JP2009176265A - Information processing apparatus and information processing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent, without needing a lot of disk resources, leakage of confidential information data etc. with unauthorized bringing out. <P>SOLUTION: An access right control software 201 requests a transmission of an access key 130 to a management server 100 (Step S13). The management server 100 transmits the access key 130 in response to the request (Step S14). The access right control software 201 performs an authentication processing in order to distinguish whether the received access key 130 is authentic or not (Step S15). If it is successful in authentication (YES in Step S16), the access right control software 201 grants the access right to a user disk space for a first server 10 to a virtual machine 6B for users (Step S17). <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an information processing apparatus and an information processing system using virtualization technology.

  Conventionally, a disk storing personal data can usually be accessed under the control of the user OS. However, this means that if the user uses the PC without connecting the PC to the management server, unapproved information stored in the personal data disk, regardless of whether the user is intentionally or randomly. However, there was a problem that outflow occurred to a malicious third party, and seriously hindered corporate activities in some cases.

Patent Document 1 discloses a method for protecting a file by setting an operating system that can access each file in a virtual machine system.
Japanese Patent Laid-Open No. 2000-112804 (Summary, Claim 1)

  In the above-described technique, setting an operating system that can access each file requires a large amount of disk resources.

  An object of the present invention is to provide an information processing apparatus and an information processing system that can prevent leakage of confidential information data and the like due to being taken out in an unauthorized state without requiring a large amount of disk resources.

  An information processing apparatus according to an example of the present invention controls each software resource so that a plurality of software resources including an operating system, a program and data operating on the operating system operate simultaneously on one hardware resource One of the software resources that operate on the hardware resources of the information processing apparatus is a server software resource that operates as a server, and the information processing apparatus includes: One of the software resources that operate on the hardware resource is a client software resource that uses the service of the server software resource, and the hardware resource stores data to be used by the client software resource User disk space The server software resource tries to communicate with a management server connected via a network when the client software resource is activated, acquires an access key from the management server, and acquires the access When the key is authenticated and it is determined that the access key is valid, an access right to the user disk space is given to the client software resource.

  According to the present invention, it is possible to prevent leakage of confidential information data and the like due to taking out in an unauthorized state without requiring many disk resources.

  Embodiments of the present invention will be described below with reference to the drawings.

As shown in FIG. 1, a plurality of client PCs 2 </ b> A to 2 </ b> C are connected to the management server 100.
The management server 100 includes a user system disk 120 mounted on a client PC and executed as a user virtual machine, and server software 110 for executing a controller function for communicating with the client PCs 2A to 2C.

  The client PCs 2A to 2C are provided with an environment for executing a virtualization technology (Virtual Monitor) provided by, for example, XEN, VMWARE, or the like. The user system space included in the client PCs 2A to 2C depends on the user OS (Windows XP (registered trademark), Vista (registered trademark), etc.) stored in the user system disk 120, various client software, system settings, and security policies. It is a process area that is provided and allows the user to work directly by keyboard input / output or the like. The client PCs 2B and 2C have the same configuration as the client PC 2A, but are not shown.

  The client PC 2A includes a hardware layer 4, a virtual machine monitor 5, a management virtual machine (server software resource) 6A, a user virtual machine 6B (client software resource), a user disk space 6C, and the like.

  The hardware layer 4 includes a display, a hard disk drive (HDD), a network interface card, a keyboard, a mouse, and the like.

  The virtual machine monitor 5 manages the hardware layer 4 and allocates resources to the virtual machines 6A and 6B. The virtual machine monitor 5 distributes the execution schedule of the virtual machine and the I / O request from the virtual machine to the hardware layer 4.

  The management virtual machine 6A includes a service operating system (service OS) 8A, a management application (management APP) 9A, and the like. The service operating system 8A is an operating system for operating the management application 9A. For example, Linux (registered trademark) is used as the service operating system 8A. The access right control software 201 is an application for controlling access from the user virtual machine 6B to the user disk space 6C.

  The user virtual machine 6B includes a user operating system (user OS) 8B, a user application (user APP) 9B, and the like. The user operating system 8B is an operating system for providing an environment generally used by a user. In general, a Windows (registered trademark) operating system is used as the user operating system 8B. The user application 9B is application software that operates on the user operating system 8B. For example, a word processor, a spreadsheet, presentation material creation software, a mailer, a Web browser, and the like.

