JP2012022544A - Security product combination candidate determination device, security product combination candidate determination method of security product combination candidate determination device and security product combination candidate determination program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To present a combination of products/items to be developed suitable for developing a system by setting an arbitrary priority.SOLUTION: An automatic demand generating section 110 determines security function requirements which meets customer request 101 based on an industry standard/codes table 131. An automatic product selection section 120 determines a product group corresponding to the security function requirements of the customer request 101 based on a product/library table 132. An automatic product selection section 120 determines candidate groups of combination of corresponding products based on the product group corresponding the customer request 101. An automatic product selection section 120 calculates the entire number of security function requirements for each combination of corresponding products based on the product/library table 132. An automatic product selection section 120 generates a product combination list 121 indicating combination candidates of corresponding products which has a larger entire number of security function requirements (an example of the priority) and outputs the generated product combination list 121.

Description

  The present invention relates to, for example, a security product combination candidate specifying device for selecting a security product, a security product combination candidate specifying method of the security product combination candidate specifying device, and a security product combination candidate specifying program.

In order to automatically determine what program parts should be developed in the development of a system, a technique for designating and retrieving a text described in a system function specification has been proposed (Patent Document 1).
However, since this technology focuses on a newly developed part, a method for selecting an existing function is not considered.

JP 2008-171121 A

  An object of the present invention is, for example, to set an arbitrary priority in the case of holding an existing product or a developed product, and to present a combination of a product / developed product suitable for system development.

The security product combination candidate specifying device of the present invention is:
Security function data indicating a system type indicating a system type and a plurality of security functions are associated with each other, and security product function data indicating a security product having the security function and a security function associated with the security product are stored. The security product database
A target security function group identifying unit that identifies a plurality of security functions corresponding to a specific system type as a target security function group based on the security function data;
Target security product group for identifying a plurality of security products having at least one security function included in the target security function group specified by the target security function group specifying unit as the target security product group based on the security product function data A specific part,
A security product combination candidate specifying unit for specifying a plurality of combinations of security products as a security product combination candidate group by combining security products included in the target security product group specified by the target security product group specifying unit;
A security product combination ranking unit that ranks the security product combination candidate groups identified by the security product combination candidate identification unit based on a predetermined condition.

  According to the present invention, for example, when an existing product or a developed product is held, an arbitrary priority can be set and a combination of a product / developed product suitable for system development can be presented.

2 is a functional configuration diagram of a security product sales support system 100 according to Embodiment 1. FIG. 5 is a flowchart showing a sales support method for security products in the first embodiment. FIG. 5 is a diagram showing an example of an industry standard / standards table 131 in the first embodiment. FIG. 6 shows an example of a product / library table 132 according to the first embodiment. FIG. 6 is a diagram illustrating an example of a function coverage number list 122 according to the first embodiment. FIG. 6 is a diagram illustrating an example of a product combination list 121 according to the first embodiment. 2 is a diagram illustrating an example of hardware resources of a security product sales support system 100 according to Embodiment 1. FIG. FIG. 10 is a diagram illustrating an example of priority information 133 according to the second embodiment. 9 is a flowchart showing a sales support method for security products in the second embodiment. FIG. 10 is a diagram illustrating an example of a product combination list 121 according to the second embodiment. FIG. 10 is a diagram showing an example of already-output information 134 in the third embodiment. 10 is a flowchart showing a sales support method for security products according to the third embodiment. FIG. 10 is a diagram illustrating an example of a product combination list 121 according to the third embodiment. FIG. 15 is a diagram illustrating an example of priority information 133B in the fourth embodiment. 10 is a flowchart showing a sales support method for security products in a fourth embodiment. FIG. 10 is a diagram showing an example of already-output information 134 in the fourth embodiment. FIG. 18 shows an example of a product combination list 121 according to the fourth embodiment.

Embodiment 1 FIG.
A form of the security product sales support system 100 that presents a combination of security products that cover a large number of necessary security functions will be described.

FIG. 1 is a functional configuration diagram of a security product sales support system 100 according to the first embodiment.
A functional configuration of the security product sales support system 100 according to the first embodiment will be described with reference to FIG.

  The security product sales support system 100 (an example of a security product combination candidate specifying device) includes an automatic request generation unit 110, an automatic product selection unit 120, and a security information DB 130.

  The security information DB 130 (security product database section) stores an industry standard / standards table 131, a product / library table 132, priority information 133, and already output information 134.

  The industry standard / standards table 131 (an example of security function data) shows a system type representing a system type and a plurality of security functions in association with each other.

  The product / library table 132 (an example of security product function data) shows a security product having a security function and a security function of the security product in association with each other.

