).

  Upon receiving the created test specification, the configuration management unit 22 combines the identification information such as the version number, issue date, and creator of the test specification with the type of the evidence material to which the test specification belongs, in the version management unit 121. It registers in the product database 123 (FIG. 4: step S206).

  A more specific example of the above operation will be described. It is assumed that the user creates an “ABC system access control function test specification” that describes test items for the corresponding function based on the “ABC system access control function design document”.

  The user creates an “ABC system access control function test specification” via the data input / output unit 110 and the evidence material editing unit 111 of the evidence material creation unit 21 (FIG. 4: step S201). At this time, as a reference for the “ABC system access control function test specification”, a keyword for quoting the identification information of the “ABC system access control function design document” registered in the configuration management support apparatus 10 previously is “ It is described in “ABC System Access Control Function Test Specification”.

  When the user finishes editing the “ABC system access control function test specification” test specification, the user attempts to register the created “ABC system access control function test specification”. Upon receiving the registration request for the “ABC system access control function test specification” created by the user, the evidence material creation unit 21 uses the evidence material registration unit 113 to notify the identification information acquisition unit 114 of the “ABC system access control function”. Based on the keywords described in the “test specification”, it is requested to obtain the identification information of the “ABC system access control function design document” to be referred to (FIG. 4: step S202).

  Upon receiving the identification information acquisition request from the identification information acquisition unit 114, the configuration management unit 22 uses the reference relationship analysis unit 122 based on the information shown in FIG. The assurance requirement “ATE_FUN.1” corresponding to the “system access control function test specification” is specified (FIG. 4: step S203).

  In the example shown in FIG. 3, the guarantee requirement indicated by a circle corresponds to the column corresponding to the evidence material type “test evidence material” corresponding to the test specification to be registered. At this time, when a plurality of assurance requirements are applicable, which assurance requirement is to be supported is determined according to the evaluation assurance level EAL of the evidence material desired by the user (FIG. 4: steps S203a to 203b).

  Next, the type of other evidence necessary for evaluating the assurance requirement “ATE_FUN.1” is acquired (FIG. 4: step S204). In the example shown in FIG. 3, the evidence material type indicated by the cross is acquired with reference to the column corresponding to the guarantee requirement specified by the previous procedure. Then, the identification information of each evidence material corresponding to the type of other evidence material is acquired from the version management means 121, and the acquired identification information is returned to the evidence material creation unit 21.

  The document registration means 113 that has obtained the identification information of each document corresponding to the type of other document is “ABC system access control function design” described as a reference in the “ABC system access control function test specification”. The keyword part such as “reference document” and “functional design document” for quoting the identification information of the “document” is specified as the version number, issue date, creator, etc., which is the identification information of the “ABC system access control function design document”. The information is replaced with information, and the replaced “ABC system access control function test specification” is registered in the configuration management unit 22 (FIG. 4: step S205).

  Upon receiving the created “ABC system access control function test specification”, the configuration management unit 22 receives identification information such as the version number, issue date, and creator of the “ABC system access control function test specification” in the version management unit 121. Then, the document type “test evidence material” to which the “ABC system access control function test specification” belongs is linked and registered in the product database 123 (FIG. 4: step S206).

(Revised test specifications)
Next, the operation of this embodiment in a situation where the test specification registered in the configuration management support apparatus 10 is revised will be described. FIG. 5 illustrates an example of test specification 41 before the revision before and after the revision performed by the configuration management support apparatus 10 illustrated in FIG. 1, the test specification 41a after the revision, and an example of registration data in the product database 123. FIG. In the evidence material 41 before the revision and the evidence material 41a after the revision, the identification information 42 and 42a of the evidence material is described as “reference document”, respectively. In the deliverable database 123, identification information of each evidence material, specifically, each data such as evidence material type 123a, evidence material name 123b, version number 123c, issue date 123d, creator 123e is recorded. FIG. 6 is a flowchart showing the operation of revising this test specification in the configuration management support apparatus 10 shown in FIG.

  The user requests acquisition of the test specification 41 to be revised through the user interface unit 110 of the evidence material creation unit 21 (FIG. 6: step S301). Upon receipt of the acquisition request for the test specification 41 from the user, the evidence material creation unit 21 requests the configuration management unit 22 to acquire the test specification in the evidence material acquisition unit 112.

