INFORMATION PROCESSING DEVICE, COMPUTER SYSTEM AND PROGRAM

• US 20110202977A1
• Filed: 02/16/2011
• Published: 08/18/2011
• Est. Priority Date: 02/18/2010
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Miyamoto, Ryo, Yamasaki, Koichi, OHNO, Takashi
• Granted Patent: US 8,533,785 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 67/59 Providing operational support to end devices by off-loading in the network or by emulation, e.g. when they are unavailable

Abstract

An information processing device includes: a connection monitoring unit performs determining whether a first external device is connected, and determining whether a receiving unit receives the request from the first or second external device, wherein when the connection monitoring unit determines that the first external device is not connected, a usage permission/prohibition determining unit updates the usage permission/prohibition information stored in a management table so that the usage permission/prohibition information indicates that use of a first virtual computer is prohibited, and wherein when the connection monitoring unit determines that the receiving unit receives the request from the second external device and that the first external device is connected, the usage permission/prohibition determining unit transmits, to the first external device, information that instructs the first external device to prohibit use of a second virtual computer.

Claims

1. An information processing device comprising:

a virtual machine monitor that causes a first virtual computer to operate;

a management table that stores usage permission/prohibition information that indicates whether use of the first virtual computer is permitted;

a usage permission/prohibition determining unit that updates the usage permission/prohibition information stored in the management table and controls, based on the usage permission/prohibition information, whether use of the first virtual computer is permitted;

a connection monitoring unit that monitors a first external device on which a second virtual computer to which the first virtual computer is switched operates and a second external device that uses the first virtual computer and on which the second virtual computer does not operate; and

a receiving unit that receives a request to start using the first virtual computer from each of the first and second external devices,

wherein the connection monitoring unit performs

determining whether the first external device is connected, and

determining whether the receiving unit receives the request from the first or second external device,

wherein when the connection monitoring unit determines that the first external device is not connected, the usage permission/prohibition determining unit updates the usage permission/prohibition information stored in the management table so that the usage permission/prohibition information indicates that use of the first virtual computer is prohibited, and

wherein when the connection monitoring unit determines that the receiving unit receives the request from the second external device and that the first external device is connected, the usage permission/prohibition determining unit transmits, to the first external device, information that instructs the first external device to prohibit use of the second virtual computer.

2. The information processing device according to claim 1, further comprising an information synchronizing unit that synchronizes information on the operational state of the first virtual computer with information on the operational state of the second virtual computer when the connection monitoring unit determines that the receiving unit receives the request from the first external device.

3. The information processing device according to claim 1, further comprising an information synchronizing unit that synchronizes information on the operational state of the first virtual computer with information on the operational state of the second virtual computer when the receiving unit receives a request to terminate use of the first virtual computer from the second external device,

wherein the usage permission/prohibition determining unit transmits, to the first external device, the information that instructs the first external device to prohibit use of the second virtual computer.

4. The information processing device according to claim 1, further comprising an information synchronizing unit that synchronizes information on the operational state of the first virtual computer with information on the operational state of the second virtual computer when the connection monitoring unit determines that the first external device is not connected and that the receiving unit receives the request from the first external device.

5. The information processing device according to claim 1, further comprising:

a setting unit that sets, in the management table, a time period for use of the second virtual computer that operates on the first external device; and

a time period monitoring unit that determines whether an actual time period for use of the second virtual computer exceeds the set time period for use of the second virtual computer when the connection monitoring unit determines that the first external device is not connected,

wherein the connection monitoring unit determines whether the first external device is connected when the actual time period for use of the second virtual computer exceeds the set time period for use of the second virtual computer, and

wherein when the actual time period for use of the second virtual computer exceeds the set time period for use of the second virtual computer and the connection monitoring unit determines that the first external device is not connected, the usage permission/prohibition determining unit updates the usage permission/prohibition information stored in the management table so that the usage permission/prohibition information indicates that use of the first virtual computer is permitted.

6. The information processing device according to claim 1, further comprising a notifying unit that notifies an OS operating on the first virtual computer of a location at which the first virtual computer operates when the first virtual computer is used by the first external device.