  The priority information 133 (an example of security product priority data) indicates either the security product priority or the security product combination priority.

The already-output information 134 (an example of security product rank data) indicates the number of predetermined ranks (number of output days to be described later) assigned a predetermined rank by the product automatic selection unit 120 for each combination of security products.
For example, the already-output information 134 indicates a predetermined rank date (an output date to be described later) given a predetermined rank as information indicating the number of predetermined ranks of combinations of security products.
The number of output days and the output date, which will be described later, are examples of the predetermined rank number and the predetermined rank date.

The automatic request generation unit 110 (an example of a target security function group specifying unit) specifies a plurality of security functions corresponding to a specific system type as a target security function group based on the industry standard / standards table 131.
The security function requirement of the customer request 101 described later is an example of a target security function group.

The product automatic selection unit 120 (an example of a target security product group specifying unit) selects a plurality of security products having at least one security function included in the target security function group specified by the request automatic generation unit 110 as a product / library table. Based on 132, it is specified as a target security product group.
A product group corresponding to a customer request 101 to be described later is an example of a target security product group.

  The automatic product selection unit 120 (an example of a security product combination candidate specifying unit) specifies a plurality of combinations of security products as a security product combination candidate group by combining security products included in the target security product group.

  The automatic product selection unit 120 (an example of a security product combination ranking unit) ranks security product combination candidate groups based on a predetermined condition.

For example, the product automatic selection unit 120 ranks as follows.
The automatic product selection unit 120 identifies the number of security function coverages for each combination of security products included in the security product combination candidate group based on the product / library table 132, and is high for combinations of security products with a large number of security function coverages. Give a ranking. The security function coverage number is the number of security functions included in the combination of the security products among the plurality of security functions constituting the target security function group.
The automatic product selection unit 120 specifies the priority of the combination of security products for each combination of security products included in the security product combination candidate group based on the priority information 133, and sets the combination of security products with a high priority. Give a high ranking.
The automatic product selection unit 120 identifies the predetermined number of times of the combination of the security products for each combination of security products included in the security product combination candidate group based on the already-output information 134, and selects the security products having a large number of predetermined orders. Give the combination a high ranking.
The automatic product selection unit 120 identifies a predetermined rank date of the combination of security products for each combination of security products included in the security product combination candidate group based on the output information 134, and the security products with many new predetermined rank dates Give a high ranking to the combinations.

The customer request 101 is input data of the request automatic generation unit 110, and indicates the industry or system type that uses the target system to be constructed.
The system request list 111 is output data of the request automatic generation unit 110 and input data of the product automatic selection unit 120, and indicates security functions (target security function group) necessary for the system of the customer request 101.
The product combination list 121 is output data of the automatic product selection unit 120, and indicates a particularly effective combination (a combination with a higher rank) among security product combinations (security product combination candidate group) corresponding to the customer request 101. .

FIG. 2 is a flowchart showing a security product sales support method according to the first embodiment.
A processing flow of the security product sales support method according to the first embodiment will be described with reference to FIG.

  First, an outline of processing of a sales support method for security products will be described.

The request automatic generation unit 110 identifies security function requirements that satisfy the customer request 101 based on the industry standard / standards table 131 (S110).
The product automatic selection unit 120 identifies the corresponding product group having the security function requirements of the customer request 101 based on the product / library table 132 (S120).
The automatic product selection unit 120 specifies a combination candidate group of corresponding products based on the corresponding product group of the customer request 101 (S130).
The product automatic selection unit 120 calculates the coverage number of security function requirements for each combination candidate of the corresponding product (S140).
The product automatic selection unit 120 outputs a product combination list 121 based on the number of coverage of security function requirements (S150).

  Next, details of processing of the security product sales support method will be described.

In S110, the user inputs the customer request 101 to the security product sales support system 100 using an input device such as a keyboard or a mouse.
The customer request 101 indicates the industry (for example, medical relations) and the type of system (client server system, mail system, etc.) using the target system to be constructed.
The automatic request generation unit 110 inputs a customer request 101 designated by the user, and specifies security function requirements that satisfy the customer request 101 based on the industry standard / standards table 131.

FIG. 3 is a diagram illustrating an example of the industry standard / standards table 131 according to the first embodiment.
The industry standard / standards table 131 in the first embodiment will be described with reference to FIG.

The industry standard / standards table 131 includes types of systems such as client server systems (C / S systems) and mail systems, and security function requirements (SFR: Security Functional Requirements) necessary for constructing such types of systems. Is defined in association with each other. The security function is a function related to system safety, such as monitoring target, log function, access authority, password, login, anti-virus.
The industry standard / standards table 131 is prepared for each industry in advance.

