Operating system monitoring setting information generator apparatus and operating system monitoring apparatus

• US 8,151,249 B2
• Filed: 10/31/2007
• Issued: 04/03/2012
• Est. Priority Date: 10/31/2006
• Status: Expired due to Fees

• Current Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Original Assignee: NTT Docomo Incorporated (Nippon Telegraph and Telephone Corporation)
• Inventors: Ohta, Ken, Inamura, Yu, Oguma, Hisashi
• Primary Examiner(s): Dao, Thuy
• Assistant Examiner(s): Chowdhury, Ziaul A
• Application Number:
  US11/931,676
• Publication Number:
  US 20080155509A1
• Time in Patent Office: 1,616 Days
• Field of Search: None
• US Class Current: 717/127
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]

Abstract

Disclosed is an operating system monitoring setting information generator apparatus including: a monitoring setting information management unit configured to store monitoring setting information used for monitoring of an operating system monitoring apparatus; a monitoring setting information output unit configured to generate a monitoring setting information file including the monitoring setting information stored by the monitoring setting information management unit, version information and binding information indicating a correspondence with a monitoring target software program, and to output the generated monitoring setting information file; and a digital signature unit configured to generate a digital signature of the monitoring setting information file, and to add the generated digital signature to the monitoring setting information file.

Claims

1. An operating system monitoring setting information generator apparatus comprising:

a processor;

a monitoring setting information management unit configured to store monitoring setting information used for monitoring performed by an operating system monitoring apparatus;

a monitoring setting information output unit, implemented by the processor, configured to generate a monitoring setting information file including the monitoring setting information stored by the monitoring setting information management unit, version information and binding information indicating a correspondence with a monitoring target software program, and to output the generated monitoring setting information file, wherein the version information is information indicating a version of the monitoring setting information file, and the binding information is information indicating a correlation of the monitoring setting information file and the monitoring target software program; and

a digital signature unit configured to generate a digital signature of the monitoring setting information file, and to add the generated digital signature to the monitoring setting information file,

wherein the monitoring setting information includes a hash value of the monitoring target software program, an address at which the monitoring target software program is stored and a size of the monitoring target software program.

2. The operating system monitoring setting information generator apparatus according to claim 1, wherein the monitoring setting information includes a size of the monitoring target storage area and a possible range of a value stored in the monitoring target storage area.

3. The operating system monitoring setting information generator apparatus according to claim 1, wherein the monitoring setting information further includes monitoring scheduling information in which at least one of a timing of the monitoring, a frequency of the monitoring and a cycle of the monitoring are designated.

4. The operating system monitoring setting information generator apparatus according to claim 3, wherein the monitoring scheduling information designates, as the timing of the starting of the monitoring, at least one of the timing of starting the operating system monitoring apparatus, and a type of an event which triggers to perform the monitoring of the monitoring target software program.

5. The operating system monitoring setting information generator apparatus according to claim 3, wherein the monitoring scheduling information designates, as the frequency of the monitoring, a priority for the monitoring of the monitoring target software program.

6. An operating system monitoring apparatus which performs monitoring of a monitoring target software program on an operating system, comprising:

a processor;

a monitoring unit, implemented by the processor, configured to perform the monitoring by use of monitoring setting information included in a monitoring setting information file generated by an operating system monitoring setting information generator apparatus, the monitoring setting information file including version information and binding information indicating a correspondence with the monitoring target software program, wherein the version information is information indicating a version of the monitoring setting information file, and the binding information is information indicating a correlation of the monitoring setting information file and the monitoring target software program;

an update testing unit configured to determine, before the monitoring target software program is updated, whether or not the monitoring setting information file can be updated;

a monitoring setting information update unit configured to update the monitoring setting information file when it is determined that the monitoring setting information file can be updated, and

a recovery unit configured to perform a recovery process for the monitoring setting information file when the updating of the monitoring setting information file has failed a predetermined number of times or more,

wherein the monitoring setting information includes a hash value of the monitoring target software program, an address at which the monitoring target software program is stored and a size of the monitoring target software program.

7. The operating system monitoring apparatus according to claim 6, wherein the update testing unit is configured to check the binding information indicating a correspondence between the monitoring setting information file and the monitoring target software program.

8. The operating system monitoring apparatus according to claim 6, further comprising:

an integrity monitoring unit configured to calculate a hash value of the monitoring target software program based on the monitoring setting information, to compare the calculated hash value of the monitoring target software with the hash value of the monitoring target software program included in the monitoring setting information, and to determine that anomaly has occurred in the monitoring target software program when the two hash values do not match with each other.

9. The operating system monitoring apparatus according to claim 6, further comprising:

a monitoring controller unit configured to control the monitoring in accordance with monitoring scheduling information included in the monitoring setting information.

10. The operating system monitoring apparatus according to claim 9, further comprising:

an event-based monitoring controller unit configured to control the monitoring to perform when inputted event information has matched with a type of an event designated as a timing of the monitoring in the monitoring scheduling information.

11. The operating system monitoring apparatus according to claim 9, further comprising:

a priority-based monitoring controller unit configured to adjust a sequence of the monitoring or a cycle of the monitoring in accordance with a priority which is designated in the monitoring scheduling information.

12. The operating system monitoring apparatus according to claim 6, wherein the monitoring unit is configured to determine whether or not to perform the monitoring in accordance with a monitoring flag indicating whether or not the monitoring is necessary.

13. The operating system monitoring apparatus according to claim 6, further comprising:

a self-monitoring unit configured to detect a falsification in a program of the operating system monitoring apparatus itself or a parameter of the operating system monitoring apparatus itself.

14. The operating system monitoring apparatus according to claim 6, further comprising:

a parameter monitoring unit configured to determine that normality of a parameter in a monitoring target storage area based on the monitoring setting information, and the monitoring setting information includes a size of the monitoring target storage area, and a possible range of a value which is stored in the monitoring target storage area.