  Upon receiving the test specification acquisition request from the evidence acquisition unit 112, the configuration management unit 22 extracts the latest test specification 41 from the deliverable database 123 in the version management unit 121, and creates the evidence material via the interface unit 120. It returns to the part 21 (FIG. 6: step S302).

  The user updates the test specification 41a presented via the data input / output means 110 and tries to register with the configuration management support apparatus 10 (FIG. 6: Step S303). Then, the evidence material creation unit 21 that has received the registration request from the user causes the evidence material registration means 113 to send the identification information acquisition means 114 to the reference information described in the test specification 41a. It is requested to obtain identification information 123a to 123e of other evidence materials to be referred to (FIG. 6: Step S304).

  The configuration management unit 22 that has received the identification information acquisition request from the identification information acquisition unit 114 first performs a test in the reference relationship analysis unit 122 based on the information shown in FIG. 3 managed by the evaluation procedure manual information database 124. The guarantee requirement corresponding to the specification 41a is specified (FIG. 6: step S305).

  In the cases shown in FIGS. 3 and 5, the guarantee requirement indicated by the circle is applicable with reference to the column corresponding to the evidence material type “test evidence material” corresponding to the test specification to be registered. At this time, if a plurality of assurance requirements are applicable, which assurance requirement is to be supported is determined according to the evaluation assurance level (EAL) of the document desired by the user (FIG. 6: Steps S305a to 305b). .

  Next, the reference relationship analysis unit 122 acquires the types of other evidence materials required when evaluating the assurance requirements (FIG. 6: Step S306). In the cases shown in FIGS. 3 and 5, the evidence material type indicated by the cross is obtained by referring to the column corresponding to the guarantee requirement specified by the previous procedure. Then, the reference relationship analysis unit 122 acquires identification information of each evidence material corresponding to the type of other evidence material from the version management unit 121, and returns the acquired identification information to the evidence material creation unit 21.

  The evidence material registration means 113 having obtained identification information of each evidence material corresponding to the type of other evidence material uses the identification information 42 of the other evidence material described as the reference in the test specification 41a as the latest identification information. 42a, and the replaced test specification 41a is registered in the configuration management unit 22 (FIG. 6: step S307).

  The configuration management unit 22 that has received the created test specification 41a associates identification information such as the version number, issue date, and creator of the test specification with the type of evidence material to which the test specification 41a belongs in the version management unit 121. Are registered in the deliverable database 123 (FIG. 6: Step S308).

  A more specific example of the above operation will be described. A situation is assumed in which the “ABC system access control function test specification” registered in the configuration management support apparatus 10 is revised. As shown in FIGS. 3 and 5, it is assumed that “ABC system security target” and “ABC system access control function design document” have been revised in the document used as the evidence material.

  The user requests the acquisition of the “ABC system access control function test specification” to be revised through the user interface unit 110 of the document preparation unit 21 (FIG. 6: step S301). Upon receiving the acquisition request for the “ABC system access control function test specification” from the user, the evidence material creation unit 21 requests the configuration management unit 22 to acquire the test specification in the evidence material acquisition unit 112.

  The configuration management unit 22 that has received the acquisition request for the “ABC system access control function test specification” from the evidence acquisition unit 112 uses the latest “ABC system access control function test specification” from the product database 123 in the version management unit 121. Is returned to the evidence material creation unit 21 via the interface unit 120 (FIG. 6: step S302).

  The user updates the “ABC system access control function test specification” presented via the user interface unit 110 and attempts to register it in the configuration management support apparatus 10 (FIG. 6: step S303). Then, the document preparation unit 21 that has received the work registration request from the user uses the reference document described in the “ABC system access control function test specification” to the identification information acquisition unit 114 in the document registration unit 113. Based on the literature information, it is requested to obtain identification information of other evidence materials to be referred to (FIG. 6: Step S304).

  Upon receiving the identification information acquisition request from the identification information acquisition unit 114, the configuration management unit 22 uses the “ABC system access control function test specification” in the reference relationship analysis unit 122 based on the information managed by the evaluation procedure manual information database 124. The guarantee requirement “ATE_FUN.1” to which “Document” corresponds is specified (FIG. 6: Step S305).

  Then, the reference relationship analyzing unit 122 acquires “ST”, “functional specification”, and “test evidence” as the types of other evidence necessary for evaluating the assurance requirement “ATE_FUN.1”. Then, from the version management means 121, “ABC system security target”, “ABC system access control function design document”, “ABC system” corresponding to the types of evidence materials “ST”, “functional specifications”, and “test evidence materials”. The identification information of the “access control function test specification” is acquired, and the acquired identification information 42 is returned to the evidence material creation unit 21.