  Note that the user virtual machine 6B cannot see the data in the management virtual machine 6A and cannot directly access the data.

  The user disk space 6C is a space allocated in the hard disk drive. Data created using the user application 9B or data that can be browsed is stored in the user disk space 6C.

The management virtual machine 6A included in the client PCs 2A to 2C is executed by the service operating system 8A and the management application 9A operating on the service operating system 8A.
(A) Implementation of a personal data disk for the user system;
(B) Opening and closing the user system space,
This is a process area in which (c) user system disk replacement is performed, (d) communication with a remote management server is performed, and cooperation with the processes (a) and (b) on the left is performed.

  As an example, a client in which a virtual machine monitor is provided by XEN, a user system space (user virtual machine) (Domain-U) is a Windows (registered trademark) OS, and Domain-0 is a service system space (management virtual machine). For the PC, the controller on the management server holds the Windows patch information, system setting information, security policy, revisions of various user software, etc. on the remote client PC connected to the network on the management server. When the controller detects that the information is different from the information on the left in the user system disk, the controller cooperates with service software (corresponding to the access right control software 201) on Domain-0 on the client PC, and -If U is open, shut down (Shutdown), rewrite the user system disk to the user system disk on the management server, and reopen (Wakeup) if Domain-U is closed first. . By executing this for one or more client PCs on the system, the administrator can unify the security policies of the client PCs in the system.

Next, access from the user virtual machine 6B to the user disk space 6C will be described.
The virtual machine monitor 5 monitors access from the user virtual machine 6B to the user disk space 6C. When there is an access from the user virtual machine 6B to the user disk space 6C, the access right control software 201 gives an access right to the user disk space 6C to the user virtual machine 6B. The virtual machine monitor 5 permits access to the user disk space 6C from the user virtual machine 6B.

  The access right control software 201 tries to communicate with the management server 100 when the user virtual machine 6B is activated. When the communication is successful, the access right control software 201 requests the server software 110 to transmit the access key 130. Then, the access right control software 201 executes an authentication process for the access key 130 sent from the server software 110. When the authentication process is successful, the access right control software 201 notifies the virtual machine monitor 5 that the user virtual machine 6B is given access right to the user disk space 6C. When the authentication process fails, the access right control software 201 does not notify the virtual machine monitor 5 that the user virtual machine 6B is given access right to the user disk space 6C.

This process will be described with reference to the flowchart of FIG.
The access right control software 201 tries to communicate with the management server 100 (step S11). If the communication is successful (YES in step S12), the access right control software 201 requests the management server 100 to transmit the access key 130 (step S13). The management server 100 transmits the access key 130 in response to the request (step S14). The access right control software 201 performs an authentication process to determine whether or not the received access key 130 is a legitimate person (step S15).

  If the authentication is successful (YES in step S16), the access right control software 201 gives an access right to the user disk space 6C to the user virtual machine 6B (step S17).

  As described above, the access right control software 201 performs an authentication process with the access key 130 of the management server 100, and when the authentication is successful, the access right control software 201 grants the access right of the user disk space 6C to the user virtual machine 6B. By providing, it is possible to prevent leakage of confidential information data and the like due to taking out in an unauthorized state without requiring a large amount of disk resources.

  For example, a client PC in which a virtual machine monitor is provided by XEN, and a domain 0 service system space (management virtual machine) holds user disk space 6C as a virtual disk image. When the service software (corresponding to the access right control software 201) in the service system tries to acquire the access key from the management server, and it is determined that the access key can be acquired within a certain period and is valid, XEN The Domain 0 service software executes a file in which the virtual disk image shown on the left exists or a script in which the disk name is specified on the XEN script for starting the user system (Domain-U). Thereby, a personal data disk is provided when the user system is activated.

[Keep Alive processing]
As shown in FIG. 3, the access right control software 201 performs communication (Keep Alive) at regular intervals with the management server 100 to confirm whether the connection with the management server 100 is valid. Then, the access right control software 201 dynamically stops (Suspend) and resumes (Resume) the provision of the access right of the user disk space 6C to the user virtual machine 6B according to the confirmation state.

