JP2010129054A - Program execution apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a program execution apparatus for shortening the switching period (mode switching period) of operating mode. <P>SOLUTION: This program execution apparatus includes a suspending section 161 for evacuating a program to be suspended executed in one operating mode to a storage 163 when the one operating mode is switched to the other operating mode, a resuming section 162 for resuming the program to be suspended evacuated to the storage 163 in the one operating mode when the other operating mode is switched to the one operating mode, an informing section 165 for informing the other operating mode of the program to be suspended, and a specifying section 166 for specifying a specifying program from the program to be suspended. The resuming section 162 resumes the specifying program specified by the specifying section 166 in the one operating mode. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a program execution apparatus that has a plurality of operation modes defined for each type of program and exclusively sets each of the plurality of operation modes.

  Conventionally, portable terminals configured to be able to add various contents and applications are known. Hereinafter, a program (additional program) added to the mobile terminal is referred to as an untrusted program. On the other hand, a program installed in advance on the mobile terminal is referred to as a trust program.

  In general, the reliability of a trusted program is guaranteed, but the reliability of an untrusted program is often not guaranteed. In other words, the additional program has a risk of causing destruction of a system (OS, driver, browser, etc.) constituting the mobile terminal, illegal copying of content stored in the mobile terminal, and the like.

  For example, when the access procedure to the mobile communication network executed by the trusted program leaks to the additional program, there is a risk that the content stored in the mobile terminal leaks to the mobile communication network. Therefore, it is preferable to execute the additional program while protecting the system and contents.

  As techniques for dealing with such dangers, (1) a first technique (for example, Patent Document 1) that provides a plurality of execution modes as modes for executing a program, and (2) a key for executing suspend / resume of a program There are proposed a second technique (for example, Patent Document 2) for providing a program, and (3) a third technique (for example, Patent Document 3) for providing a special program for managing suspend / resume of a program.

  In the first technique, the mobile terminal has an unreliable mode and a trusted mode. The untrusted mode is a mode for executing the additional program. The trust mode is a mode for executing a trust program. The portable terminal operates in an unreliable mode and a reliable mode in a time division manner.

  In the second technique, the mobile terminal executes a program suspension in response to a key press. Similarly, the mobile terminal executes the resume of the program that has been changed to the suspend mode in response to the key press.

In the third technique, the special program transmits a command (suspend command) for instructing suspension to the program being executed on the mobile terminal. Similarly, the special program transmits a command (resume command) instructing resume to the program that has been changed to the suspend state.
JP 2006-338554 A US Pat. No. 6,553,400 U.S. Pat. No. 4,912,628

  Here, when the number of programs executed on the mobile terminal increases, it is assumed that the suspend / resume of the program frequently occurs. For example, when an incoming call is received during execution of the additional program, it is necessary to execute the trust program (telephone program) in the trust mode. That is, switching from the unreliable mode to the reliable mode is necessary. In such a case, if a large number of trusted programs are suspended, the time required to resume a large number of trusted programs increases. As a result, incoming calls may not be completed within a certain period.

  In the first to third technologies described above, suppression of unauthorized operations of additional programs and switching of suspend / resume are considered, but reduction of mode switching time is not considered.

  Accordingly, the present invention has been made to solve the above-described problems, and an object of the present invention is to provide a program execution device that can shorten the operation mode switching time (mode switching time). .

  The program execution device according to the first feature has a plurality of operation modes defined for each type of program, and sets each of the plurality of operation modes exclusively. When the operation mode is switched from one operation mode to another operation mode among the plurality of operation modes, the program execution device stores a suspend target program that is a program executed in the one operation mode as data A suspend unit that saves to storage, and a resume that resumes the suspended program saved to the data storage in the one operation mode when the operation mode is switched from the other operation mode to the one operation mode A notification unit that notifies the other operation mode of the suspend target program, and a designated program that is a program to be resumed in the one operation mode among the suspend target programs notified by the notification unit. And a designation unit for designating. The resume unit resumes the designated program designated by the designation unit in the one operation mode.

  In the first feature, when the designated program is not designated by the designating unit, the resume unit only selects the suspend target program saved in the data storage by the suspend unit in the previous switching of the operation mode. Restart in the operating mode.

  In the first feature, the program execution device includes a first condition for switching the operation mode from the one operation mode to the other operation mode, and a first condition for switching the operation mode from the other operation mode to the one operation mode. A storage unit that stores two conditions; and a mode switching unit that switches the operation mode. The mode switching unit switches the operation mode from the one operation mode to the other operation mode when the first condition is satisfied, and the other operation when the second condition is satisfied. The operation mode is switched from the mode to the one operation mode.

  In the first feature, the program execution device further includes a data sharing area which is a memory area accessible by the plurality of operation modes. The notification unit notifies the other operation mode of the suspend target program using the data sharing area. The data sharing area is an area where modification of the suspend target program in the other operation mode is prohibited.

  In the first feature, the notification unit notifies the name of the suspend target program to the other operation mode.

  In the first feature, the resume unit displays an application executed by the designated program designated by the designation unit when the designated program designated by the designation unit is resumed in the one operation mode. Display on the forefront of the department.

