Information Processing System and Control Method for Information Processing System

• US 20100064044A1
• Filed: 08/05/2009
• Published: 03/11/2010
• Est. Priority Date: 09/05/2008
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Nonoyama, Akihiro
• Application Number:
  US12/535,797
• Publication Number:
  US 20100064044A1
• Time in Patent Office: Days
• US Class Current: 709/226
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

According to one embodiment, an information processing system includes a managed information processing apparatus connected with a network, and a plurality of first information processing apparatuses including a first monitor module which controls each software resource to simultaneously run on one hardware resource, the software resources including a first software resource including a first program has a function of administrating security information required to control an operation of the managed information processing apparatus, wherein one first information processing apparatus selected from the plurality of first information processing apparatuses executes the first program, and the security information of the one selected first information processing apparatus is synchronized with that of a newly selected first information processing apparatus when changing the first information processing apparatus which executes the first program from the selected first information processing apparatus to the newly selected first information processing apparatus,

Claims

1. An information processing system comprising:

a managed information processing apparatus connected with a network;

a plurality of first information processing apparatuses connected with the network, the first information processing apparatus including a first monitor module which controls each software resource to simultaneously run on one hardware resource, the software resources including a first software resource including a first operating system and a first program which runs on the first operating system and has a function of administrating security information required to control an operation of the managed information processing apparatus;

a plurality of second information processing apparatuses connected with the network, the second information processing apparatus including a second monitor module which controls each software resource to simultaneously run on one hardware resource, the software resources including a second software resource including a second operating system and a second program which runs on the second operating system and has a function of collecting and saving log information indicative of an administration status in the managed information processing apparatus;

a plurality of third information processing apparatuses connected with the network, the third information processing apparatus including a third monitor module which controls each software resource to simultaneously run on one hardware resource, the software resources including a third software resource including a third operating system and a third program which runs on the third operating system and has a function of administrating user information which uses the managed information processing apparatus; and

a plurality of fourth information processing apparatuses connected with the network, the fourth information processing apparatus including the fourth monitor module which controls each software resource to simultaneously run on one hardware resource, the software resources including a fourth software resource including the fourth operating system and a fourth Program which runs on the fourth operating system and has a function of administrating device information which uses the managed information processing apparatus,

wherein one first information processing apparatus selected from the plurality of first information processing apparatuses executes the first program, and the security information of the one selected first information processing apparatus is synchronized with that of a newly selected first information processing apparatus when changing the first information processing apparatus which executes the first program from the selected first information processing apparatus to the newly selected first information processing apparatus,

one second information processing apparatus selected from the plurality of second information processing apparatuses executes the second program, and the log information of the one selected second information processing apparatus is synchronized with that of a newly selected second information processing apparatus when changing the second information processing apparatus which executes the second program from the one selected second information processing apparatus to the newly selected second information processing apparatus,

one third information processing apparatus selected from the plurality of third information processing apparatuses executes the third program, and the user information of the one selected third information processing apparatus is synchronized with that of a newly selected third information processing apparatus when changing the third information processing apparatus which executes the third program from the one selected third information processing apparatus to the newly selected third information processing apparatus, and

one fourth information processing apparatus selected from the plurality of fourth information processing apparatuses executes the fourth program, and the device information of the one selected fourth information processing apparatus is synchronized with that of a newly selected fourth information processing apparatus when changing the fourth information processing apparatus which executes the fourth program from the one selected fourth information processing apparatus to the newly selected fourth information processing apparatus.