  Returning to FIG. 2, the description of S110 will be continued.

The request automatic generation unit 110 searches the industry standard / standards table 131 for the industry specified in the customer request 101 using the system type specified in the customer request 101 as a search condition, and corresponds to the search condition. The security function requirement is specified as the security function requirement that satisfies the customer request 101.
For example, the industry standard / standards table 131 for industry specified in the customer request 101 is a table shown in FIG. 3, and the type of system specified in the customer request 101 is a client server system.
In this case, the request automatic generation unit 110 identifies SFR-001, SFR-003, SFR-004, SFR-005, SFR-008, and SFR-009 as security function requirements that satisfy the customer request 101.
Hereinafter, a security function requirement that satisfies the customer request 101 is referred to as a security function requirement of the customer request 101.
It progresses to S120 after S110.

  In S <b> 120, the product automatic selection unit 120 specifies a corresponding product group having the security function requirements of the customer request 101 based on the product / library table 132.

FIG. 4 is a diagram illustrating an example of the product / library table 132 according to the first embodiment.
The product / library table 132 according to the first embodiment will be described with reference to FIG.

The product / library table 132 is data in which security function requirements are associated with security products that satisfy the security function requirements. A security product has a security function and is called a program, software, package, library, macro, device, circuit, or the like. The security product is not limited to a commercially available product, and may be a product manufactured by a user.
The product / library table 132 is defined in advance.

  Returning to FIG. 2, the description of S120 will be continued.

The automatic product selection unit 120 searches the product / library table 132 using the security function requirement of the customer request 101 as a search condition, and selects a security product corresponding to the search condition as a corresponding product group having the security function requirement of the customer request 101. As specified.
For example, the product / library table 132 is the table shown in FIG. 4, and the security function requirements of the customer request 101 are SFR-001, SFR-003, SFR-004, SFR-005, SFR-008, and SFR-009. .
In this case, the automatic product selection unit 120 specifies security products A, B, and C as corresponding product groups having the security function requirements of the customer request 101 using SFR-001 as a search condition.
The automatic product selection unit 120 also identifies the corresponding product group for SFR-003, SFR-004, SFR-005, SFR-008, and SFR-009.
As a result, the corresponding product group having the security function requirements of the customer request 101 is the security products A, B, C, D, E, F, and G.
Hereinafter, the corresponding product group having the security function requirement of the customer request 101 is referred to as the corresponding product group of the customer request 101.
It progresses to S130 after S120.

  In S <b> 130, the product automatic selection unit 120 specifies a combination candidate group of corresponding products based on the corresponding product group of the customer request 101.

For example, the product group corresponding to the customer request 101 is assumed to be security products A, B, C, D, E, and F. Further, the security products A, B, and C cannot be used in combination with each other, and the security products D, E, F, and G cannot be used in combination with each other.
The automatic product selection unit 120 determines whether security products can be used in combination based on security product combination information (not shown). The security product combination information is data that predefines a combination of security products that can be used (or a combination of security products that cannot be used).
In this case, the automatic product selection unit 120 combines the security products A, B, and C with the security products D, E, F, and G, and supports 12 (= 3 × 4) combinations of two security products. It is specified as a product combination candidate group.
However, the product automatic selection unit 120 may specify a combination candidate group of corresponding products by combining three or more security products.

  It progresses to S140 after S130.

  In S <b> 140, the product automatic selection unit 120 calculates the coverage number for the security function requirement of the customer request 101 based on the product / library table 132 for each combination candidate included in the combination candidate group of corresponding products.

For example, the security function requirements of the customer request 101 are SFR-001, SFR-003, SFR-004, SFR-005, SFR-008, and SFR-009.
Further, the product / library table 132 is a table shown in FIG. 4, and the corresponding product combination candidate groups are 12 combinations of security products A, B, C and security products D, E, F, G.