  In the first feature, in the one operation mode, execution information of a program in an execution state in the one operation mode is developed on a memory area. The program execution device is expanded in the memory area when a predetermined time has elapsed from the stop time, and a stop time storage unit that stores a stop time that is a time when the program in the execution state transits to the stop state. And a suspend preprocessing unit that saves the execution information to the data storage.

  In the first feature, the suspend preprocessing unit deletes execution information saved in the data storage when a program that has transitioned to the stopped state transitions to the execution state.

  In the first feature, the suspend preprocessing unit deletes the execution information expanded in the memory area when the suspend target program is saved in the data storage by the suspend unit.

  In the first feature, when the resume unit receives a processing request for a processing target program that is one of the suspend target programs, the resume unit uses the execution information saved in the data storage to execute the processing target program. Resume in the one operation mode.

  In the first feature, the program execution device further includes a condition storage unit that stores a resumption condition for resuming the suspend target program in the one operation mode for each of the suspend target programs. The resume unit resumes the processing target program in the one operation mode when a processing request for the processing target program satisfies the restart condition.

  In the first feature, the program execution device further includes a mode switching unit that switches the operation mode. When the mode switching unit receives a request to switch the operation mode from the one operation mode to the other operation mode, the suspend unit saves the suspend target program in the data storage, and then The operation mode is switched from the operation mode to the other operation mode.

  In the first feature, the program execution device further includes a mode switching unit that switches the operation mode. When the mode switching unit receives a request to switch the operation mode from the one operation mode to the other operation mode, the execution information developed in the memory area by the suspend preprocessing unit is deleted. Later, the operation mode is switched from the one operation mode to the other operation mode.

  In the first feature, the program execution device further includes a storage unit that stores a save policy that is a policy for saving the execution information expanded in the memory area to the data storage for each of the suspend target programs. The suspend preprocessing unit saves execution information expanded in the memory area to the data storage based on the save policy.

  In the first feature, the program execution device further includes a storage unit that stores a suspend policy that is a policy for saving the suspend target program to the data storage for each of the suspend target programs. The suspend preprocessing unit saves the suspend target program in the data storage based on the suspend policy.

  In the first feature, the program execution device further includes a storage unit that stores a deletion policy, which is a policy for deleting the execution information expanded on the memory area, for each of the suspend target programs. The suspend preprocessing unit deletes execution information expanded in the memory area based on the deletion policy.

  ADVANTAGE OF THE INVENTION According to this invention, the program execution apparatus which makes it possible to shorten operation mode switching time (mode switching time) can be provided.

  Hereinafter, a program execution device according to an embodiment of the present invention will be described with reference to the drawings. In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals.

  However, it should be noted that the drawings are schematic and ratios of dimensions and the like are different from actual ones. Therefore, specific dimensions and the like should be determined in consideration of the following description. Moreover, it is a matter of course that portions having different dimensional relationships and ratios are included between the drawings.

[Outline of Embodiment]
The program execution device according to the embodiment has a plurality of operation modes defined for each type of program, and sets each of the plurality of operation modes exclusively. The operation mode is, for example, a trust mode for executing a trust program, a non-trust mode for executing a non-trust program, or the like. The trust program is, for example, a program installed in advance on a mobile terminal on which the program execution device is mounted. The unreliable program is, for example, a program (additional program) added to a mobile terminal equipped with a program execution device. The program execution device includes a suspend unit, a resume unit, a notification unit, and a designation unit.

  The suspend unit saves a suspend target program, which is a program executed in one operation mode, to a data storage when the operation mode is switched from one operation mode to another operation mode among a plurality of operation modes. . When the operation mode is switched from one operation mode to another operation mode, the resume unit resumes the suspend target program saved in the data storage in the one operation mode. The notification unit notifies the suspension target program to another operation mode. The designation unit designates a designated program that is a program to be resumed in one operation mode from the suspension target programs notified by the notification unit. The resume unit resumes the designated program designated by the designation unit in one operation mode.

  In this manner, the designation unit designates a designated program that is a program to be resumed in one operation mode from among the suspension target programs that have been operating in the one operation mode. The resume unit resumes the designated program designated by the designation unit in one operation mode.

  Therefore, the number of programs to be restarted in one operation mode can be reduced, and the operation mode switching time can be shortened.

[First Embodiment]
(Configuration of program execution device)
The configuration of the program execution device according to the first embodiment will be described below with reference to the drawings. FIG. 1 is a block diagram showing a program execution device 100 according to the first embodiment. The program execution device 100 is mounted on a mobile terminal, for example.

  As illustrated in FIG. 1, the program execution device 100 includes a non-secure execution domain 110 and a secure execution domain 120.

  The program execution device 100 has an untrusted mode 130 for executing the untrusted program 10A to the untrusted program 10C and a trust mode 140 for executing the trust program 20A to the trust program 20C. The program execution device 100 exclusively sets the untrusted mode 130 and the trust mode 140.