  When the access right control software 201 determines that there is no response from the management server 100 for a certain period of time, provision of access right to the user disk space 6C for the user virtual machine 6B is stopped. Thereafter, the access right control software 201 continues to try keep alive to the management server 100, and if the response from the management server 100 is recovered, the access right to the user disk space 6C for the user virtual machine 6B. Resume offering.

This process will be described with reference to the flowchart of FIG.
The access right control software 201 performs communication (Keep Alive) at regular intervals with the management server 100 (step S21). When there is no response from the management server 100 (NO in step S22), the access right control software 201 stops providing the access right to the user disk space 6C for the user virtual machine 6B (step S23).

  Then, communication (Keep Alive) is performed at regular intervals with the management server 100 (step S24). When there is a response from the management server 100, the access right control software 201 gives the access right to the user disk space 6C to the user virtual machine 6B again (step S26).

  As described above, when communication with the management server 100 is interrupted, leakage of confidential information data or the like can be prevented even if the client PC 2A is taken out after authentication by stopping the provision of the access right.

  As an example, a client PC in which a virtual machine monitor is provided by XEN, a service system (management virtual machine) is Domain-0, and a user system Domain-U (user virtual machine) is Windows XP is given. When the service software (corresponding to the access right control software 201) in the service system on the client PC determines that there is no response to the keep alive with the management server, the personal data disk on the user system (Domain-U) Disconnect the virtual disk IO driver to (user disk space). At this time, Windows detects that the drive mounting the personal data disk has been removed (Plug Out), and thereafter the user cannot access the personal data disk. Thereafter, when the service software determines that the Keep Alive with the management server has been resumed, the virtual disk IO driver on the left side of Domain-U is opened again. At this time, Windows detects that the drive mounting the personal data disk is connected (Plug In), and the user can connect to the personal data disk.

[Replace disk space when taking out client PC]
FIG. 5 shows that the management server 100 replaces the user disk space 6C with the take-out disk space 6D. When the user takes the client PC 2A out and discloses the data to others, the user disk space 6C may contain confidential information. May leak information.

  In order to prevent this, an administrator prepares a virtual takeout disk 140 including one or more data on the management server 100 in advance.

  When taking out the client PC 2A to the outside, the user requests the management server 100 to make preparations for taking it out. In response to a request from the user, the management server 100 creates a take-out disk space 6D in the client PC 2A in cooperation with the access right control software 201 operating in the management virtual machine 6A on the client PC 2A. Then, the data in the take-out disk 140 is stored in the take-out disk space 6D. The access right control software 201 replaces the disk space used by the user virtual machine 6B with the take-out disk space 6D from the user disk space 6C.

The procedure of this process will be described with reference to the flowchart of FIG.
The user requests the management server 110 to perform the take-out process of the client PC 2A. This request is transmitted from the user virtual machine 6B, for example. The management server 100 transmits a take-out process execution command to the access right control software 201 (step S31).

The access right control software 201 stops the access right to the user disk space 6C given to the user virtual machine 6B in response to the request (step S32). Then, a take-out disk space 6D is prepared (step S33). The management server 100 transmits the data in the take-out disk 140 to the access right control software 201 (step S34).
The access right control software 201 stores the data in the export disk 140 transmitted from the management server 100 in the export disk space 6D (step S35). Then, the access right control software 201 gives the access right for the take-out disk space 6D to the user virtual machine 6B (step S36). The access right for the take-out disk space 6D is given without performing the authentication process of the access key 130 in the management server 100 even after the restart.

  When the user takes out the client PC 2A and discloses the data to others, it prepares a take-out disk space 6D that does not contain confidential information, and grants access rights to the user virtual machine 6B. By giving it, leakage of confidential information data and the like can be prevented.

  An example is a client PC in which a virtual machine monitor is provided by XEN, a service system (management virtual machine) is Domain-0, and a user system Domain-U (user virtual machine) is Windows XP. The service software (corresponding to the access right control software 201) in the service system on the client PC first accepts a personal data disk (user disk space) replacement request from the management server, and Domain-U exists. If so, close it, receive a take-out management disk that is a virtual disk image from the management server, rewrite the file name or disk name of the personal data disk in the Domain-U script provided by XEN, and change Domin-U Reboot (open) when necessary with Domain-0.

[Change access level when taking out client PC]
FIG. 7 shows that it is possible to set an access level (Read right / Write right) from the server software 110 operating on the management server 100 to the user disk space 6C.

