Information transmission device, network system, and information transmission method

• US 9,462,078 B2
• Filed: 03/30/2011
• Issued: 10/04/2016
• Est. Priority Date: 07/28/2010
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Matsubara, Masazumi, Sekiguchi, Atsuji, Wada, Yuji
• Primary Examiner(s): ABEDIN, SHANTO
• Application Number:
  US13/064,548
• Publication Number:
  US 20120030671A1
• Time in Patent Office: 2,015 Days
• Field of Search: 713/150, 713/165, 713/189, 713/162, 726/2, 726/21, 718/1, 711/100, 711/114, 711/203, 705/51, 705/56, 705/59, 709/218, 709/219
• US Class Current: 1/1
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

An information transmission device stores an identifier representing an information processing device connected to a network in association with an identifier representing a storage device used by the information processing device. When transmission of information is requested from the information processing device, the information transmission device specifies an identifier representing an information processing device. The information transmission device acquires an identifier representing a storage device stored in association with the specified identifier. The information transmission device transmits information on a request for transmission by the information processing device to the storage device represented by the acquired identifier.

Claims

1. An information transmission device comprising:

a storage unit configured to store an identifier representing an information processing device in association with an identifier representing a storage device used by the information processing device, the storage unit further configured to store data whose transmission is requested by the information processing device, and the storage device connected with the information processing device via a network and operated separately from the information processing device;

an encryption key storage unit configured to store the identifier representing the information processing device in association with an encryption key used by the information processing device; and

a processor to, when the information transmission device receives a notice from the information processing device requesting transmission of data from the information transmission device, specify the information processing device which sends the notice, acquire an encryption key stored in association with the specified information processing device, and to transmit the data requested by the notice not to the specified information processing device but directly to the storage device represented by the identifier stored in the storage unit and associated with the identifier representing the specified information processing device,

wherein the processor transmits data on a request for transmission by the information processing device and the encryption key acquired to the storage device represented by the identifier; and

wherein the information processing device is a virtual machine, and the storage device is a virtual machine disk used by the virtual machine as a storage device.

2. The information transmission device according to claim 1, wherein

the processor includes determining whether or not the device itself is storing data on a request for transmission by the information processing device, acquiring the data from an external information processing device when it is determined that the device itself is not storing the data on a request for transmission by the information processing device, and transmitting the acquired data to the storage device represented by the identifier.

3. An information transmission device comprising:

a storage means for storing an identifier representing an information processing device in association with an identifier representing a storage device used by the information processing device, the storage means further stores data whose transmission is requested by the information processing device, and the storage device connected with the information processing device via a network and operated separately from the information processing device;

a specification means for, when the information transmission device receives a notice from the information processing device requesting transmission of data from the information transmission device, specifying the information processing device which sends the notice;

an encryption key acquisition means for acquiring an encryption key stored in association with the information processing device specified by the specification means, and

a transmission means for transmitting the data requested by the notice not to the specified information processing device but directly to the storage device represented by the identifier stored in the storage means and associated with the identifier representing the specified information processing device;

an encryption key storage means for storing the identifier representing the information processing device in association with an encryption key used by the information processing device,

wherein the transmission means transmits data on a request for transmission by the information processing device and the encryption key acquired by the encryption key acquisition means to the storage device represented by the identifier, and

wherein the information processing device is a virtual machine, and the storage device is a virtual machine disk used by the virtual machine as a storage device.

4. The information transmission device according to claim 3,

wherein the transmission means determines whether or not the device itself is storing data on a request for transmission by the information processing device, acquires the data from an external information processing device when it is determined that the device itself is not storing the data on a request for transmission by the information processing device, and transmits the acquired data to the storage device represented by the identifier.