  In the first embodiment, a suspend process performed when switching an active operation mode from one operation mode to another operation mode, and a resume performed when switching an active operation mode from another operation mode to one operation mode. An example of processing will be described.

  The program execution apparatus 100 is also provided with a display unit 200. The display unit 200 displays an application corresponding to the program executed by the program execution device 100. The display unit 200 is mounted on a mobile terminal, for example.

  The non-secure execution domain 110 is separated from the secure execution domain 120 by hardware, and is a domain in which newly added applications and the like are executed. The non-secure execution domain 110 has the untrust mode 130 and the trust mode 140 described above.

  The secure execution domain 120 is separated from the non-secure execution domain 110 in hardware, and is a security-protected domain. For example, the secure execution domain 120 executes an application related to a communication function.

  Here, the non-secure execution domain 110 includes an application processing unit 111 and a memory area 112. Further, the non-secure execution domain 110 includes a suspend unit 161, a resume unit 162, a storage 163, a mode switching unit 164, a notification unit 165, and a designation unit 166.

  The application processing unit 111 executes an application based on the untrusted program 10 and the trusted program 20. The application processing unit 111 is used in an active operation mode among the untrusted mode 130 and the trusted mode 140.

  The memory area 112 is a memory area for temporarily storing various information. The memory area 112 stores application execution information, for example. The memory area 112 is used by an active operation mode of the non-trust mode 130 and the trust mode 140.

  The execution information is, for example, a program memory map, a file or socket used by the program, a signal accepted by the program, an operation of a signal accepted by the program, stack information, heap information, register information, and the like.

  The suspend unit 161 performs a suspend process. Specifically, the suspend unit 161 is a suspend target program that is a program executed in one operation mode when the operation mode is switched from one operation mode to another operation mode among the plurality of operation modes. Is saved in the storage 163. The suspend unit 161 saves the execution information of the suspend target program to the storage 163 as state information.

  The resume unit 162 performs a resume process. Specifically, when the operation mode is switched from another operation mode to one operation mode, the resume unit 162 resumes the suspend target program saved in the storage 163 in the one operation mode.

  Here, it should be noted that the resume unit 162 resumes the designated program designated by the designation unit 166 described later in one operation mode.

  The resume unit 162 resumes only the suspend target program saved in the storage 163 by the suspend unit 161 in the previous operation mode switching in one operation mode when the designated program is not designated by the designation unit 166 described later. .

  Here, the resume unit 162 causes the application executed by the designated program to be displayed on the foreground on the display unit 200 when the designated program designated by the designation unit 166 described later is resumed.

  When a plurality of designated programs are designated, the resume unit 162 may control the display position of the application so as to maintain the relationship between the display positions notified by the notification unit 165 described later.

  For example, consider a case where a suspend target program for executing an application displayed in the foreground and a suspend target program for executing an application displayed third are specified as designated programs. That is, consider a case where the suspend target program that executes the application displayed second is not designated as the designated program.

  In such a case, the resume unit 162 displays the suspend target program (designated program) for executing the application displayed in the foreground in the foreground. The resume unit 162 displays the suspend target program (designated program) for executing the application displayed third on the second.

  The storage 163 stores an OS (Operating System) executed by the program execution apparatus 100 and various programs. Further, the storage 163 stores the execution information of the suspension target program saved by the suspend unit 161 as state information.

  Further, the storage 163 stores a condition for switching the active operation mode. Specifically, the storage 163 stores a first condition for switching the active operation mode from the untrusted mode 130 to the trust mode 140 and a second condition for switching the active operation mode from the trust mode 140 to the untrusted mode 130.

  The first condition is, for example, the occurrence of an event such as power-on or incoming call. The second condition is, for example, occurrence of an event such as activation of an untrusted program.

  The mode switching unit 164 switches the operation mode. Specifically, the mode switching unit 164 switches the active operation mode from the unreliable mode 130 to the reliable mode 140. That is, the mode switching unit 164 switches the active operation mode from the unreliable mode 130 to the reliable mode 140 when the first condition is satisfied. Similarly, the mode switching unit 164 switches the active operation mode from the trust mode 140 to the non-trust mode 130. That is, the mode switching unit 164 switches the active operation mode from the reliable mode 140 to the unreliable mode 130 when the second condition is satisfied.

  The notification unit 165 notifies the suspension target program to another operation mode when the operation mode is switched from one operation mode to another operation mode. For example, the notification unit 165 notifies the name of the suspension target program to another operation mode.

  For example, as illustrated in FIG. 2, the notification unit 165 notifies the name of the suspend target program and the display position of the application executed by the suspend target program. The display position is a position (frontmost, second, rearmost) where each application is displayed on the display unit 200 when a plurality of applications are displayed on the display unit 200.

  The designation unit 166 designates a designated program that is a program to be resumed in one operation mode from the suspension target programs notified by the notification unit 165.

(Program status)
Hereinafter, the state of the program according to the first embodiment will be described with reference to the drawings. FIG. 3 is a diagram for explaining the state of the program according to the first embodiment.

  As shown in FIG. 3, the program status includes (1) suspend status, (2) status save status, (3) stop status, and (4) execution status.