In this case, the product automatic selection unit 120 calculates the coverage number of the security function requirements covered by the combination candidate “A + D” of the corresponding product with respect to the security function requirements of the customer request 101 as follows.
The automatic product selection unit 120 searches the product / library table 132 (see FIG. 4) using the security products constituting the combination candidate “A + D” of the corresponding products as a search condition, and specifies the security function requirements corresponding to the search condition. . The security function requirements corresponding to the security product A are SFR-001, SFR-002, and SFR-003, and the security function requirements corresponding to the security function D are SFR-005 and SFR-006.
The automatic product selection unit 120 specifies the security function requirements corresponding to the combination candidate “A + D” of the corresponding products together with the security function requirements corresponding to each security product. Security function requirements corresponding to the combination candidate “A + D” of the corresponding products are SFR-001, SFR-002, SFR-003, SFR-005, and SFR-006.
The automatic product selection unit 120 sets the number of security function requirements of the customer request 101 included in the security function requirements corresponding to the corresponding product combination candidate “A + D” to the security function requirements covered by the corresponding product combination candidate “A + D”. Calculate as the coverage number. The security function requirements corresponding to the combination candidate “A + D” of the corresponding product include SFR-001, SFR-003, and SFR-005 among the security function requirements of the customer request 101. Therefore, the coverage number of security function requirements covered by the combination candidate “A + D” of the corresponding product is “3”.
Further, the automatic product selection unit 120 identifies the security function requirements that are not included in the security function requirements corresponding to the combination candidate “A + D” of the corresponding products among the security function requirements of the customer request 101 as the insufficient security function requirements. Insufficient security functional requirements for the combination candidate “A + D” of the corresponding product are SFR-004, SFR-008, and SFR-009.

The product automatic selection unit 120 also specifies the number of coverage of security function requirements and the insufficient security function requirements for the combination candidates of other corresponding products.
For example, the product automatic selection unit 120 generates a list showing the calculated coverage number as shown in FIG.
FIG. 5 is a diagram illustrating an example of the function coverage number list 122 according to the first embodiment.

  After S140, the process proceeds to S150.

  In S150, the product automatic selection unit 120 selects a combination candidate of a corresponding product having a large number of coverage (an example of priority) of security function requirements, and generates a product combination list 121 indicating the combination candidate of the selected corresponding product, The generated product combination list 121 is output.

For example, the product automatic selection unit 120 selects the top three combinations “B + G”, “A + F”, and “C + E” with the largest number of coverage of security function requirements from the function coverage number list 122 shown in FIG. A product combination list 121 shown in descending order of the number of coverages is generated as shown in FIG.
FIG. 6 is a diagram showing an example of the product combination list 121 according to the first embodiment. “Insufficient SFR” indicates an insufficient security function requirement of the combination.
The product automatic selection unit 120 proposes a combination of security products suitable for the system of the customer request 101 by displaying the generated product combination list 121 on a display or printing from a printer.

The user refers to the product combination list 121 output by the product automatic selection unit 120 and determines a combination of security products to be incorporated into the system.
In addition, the user newly develops and supplements insufficient security function requirements that are insufficient for the determined combination of security products.

  By S150, the processing of the security product sales support method ends.

FIG. 7 is a diagram illustrating an example of hardware resources of the security product sales support system 100 according to the first embodiment.
In FIG. 7, the security product sales support system 100 includes a CPU 911 (Central Processing Unit) (also referred to as a microprocessor or a microcomputer). The CPU 911 is connected to the ROM 913, the RAM 914, the communication board 915, the display device 901, the keyboard 902, the mouse 903, the drive device 904, the printer device 905, and the magnetic disk device 920 via the bus 912, and controls these hardware devices. . The drive device 904 is a device that reads and writes a storage medium such as an FD (Flexible Disk Drive), a CD (Compact Disc), and a DVD (Digital Versatile Disc).

  The communication board 915 is wired or wirelessly connected to a communication network such as a LAN (Local Area Network), the Internet, or a telephone line.

  The magnetic disk device 920 stores an OS 921 (operating system), a window system 922, a program group 923, and a file group 924.

  The program group 923 includes programs that execute the functions described as “units” in the embodiment. The program is read and executed by the CPU 911. That is, the program causes the computer to function as “to part”, and causes the computer to execute the procedures and methods of “to part”.

  The file group 924 includes various data (input, output, determination result, calculation result, processing result, etc.) used in “˜part” described in the embodiment.

  In the embodiment, arrows included in the configuration diagrams and flowcharts mainly indicate input and output of data and signals.

  In the embodiment, what is described as “to part” may be “to circuit”, “to apparatus”, and “to device”, and “to step”, “to procedure”, and “to processing”. May be. That is, what is described as “to part” may be implemented by any of firmware, software, hardware, or a combination thereof.

  In the first embodiment, for example, the following security product sales support system 100 has been described.

When the system is constructed, the security product sales support system 100 pays attention to the security requirements and the functions of the products and libraries, and selects the logical product of the functions and security requirements necessary for the system.
The security product sales support system 100 outputs a combination of products that satisfy the security requirements and a function that is required for development (insufficient security function).

  The security product sales support system 100 can specify the coverage of the security requirements of the selected product with respect to the security requirements as prioritization information, and can display the combination of products in the order of priority of the specified coverage.

