Information processing apparatus and method of controlling same

• US 9,280,674 B2
• Filed: 10/29/2013
• Issued: 03/08/2016
• Est. Priority Date: 12/04/2012
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Fujisaki, Naoya, Nimura, Kazuaki
• Primary Examiner(s): Poltorak, Peter
• Application Number:
  US14/065,534
• Publication Number:
  US 20140157436A1
• Time in Patent Office: 861 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/629 to features or functions of an application

Abstract

An information processing apparatus includes a memory and a processor coupled to the memory and configured to receive an instruction to transfer a first application to an execution environment, detect a second application that shares a resource with the first application, the resource being information used upon executing the first application and the second application, provide information for causing a user to determine whether to prohibit transferring the second application to the execution environment when the second application is detected, and invalidate a state in which the second application shares the resource with the first application when instruction to prohibit transferring the second application to the execution environment is received.

Claims

1. An information processing apparatus comprising:

a memory; and

a processor coupled to the memory and configured to;

permit a first computer program and a second computer program to access a resource when first identification information of the first computer program is identical to second identification information of the second computer program, the resource being information used upon executing the first computer program and the second computer program,

receive an instruction to transfer the first computer program from a first execution environment for non-business purposes to a second execution environment for business purposes, the first computer program being configured to access the resource,

detect, by checking the first identification information and the second identification information, the second computer program located in the first execution environment that is configured to access the resource,

provide information for a user to determine whether to transfer the second computer program from the first execution environment to the second execution environment,

transfer the first computer program to the second execution environment and prohibit the first computer program to access the resource by changing the first identification information to a third identification information different from the second identification information when receiving a first instruction not to transfer the second computer program to the second execution environment, and

transfer the first computer program and the second computer program to the second execution environment when receiving a second instruction to transfer the second computer program to the second execution environment.

2. The information processing apparatus according to claim 1, wherein the processor is configured to:

display a list including information for identifying the second computer program; and

determine whether to transfer the second computer program to the second execution environment based on whether the information for identifying the second computer program is selected.

3. The information processing apparatus according to claim 1, wherein

the first computer program is stored in a folder, and

the processor is configured to:

change the name of the folder to include first information indicating the second execution environment, and

block calling the first computer program transferred to the second execution environment from a third computer program located in the first execution environment when second information for identifying the third computer program does not include the first information indicating the second execution environment.

4. The information processing apparatus according to claim 3, wherein the processor is configured to:

permit calling the first computer program transferred to the second execution environment from the third computer program when the second information for identifying the third computer program includes the first information indicating the second execution environment.

5. The information processing apparatus according to claim 1, wherein the processor is configured to:

collect evaluation information for evaluating whether each of the first computer program or the second computer program is reliable; and

permit transferring each of the first computer program or the second computer program to the second execution environment when each of the first computer program or the second computer program is determined to be reliable based on the collected evaluation information.

6. A method of controlling an information processing apparatus, the method comprising:

permitting a first computer program and a second computer program to access a resource when first identification information of the first computer program is identical to second identification information of the second computer program, the resource being information used upon executing the first computer program and the second computer program;

receiving an instruction to transfer the first computer program from a first execution environment for non-business purposes to a second execution environment for business purposes, the first computer program being configured to access the resource;

detecting, by checking the first identification information and the second identification information, the second computer program located in the first execution environment that is configured to access the resource;

providing information for a user to determine whether to transfer the second computer program from the first execution environment to the second execution environment,

transferring the first computer program to the second execution environment and prohibiting the first computer program to access the resource by changing the first identification information to a third identification information different from the second identification information when receiving a first instruction not to transfer the second computer program to the second execution environment, and

transferring the first computer program and the second computer program to the second execution environment when receiving a second instruction to transfer the second computer program to the second execution environment.

7. The method according to claim 6, the method further comprising:

displaying a list including information for identifying the second computer program; and

determining whether to transfer the second computer program to the second execution environment based on whether the information for identifying the second computer program is selected.

8. The method according to claim 6, the method further comprising:

storing the first computer program in a folder,

changing the name of the folder to include first information indicating the second execution environment, and

blocking calling the first computer program transferred to the second execution environment from a third computer program located in the first execution environment when second information for identifying the third computer program does not include the first information indicating the second execution environment.

9. The method according to claim 8, the method further comprising:

permitting calling the first computer program transferred to the second execution environment from the third computer program when the second information for identifying the third computer program includes the first information indicating the second execution environment.

10. The method according to claim 6, the method further comprising:

collecting evaluation information for evaluating whether each of the first computer program or the second computer program is reliable; and

permitting transferring each of the first computer program or the second computer program to the second execution environment when each of the first computer program or the second computer program is determined to be reliable based on the collected evaluation information.

11. A non-transitory medium for storing a program that causes a processor to execute a process comprising:

permitting a first computer program and a second computer program to access a resource when first identification information of the first computer program is identical to second identification information of the second computer program, the resource being information used upon executing the first computer program and the second computer program;

receiving an instruction to transfer the first computer program from a first execution environment for non-business purposes to a second execution environment for business purposes, the first computer program being configured to access the resource;

detecting, by checking the first identification information and the second identification information, the second computer program located in the first execution environment that is configured to access the resource;

providing information for a user to determine whether to transfer the second computer program from the first execution environment to the second execution environment;

transferring the first computer program to the second execution environment and prohibiting the first computer program to access the resource by changing the first identification information to a third identification information different from the second identification information when receiving a first instruction not to transfer the second computer program to the second execution environment, and

transferring the first computer program and the second computer program to the second execution environment when receiving a second instruction to transfer the second computer program to the second execution environment.

12. The non-transitory medium according to claim 11, the process further comprising:

displaying a list including information for identifying the second computer program; and

determining whether to transfer the second computer program to the second execution environment based on whether the information for identifying the second computer program is selected.

13. The non-transitory medium according to claim 11, the process further comprising:

storing the first computer program in a folder,

changing the name of the folder to include first information indicating the second execution environment, and

blocking calling the first computer program transferred to the second execution environment from a third computer program located in the first execution environment when second information for identifying the third computer program does not include the first information indicating the second execution environment.

14. The non-transitory medium according to claim 13, the process further comprising:

permitting calling the first computer program transferred to the second execution environment from the third computer program when the second information for identifying the third computer program includes the first information indicating the second execution environment.

15. The non-transitory medium according to claim 11, the process further comprising

collecting evaluation information for evaluating whether each of the first computer program or the second computer program is reliable;

and

permitting transferring each of the first computer program or the second computer program to the second execution environment when each of the first computer program or the second computer program is determined to be reliable based on the collected evaluation information.