SOFTWARE DEVELOPMENT APPARATUS FOR MODEL THAT REQUIRES SECURITY

Abstract

A software development apparatus for developing application software based on an object model that requires security in a web service application is provided. The software development apparatus includes a display unit that displays, in a class diagram of the application software, security annotation for adding security requirements for a service, input means for inputting the security annotation, transforming means for transforming the class diagram into a configuration model based on a markup language, and configuration-file creating means for creating a configuration file based on a markup language by serializing the configuration model based on a markup language. The security annotation includes the security requirements and a token class of a security token that is a certificate for declaring identity of a client to a server.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram of a software development apparatus according to the present invention.

FIG. 2 shows exemplary display according to the present invention in which security annotation is added.

FIG. 3 shows exemplary known software development.

FIG. 4 is a flowchart showing the operation of the software development apparatus according to the present invention.

FIG. 5 is a flowchart showing the operation of the software development apparatus according to the present invention.

FIG. 6 is an illustration showing comparison of configuration models.

FIG. 7 is an illustration showing the content of each configuration model after values of platform-specific parameter data are set.

FIG. 8 is an outline block diagram of a second embodiment of the present invention.

Claims

1. A software development apparatus for developing application software based on an object model that requires security in a web service application, the apparatus comprising: a display unit that displays, in a class diagram of the application software, security annotation for adding security requirements for a service;input means for inputting the security annotation;transforming means for transforming the class diagram into a configuration model based on a markup language; andconfiguration-file creating means for creating a configuration file based on a markup language by serializing the configuration model based on a markup language.

2. The software development apparatus according to claim 1, wherein the security annotation includes the security requirements and a token class of a security token that is a certificate for declaring identity of a client to a server.

3. The software development apparatus according to claim 2, wherein the security requirements include at least one of integrity, confidentiality, and authentication.

4. The software development apparatus according to claim 2, wherein the transforming means performs transformation into a configuration model based on a markup language for each of the security requirements.

5. The software development apparatus according to claim 1, wherein the class diagram is described in a UML, and the security requirements are described using an extension of the UML.

6. The software development apparatus according to claim 1, wherein the configuration model based on a markup language is a configuration model based on an XML.

7. A computer program product that causes a computer to function as a software development apparatus for developing application software based on an object model that requires security in a web service application, the computer functioning as: a display function of displaying, in a class diagram of the application software, security annotation for adding security requirements for a service;an input function of inputting the security annotation;a transforming function of transforming the class diagram into a configuration model based on a markup language; anda configuration-file creating function of creating a configuration file based on a markup language by serializing the configuration model based on a markup language.

8. The computer program product according to claim 7, wherein the security annotation includes the security requirements and a token class of a security token that is a certificate for declaring identity of a client to a server.

9. The computer program product according to claim 8, wherein the security requirements include at least one of integrity, confidentiality, and authentication.

10. The computer program product according to claim 7, wherein the transforming function performs transformation into a configuration model based on a markup language for each of the security requirements.

11. The computer program product according to claim 7, wherein the class diagram is described in a UML, and the security requirements are described using an extension of the UML.

12. The computer program product according to claim 7, wherein the configuration model based on a markup language is a configuration model based on an XML.

13. A software development method for developing application software based on an object model that requires security in a web service application, the method comprising: a display step of displaying, in a class diagram of the application software, security annotation for adding security requirements for a service;an input step of inputting the security annotation;a transforming step of transforming the class diagram into a configuration model based on a markup language; anda step of creating a configuration file based on a markup language by serializing the configuration model based on a markup language.

14. The method according to claim 13, wherein the security annotation includes the security requirements and a token class of a security token that is a certificate for declaring identity of a client to a server.

15. The method according to claim 14, wherein the security requirements include at least one of integrity, confidentiality, and authentication.

16. The method according to claim 13, wherein the transforming step is a step of performing transformation into a configuration model based on a markup language for each of the security requirements.

17. The method according to claim 13, wherein the class diagram is described in a UML, and the security requirements are described using an extension of the UML.

18. The method according to claim 13, wherein the configuration model based on a markup language is a configuration model based on an XML.