Software development apparatus for model that requires security
View Patent ↗A software development apparatus for developing application software based on an object model that requires security in a web service application is provided. The software development apparatus includes a display unit that displays, in a class diagram of the application software, security annotation for adding security requirements for a service, input means for inputting the security annotation, transforming means for transforming the class diagram into a configuration model based on a markup language, and configuration-file creating means for creating a configuration file based on a markup language by serializing the configuration model based on a markup language. The security annotation includes the security requirements and a token class of a security token that is a certificate for declaring identity of a client to a server.
1. A software development method for developing application software based on an object model that requires security in a web service application, the method comprising:
a display step of displaying, in a class diagram of the application software, security annotation for adding security requirements for a service;
an input step of inputting the security annotation;
a transforming step of transforming the class diagram into a configuration model based on a markup language; and
a step of creating a configuration file based on a markup language by serializing the configuration model based on a markup language,
wherein the security annotation includes the security requirements and a token class of a security token that is a certificate for declaring identity of a client to a server,
wherein the security requirements include at least one of integrity, confidentiality, and authentication,
wherein the transforming step comprises a step of performing transformation into a configuration model based on a markup language for each of the security requirements,
wherein the class diagram is described in a UML, and the security requirements are described using an extension of the UML, and
wherein the configuration model based on a markup language is a configuration model based on an XML.