  When taking out the client PC 2A to the outside, the user requests the management server 100 to make preparations for taking it out. When requested, the server software 110 operating on the management server changes the access level of the user disk space 6C from Read + Write right to Read right in cooperation with the access right control software 201 operating in the management virtual machine 6A. Replace.

The procedure of this process will be described with reference to the flowchart of FIG.
The user requests the management server 100 to perform the take-out process of the client PC 2A. This request is transmitted from the user virtual machine 6B, for example. The management server 100 transmits a take-out process execution command to the access right control software 201 (step S41).

  The access right control software 201 stops the access right to the user disk space 6C given to the user virtual machine 6B in response to the request (step S42). The access right control software 201 changes the access level of the user virtual machine 6B to the user disk space 6C from the Read + Write right to the Read right (step S43). Then, the access right control software 201 gives an access right to the user disk space 6C to the user virtual machine 6B.

  Note that the access right of the user disk space 6C whose access level is set to only the Read right is granted without performing the authentication process of the access key 130 in the management server 100 even after rebooting. .

  As a result, when the user takes out the client PC 2A to the outside, fraudulent information such as fraudulent information that has been created by the confidential data of another person regardless of omissions and brought back into the personal data disk, and information that has been altered by the user It becomes possible to prevent provision to others.

  As an example, a client PC in which a virtual machine monitor is provided by XEN, a service system (management virtual machine) is Domain-0, and a user system Domain-U (user virtual machine) is Windows XP is given. The service software (corresponding to the access right control software 201) in the service system on the client PC first accepts an access right change request for the user disk space 6C from the management server 100, and Domain-U exists. If it is closed, the file name of the personal data disk in the Domain-U script provided by XEN or the access level setting of the disk name is changed (Read + Write to Read), and Domin-U is changed to Domain-0. Restart (open) when necessary.

[Multiple user disk space]
FIG. 9 shows that the access right control software 201 prepares a plurality of individual user disk spaces each having an access level and gives the access right to the user virtual machine 6B. For example, when going out, a take-out disk space 6D having only the Read right given from the management server and an empty data disk space 6E having the Read + Write right are provided.

  As a result, only information that can be disclosed when going out is provided to others from the take-out disk space 6D, and the necessary information obtained can be stored in the disk space 6E. Compared with the case where one user disk space is provided, this information prevents misuse of information due to the mixture of disclosure information and acquisition information listed on the left in the taken out client PC. effective.

[Copy Access Key]
FIG. 10 shows that the access key is distributed from the management server when the client PC 2A is taken outside, not via the network but via the removable storage device (SD card, USB memory) 400. Yes.

  In the method shown in FIG. 1, when the client PC 2A is taken out in an environment physically inaccessible to the management server 100, the user cannot access the user disk space 6C. In order to avoid this, the administrator copies the access key of the client PC 2A to be taken out on the management server 100 to the storage device 400, and the user who obtains the access key inserts it into the drive device 401 on the client PC 2A. When the access right control software 201 performs the authentication process, the user disk space 6C can be provided to the user virtual machine 6B.

This process will be described with reference to the flowchart of FIG.
If communication with the management server 100 is attempted and communication cannot be performed (corresponding to NO in step S12 in FIG. 2), the access right control software 201 stores the access key in the storage device 400. Is detected (step S51). If it cannot be detected (NO in step S51), the access right control software 201 ends the process.

  If it can be detected (YES in step S51), the access right control software 201 reads the access key from the storage device 400 (step S52). The access right control software 201 performs an authentication process to determine whether or not the read access key is an authorized person (step S53).

  If the authentication is successful (YES in step S53), the access right control software 201 gives the access right to the user disk space to the first server 10 to the user virtual machine 6B (step S17). If the authentication fails (NO in step S53), the access right control software 201 ends the process.

  As an example, a client PC in which a virtual machine monitor is provided by XEN, a service system (management virtual machine) is Domain-0, and a user system Domain-U (user virtual machine) is Windows XP is given. When the client PC is not connected to the network, the client PC taken out by the user is turned on. First, the service system space (Domain-0) is activated, and the service software in the service system (corresponding to the access right control software 201) checks whether it can communicate with the management server. If communication is not possible, it is checked whether a physical medium containing an access key is inserted in the drive on the virtual PC, and it is determined that the physical medium exists and the access key included in the physical medium is valid. When the service system executes the virtual disk image on Domain-0 constituting the personal data disk or the XEN script including the device, Domain-U (Windows) is in a state where the personal data disk is provided from the service system. to start.