  The evidence material registration means 113 corresponds to the types of evidence materials of “ST”, “functional specification”, and “test evidence material”, “ABC system security target”, “ABC system access control function design document”, “ABC system” The identification information of “access control function test specification” is obtained (FIG. 6: step S306).

  Subsequently, the document registration means 113 uses the latest identification information 42a of "ABC system security target" and "ABC system access control function design document" described as references of the "ABC system access control function test specification". The replaced “ABC system access control function test specification” is registered in the configuration management unit 22 (FIG. 6: step S307).

  At that time, the document registration means 113 is shown in FIG. 5 for the updated “ABC system security target”, “ABC system access control function design document”, and “ABC system access control function test specification”. As shown, the font is changed and displayed on the user interface 14.

  Upon receiving the created “ABC system access control function test specification”, the configuration management unit 22 receives identification information such as the version number, issue date, and creator of the “ABC system access control function test specification” in the version management unit 121. Then, the document type “test evidence material” to which the “ABC system access control function test specification” belongs is linked and registered in the deliverable database 123 (FIG. 6: step S308).

(Overall operation of the first embodiment)
Next, the overall operation of the above embodiment will be described. The document specifying method according to the present invention includes an evaluation procedure document information database in which data on the type of document to be referred to when evaluating the assurance requirements in a document is stored in advance. This is a configuration management support device that creates and edits, and is a method for identifying the evidence material to be referred to when evaluating the assurance requirements in the document, and results in the data of the document created and edited by the user's operation. The assurance requirements in the created document are acquired from the evaluation procedure manual information database, and the types of evidence necessary for evaluating the acquired warranty requirements are acquired from the evaluation procedure manual information database. The identification information of the evidence material and the type of the evidence material are linked to the document data and stored in the product database.

Here, each of the above-described operation steps may be programmed to be executable by a computer, and may be executed by the configuration management support apparatus 10 which is a main body that directly executes each of the steps.
With this configuration and operation, the present embodiment has the following effects.

  According to this embodiment, when registering the edited evidence material in the configuration management unit by the evidence material registration processing unit, the identification information of other evidence material given as a reference of the evidence material to be registered is acquired as the identification information. It is possible to register it with the configuration management unit after always replacing it with the latest identification information, so the user only has to register the target documentation with the configuration management support device. It becomes possible to easily acquire the identification information of the reference document described therein.

(Second Embodiment)
The configuration management support apparatus 501 according to the second embodiment of the present invention is a different computer in which the evidence material creation unit 21 and the configuration management unit 22 of the configuration management support apparatus 10 according to the first embodiment are connected to each other. It was made to consist of. Also with this configuration, the same effects as those of the first embodiment can be obtained.
Hereinafter, this will be described in more detail.

  FIG. 7 is an explanatory diagram showing the configuration of the configuration management support apparatus 501 according to the second embodiment of the present invention. The configuration management support apparatus 501 arranges the evidence material creation unit 21 and the configuration management unit 22 on physically separate computers.

  The evidence material creation unit 21 is arranged on the client computer 510. Similar to the configuration management support apparatus 10 according to the first embodiment, the client computer 510 includes a CPU 511, a RAM 512, an HDD 513, and a user interface 514, and is connected to a communication path 550. A network interface 515 is provided. Each of the CPU, RAM, HDD, and user interface has the same function as the functional unit having the same name in the configuration management support apparatus 10 according to the first embodiment.

  The configuration management unit 22 is arranged on the server computer 520. Similarly to the configuration management support apparatus 10 according to the first embodiment, the server computer 520 includes a CPU 521, a RAM 522, and an HDD 523, and a network interface 525 connected to the communication path 550. ing. Each of the CPU, RAM, and HDD has the same function as the functional unit having the same name in the configuration management support apparatus 10 according to the first embodiment.

  The client computer 510 and the server computer 520 are connected to each other via a communication path 550 by respective network interfaces 515 and 525.

  The software configurations and operations of the evidence material creation unit 21 and the configuration management unit 22 are the same as those in the first embodiment. However, protocol processing units 516 and 526 for performing communication via the network interfaces 515 and 525 are added to each. The protocol processing units 516 and 526 have a function of transmitting and receiving requests and results of the evidence material creation unit 21 and the configuration management unit 22 via the communication path 550.