  (1) The suspended state is a state in which the program execution information is not expanded in the memory area 112 but the program execution information is stored in the storage 163 as the state information.

  (2) The state storage state is a state in which program execution information is expanded on the memory area 112 and the program execution information is stored in the storage 163 as state information.

  (3) The stopped state is a state where the program execution information is expanded on the memory area 112 but the program is stopped.

  (4) The execution state is a state in which the program execution information is expanded on the memory area 112 and the program is being executed.

(Operation of the program execution device)
Hereinafter, the operation of the program execution device according to the first embodiment will be described with reference to the drawings. 4 and 5 are flowcharts showing the operation of the program execution device 100 according to the first embodiment.

  As described above, in the first embodiment, the suspend process performed when switching an active operation mode from one operation mode to another operation mode, and switching the active operation mode from another operation mode to one operation mode. An example of the resume process performed at this time will be described.

  First, the operation of the program execution device 100 in one operation mode will be described with reference to FIG.

  As shown in FIG. 4, in step 10, the program execution device 100 acquires a program executed in one operation mode and manages the program executed in the one operation mode.

  In step 11, the program execution device 100 notifies the program (suspend target program) executed in one operation mode to the operation mode after switching (that is, another operation mode).

  In step 12, the program execution device 100 switches the active operation mode from one operation mode to another operation mode.

  In step 13, the program execution device 100 switches the active operation mode from another operation mode to one operation mode.

  In addition, between the process of step 12 and the process of step 13, the program execution apparatus 100 operate | moves in another operation mode.

  In step 14, the program execution device 100 determines whether or not the designated program is designated by the designation unit 166. When the designated program is designated, the program execution device 100 proceeds to the process of step 15. On the other hand, when the designated program is designated, the program execution device 100 proceeds to the process of step 16.

  In step 15, the program execution device 100 resumes the designated program designated by the designation unit 166. That is, the program execution device 100 returns the designated program in the resume process.

  In step 16, the program execution device 100 resumes only the suspend target program saved in the storage 163 by the suspend unit 161 in the previous switching of the operation mode. In other words, the program execution device 100 restores the suspend target program that was executed in one operation mode before switching to the previous operation mode.

  Secondly, the operation of the program execution device 100 in another operation mode will be described with reference to FIG.

  As shown in FIG. 5, in step 20, the program execution device 100 acquires a suspend target program that has been executed in one operation mode. That is, the program execution device 100 acquires a suspend target program to be resumed in the operation mode after switching (that is, one operation mode).

  In step 21, the program execution device 100 determines whether or not a designated program is designated. When the designated program is designated, the program execution device 100 proceeds to the process of step 22. On the other hand, if the designated program is not designated, the program execution device 100 proceeds to the process of step 23.

  In step 22, the program execution device 100 designates a designated program from the suspend target programs acquired in step 20.

  In step 23, the program execution device 100 requests switching of the operation mode. That is, the program execution device 100 requests switching of an active operation mode from another operation mode to one operation mode.

  In step 24, the program execution device 100 switches the operation mode. That is, the program execution device 100 switches an active operation mode from another operation mode to one operation mode.

(Function and effect)
In the first embodiment, the designation unit 166 designates a designated program that is a program to be resumed in one operation mode from among the suspend target programs that have been operating in the one operation mode. The resume unit 162 resumes the designated program designated by the designation unit 166 in one operation mode.

  Therefore, the number of programs to be restarted in one operation mode can be reduced, and the operation mode switching time can be shortened.

  In the first embodiment, when the designated program is not designated by the designation unit 166, the resume unit 162 operates only the suspend target program saved in the storage 163 by the suspend unit 161 in the previous switching of the operation mode. Resume in mode.

  Therefore, it is not necessary to restart all programs in one operation mode, and the operation mode switching time can be shortened.

  In the first embodiment, the notification unit 165 notifies the name of the suspend target program to another operation mode. Therefore, the risk generated when notifying the suspension target program to another operation mode is reduced.

  In the first embodiment, the resume unit 162 causes the application executed by the designated program to be displayed on the foreground on the display unit 200 when the designated program designated by the designation unit 166 is resumed. Therefore, the user can immediately use the application executed by the designated program.

  In the first embodiment, the mode switching unit 164 switches the active operation mode from the unreliable mode 130 to the reliable mode 140 when the first condition is satisfied. Similarly, the mode switching unit 164 switches the active operation mode from the trust mode 140 to the unreliable mode 130 when the second condition is satisfied. Therefore, the operation mode is automatically switched.

[Modification 1]
Hereinafter, Modification Example 1 of the first embodiment will be described with reference to the drawings. In the following, differences from the first embodiment will be mainly described.

  In the first modification, the program execution device 100 includes a data sharing area that is a memory area that can be accessed by a plurality of operation modes.

(Configuration of program execution device)
Hereinafter, the configuration of the program execution device according to the first modification will be described with reference to the drawings. FIG. 6 is a block diagram illustrating a configuration of the program execution device 100 according to the first modification. In FIG. 6, it should be noted that the same components as those in FIG.