[File list information]
FIG. 12 is a diagram showing a schematic configuration of an information processing system according to an embodiment of the present invention. In FIG. 12, the same parts as those in FIG.

  The server software 110 of the management server 100 includes a path (including a file name) of each file stored in the user disk space 6C of each of the client PCs 2A to 2C connected to the management server 100 via a network. The file list information 501A is created in which information on users who use the user disk space 6C in which files are stored is registered. Note that text information in the file may be registered in the file list information 501A.

  The server software 110 instructs the file list acquisition / transmission software 511, which is one of the management APPs 9A, to transmit a list of files stored in the user disk space 6C, and transmits based on the instruction. The file list information 501A is created based on the file list of each of the client PCs 2A to 2C. Based on a request from the server software 110, the file list / transmission software 511 accesses the user disk space 6C and acquires a list of files.

  Then, the server software 110 responds to a request from the file list information request software 521 which is one of the user applications 9B operating in the user virtual machines 6B of the client PCs 2A to 2C, and the requested client PCs 2A to 2C. The file list information 501B, which is a copy of the file list information 501A, is created in the user disk space 6C.

  The search software 503 as the user application 9B has a keyword search using the file name, text information in the file, etc. from the file list information 501B.

In the following, a procedure of processing in which the management server 100 creates file list information will be described with reference to the flowchart of FIG.
The server software 110 operating on the management server 100 requests the file list acquisition / transmission software 511 of each of the client PCs 2A to 2C to transmit a file list (step S61). The file list acquisition / transmission software 511 of each client PC 2A, 2B accesses the respective user disk space 6C (steps S62A, 62B), and lists the paths of the files stored in the user disk space 6C. Is acquired (steps S63A and 63B). Then, a list of the obtained file paths is transmitted to the management server 100 together with the user name (steps S64A and 64B). The management server 100 acquires a list of file paths of each client PC (step S65), and generates file list information 501A (step S66).

In the above process, as shown in the flowchart of FIG. 14, the server software 110 executes a file list information update process when there is a request from a user or the like.
The process shown in the flowchart of FIG. 14 will be described below. The server software 110 determines whether there has been a file list update request from the client PCs 2A to 2C (step S71). If it is determined that there is no request (NO in step S71), it is determined whether N seconds have elapsed since the last file list was generated (step S72). When it is determined that N disease has not elapsed (NO in step S72), the process of step S71 is executed after a predetermined time. If it is determined in step S71 that there is a request (YES in step S71) or if it is determined in step S72 that N seconds have elapsed (YES in step S72), the server software 110 lists the files from each client PC described above. And update processing of the file list information is executed (step S73).

  Next, a procedure for a user on a certain client PC 2B to remotely access a file on the user disk of another user's client PC 2A in the same group will be described with reference to the flowchart of FIG.

  First, the server software on the management server creates one group consisting of one or more users in advance. Next, the file list information 501A is created in the management server 100 using the method of FIG. 13 (step S81).

  The file list information request software 521 operating in the client PC 2B transmits a file list acquisition request to the management server 100 (step S82). When receiving the acquisition request (step S83), the server software 110 of the management server 100 transmits the file list information 501A to the user disk space 6C of the client PC 2B (step S84). The client PC 2B creates file list information 501B in the user disk space 6C from the received data (step S85).

  The user who uses the client PC 2B wants to access the file name a1 stored in the user disk space 6C of the client PC 2A searched using the search software 503 from the file list information 501B. The case will be described.

  In response to the user operation, the user application 9B of the client PC 2B transmits an access permission request including the path of the file name a1 and the requesting user name to the management server 100 (step S86). When the management server 100 receives the file access permission request (step S87), whether or not the request source user name (user b) is in the same group as the user a who is the user of the client PC 2A in which the file a1 is stored. Is discriminated (step S88). The management server 100 transmits a notification indicating whether or not the access request according to the determination result is acceptable to the client PC 2B (step S89). The management server 100 transmits “YES” if the user b and the user a are the same group, and “NO” if they are different groups.

