COMPUTER MACHINE AND ACCESS CONTROL METHOD

• US 20100275205A1
• Filed: 04/19/2010
• Published: 10/28/2010
• Est. Priority Date: 04/28/2009
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Digital Solutions Corporation (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Nakajima, Hiroshi
• Granted Patent: US 8,032,883 B2
• Time in Patent Office: Days
• US Class Current: 718/1
• CPC Class Codes: G06F 2009/45579 I/O management, e.g. providing access to device drivers or storage
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects

Abstract

According to one embodiment, a computer machine includes a client virtual machine and a file server virtual machine configured to simultaneously run, a virtual machine manager configured to control booting of the client and file server virtual machines, a monitoring module configured to monitor whether a communication with an external file server is possible, an access control module configured to access to a duplicate file which is a duplicate of the file and is stored in a part of a local disk or a part of a memory which are managed by the monitoring module when the monitoring module determines that the communication is impossible after determining that the communication is possible, and a file deletion module configured to delete the duplicate file when the monitoring module detects the communication is impossible in a preset time.

Claims

1. A computer machine comprising:

a local disk;

a memory;

a virtual machine monitor configured to run in the computer machine;

virtual machines configured to simultaneously run on the virtual machine monitor and comprising a client virtual machine and a file server virtual machine in which an internal file server accessible from the client virtual machine is executed;

a virtual machine manager configured to manage a part of the local disk and a part of the memory and to control booting of the virtual machines;

a monitoring module configured to monitor whether a communication with an external server in which an external file server is executed via a network is possible;

an access control module configured to access to a file stored in the external file server or the internal file server when the client virtual machine tries to accesses the file and the monitoring module determines that the communication is possible, and to access to a duplicate file which is a duplicate of the file and is stored in the part of the local disk or the part of the memory when the client virtual machine tries to access to the file and the monitoring module determines that the communication is impossible after determining that the communication is possible; and

a file deletion module configured to delete the duplicate file when the monitoring module detects the communication is impossible in a preset time.

2. The computer machine of claim 1, further comprising an encryption module configured to encrypt the duplicate file.

3. The computer machine of claim 1, wherein

the monitoring module is configured to instruct the virtual machine manager to perform a forced termination or a suspend of the client virtual machine when the monitoring module detects that the communication is impossible in a preset time, and

the virtual machine manager is configured to perform the forced termination or the suspend of the client virtual machine according to an instruction from the monitoring module.

4. The computer machine of claim 1, wherein system data of the client virtual machine is stored in the local disk and user data of the client virtual machine is stored in an external file server.

5. The computer machine of claim 4, wherein a set file and a file which is necessary for booting which are selected from the user data are stored in the internal file server when the computer machine is carried out to a location in which the communication is impossible.

6. The computer machine of claim 1, further comprising:

a device manager configured to create a device model containing information to allocate an I/O device of the computer machine to the client virtual machine according to a device profile and the I/O device; and

a memory controller comprising an address conversion circuit configured to perform an address conversion for performing a MMIO access from the client virtual machine to the I/O device and an address conversion for performing a DMA transfer between the I/O device and the client virtual machine,

wherein the client virtual machine is configured to allocate the I/O device to the client virtual machine based on the device model, and

the client virtual machine is configured to perform the MIMIC access or the DMA transfer using the address conversion circuit according to the device model.

7. The computer machine of claim 6, further comprising an allocating module configured to allocate the I/O device to a first address in a memory space of the computer machine and to allocate an another BIOS (Basic Input/Output System) different from a system BIOS to the second address in the memory space,

wherein the device manager is configured to create a second device model comprising information for allocating the another BIOS to a third address of an address space of the client virtual machine, the third address is the same as the second address to which the another BIOS is allocated, and

the client virtual machine is configured to make an access by using the address conversion circuit when making the access to the another BIOS.

8. An access control method of a computer machine comprising a local disk, a memory, virtual machines comprising a client virtual machine and a file server virtual machine on which an internal file server accessible from the client virtual machine is executed and which simultaneously run on the virtual machine monitor, and a virtual machine manager configured to manage a part of the local disk and a part of memory and to control the booting of the virtual machines, the method comprising:

monitoring whether a communication with an external server on which an external file server is operated via a network is possible;

accessing a file stored in the external server or the internal file server when the client virtual machine tries to access the file and it is determined that the communication is possible;

accessing to a duplicate file which is a duplicate of the file and is stored in the part of local the local disk or the part of the memory when the client virtual machine tries to access to the file and the monitoring module determines that the communication is impossible after determining that the communication is possible; and

deleting the duplicate file when it is detected that the communication is impossible in a preset time.