Embodiment 2. FIG.
A mode of presenting a combination of security products based on a predetermined priority of security products will be described.
Hereinafter, items different from the first embodiment will be mainly described. Matters whose description is omitted are the same as those in the first embodiment.

FIG. 8 is a diagram illustrating an example of the priority information 133 according to the second embodiment.
In the security information DB 130, priority information 133 as shown in FIG. 8 is stored in advance.
The priority information 133 is data indicating the priority of the security product.
The priority information 133 in FIG. 8 indicates that the priority of security products is higher in the order of “A, B, C, D, E, F, G, H”. That is, the security product A has the highest priority and the security product H has the lowest priority.

FIG. 9 is a flowchart showing a security product sales support method according to the second embodiment.
A processing flow of the security product sales support method according to the second embodiment will be described with reference to FIG.

In the sales support method for security products, in addition to the processing described in the first embodiment (see FIG. 2), S141 is executed.
Further, S151 is executed instead of S150.
Hereinafter, S141 and S151 will be mainly described.

  In S141, the product automatic selection unit 120 determines the combination priority for each combination candidate of the corresponding product.

For example, the product automatic selection unit 120 selects a combination candidate of the top three corresponding products having a large number of coverage of security function requirements. That is, the combination candidates “B + G”, “A + F”, and “C + E” of the corresponding products are selected based on the function coverage number list 122 shown in FIG.
The product automatic selection unit 120 arranges the combination candidates of the selected corresponding products in descending order of priority based on the priority information 133 (see FIG. 8). When the priority information 133 shown in FIG. 8 is used, the priority of the security products is higher in the order of “A, B, C,...”, So the combination candidates “B + G”, “A + F”, “C + E” of the corresponding products. "A + F" including the security product A having the highest priority is the highest priority. The combination “B + G” including the security product B having the second highest priority has the next highest priority, and the combination “C + E” including the security product C having the third highest priority has the lowest priority.

  It progresses to S151 after S141.

  In S151, the product automatic selection unit 120 selects a combination candidate of a corresponding product having a large number of coverage of security function requirements and a high priority, and generates and generates a product combination list 121 indicating the combination candidate of the selected corresponding product. The product combination list 121 is output.

For example, as shown in FIG. 10, the product automatic selection unit 120 generates and outputs a product combination list 121 that shows combinations of combinations of the top three corresponding products with a large number of coverage of security function requirements in descending order of priority.
FIG. 10 is a diagram illustrating an example of the product combination list 121 according to the second embodiment.

  By S151, the processing of the security product sales support method ends.

  In the second embodiment, the priority information 133 (see FIG. 8) may be data indicating the priority of a combination of security products, not the priority of security products.

  The product automatic selection unit 120 determines the priority of the combination candidates of all the corresponding products (S141), and displays a product combination list 121 that indicates a predetermined number of combination candidates selected in descending order of priority in the order of the number of coverage of security function requirements. It may be generated (S151).

  The automatic product selection unit 120 may generate the product combination list 121 indicating a predetermined number of combination candidates in descending order of priority without calculating the coverage number of security function requirements (S140).

For example, the user inputs selection method information designating one of the number of coverage of security function requirements, the priority of the combination, and the combination thereof to the security product sales support system 100.
The product automatic selection unit 120 generates a product combination list 121 by selecting a combination candidate of corresponding products by a method specified in the selection method information.

  In the second embodiment, for example, the following security product sales support system 100 has been described.

  The security product sales support system 100 can change the priority of combinations of products to be output.

  The security product sales support system 100 designates a priority for each product corresponding to a function as prioritization information, and displays a combination of products in the designated priority order.

Embodiment 3 FIG.
A form in which a combination of security products that have been frequently presented in the past is preferentially presented will be described.
Hereinafter, matters different from the first embodiment and the second embodiment will be mainly described. Matters whose description is omitted are the same as those in the first or second embodiment.

FIG. 11 is a diagram illustrating an example of the already-output information 134 in the third embodiment.
The security information DB 130 stores already output information 134 as shown in FIG.
The already-output information 134 is data indicating, as an output date, the date on which the product combination list 121 including the combination of security products is generated or output for each combination of security products.
For example, the existing output information 134 is updated by the product automatic selection unit 120 when the product combination list 121 is generated or output.

FIG. 12 is a flowchart showing a sales support method for security products in the third embodiment.
A processing flow of the security product sales support method according to the third embodiment will be described with reference to FIG.

In the sales support method for security products, in addition to the processing described in the first embodiment (see FIG. 2), S142 is executed.
Further, S152 is executed instead of S150.
Hereinafter, S142 and S152 will be mainly described.

  In S142, the product automatic selection unit 120 calculates the number of combinations output for each combination candidate of the corresponding product.