  When the user application 9B of the client PC 2B receives the approval / disapproval notification (step S90), it determines whether or not access is possible (step S91). If it is determined that access is not possible (NO in step S91), the client PC 2B ends the access process for the file name a1. If it is determined that access is possible (YES in step S91), the user application 9B of the client PC 2B transmits an access request corresponding to the access type to the management server 100 (step S92). When receiving an access request for the file name a1 from the user b (step S93), the management server 100 transmits an access execution request for the file name a1 from the user b to the client PC 2A (step S94).

  When the access execution request is received (step S95), the client PC 2A executes access to the file name a1 (step S96). The client PC 2A transmits the access execution result to the file name a1 addressed to the user b to the management server 100 (step S97).

  When receiving the access execution result (step S98), the management server 100 transmits the access execution result to the file name a1 addressed to the user b to the client PC 2B (step S99). When receiving the access result to the file name a1 (step S100), the client PC 2B determines whether or not to access the file name a1 (step S101). In the case of implementation (YES in step S101), the process returns to step S92 and transmits an access implementation request again. Moreover, when not implementing (NO of step S101), a process is complete | finished.

  According to the above-described system, acquisition of a list of files stored in the user disk space 6C on each client PC, search using the acquired information, and user / client of another client PC belonging to the same group By enabling shared access to the disk space 6C, it is possible to effectively use less disk resources without using a large capacity file server.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.

1 is a block diagram showing a configuration of an information processing system according to an embodiment of the present invention. The flowchart which shows the procedure of the authentication process performed between a client PC and a management server. The figure which shows the state which is performing the Keep Alive process in the information processing system concerning one Embodiment of this invention. The flowchart which shows the procedure of Keep Alive processing. The figure which shows that a management server replaces a user disk space with a take-out disk space. The flowchart which shows the procedure which replaces a user disk space for taking-out disk space. The figure which shows the change of the access level to a user disk space. . The flowchart which shows the procedure which changes the access level to a user disk space. The figure which shows the state which provides several user disk space to a user system, and has set the access level to each. The figure which shows the state which stores an access key in a memory | storage device and performs an authentication process. The flowchart which shows the procedure which performs an authentication process with the access key stored in the memory | storage device. The figure which shows schematic structure of the information processing system concerning one Embodiment of this invention. The flowchart which shows the procedure of the process which a management server produces file list information. The flowchart which shows the procedure of the update process of file list information. The flowchart which shows the procedure in which the user on a client PC performs remote access to the file on the user disk of the client PC of the other user in the same group.

Explanation of symbols

  6A ... management virtual machine, 6B ... user virtual machine, 6C ... user disk space, 6D ... take-out disk space, 6E ... disk space, 8A ... service operating system, 8B ... user operating system, 9A ... management application, 9B ... user application, 100 ... management server, 110 ... server software, 120 ... user system disk, 130 ... access key, 140 ... take-out disk, 201 ... access right control software, 400 ... Storage device 401... Drive device.

Claims (17)