  As a result, even if the document preparation unit 21 and the configuration management unit 22 are not configured on the same computer, the same operation as that of the first embodiment is possible via the communication path, and the same effect is obtained. be able to. For example, the evidence material creation unit 21 on the plurality of client computers 510 and the configuration management unit 22 on one server computer 520 can operate in cooperation. This ensures that the latest documentation is reflected in the test specification that is created, even when multiple people create and revise the documentation and the test specification based on it is created by another person. It is possible to make it.

  Not limited to this example, each component of the document preparation unit 21 and the configuration management unit 22 may be configured on physically separate computers, and may be operated in association with each other by data communication or the like. it can.

  The present invention has been described with reference to the specific embodiments shown in the drawings. However, the present invention is not limited to the embodiments shown in the drawings, and any known hitherto provided that the effects of the present invention are achieved. Even if it is a structure, it is employable.

  The present invention is not limited to the IT security evaluation standard, and can be used as a system for maintaining consistency between documents in a field where the dependency relationship between a plurality of documents is clearly defined.

10, 501 Configuration management support device 11, 511, 521 CPU
12, 512, 522 RAM
13, 513, 523 HDD
14, 514 User interface 21 Evidence material creation unit 22 Configuration management unit 110 Data input / output unit 111 Evidence material editing unit 112 Evidence material acquisition unit 113 Evidence material registration unit 114 Identification information acquisition unit 120 Interface unit 121 Version management unit 122 Reference relationship analysis Means 123 Product database 124 Evaluation procedure manual information database 510 Client computer 520 Server computer 515, 525 Network interface 516, 526 Protocol processing unit 550 Communication path

Claims (6)

A configuration management support apparatus that creates and edits a document by a user operation,
Evidence preparation department and configuration management department,
An evaluation in which the configuration management unit stores in advance a product database that stores data of the created and edited document, and data on the type of evidence material that is referred to when the assurance requirements in the document are evaluated. Along with a procedure manual information database,
A data input / output means for accepting input from the user and displaying a processing result for the user, and evidence data editing for storing the data of the created and edited document in the product database. Means, and identification information acquisition means for acquiring the guarantee requirements in the created document from the evaluation procedure manual information database,
Reference information analyzing means for acquiring from the evaluation procedure document information database the type of evidence material required when the configuration management unit evaluates the acquired assurance requirements, identification information of the evidence material, and the evidence material Version management means for linking the type of the document with the data of the document and storing it in the product database,
A configuration management support apparatus, wherein the evidence material creation unit is further provided with evidence material registration means for displaying identification information of the evidence material on the data input / output means.   The configuration management support apparatus according to claim 1, wherein data on the type of the evidence material stored in advance in the evaluation procedure manual information database is based on an IT security evaluation standard.   The configuration management support apparatus according to claim 1, wherein when the evidence material is updated, the data input / output unit displays the updated information.   The configuration management support apparatus according to claim 1, wherein the evidence material creation unit and the configuration management unit are configured by different computers connected to each other. A configuration management support apparatus that includes an evaluation procedure manual information database that stores in advance data on the type of evidence material to be referred to when evaluating assurance requirements in a document, and that creates and edits a document by a user operation A method for identifying documentation to be referred to when evaluating assurance requirements in the document, comprising:
Storing the data of the document created and edited by the operation from the user in the deliverable database;
Obtain the assurance requirements in the created document from the evaluation procedure manual information database,
Obtaining from the evaluation procedure manual information database the type of documentation required when evaluating the acquired assurance requirements,
The identification information of the evidence material and the type of the evidence material are associated with the data of the document and stored in the deliverable database,
A method for identifying evidence material, characterized in that identification information of the evidence material is displayed to a user. A configuration management support apparatus that includes an evaluation procedure manual information database that stores in advance data on the type of evidence material to be referred to when evaluating assurance requirements in a document, and that creates and edits a document by a user operation There,
On the computer,
Storing the data of the document created and edited by the operation from the user in the deliverable database;
A procedure for obtaining the assurance requirements in the created document from the evaluation procedure manual information database;
A procedure for acquiring from the evaluation procedure information database a type of evidence material required when evaluating the acquired assurance requirements;
A procedure for storing the identification information of the evidence material and the type of the evidence material in the product database in association with the data of the document;
And a procedure for displaying identification information of the evidence material to a user.

Images