For example, the product automatic selection unit 120 selects a combination candidate of the top three corresponding products having a large number of coverage of security function requirements. That is, the combination candidates “B + G”, “A + F”, and “C + E” of the corresponding products are selected based on the function coverage number list 122 shown in FIG.
The product automatic selection unit 120 calculates the number of outputs based on the already-output information 134 (see FIG. 11) for each combination candidate of the selected corresponding product. The number of outputs is the number of days of output indicated in the already-output information 134. In the already-output information 134 of FIG. 11, the output counts of the combination candidates “B + G”, “A + F”, and “C + E” of the corresponding products are “2”, “1”, and “3”.

  It progresses to S152 after S142.

  In S152, the product automatic selection unit 120 selects a combination candidate of a corresponding product having a large number of coverage of security function requirements and a large number of outputs (an example of priority), and a product combination list indicating the combination candidate of the selected corresponding product 121 is generated, and the generated product combination list 121 is output.

For example, as shown in FIG. 13, the product automatic selection unit 120 generates and outputs a product combination list 121 that indicates combinations of the top three corresponding products having the largest coverage of security function requirements in descending order of output count.
FIG. 13 is a diagram illustrating an example of the product combination list 121 according to the third embodiment.

The automatic product selection unit 120 adds an output date to the existing output information 134 (see FIG. 11) in association with the combination candidate of the corresponding product included in the product combination list 121.
By S152, the processing of the security product sales support method ends.

  In the third embodiment, the automatic product selection unit 120 calculates the number of outputs of all the corresponding product combination candidates (S142), and selects a predetermined number of combination candidates in descending order of the number of output times in the order of the number of coverage of security function requirements. The product combination list 121 shown may be generated (S152).

  The product automatic selection unit 120 may generate the product combination list 121 indicating a predetermined number of combination candidates in descending order of the number of outputs without calculating the coverage number of security function requirements (S140) (S152).

  The automatic product selection unit 120 calculates the priority of the combination as in the second embodiment (see FIG. 9) (S141), and based on the coverage number of security function requirements, the priority of the combination, and the number of times of output of the combination The combination candidate of the corresponding product shown in the product combination list 121 may be selected.

For example, the user inputs selection method information designating any one of the coverage number of security function requirements, the priority of the combination, the number of times of combination output, and the combination thereof to the security product sales support system 100.
The product automatic selection unit 120 generates a product combination list 121 by selecting a combination candidate of corresponding products by a method specified in the selection method information.

  In the third embodiment, for example, the following security product sales support system 100 has been described.

  The security product sales support system 100 holds the number of provisions (outputs) of product combinations provided in the past as prioritization information, and displays the product combinations in descending order of the number of provisions.

Embodiment 4 FIG.
A form in which a combination of security products recently presented is preferentially presented will be described.
In the following, items different from any of Embodiments 1 to 3 will be mainly described. Matters whose description is omitted are the same as in any of the first to third embodiments.

FIG. 14 is a diagram illustrating an example of priority information 133B in the fourth embodiment.
The security information DB 130 stores in advance priority information 133B as shown in FIG.
The priority information 133B is data indicating a specific coefficient in association with the output date (see FIG. 11) of the combination of security products. The coefficient shown in the priority information 133B is used for calculating the number of output points calculated for each combination of security products.

FIG. 15 is a flowchart showing a security product sales support method according to the fourth embodiment.
A processing flow of the security product sales support method according to the fourth embodiment will be described with reference to FIG.

In the security product sales support method, S143 is executed in addition to the processing described in the first embodiment (see FIG. 2).
Further, S153 is executed instead of S150.
Hereinafter, S143 and S153 will be mainly described.

In S143, the product automatic selection unit 120 calculates the number of output points of the combination for each combination candidate of the corresponding product.
The number of output points is a value obtained by summing the coefficients corresponding to the output dates by the number of output dates, and is higher as there are more output dates closer to the current date.

For example, the product automatic selection unit 120 selects a combination candidate of the top three corresponding products having a large number of coverage of security function requirements. That is, the combination candidates “B + G”, “A + F”, and “C + E” of the corresponding products are selected based on the function coverage number list 122 shown in FIG.
The automatic product selection unit 120 calculates the number of output points as follows based on the already-output information 134 (see FIG. 11) and the priority information 133B (see FIG. 14) for each combination candidate of the selected corresponding product.
In the output information 134 shown in FIG. 11, the output dates of the corresponding product combination candidate “B + G” are “January 10, 2010” (three months ago) and “February 10, 2010” (two months ago). . In the priority information 133 </ b> B illustrated in FIG. 14, the coefficient corresponding to the output date three months ago is “1/8”, and the coefficient corresponding to the output date two months before is “¼”. Therefore, the number of output points of the combination candidate “B + G” of the corresponding product is “0.375 (= 1/8 + 1/4)”.
The product automatic selection unit 120 similarly calculates the number of output points of the combination candidates “A + F” and “C + E” of the corresponding products, and generates already output information 134 as shown in FIG.
FIG. 16 is a diagram illustrating an example of the already-output information 134 according to the fourth embodiment. “Conversion value” indicates the number of output points.