  As illustrated in FIG. 6, the program execution device 100 includes a trust zone 171 in addition to the configuration illustrated in FIG. 1.

  The trust zone 171 is a data sharing area that is a memory area accessible by a plurality of operation modes (non-trust mode 130 and trust mode 140). The trusted zone 171 is an area where alteration of the suspend target program in other operation modes (for example, the untrusted mode 130) is prohibited. As the trust zone 171, for example, AMR TrustZone can be used.

  The notification unit 165 described above notifies the suspension target program to another operation mode using the trust zone 171.

(Function and effect)
In the first modification, the notification unit 165 notifies the suspension target program to another operation mode using the trust zone 171. The trusted zone 171 is an area where alteration of the suspend target program in other operation modes (for example, the untrusted mode 130) is prohibited. Therefore, it is possible to suppress the destruction of the system and the illegal copy of the content accompanying the suspend process and the resume process.

[Modification 2]
Hereinafter, Modification Example 2 of the first embodiment will be described with reference to the drawings. In the following, differences from the first embodiment will be mainly described.

  In the second modification, the program execution device 100 manages the program stop time in association with the program.

(Configuration of program execution device)
Hereinafter, the configuration of the program execution device according to the second modification will be described with reference to the drawings. FIG. 7 is a block diagram illustrating a configuration of the program execution device 100 according to the second modification. In FIG. 7, it should be noted that the same components as those in FIG.

  As illustrated in FIG. 7, the program execution device 100 includes a stop time storage unit 172 and a suspend preprocessing unit 173 in addition to the configuration illustrated in FIG. 1.

  The stop time storage unit 172 stores a stop time that is a time when a program in the execution state transitions to the stop state. For example, as shown in FIG. 8, the stop time storage unit 172 stores a table that associates program names, display positions, and stop times.

  The suspend preprocessing unit 173 performs a part of the suspend process before the suspend unit 161 performs the suspend process in accordance with the switching of the operation mode. Specifically, the suspend preprocessing unit 173 performs the following operation.

  First, the suspend preprocessing unit 173 saves the execution information expanded in the memory area 112 as state information in the storage 163 when a predetermined time has elapsed from the stop time. In other words, the suspend preprocessing unit 173 saves program execution information (status information) in the storage 163 in advance before the operation mode is switched. As described above, the suspend preprocessing unit 173 performs a part of the suspend process in advance before the operation mode is switched.

  Second, the suspend preprocessing unit 173 deletes the execution information whose state information (execution information) has been saved in the storage 163 when the program that has transitioned to the stopped state transitions to the execution state. That is, the suspend preprocessing unit 173 deletes the program execution information (status information) saved in the storage 163.

  Third, the suspend preprocessing unit 173 deletes the execution information expanded on the memory area 112 when the suspend unit 161 saves the suspend target program in the storage 163.

(Operation of the program execution device)
Hereinafter, the operation of the program execution device according to the second modification will be described with reference to the drawings. FIG. 9 is a block diagram illustrating a configuration of the program execution device 100 according to the second modification. Note that the flow shown in FIG. 9 is a series of processes performed for all programs executed in the active operation mode.

  As shown in FIG. 9, in step 30, the program execution device 100 determines whether or not the program is in a stopped state. When the program is in a stopped state, the program execution device 100 proceeds to the process of step 31. On the other hand, the program execution device 100 proceeds to the process of step 32 when the program is in an execution state.

  In step 31, the program execution device 100 stores the stop time of the program in the stop time storage unit 172.

  In step 32, the program execution device 100 determines whether or not the stop time of the program is stored. When the program stop time is stored, the program execution device 100 proceeds to the process of step 33. On the other hand, the program execution device 100 ends the series of processes when the stop time of the program is not stored.

  In step 33, the program execution device 100 initializes the stop time of the program stored in the stop time storage unit 172. For example, the program execution device 100 deletes the program stop time stored in the stop time storage unit 172. Further, the program execution device 100 may invalidate the stop time of the program stored in the stop time storage unit 172 with an invalidation bit.

(Function and effect)
In the second modification, the suspend preprocessing unit 173 performs a part of the suspend process before the suspend unit 161 performs the suspend process in accordance with the switching of the operation mode. Therefore, the suspend process accompanying the mode switching is reduced, and the operation mode switching time can be shortened.

[Modification 3]
Hereinafter, Modification Example 3 of the first embodiment will be described with reference to the drawings. In the following, differences from the second modification will be mainly described.

  In the third modification, the program execution device 100 manages the resume condition (restart condition) of the program in association with the program.

(Configuration of program execution device)
Hereinafter, the configuration of the program execution device according to Modification 3 will be described with reference to the drawings. FIG. 10 is a block diagram illustrating a configuration of the program execution device 100 according to the third modification. In FIG. 10, it should be noted that the same components as those in FIG.

  As shown in FIG. 10, the program execution device 100 includes a resume condition storage unit 174 in addition to the configuration shown in FIG.

  As shown in FIG. 11, the resume condition storage unit 174 stores a table that associates program names with resume conditions.