Information processing apparatus having monitor means for controlling each software resource so that a plurality of software resources including an operating system, a program and data operating on the operating system operate simultaneously on one hardware resource Because
One of the software resources that operates on the hardware resources of the information processing apparatus is a server software resource that operates as a server,
One of the software resources operating on the hardware resource of the information processing apparatus is a client software resource that uses a service of the server software resource,
The hardware resource has a user disk space in which data for use by the client software resource is stored;
When the client software resource is activated, the server software resource attempts to communicate with a management server connected via a network, acquires an access key from the management server, and authenticates the acquired access key. And an access right control means for giving an access right to the user disk space for the client software resource when the access key is determined to be valid. apparatus. The access right control means periodically communicates with the management server to confirm the existence of the management server,
The information processing apparatus according to claim 1, wherein when the communication with the management server cannot be performed, the access right to the user disk space of the client software resource is taken up. After being unable to communicate with the management server, the access right control means periodically attempts to communicate with the management server in order to confirm the existence of the management server,
3. The information processing according to claim 2, wherein, when communication with the management server is possible, the access right control means gives an access right to the user disk space to the client software resource. apparatus.   In response to the user's request, the access right control means sets the access level of the client software resource to the user disk space to the Read right, and does not authenticate the access key. 4. The information processing apparatus according to claim 1, wherein an access right to the user disk space is given to software resources. The access right control means prepares the second user disk space,
The access level of the client software resource to the second user disk space is set to Read right / Write right, and the second user disk is set to the client software resource without authenticating the access key. 5. The information processing apparatus according to claim 4, wherein an access right to the space is given. Means for reading data from a removable storage device storing a copy of the removable access key;
The access right control means reads the access key from the removal storage device, authenticates the read access key, and determines that the access key is valid, the access right control means performs the client software resource with respect to the client software resource. The information processing apparatus according to claim 1, wherein an access right to the user disk space is given.   In response to a request from the user, the access right control means receives provision of data from the management server and gives the client software resource access right to the third disk space in which the data is stored. The information processing apparatus according to claim 1, wherein the information processing apparatus is an information processing apparatus. Information processing apparatus having monitor means for controlling each software resource so that a plurality of software resources including an operating system, a program and data operating on the operating system operate simultaneously on one hardware resource And an information processing system having a management server connected to the information processing apparatus via a network,
One of the software resources that operates on the hardware resources of the information processing apparatus is a server software resource that operates as a server,
One of the software resources operating on the hardware resource of the information processing apparatus is a client software resource that uses a service of the server software resource,
The hardware resource has a user disk space in which data for use by the client software resource is stored;
The management server has an access key for the client software resource to use user disk space,
When the client software resource is activated, the server software resource attempts to communicate with a management server connected via a network, and attempts to communicate with a management server connected via the network. The access key is acquired from the management server, the acquired access key is authenticated, and when the access key is determined to be valid, the client software resource is An information processing system comprising access right control means for giving access right to a user disk space. The access right control means periodically communicates with the management server to confirm the existence of the management server,
9. The information processing according to claim 8, wherein, when communication with the management server is not possible, the access right control means takes up the access right to the user disk space of the client software resource. system. After being unable to communicate with the management server, the access right control means periodically attempts to communicate with the management server in order to confirm the existence of the management server,
10. The information processing according to claim 9, wherein when the communication with the management server can be performed, the access right control means gives an access right to the user disk space to the client software resource. system.   In response to a request from the user, the access right control means sets the access level of the client software resource to the user disk space to the Read right, and does not authenticate the access key. The information processing system according to any one of claims 8 to 10, wherein an access right to the user disk space is given to a software resource. The access right control means prepares the second user disk space,
The access right control means sets the access level of the client software resource to the second user disk space to Read right / Write right, and performs authentication on the client software resource without authenticating the access key. 12. The information processing system according to claim 11, wherein an access right to the second user disk space is given. Means for reading data from a removable storage device storing a copy of the removable access key;
The access right control means reads the access key from the removal storage device, authenticates the read access key, and determines that the access key is valid, the access right control means performs the client software resource with respect to the client software resource. 9. The information processing system according to claim 8, wherein an access right to the user disk space is given. In response to a request from the user, the server software resource requests the management server to provide one or more data,
The management server provides the data in response to a request from the server software resource;
9. The access right control means prepares a third disk space in which the data is stored, and gives an access right to the third disk space to the client software resource. The information processing system according to any one of claims 13 to 13. The server software resource includes processing for generating information on a list of files stored in a user disk space included in the information processing apparatus connected via the network, and from the client software resource. Processing to send the information of the list of files to the user disk space of the information processing apparatus in which the client software resource is operating in response to a request for transmission of information;
The information processing system according to claim 8, wherein the client software resource executes processing for requesting the management server to transmit information on the list of files.   The information processing system according to claim 15, wherein the client software resource executes a file search process using a name as a keyword from information in the file list. The access right control means accesses the file registered in the file list information when there is a request for access to the file registered in the file list information from the client software resource. A process for inquiring the management server whether or not the file is acceptable, and a process for transmitting an access request for the file to the management server when the management server permits access to the file,
The access right control means determines whether or not the file can be accessed based on a user of the information processing apparatus in response to an inquiry as to whether or not the file can be accessed, and determines the result of the determination. When it is determined that the file can be accessed and the information processing apparatus receives an access request, the other information processing apparatus is accessed according to the type of the access request. The information processing system according to claim 15, wherein a process to be executed and a process to transmit an access result to the information processing apparatus are executed.

Images