TERMINAL DEVICE, NETWORK CONNECTION METHOD, AND COMPUTER READABLE MEDIUM HAVING PROGRAM STORED THEREIN

• US 20090259759A1
• Filed: 03/18/2009
• Published: 10/15/2009
• Est. Priority Date: 04/09/2008
• Status: Abandoned Application

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: MIYAJIMA, Hiroaki
• Application Number:
  US12/406,536
• Publication Number:
  US 20090259759A1
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 63/0272 Virtual private networks

Abstract

A virtual machine system including a user virtual machine for operating a user environment, and a service virtual machine for controlling the user virtual machine, and performing network connection is constructed on a terminal device capable of being connected to a network, and the service virtual machine controls the network use by the user virtual machine depending on the security of the network to which the terminal device is directly connected.

Claims

1. A terminal device capable of being connected to a network, wherein

a virtual machine system including a user virtual machine for operating a user environment, and a service virtual machine for controlling said user virtual machine, and performing network connection processing is constructed on said terminal device,

said service virtual machine

controls utilization of said network by said user virtual machine, depending on security of said network to which said terminal device is directly connected.

2. The terminal device according to claim 1, wherein

said user virtual machine is a virtual machine for operating a user environment including an operating system and an application to access important data, and

said service virtual machine

sets said user virtual machine to be able to directly using said network when said network to which said terminal device is connected is a secure internal network, and

establishes a VPN connection so that said user virtual machine can use said network through the VPN when said network is an insecure external network.

3. The terminal device according to claim 2, including

as said user virtual machine, an auxiliary virtual machine for operating a user environment separated from important data, wherein

said service virtual machine

activates said auxiliary virtual machine so as to be able to directly using said network when said network is an insecure external network.

4. The terminal device according to claim 2, wherein

said service virtual machine

comprises a line connection control processing unit for determining whether said network to which said mobile terminal is directly connected is said internal network, or said external network.

5. The terminal device according to claim 4, wherein

said line connection control processing unit

comprises a line connection control table in which information is set in advance indicating whether said network to which said mobile terminal is directly connected is said internal network or said external network, and

refers to said line connection control table to determine whether said network is said internal network or said external network.

6. The terminal device according to claim 5, wherein

said line connection control processing unit

comprises an internal determination control table in which an IP address range of a network is associated with a command for checking whether a connected network is an internal network,

searches in said internal determination control table for an IP address obtained in said network when whether said network is said internal network or said external network cannot be determined from said line connection control table,

executes said corresponding command when said obtained IP address exists in said internal determination control table, and if said command succeeded, determines that said network is said internal network, and

determines said network is said external network when said obtained IP address does not exist in said internal determination control table or when said command failed.

7. The terminal device according to claim 1, wherein

said service virtual machine

creates a communication node for communicating with a virtual network corresponding to said network, and a VPN communication node for communicating with a virtual network corresponding to a VPN connection established with said network, in said service virtual machine,

activates said user virtual machine to connect to said communication node when said network is said internal network, and

activates said user virtual machine to connect to said VPN communication node when said network is said external network.

8. The terminal device according to claim 7, wherein

said service virtual machine

activates said auxiliary virtual machine to connect to said communication node when said network is said external network.

9. The terminal device according to claim 3, wherein

when said user virtual machine is stopped, whether said auxiliary virtual machine is running is determined, and when said auxiliary virtual machine is running, said auxiliary virtual machine is stopped, then said service virtual machine is stopped.

10. A network connection method of a terminal device capable of being connected to a network, wherein

a virtual machine system is constructed on said terminal device, which virtual machine includes a user virtual machine for operating a user environment, and a service virtual machine for controlling said user virtual machine, and performing network connection, wherein

in said service virtual machine,

controlling utilization of said network by said user virtual machine, depending on security of said network to which said terminal device is directly connected.

11. The network connection method according to claim 10, wherein

said user virtual machine is a virtual machine for operating an user environment including an operating system and an application to access important data, and

said service virtual machine

sets said user virtual machine to be able to directly using said network when said network to which said terminal device is connected is a secure internal network, and

establishes a VPN connection so that said user virtual machine can use said network through the VPN when said network is an insecure external network.

12. The network connection method according to claim 11, wherein

as said user virtual machine, an auxiliary virtual machine for operating a user environment separated from important data, wherein

said service virtual machine

activates said auxiliary virtual machine so as to be able to directly using said network when said network is an insecure external network.