2. The system of claim 1, wherein, when changing the selected first information processing apparatus to a newly selected first information processing apparatus, a name on NetBIOS of the first software resource of the selected first information processing apparatus is set to a name on NetBIOS of the first software resource of the newly selected first information processing apparatus, and the name on NetBIOS of the first software resource of the newly selected first information processing apparatus is set to the name on NetBIOS of the first software resource of the selected first information processing apparatus,

when changing the selected second information processing apparatus to a newly selected second information processing apparatus, a name on NetBIOS of the second software resource of the selected second information processing apparatus is set to a name on NetBIOS of the second software resource of the newly selected second information processing apparatus, and the name on NetBIOS of the second software resource of the newly selected second information processing apparatus is set to the name on NetBIOS of the second software resource of the selected second information processing apparatus,

when changing the selected third information processing apparatus to a newly selected third information processing apparatus, a name on NetBIOS of the third software resource of the selected third information processing apparatus is set to a name on NetBIOS of the third software resource of the newly selected third information processing apparatus, and the name on NetBIOS of the third software resource of the newly selected third information processing apparatus is set to the name on NetBIOS of the third software resource of the selected third information processing apparatus, and

when changing the selected fourth information processing apparatus to a newly selected fourth information processing apparatus, a name on NetBIOS of the fourth software resource of the selected fourth information processing apparatus is set to a name on NetBIOS of the fourth software resource of the newly selected fourth information processing apparatus, and the name on NetBIOS of the fourth software resource of the newly selected fourth information processing apparatus is set to the name on NetBIOS of the fourth software resource of the selected fourth information processing apparatus.

3. The system of claim 1, wherein the first information processing apparatus, the second information processing apparatus, the third information processing apparatus, and the fourth information processing apparatus are the same information processing apparatus.

4. The system of claim 1, wherein, when changing the selected first information processing apparatus to the newly selected first information processing apparatus, a resource amount required to carry out first software resource is calculated, and the newly selected first information processing apparatus is selected in accordance with an unoccupied resource of the plurality of first information processing apparatuses,

when changing the selected second information processing apparatus to the newly selected second information processing apparatus, a resource amount required to carry out the second software resource is calculated, and the newly selected second information processing apparatus is selected in accordance with an unoccupied resource of the plurality of second information processing apparatuses,

when changing the selected third information processing apparatus to the newly selected third information processing apparatus, a resource amount required to carry out the third software resource is calculated, and the newly selected third information processing apparatus is selected in accordance with an unoccupied resource of the plurality of third information processing apparatuses, and

when changing the selected fourth information processing apparatus to the newly selected fourth information processing apparatus, a resource amount required to carry out the fourth software resource is calculated, and the newly selected fourth information processing apparatus is selected in accordance with an unoccupied resource of the plurality of fourth information processing apparatuses.

5. A control method for an information processing system,

information processing system comprising:

a managed information processing apparatus connected with a network;

a plurality of first information processing apparatuses connected with the network, the first information processing apparatus including a first monitor module which controls each software resource to simultaneously run on one hardware resource, the software resources including a first software resource including a first operating system and a first program which runs on the first operating system and has a function of administrating security information required to control an operation of the managed information processing apparatus;

a plurality of second information processing apparatuses connected with the network, the information processing apparatus including a second monitor module which controls each software resource to simultaneously run on one hardware resource, the of software resources including a second software resource including a second operating system and a second program which runs on the second operating system and has a function of collecting and saving log information indicative of an administration status in the managed information processing apparatus;

a plurality of third information processing apparatuses connected with the network, the third information processing apparatus including a third monitor module which controls each software resource to simultaneously run on one hardware resource, the software resources including a third software resource including a third operating system and a third program which runs on the third operating system and has a function of administrating user information which uses the managed information processing apparatus; and

a plurality of fourth information processing apparatuses connected with the network, the fourth information processing apparatus including the fourth monitor module which controls each software resource to simultaneously run on one hardware resource, the software resources including a fourth software resource including the fourth operating system and a fourth program which runs on the fourth operating system and has a function of administrating device information which uses the managed information processing apparatus,

the system comprising;

executing the first program by one first information processing apparatus selected from the plurality of first information processing apparatuses;