  It progresses to S153 after S143.

  In S153, the product automatic selection unit 120 selects a combination candidate of a corresponding product having a large number of coverage of security function requirements and a high output score (converted value) (an example of priority), and selects a combination candidate of the selected corresponding product. The product combination list 121 shown is generated, and the generated product combination list 121 is output.

For example, as shown in FIG. 17, the product automatic selection unit 120 generates and outputs a product combination list 121 that shows combinations of the top three corresponding product combinations with the largest number of coverage of security function requirements in descending order of output points.
FIG. 17 is a diagram illustrating an example of the product combination list 121 according to the fourth embodiment.

  With S153, the processing of the security product sales support method ends.

  In the fourth embodiment, the automatic product selection unit 120 calculates the number of output points of combination candidates of all corresponding products (S143), and selects a predetermined number of combination candidates in descending order of the number of output points in the order of the number of coverage of security function requirements. The product combination list 121 shown may be generated (S153).

  The product automatic selection unit 120 may generate the product combination list 121 indicating a predetermined number of combination candidates in descending order of the number of output points without calculating the coverage number of security function requirements (S140).

  The automatic product selection unit 120 calculates the priority of the combination as in the second embodiment (see FIG. 9) (S141), and based on the number of coverage of security function requirements, the priority of the combination, and the number of output points of the combination The combination candidate of the corresponding product shown in the product combination list 121 may be selected.

For example, the user inputs selection method information specifying any one of the coverage number of security function requirements, the priority of the combination, the number of output points of the combination, and the combination thereof to the security product sales support system 100.
The product automatic selection unit 120 generates a product combination list 121 by selecting a combination candidate of corresponding products by a method specified in the selection method information.

  In the fourth embodiment, for example, the following security product sales support system 100 has been described.

The security product sales support system 100 holds the number of times of providing a combination of products provided in the past (number of times of output) as prioritization information.
The security product sales support system 100 displays the combination of products that satisfy the security requirements using the sum of the number of times of provision (number of output points) using the reciprocal (coefficient) of the elapsed time from the date of provision (output date). .

  100 Sales Support System for Security Products, 101 Customer Request, 110 Request Automatic Generation Unit, 111 System Request List, 120 Product Automatic Selection Unit, 121 Product Combination List, 122 Function Coverage List, 130 Security Information DB, 131 Industry Standard Standard table, 132 product / library table, 133, 133B priority information, 134 already output information, 901 display device, 902 keyboard, 903 mouse, 904 drive device, 905 printer device, 911 CPU, 912 bus, 913 ROM, 914 RAM, 915 communication board, 920 magnetic disk device, 921 OS, 922 window system, 923 program group, 924 file group.

Claims (12)