7. The information processing device according to claim 1,

wherein the usage permission/prohibition determining unit transmits, to the first external device, information that instructs the first external device to cause the second virtual computer to operate,

wherein the receiving unit receives, from the first external device, a signal that indicates an operation of the second virtual computer, and

wherein when the receiving unit receives the signal indicates the operation of the second virtual computer, the usage permission/prohibition determining unit updates the usage permission/prohibition information stored in the management table so that the usage permission/prohibition information indicates that use of the first virtual computer is prohibited.

8. The information processing device according to claim 7, further comprising an information synchronizing unit that synchronizes information on the operational state of the first virtual computer with information on the operational state of the second virtual computer when the connection monitoring unit determines that the first external device is connected.

9. The information processing device according to claim 7, further comprising:

a storage unit that stores information generated in a process performed by the first virtual computer; and

a time period monitoring unit that determines whether an actual time period for use of the first virtual computer exceeds a set time period for use of the first virtual computer when the connection monitoring unit determines that the first external device is not connected, and that deletes the information stored in the storage unit when the actual time period for use of the first virtual computer exceeds the set time period for use of the first virtual computer.

10. A computer system comprising:

a server device on which a first virtual computer operates;

a first terminal device that is connected to the server device and on which a second virtual computer to which the first virtual computer is switched operates; and

a second terminal device that uses the first virtual computer and on which the second virtual computer does not operate,

wherein the server device includes;

a management table that stores usage permission/prohibition information that indicates whether use of the first virtual computer is permitted;

a usage permission/prohibition determining unit that updates the usage permission/prohibition information stored in the management table and controls, based on the usage permission/prohibition information, whether use of the first virtual computer is permitted;

a connection monitoring unit that monitors the first terminal device and the second terminal device;

a receiving unit that receives a request to start using the first virtual computer from each of the first and second terminal devices,

wherein the connection monitoring unit performs determining whether the first terminal device is connected, and determining whether the receiving unit receives the request from the first or second terminal device,

wherein when the connection monitoring unit determines that the first external device is not connected, the usage permission/prohibition determining unit updates the usage permission/prohibition information stored in the management table so that the usage permission/prohibition information indicates that use of the first virtual computer is prohibited, and

wherein when the connection monitoring unit determines that the receiving unit receives the request from the second terminal device and that the first external device is connected, the usage permission/prohibition determining unit transmits, to the first external device, information that instructs the first external device to prohibit use of the second virtual computer.

11. The computer system according to claim 10,

wherein the first terminal device prohibits use of the second virtual computer when the first terminal device receives the information that instructs the first terminal device to prohibit use of the second virtual computer.

12. A storage medium that stores a program that causes a computer to perform:

operating a first virtual computer;

determining whether a first external device on which a second virtual computer to which the first virtual computer is switched operates is connected;

updating, when it is determined that the first external device is not connected, usage permission/prohibition information stored in a management table and indicating whether use of the first virtual computer is permitted so that the usage permission/prohibition information indicates that use of the first virtual computer is prohibited;

controlling whether use of the first virtual computer is permitted based on the usage permission/prohibition information;

determining, when a request to start using the first virtual computer is received, whether the request to start using the first virtual computer is transmitted by the first external device or a second external device on which the second virtual computer does not operate;

transmitting, to the first external device, information that instructs the first external device to prohibit use of the second virtual computer when it is determined that the second external device transmits the request and that the first external device is connected.

13. The storage medium according to claim 12, which stores the program that causes the computer to further perform:

transmitting information that instructs the first external device to cause the second virtual computer to operate;

determining whether the second virtual computer starts being used; and

updating the usage permission/prohibition information stored in the management table and indicating whether use of the first virtual computer is permitted when it is determined that the second virtual computer starts being used.

14. A method for limiting use of a virtual computer, the method causing a computer to perform:

operating a first virtual computer;

determining whether a first terminal device on which a second virtual computer to which the first virtual computer is switched operates is connected;

updating, when it is determined that the first terminal device is not connected, usage permission/prohibition information stored in a management table and indicating whether use of the first virtual computer is permitted so that the usage permission/prohibition information indicates that use of the first virtual computer is prohibited;

controlling whether use of the first virtual computer is permitted based on the usage permission/prohibition information;

determining, when a request to start using the first virtual computer is received, whether the request to start using the first virtual computer is transmitted by the first terminal device or a second terminal device on which the second virtual computer does not operate;

transmitting, to the first terminal device, information that instructs the first terminal device to prohibit use of the second virtual computer when it is determined that the second terminal device transmits the request and that the first terminal device is connected.