  The resume condition includes a program request condition related to a request to the program and an event condition related to the entire program execution apparatus 100. The program request condition is, for example, a condition “network interrupt” associated with the untrusted program 10A. The event condition is, for example, a condition “load 10% or less” associated with the unreliable program 10B.

  The resume unit 162 described above resumes programs (processing target programs) that satisfy the resume condition among the suspend target programs.

(Operation of the program execution device)
Hereinafter, the operation of the program execution device according to the third modification will be described with reference to the drawings. FIG. 12 is a flowchart illustrating the operation of the program execution device 100 according to the third modification.

  As shown in FIG. 12, in step 40, the program execution device 100 determines whether there is a request for the program. If there is a request for the program, the program execution device 100 proceeds to the process of step 41. On the other hand, when there is no request for the program, the program execution apparatus 100 proceeds to the process of step 42.

  In step 41, the program execution device 100 determines whether a program (processing target program) that satisfies the resume condition (program request condition) has transitioned to the suspended state. If the program that satisfies the resume condition (program request condition) has transitioned to the suspended state, the program execution device 100 proceeds to the process of step 43. On the other hand, when the program that satisfies the resume condition (program request condition) has not transitioned to the suspended state, the program execution device 100 ends the series of processes.

  In step 42, the program execution device 100 determines whether or not a resume condition (event condition) is satisfied. When the resume condition (event condition) is satisfied, the program execution device 100 proceeds to the process of step 43. On the other hand, the program execution device 100 ends a series of processes when the resume condition (event condition) is not satisfied.

  In step 43, the program execution device 100 resumes a program (processing target program) that satisfies the resume condition (program request condition or event condition). The program execution device 100 returns a program that satisfies the resume condition (program request condition or event condition).

(Function and effect)
In the third modification, the resume unit 162 resumes a program (processing target program) that satisfies the resume condition among the suspension target programs. Therefore, the processing target program that is one of the suspension target programs can be changed to the execution state as necessary.

[Modification 4]
Hereinafter, Modification Example 4 of the first embodiment will be described with reference to the drawings. In the following, differences from the second modification will be mainly described.

  In the fourth modification, the program execution device 100 manages a policy related to a program state transition in association with a program.

(Configuration of program execution device)
Hereinafter, the configuration of the program execution device according to the modified example 4 will be described with reference to the drawings. FIG. 13 is a block diagram illustrating a configuration of the program execution device 100 according to the fourth modification. In FIG. 13, it should be noted that the same components as those in FIG.

  As illustrated in FIG. 13, the program execution device 100 includes a policy storage unit 175 in addition to the configuration illustrated in FIG. 7.

  As shown in FIG. 14, the policy storage unit 175 stores a table that associates program names with policies. The policy includes a state transition and a process start condition.

  The state transition indicates the state transition of the program. For example, the state transition “stop state → state storage state” associated with the trust programs A, D, and P changes the state of the trust programs A, D, and P from the stop state when the processing start condition is satisfied. It means to transition to the saved state.

  The process start condition is a condition for starting state transition. For example, the processing start condition “after 60 seconds” associated with the trust programs A, D, and P is when the time elapsed since the trust programs A, D, and P have transitioned to the stop state reaches 60 seconds. This means that the state of the trust programs A, D, and P is changed to the state storage state.

  The policies stored in the policy storage unit 175 include (1) save policy, (2) suspend policy, and (3) delete policy.

  (1) The evacuation policy is a policy for evacuating the execution information expanded on the memory area 112 to the storage 163 for the program in the execution state or the stopped state (suspend target program). The evacuation policy is a policy that makes a transition from the stopped state to the state storage state, such as a policy associated with the trusted programs A, D, and P.

  (2) The suspend policy is a policy for saving a program in the storage 163 with respect to a program in a running state or a stopped state (suspended target program). Specifically, in the suspend process, the execution information expanded on the memory area 112 is saved in the storage 163, and then the execution information expanded on the memory area 112 is deleted. The suspend policy is a policy that makes a transition from a stopped state to a suspended state, such as a policy associated with the trusted programs B and E.

  (3) The deletion policy is a policy for deleting the execution information developed on the memory area 112 for the state saved program (suspend target program). The deletion policy is a policy for transitioning from the state saving state to the suspended state, such as a policy associated with the trust programs C, Y, and Z, for example.

  Note that the suspend preprocessing unit 173 described above transitions the state of a program (suspend target program) that operates in one operation mode based on the policy stored in the policy storage unit 175.

(Operation of the program execution device)
Hereinafter, the operation of the program execution device according to the modification 4 will be described with reference to the drawings. FIG. 15 is a flowchart illustrating the operation of the program execution device 100 according to the fourth modification.

  As shown in FIG. 15, in step 50, the program execution apparatus 100 determines whether or not a stop time is stored in the stop time storage unit 172 for a program that operates in one operation mode (suspend target program). . When the stop time is stored, the program execution device 100 proceeds to the process of step 53. On the other hand, if the stop time is not stored, the program execution device 100 proceeds to the process of step 54.

  In step 51, the program execution device 100 determines whether or not the execution information saved in the storage 163 is valid. When the execution information is valid, the program execution device 100 ends the series of processes. On the other hand, if the execution information is invalid, the program execution device 100 proceeds to the process of step 52.

