INFORMATION PROCESSING APPARATUS, INFORMATION PROCESSING METHOD, AND COMPUTER PROGRAM PRODUCT

• US 20130055340A1
• Filed: 06/26/2012
• Published: 02/28/2013
• Est. Priority Date: 08/26/2011
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Kanai, Jun, Isozaki, Hiroshi, Koike, Ryuiti
• Granted Patent: US 9,317,681 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

According to an aspect of the embodiment, an information processing unit includes a browser unit that receives page files and execute a web application; an application range management unit that receives application range information at the start of execution of the web application, and stores that information in a memory unit; a termination detecting unit that, when the page file being processed by the browser unit changes, determines whether or not the web application being executed has terminated depending on whether or not the new page file is included in the application range information; a usability determining unit that determines whether or not an add-on for which a call request is issued is allowed to be used in the web application being executed; and an add-on calling unit that calls an add-on when determined that the add-on is allowed to be used in the web application being executed.

Claims

1. An information processing apparatus comprising:

a browser unit configured to receive, from a server device, page files included in a web application and execute the web application by processing the received page files;

an application range management unit configured to, at the time of starting execution of the web application, receive application range information representing the page files included in the web application and store the application range information in a memory;

a termination detecting unit configured to, when there is a change of the page file being processed by the browser unit, determine whether or not the web application being executed has ended depending on whether or not the page file after the change is included in the application range information;

a usability determining unit configured to, when a call request is issued for an add-on that represents a function not processed by the browser unit, determine whether or not the add-on for which the call request is issued is allowed to be used in the web application being executed; and

an add-on calling unit configured to, when it is determined that the add-on for which the call request is issued is allowed to be used in the web application being executed, call the add-on.

2. The apparatus according to claim 1, further comprising a usage certificate storing unit configured to, at the time of starting execution of the web application, receive a usage certificate that is information representing the add-on that is allowed to be used in the web application and store the usage certificate in the memory unit, wherein

depending on whether or not the usage certificate corresponding to the add-on for which the call request is issued is stored in the memory unit, the usability determining unit determines whether or not the add-on for which the call request is issued is allowed to be used in the web application being executed.

3. The apparatus according to claim 2, wherein

the application range information and the usage certificate are stored in the page file that is initially run in the web application,

at the time of starting execution of the web application, the application range management unit reads the range information from the page file that is initially run in the web application, and then stores the application range information in the memory unit, and

at the time of starting execution of the web application, the usage certificate storing unit reads the usage certificate from the page file that is initially run in the web application, and then stores the usage certificate in the memory unit.

4. The apparatus according to claim 2, wherein

the application range information and the usage certificate are stored in a configuration file that is different than the page files included in the web application,

at the time of starting execution of the web application, the application range management unit reads the application range information from the configuration file, and then stores the application range information in the memory unit, and

at the time of starting execution of the web application, the usage certificate storing unit reads the usage certificate from the configuration file, and then stores the usage certificate in the memory unit.

5. The apparatus according to claim 2, wherein

the add-on includes a plurality of functions,

the information processing apparatus further comprising a security policy storing unit configured to, for each of the add-ons, receive security policy information, which contains description of a plurality of security policy elements each being a combination of functions that are allowed to be used from among a plurality of functions, and store the security policy information in the memory unit,

the usage certificate includes the security policy element that is applied to the web application being executed,

when the usage certificate corresponding to the add-on for which a call request is issued is stored, the usability determining unit determines that, of the add-on for which the call request is issued, the function indicated in the security policy element included in the usage certificate is allowed to be used.

6. The apparatus according to claim 2, further comprising a certificate verifying unit configured to verify the validness of the usage certificate by referring to data that is specific to the web application being executed.

7. The apparatus according to claim 1, wherein

the add-on includes a plurality of functions,

the information processing apparatus further comprising a security policy storing unit configured to, for each of the add-ons, receive security policy information, which contains description of a plurality of security policy elements each being a combination of functions that are allowed to be used from among a plurality of functions and which contains description of a web application to which the security policy elements are applied, and store the security policy information in the memory unit, and

when a plurality of security policy elements corresponding to the add-on for which a call request is issued include a security policy element that is applied to the web application being executed, the usability determining unit determines that the function indicated in the security policy element applied to the web application being executed is allowed to be used.

8. The apparatus according to claim 1, further comprising an identifying unit configured to, when the browser unit is performing parallel execution of a plurality of web applications, identify the web application in which the add-on has been called, wherein

the usability determining unit determines whether or not the add-on for which a call request is issued is allowed to be used in the web application identified by the identifying unit.

9. The apparatus according to claim 3, further comprising a start determining unit configured to, when there is a change of the page file being processed by the browser unit and when the page file after the change contains the application range information and the usage certificate, determine that the execution of a new web application has started, wherein

when the start determining unit determines that the execution of a new web application has started, the application range management unit receives the application range information corresponding to the new web application and stores that application range information in the memory unit.

10. The apparatus according to claim 1, further comprising a start determining unit configured to, when a predetermined instruction that is decided in advance is detected, determine that the execution of a new web application has started, wherein

when the start determining unit determines that the execution of a new web application has started, the application range management unit receives the application range information corresponding to the new web application and stores that application range information in the memory unit.

11. The apparatus according to claim 1, further comprising:

a file expanding unit configured to, when the browser unit receives an archive file containing a plurality of page files, expand the archive file in the plurality of page files; and

a generating unit configured to generate the application range information containing the plurality of page files obtained by expansion by the file expanding unit as well as containing files not included in the archive file, wherein

the application range management unit receives the application range information generated by the generating unit and stores the application range information in the memory unit.

12. An information processing method implemented in an information processing apparatus including

a browser unit configured to receive, from a server device, page files included in a web application and execute the web application by processing the received page files;

and

a memory unit,

the information processing method comprising;

receiving, at the time of starting execution of the web application, application range information representing the page files included in the web application;

storing the application range information in the memory unit;

determining, when there is a change of the page file being processed by the browser unit, whether or not the web application being executed has ended depending on whether or not the page file after the change is included in the application range information;

determining, when a call request is issued for an add-on that represents a function not processed by the browser unit, whether or not the add-on for which the call request is issued is allowed to be used in the web application being executed; and

calling, when it is determined that the add-on for which the call request is issued is allowed to be used in the web application being executed, the add-on.

13. A computer program product comprising a computer-readable medium including programmed instructions for an information processing method for an information processing apparatus including

a browser unit configured to receive, from a server device, page files included in a web application and execute the web application by processing the received page files;

and

a memory unit,

wherein the instructions, when executed by a computer, cause the computer to perform;

receiving, at the time of starting execution of the web application, application range information representing the page files included in the web application;

storing the application range information in the memory unit;

determining, when there is a change of the page file being processed by the browser unit, whether or not the web application being executed has ended depending on whether or not the page file after the change is included in the application range information;

determining, when a call request is issued for an add-on that represents a function not processed by the browser unit, whether or not the add-on for which the call request is issued is allowed to be used in the web application being executed; and

calling, when it is determined that the add-on for which the call request is issued is allowed to be used in the web application being executed, the add-on.