synchronizing the security information of a newly selected first information processing apparatus with the security information of the one selected first information processing apparatus when changing the first information processing apparatus which executes the first program from the selected first information processing apparatus to the newly selected first information processing apparatus;

executing the second program by the one second information processing apparatus selected from the plurality of second information processing apparatuses;

synchronizing the log information of a newly selected second information processing apparatus with the log information of the one selected second information processing apparatus when changing the second information processing apparatus which executes the second program from the one selected second information processing apparatus to the newly selected second information processing apparatus;

executing the third program by one third information processing apparatus selected from the plurality of third information processing apparatuses;

synchronizing the user information of a newly selected third information processing apparatus with the user information of the one selected third information processing apparatus when changing the third information processing apparatus which executes the third program from the one selected third information processing apparatus to the newly selected third information processing apparatus;

executing the fourth program by one fourth information processing apparatus selected from the plurality of fourth information processing apparatuses; and

synchronizing the device information of a newly selected fourth information processing apparatus with the device information of the one selected fourth information processing apparatus when changing the fourth information processing apparatus which executes the fourth program from the one selected fourth information processing apparatus to the newly selected fourth information processing apparatus.

6. The method of claim 5, further comprising:

setting, when changing the selected first information processing apparatus to a newly selected first information processing apparatus, a name on NetBIOS of the first software resource of the selected first information processing apparatus to a name on NetBIOS of the first software resource of the newly selected first information processing apparatus, and setting the name on NetBIOS of the first software resource of the newly selected first information processing apparatus to the name on NetBIOS of the first software resource of the selected first information processing apparatus;

setting, when changing the selected second information processing apparatus to a newly selected second information processing apparatus, a name on NetBIOS of the second software resource of the selected second information processing apparatus to a name on NetBIOS of the second software resource of the newly selected second information processing apparatus, and setting the name on NetBIOS of the second software resource of the newly selected second information processing apparatus to the name on NetBIOS of the second software resource of the selected second information processing apparatus,

setting, when changing the selected third information processing apparatus to a newly selected third information processing apparatus, a name on NetBIOS of the third software resource of the selected third information processing apparatus to a name on NetBIOS of the third software resource of the newly selected third information processing apparatus, and setting the name on NetBIOS of the third software resource of the newly selected third information processing apparatus to the name on NetBIOS of the third software resource of the selected third information processing apparatus; and

setting, when changing the selected fourth information processing apparatus to a newly selected fourth information processing apparatus, a name on NetBIOS of the fourth software resource of the selected fourth information processing apparatus to a name on NetBIOS of the fourth software resource of the newly selected fourth information processing apparatus, and setting the name on NetBIOS of the fourth software resource of the newly selected fourth information processing apparatus to the name on NetBIOS of the fourth software resource of the selected fourth information processing apparatus.

7. The method of claim 5, wherein the first information processing apparatus, the second information processing apparatus, the third information processing apparatus, and the fourth information processing apparatus are the same information processing apparatus.

8. The method of claim 5, further comprising:

calculating, when changing the selected first information processing apparatus to the newly selected first information processing apparatus, a resource amount required to carry out the first software resource, and selecting the newly selected first information processing apparatus in accordance with an unoccupied resource of the plurality of first information processing apparatuses;

calculating, when changing the selected second information processing apparatus to the newly selected second information processing apparatus, a resource amount required to carry out the second software resource, and selected the newly selected second information Processing apparatus in accordance with an unoccupied resource of the plurality of second information processing apparatuses;

calculating, when changing the selected third information processing apparatus to the newly selected third information processing apparatus, a resource amount required to carry out the third software resource, and selecting the newly selected third information processing apparatus in accordance with an unoccupied resource of the plurality of third information processing apparatuses; and

calculating, when changing the selected fourth information processing apparatus to the newly selected fourth information processing apparatus, a resource amount required to carry out the fourth software resource, and selecting the newly selected fourth information processing apparatus in accordance with an unoccupied resource of the plurality of fourth information processing apparatuses.