  For example, when the program is in an execution state and the execution information saved in the storage 163 is old, the program execution device 100 determines that the execution information saved in the storage 163 is invalid.

  In step 52, the program execution device 100 deletes the execution information saved in the storage 163.

  In step 53, the program execution device 100 determines whether or not a process start condition is satisfied. When the process start condition is satisfied, the program execution device 100 proceeds to the process of step 54. On the other hand, the program execution device 100 ends a series of processes when the process start condition is not satisfied.

  In step 54, the program execution device 100 determines whether or not the program is in a stopped state. If the program is in a stopped state, the program execution device 100 proceeds to the process of step 56. On the other hand, if the program is in the state storage state, the program execution device 100 proceeds to the process of step 55.

  In step 55, the program execution device 100 determines the policy No. shown in FIG. 3 is determined whether or not the processing start condition according to 3 is satisfied. That is, the program execution apparatus 100 determines that the policy of the program is policy No. 3 is determined. In the program execution device 100, the policy of the program is the policy No. If it is 3, the process proceeds to step 58. On the other hand, in the program execution device 100, the policy of the program is the policy No. If it is not 3, the series of processing ends.

  In step 56, the program execution device 100 determines the policy No. shown in FIG. 1 or policy no. 3 is determined whether or not the processing start condition according to 3 is satisfied. That is, the program execution apparatus 100 determines that the policy of the program is policy No. 1 or policy no. 3 is determined. In the program execution device 100, the policy of the program is the policy No. 1 or policy no. If it is 3, the process proceeds to step 57. On the other hand, in the program execution device 100, the policy of the program is the policy No. If it is 2, the process proceeds to step 58.

  In step 57, the program execution device 100 causes the program (suspend target program) operating in one operation mode to transition to the state storage state.

  In step 58, the program execution device 100 causes the program (suspend target program) operating in one operation mode to transition to the suspend state.

(Function and effect)
In the fourth modification, the suspend preprocessing unit 173 changes the state of a program (suspended program) that operates in one operation mode based on the policy stored in the policy storage unit 175. That is, it is possible to realize a state transition suitable for each program (suspend target program) that operates in one operation mode.

[Other Embodiments]
Although the present invention has been described with reference to the above-described embodiments, it should not be understood that the descriptions and drawings constituting a part of this disclosure limit the present invention. From this disclosure, various alternative embodiments, examples and operational techniques will be apparent to those skilled in the art.

  For example, the following configurations and processes can be applied to the above-described embodiment.

  (1) When the mode switching unit 164 receives a request to switch an operation mode from one operation mode to another operation mode, the mode switching unit 164 receives the one operation mode after the suspension target program is saved in the storage 163 by the suspend unit 161. The operation mode may be switched from one operation mode to another operation mode.

  (2) When the mode switching unit 164 receives a request to switch the operation mode from one operation mode to another operation mode, the execution information developed on the memory area 112 by the pre-suspend processing unit 173 has been deleted. Later, the operation mode may be switched from one operation mode to another operation mode.

  (3) The program execution device 100 may include a setting unit that sets the policy stored in the policy storage unit 175 for each program. The setting unit provides a user with a user interface (such as a setting screen) for setting a policy.

  (4) A program that is always restarted in another operation mode in the resume process may be set. An example of such a program is a program that processes incoming calls and mails.

  (5) Information notified from the notification unit 165 to another operation mode may include other information in addition to the program name and the display position. The other information is, for example, the usage amount of the memory area 112 used by the program, the importance of the program, the processing contents of the program, and the like. The designation unit 166 designates a designated program based on these pieces of information.

It is a figure which shows the structure of the program execution apparatus 100 which concerns on 1st Embodiment. It is a figure which shows the information notified by the notification part 165 which concerns on 1st Embodiment. It is a figure for demonstrating the state of the program which concerns on 1st Embodiment. It is a flowchart which shows operation | movement of the program execution apparatus 100 which concerns on 1st Embodiment. It is a flowchart which shows operation | movement of the program execution apparatus 100 which concerns on 1st Embodiment. It is a block diagram which shows the structure of the program execution apparatus 100 which concerns on the example 1 of a change. It is a block diagram which shows the structure of the program execution apparatus 100 which concerns on the example 2 of a change. It is a figure which shows the information memorize | stored in the stop time memory | storage part 172 which concerns on the example 2 of a change. It is a flowchart which shows operation | movement of the program execution apparatus 100 which concerns on the example 2 of a change. It is a block diagram which shows the structure of the program execution apparatus 100 which concerns on the example 3 of a change. It is a figure which shows the information memorize | stored in the resume condition memory | storage part 174 which concerns on the example 3 of a change. It is a flowchart which shows operation | movement of the program execution apparatus 100 which concerns on the example 3 of a change. It is a block diagram which shows the structure of the program execution apparatus 100 which concerns on the example 4 of a change. It is a figure which shows the information memorize | stored in the policy memory | storage part 175 which concerns on the example 4 of a change. It is a flowchart which shows operation | movement of the program execution apparatus 100 which concerns on the example 4 of a change.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 ... Untrusted program, 20 ... Trusted program, 100 ... Program execution apparatus, 110 ... Non-secure execution domain, 111 ... Application processing part, 112 ... Memory area, 120 ... Secure execution domain, 130 ... Untrusted mode, 140 ... Trusted mode, 161 ... Suspend unit, 162 ... Resume unit, 163 ... Storage, 164 ... Mode switching unit, 165 ..Notification unit, 166... Designation unit, 171... Trust zone, 172 .. stop time storage unit, 173 .. pre-suspend processing unit, 174 .. resume condition storage unit, 175. Policy storage unit, 200... Display unit