Security function data indicating a system type indicating a system type and a plurality of security functions are associated with each other, and security product function data indicating a security product having the security function and a security function associated with the security product are stored. The security product database
A target security function group identifying unit that identifies a plurality of security functions corresponding to a specific system type as a target security function group based on the security function data;
Target security product group for identifying a plurality of security products having at least one security function included in the target security function group specified by the target security function group specifying unit as the target security product group based on the security product function data A specific part,
A security product combination candidate specifying unit for specifying a plurality of combinations of security products as a security product combination candidate group by combining security products included in the target security product group specified by the target security product group specifying unit;
A security product combination candidate specifying device, comprising: a security product combination ranking unit that ranks the security product combination candidate groups specified by the security product combination candidate specifying unit based on a predetermined condition. The security product combination ranking unit determines the number of security functions included in a combination of security products among a plurality of security functions constituting the target security function group for each combination of security products included in a security product combination candidate group. 2. The security product combination candidate specifying device according to claim 1, wherein the security product coverage number is specified based on the security product function data, and a combination of security products having a large number of security function coverages is assigned a high ranking. The security product database unit stores security product priority data indicating either security product priority or security product combination priority;
The security product combination ranking unit specifies the priority of the security product combination for each security product combination included in the security product combination candidate group based on the security product priority data, and the security function coverage number is 3. The security product combination candidate specifying device according to claim 2, wherein a high priority is given to a combination of security products having a high priority. The security product database unit stores security product ranking data indicating, for each combination of security products, a predetermined number of times given a predetermined ranking by the security product combination ranking unit,
The security product combination ranking unit specifies, for each security product combination included in the security product combination candidate group, a predetermined number of times of the combination of the security products based on the security product ranking data, and the security function coverage number is 4. The security product combination candidate specifying device according to claim 3, wherein a high priority is assigned to a combination of security products having a high priority and a high number of predetermined orders. The security product ranking data indicates a predetermined ranking date given a predetermined ranking as information indicating a predetermined number of times of a combination of security products,
The security product combination ranking unit specifies a predetermined ranking date of the security product combination for each security product combination included in the security product combination candidate group based on the security product ranking data, and the security function coverage number is 5. The security product combination candidate specifying device according to claim 4, wherein a high ranking is assigned to a combination of security products having a high priority and a large number of new predetermined ranking dates. The security product database unit stores security product ranking data indicating, for each combination of security products, a predetermined number of times given a predetermined ranking by the security product combination ranking unit,
The security product combination ranking unit specifies, for each security product combination included in the security product combination candidate group, a predetermined number of times of the combination of the security products based on the security product ranking data, and the security function coverage number is 3. The security product combination candidate identification device according to claim 2, wherein a high rank is assigned to combinations of security products having a large number of predetermined orders. The security product ranking data indicates a predetermined ranking date given a predetermined ranking as information indicating a predetermined number of times of a combination of security products,
The security product combination ranking unit specifies a predetermined ranking date of the security product combination for each security product combination included in the security product combination candidate group based on the security product ranking data, and the security function coverage number is 3. The security product combination candidate specifying device according to claim 2, wherein a high rank is assigned to a combination of security products having a large number of new predetermined ranking dates. The security product database unit stores security product priority data indicating either security product priority or security product combination priority;
The security product combination ranking unit specifies the priority of the combination of security products based on the security product priority data for each combination of security products included in the security product combination candidate group, and security with high priority. 2. The security product combination candidate specifying device according to claim 1, wherein a high ranking is assigned to the combination of products. The security product database unit stores security product ranking data indicating, for each combination of security products, a predetermined number of times given a predetermined ranking by the security product combination ranking unit,
The security product combination ranking unit specifies a predetermined number of times of the combination of security products based on the security product ranking data for each combination of security products included in the security product combination candidate group, and the predetermined number of times is large. 2. The security product combination candidate specifying device according to claim 1, wherein a high ranking is assigned to the combination of security products. The security product database unit stores security product ranking data indicating a predetermined ranking date assigned to a predetermined ranking by the security product combination ranking unit for each combination of security products,
The security product combination ranking unit specifies a predetermined ranking date of the combination of security products for each combination of security products included in the security product combination candidate group based on the security product ranking data, and a new predetermined ranking date is set. 2. The security product combination candidate specifying device according to claim 1, wherein a high ranking is assigned to a combination of many security products. Security function data indicating a system type indicating a system type and a plurality of security functions are associated with each other, and security product function data indicating a security product having the security function and a security function associated with the security product are stored. In the security product combination candidate specifying method of the security product combination candidate specifying device including the security product database unit,
The target security function group specifying unit specifies a plurality of security functions corresponding to a specific system type as a target security function group based on the security function data,
The target security product group specifying unit selects a plurality of security products having at least one security function included in the target security function group specified by the target security function group specifying unit based on the security product function data. Identified as a group,
The security product combination candidate specifying unit specifies a plurality of combinations of security products as a combination candidate group of security products by combining security products included in the target security product group specified by the target security product group specifying unit,
A security product combination ranking specifying unit ranks the security product combination candidate group specified by the security product combination candidate specifying unit based on a predetermined condition, and the security product combination of the security product combination candidate specifying device Candidate identification method. Using security function data indicating a system type representing a system type and a plurality of security functions in association with each other, and security product function data indicating a security product having the security function and a security function possessed by the security product in association with each other In the security product combination candidate identification program to
A target security function group specifying process for specifying a plurality of security functions corresponding to a specific system type as a target security function group based on the security function data;
Target security product group that identifies a plurality of security products having at least one security function included in the target security function group specified by the target security function group specifying process as the target security product group based on the security product function data Specific processing,
A security product combination candidate specifying process for specifying a plurality of combinations of security products as a combination candidate group of security products by combining security products included in the target security product group specified by the target security product group specifying process;
A security product combination candidate specifying program for causing a computer to execute a security product combination ranking process for ranking a security product combination candidate group specified by the security product combination candidate specifying process based on a predetermined condition.

Images