13. The network connection method according to claim 11, comprising

a determination step of said service virtual machine determining whether said network to which said mobile terminal is directly connected is said internal network or said external network.

14. The network connection method according to claim 13, wherein

in said determination step,

a line connection control table in which information is set in advance indicating whether said network to which said mobile terminal is directly connected is said internal network or said external network is referred to determine whether said network is said internal network or said external network.

15. The network connection method according to claim 14, wherein

in said determination step,

an internal determination control table is searched in which an IP address range of a network is associated with a command for checking whether a connected network is an internal network, for an IP address obtained in said network when whether said network is said internal network or said external network cannot be determined from said line connection control table,

said corresponding command is executed when said obtained IP address exists in said internal determination control table, and if said command succeeded, said network is determined to be said internal network, and

said network is determined to be said external network when said obtained IP address does not exist in said internal determination control table or when said command failed.

16. The network connection method according to claim 10, wherein

said service virtual machine

creates a communication node for communicating with a virtual network corresponding to said network, and a VPN communication node for communicating with a virtual network corresponding to a VPN connection established with said network, in said service virtual machine,

activates said user virtual machine to connect to said communication node when said network is said internal network, and

activates said user virtual machine to connect to said VPN communication node when said network is said external network.

17. The network connection method according to claim 16, wherein

said service virtual machine

activates said auxiliary virtual machine to connect to said communication node when said network is said external network.

18. The network connection method according to claim 12, wherein

when said user virtual machine is stopped, whether said auxiliary virtual machine is running is determined, and when said auxiliary virtual machine is running, said auxiliary virtual machine is stopped, then said service virtual machine is stopped.

19. A computer readable medium storing a program operating on a terminal device capable of being connected to a network, and connecting said terminal device to said network,

said program causes

a virtual machine system, which is constructed on said terminal device, and includes a user virtual machine for operating a user environment, and a service virtual machine for controlling said user virtual machine, and performing network connection,

to control utilization of said network by said user virtual machine, depending on security of said network to which said terminal device is directly connected.

20. The computer readable medium according to claim 19, wherein

said user virtual machine is a virtual machine for operating an user environment including an operating system and an application to access important data, and

said program causes

said service virtual machine to

set said user virtual machine to be able to directly using said network when said network to which said terminal device is connected is a secure internal network, and

establish a VPN connection so that said user virtual machine can use said network through the VPN when said network is an insecure external network.

21. The computer readable medium according to claim 20, wherein

as said user virtual machine, an auxiliary virtual machine for operating a user environment separated from important data is included, wherein

said program causing said service virtual machine

to activate said auxiliary virtual machine so as to be able to directly using said network when said network is an insecure external network.

22. The computer readable medium according to claim 20, wherein said program causing said service virtual machine to perform determination processing for determining whether said network to which said mobile terminal is directly connected is said internal network or said external network.

23. The computer readable medium according to claim 22, wherein

in said determination processing,

a line connection control table in which information is set in advance indicating whether said network to which said mobile terminal is directly connected is said internal network or said external network is referred to determine whether said network is said internal network or said external network.

24. The computer readable medium according to claim 23, wherein

in said determination processing,

an internal determination control table is searched in which an IP address range of a network is associated with a command for checking whether a connected network is an internal network, for an IP address obtained in said network when whether said network is said internal network or said external network cannot be determined from said line connection control table,

said corresponding command is executed when said obtained IP address exists in said internal determination control table, and if said command succeeded, said network is determined to be said internal network, and

said network is determined to be said external network when said obtained IP address does not exist in said internal determination control table or when said command failed.

25. The computer readable medium according to claim 19, wherein said program causing said service virtual machine to

create a communication node for communicating with a virtual network corresponding to said network, and a VPN communication node for communicating with a virtual network corresponding to a VPN connection established with said network, in said service virtual machine,

activate said user virtual machine to connect to said communication node when said network is said internal network, and

activate said user virtual machine to connect to said VPN communication node when said network is said external network.

26. The computer readable medium according to claim 25, wherein said program causing said service virtual machine

to activate said auxiliary virtual machine to connect to said communication node when said network is said external network.

27. The computer readable medium according to claim 21, wherein

when said user virtual machine is stopped, whether said auxiliary virtual machine is running is determined, and when said auxiliary virtual machine is running, said auxiliary virtual machine is stopped, then said service virtual machine is stopped.