Claims (16)

It has a plurality of operation modes defined for each type of program, and is a program execution device that exclusively sets each of the plurality of operation modes,
Suspend that saves a suspend target program, which is a program executed in the one operation mode, to a data storage when the operation mode is switched from one operation mode to another operation mode among the plurality of operation modes. And
A resume unit that resumes the suspended program saved in the data storage in the one operation mode when the operation mode is switched from the other operation mode to the one operation mode;
A notification unit for notifying the suspend target program to the other operation mode;
A designation unit for designating a designated program that is a program to be resumed in the one operation mode from the suspension target programs notified by the notification unit;
The resume unit restarts the designated program designated by the designation unit in the one operation mode.   The resume unit resumes only the suspend target program saved in the data storage by the suspend unit in the previous operation mode switching in the one operation mode when the designated program is not designated by the designation unit. The program execution device according to claim 1. A storage unit for storing a first condition for switching the operation mode from the one operation mode to the other operation mode and a second condition for switching the operation mode from the other operation mode to the one operation mode;
A mode switching unit for switching the operation mode;
The mode switching unit switches the operation mode from the one operation mode to the other operation mode when the first condition is satisfied, and the other operation when the second condition is satisfied. The program execution device according to claim 1, wherein the operation mode is switched from a mode to the one operation mode. A data sharing area which is a memory area accessible by the plurality of operation modes;
The notification unit notifies the other operation mode of the suspended program using the data sharing area,
2. The program execution apparatus according to claim 1, wherein the data sharing area is an area where modification of the suspend target program in the other operation mode is prohibited.   The program execution device according to claim 1, wherein the notification unit notifies the name of the suspend target program to the other operation mode.   The resume unit, when resuming the designated program designated by the designation unit in the one operation mode, brings an application executed by the designated program designated by the designation unit to the forefront on the display unit. The program execution device according to claim 1, wherein the program execution device is displayed. In the one operation mode, the execution information of the program in the execution state in the one operation mode is expanded on the memory area,
A stop time storage unit that stores a stop time that is a time when the program in the execution state transitions to the stop state;
The program execution according to claim 1, further comprising: a suspend preprocessing unit that saves execution information expanded in the memory area to the data storage when a predetermined time has elapsed from the stop time. apparatus.   8. The program execution device according to claim 7, wherein the suspend preprocessing unit deletes the execution information saved in the data storage when the program that has transitioned to the stop state transitions to the execution state. .   8. The suspend preprocessing unit, when the suspend target program is saved in the data storage by the suspend unit, deletes the execution information developed in the memory area. Program execution device.   When the resume unit receives a processing request for a processing target program that is one of the suspend target programs, the resume unit uses the execution information saved in the data storage to execute the processing target program in the one operation mode. The program execution device according to claim 7, wherein the program execution device resumes. For each of the suspend target programs, further comprising a condition storage unit that stores a restart condition for restarting the suspend target program in the one operation mode,
The program execution device according to claim 10, wherein the resume unit resumes the processing target program in the one operation mode when a processing request for the processing target program satisfies the restart condition. A mode switching unit for switching the operation mode;
When the mode switching unit receives a request to switch the operation mode from the one operation mode to the other operation mode, the suspend unit saves the suspend target program in the data storage, and then The program execution device according to claim 1, wherein the operation mode is switched from the operation mode to the other operation mode. A mode switching unit for switching the operation mode;
When the mode switching unit receives a request to switch the operation mode from the one operation mode to the other operation mode, the execution information developed in the memory area by the suspend preprocessing unit is deleted. The program execution device according to claim 9, wherein the operation mode is switched from the one operation mode to the other operation mode later. For each of the programs to be suspended, further comprising a storage unit for storing a save policy that is a policy for saving the execution information expanded on the memory area to the data storage,
8. The program execution device according to claim 7, wherein the suspend preprocessing unit saves the execution information expanded in the memory area to the data storage based on the save policy. A storage unit that stores a suspend policy that is a policy for evacuating the suspend target program to the data storage for each of the suspend target programs,
2. The program execution device according to claim 1, wherein the suspend preprocessing unit saves the suspend target program in the data storage based on the suspend policy. A storage unit that stores a deletion policy that is a policy for deleting the execution information expanded on the memory area for each of the suspended programs,
10. The program execution device according to claim 9, wherein the suspend preprocessing unit deletes execution information expanded in the memory area based on the deletion policy.

Images