5. A network system comprising:

an information transmission device that includes

a storage unit that stores an identifier representing an information processing device in association with an identifier representing a storage device used by the information processing device, the storage unit further configured to store data whose transmission is requested by the information processing device, and the storage device connected with the information processing device via a network and operated separately from the information processing device,

an encryption key storage unit that stores the identifier representing the information processing device in association with an encryption key used by the information processing device,

a specification unit that, when the information transmission device receives a notice from the information processing device requesting transmission of data from the information transmission device, specifies the information processing device which sends the notice,

an encryption key acquisition unit that acquires an encryption key stored in association with the information processing device specified by the specification unit from the encryption key storage unit, and

a transmission unit that transmits the data requested by the notice and the encryption key acquired by the encryption key acquisition unit not to the specified information processing device but directly to the storage device represented by the identifier stored in the storage unit and associated with the identifier representing the specified information processing device,

wherein the information processing device is a virtual machine, and the storage device is a virtual machine disk used by the virtual machine as a storage device; and

a storage device that includes

an encryption information storage unit that, when the data and the encryption key are received from the information transmission device, stores the received data using the received encryption key.

6. The network system according to claim 5, wherein

the transmission unit includes determining whether or not the device itself is storing data on a request for transmission by the information processing device, acquiring the data from an external information processing device when it is determined that the device itself is not storing the data on a request for transmission by the information processing device, and transmitting the acquired data to the storage device represented by the identifier.

7. An information transmission method performed in an information transmission device that includes a storage unit, the storage unit storing an identifier representing an information processing device in association with an identifier representing a storage device used by the information processing device, the storage unit further configured to store data whose transmission is requested by the information processing device, and the storage device connected with the information processing device via a network and operated separately from the information processing device, the information transmission device further includes an encryption key storage unit configured to store the identifier representing the information processing device in association with an encryption key used by the information processing device the information transmission method comprising:

specifying, when the information transmission device receives a notice from the information processing device requesting transmission of data from the information transmission device, the information processing device which sends the notice;

acquiring an encryption key stored in association with the specified information processing device; and

transmitting the data requested by the notice not to the specified information processing device but directly to the storage device represented by the identifier stored in the storage unit and associated with the identifier representing the specified information processing device,

wherein the information processing device is a virtual machine, and the storage device is a virtual machine disk used by the virtual machine as a storage device, and

wherein the transmitting includes transmitting data on a request for transmission by the information processing device and the encryption key acquired to the storage device represented by the identifier.

8. The information transmission method according to claim 7, wherein

the transmitting includes determining whether or not the device itself is storing data on a request for transmission by the information processing device, acquiring the data from an external information processing device when it is determined that the device itself is not storing the data on a request for transmission by the information processing device, and transmitting the acquired data to the storage device represented by the identifier.

9. A computer-readable, non-transitory medium storing an information transmission program that causes a computer to execute a process, the computer including a storage unit storing an identifier representing an information processing device in association with an identifier representing a storage device used by the information processing device, the computer includes an encryption key storage unit configured to store the identifier representing the information processing device in association with an encryption key used by the information processing device, the storage unit further configured to store data whose transmission is requested by the information processing device, and the storage device connected with the information processing device via a network and operated separately from the information processing device, the process comprising:

specifying, when the information transmission device receives a notice from the information processing device requesting transmission of data from the information transmission device, the information processing device which sends the notice;

acquiring an encryption key stored in association with the specified information processing device; and

transmitting the data requested by the notice not to the specified information processing device but directly to the storage device represented by the identifier stored in the storage unit and associated with the identifier representing the specified information processing device,

wherein the information processing device is a virtual machine, and the storage device is a virtual machine disk used by the virtual machine as a storage device,

the transmitting includes transmitting data on a request for transmission by the information processing device and the encryption key acquired to the storage device represented by the identifier.

10. The computer-readable, non-transitory medium according to claim 9, wherein

the transmitting includes determining whether or not the device itself is storing data on a request for transmission by the information processing device, acquiring the data from an external information processing device when it is determined that the device itself is not storing the data on a request for transmission by the information processing device, and transmitting the acquired data to the storage device represented by the identifier.