JP2013084114A - Information processing program, information processing device, and information processing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To avoid information leakage while preventing degradation of user's convenience.SOLUTION: An information processing program causes a computer to execute reception processing, storage processing, and determination processing. The reception processing receives input of an instruction to copy data. The storage processing stores the copied data with information indicating a computer environment which has received input of the instruction to copy the data, in a storage area shared by a plurality of applications executed by the computer. When an instruction to extract the data from the storage area is received, the determination processing determines whether to execute the instruction to extract the data on the basis of the information indicating the computer environment.

Description

  The present invention relates to an information processing program, an information processing apparatus, and an information processing method.

  In recent years, computer processing using a virtual environment and computer processing for operating a remote computer at a remote location have been widely performed. In other words, information existing in an environment different from a physically operated local computer is processed using the hardware of the local computer.

  Here, an operating system that operates a computer has a function called a clipboard that enables information to be exchanged between different applications, and is also used in the above-described processing. For example, information is exchanged between an application on a remote computer and an application on a local computer. However, in this case, there is a risk that information on the remote computer is leaked from the local computer. Therefore, in order to reduce this risk, for example, there is a technique for prohibiting all the functions related to the clipboard when the remote computer is activated.

JP 2008-217449 A

  However, the above-described conventional technology has a problem that convenience is lowered. For example, even if information is exchanged between applications existing on the remote computer, there is no risk that information on the remote computer will be leaked from the local computer. Further, for example, even if information is exchanged between applications existing on the local computer, there is no risk of leakage of information on the remote computer from the local computer. As described above, the above-described prior art has reduced convenience because the information is prohibited from being delivered despite the fact that there is no risk of information leakage.

  The disclosed technology has been made in view of the above, and an object thereof is to provide an information processing program, an information processing apparatus, and an information processing method capable of preventing information leakage while preventing deterioration in convenience.

  In one aspect, an information processing program disclosed in the present application causes a computer to execute an accepting process, a storing process, and a determining process. The accepting process accepts an input of a command for copying data. In the storing process, the copied data is stored in a storage area shared by a plurality of applications executed by the computer together with information indicating a computer environment that has received an input of an instruction to copy the data. In the determination process, when an instruction to extract data from the storage area is generated, it is determined whether to execute the instruction to extract based on information indicating the computer environment.

  According to one aspect of the technology disclosed in the present application, there is an effect that information leakage can be prevented while preventing a decrease in convenience.

FIG. 1 is a block diagram illustrating an example of the configuration of the information processing system according to the first embodiment. FIG. 2 is a diagram illustrating an example of a screen displayed by the client terminal. FIG. 3 is a block diagram illustrating an example of a functional configuration of the client terminal according to the first embodiment. FIG. 4 is a diagram illustrating an example of a data structure of clipboard information stored in the clipboard. FIG. 5 is a diagram illustrating an example of log information. FIG. 6 is a block diagram illustrating an example of a functional configuration of the VM according to the first embodiment. FIG. 7 is a flowchart illustrating the processing procedure of the monitoring application according to the first embodiment. FIG. 8 is a flowchart illustrating the processing procedure of the monitoring application according to the first embodiment. FIG. 9 is a diagram for explaining an operation example of the information processing system according to the first embodiment. FIG. 10 is a diagram for explaining an operation example of the information processing system according to the second embodiment. FIG. 11 is a diagram for explaining an operation example of the information processing system according to the third embodiment. FIG. 12 is a diagram illustrating a computer that executes an information processing program.

  Embodiments of an information processing program, an information processing apparatus, and an information processing method disclosed in the present application will be described below in detail with reference to the drawings. Note that the present invention is not limited to the embodiments. Each embodiment can be appropriately combined within a range in which processing contents do not contradict each other.

  A configuration of the information processing system according to the first embodiment will be described. FIG. 1 is a block diagram illustrating an example of the configuration of the information processing system according to the first embodiment. As illustrated in FIG. 1, the information processing system 1 includes a data center 10 and a client terminal 100. The data center 10 and the client terminal 100 are connected via a network 5 so that they can communicate with each other. The network 5 can employ any type of communication network such as the Internet, a LAN (Local Area Network), and a VPN (Virtual Private Network) regardless of wired or wireless. Here, one data center and one client terminal are illustrated, but the disclosed system is not limited to the illustrated configuration. That is, the information processing system 1 can accommodate an arbitrary number of data centers and an arbitrary number of client terminals.

  The data center 10 includes server devices 11a, 11b,. The server device 11a includes a communication control unit 12a and a hypervisor 13a. The communication control unit 12 a controls communication related to various information transmitted and received between the data center 10 and the client terminal 100. For example, the communication control unit 12a is a NIC (Network Interface Card). The hypervisor 13a is a program that realizes a virtual machine (VM) that is a virtual computer. For example, the server device 11a realizes the computer environment of the VM 200a by operating a unique operating system (OS) on the hypervisor 13a. A computer environment is realized for each OS. That is, when the OS is different, it is recognized as a different computer environment. Realization of a virtual machine is not limited to a method using a hypervisor. For example, the server apparatus 11a may use a method of executing virtualization software on the host OS and realizing a virtual machine there. The server device 11b includes a communication control unit 12b and a hypervisor 13b. The descriptions of the communication control unit 12b and the hypervisor 13b are the same as the descriptions of the communication control unit 12a and the hypervisor 13a, respectively. For example, the server device 11b realizes the computer environments of the VM 200b and the VM 200c by operating two OSs on the hypervisor 13b. Here, the server devices 11a, 11b,... Are collectively referred to as the server device 11 when they are described without distinction. In addition, when the VMs 200a, 200b, 200c,.

  For example, the server device 11 of the data center 10 receives input information input by a user from a client terminal 100 described later, and executes processing of the VM 200 according to the received input information. Further, for example, the server device 11 of the data center 10 transmits information on the desktop screen of the VM 200 on which the process has been executed to the client terminal 100.

  The client terminal 100 is a terminal device used by a user, and corresponds to a computer system such as a personal computer or a PDA (Personal Digital Assistant). For example, the client terminal 100 realizes the computer environment of the client terminal 100 by operating an independent OS.

  For example, the client terminal 100 receives information on the desktop screen of the VM 200 from the server device 11 of the data center 10 and displays the received desktop screen of the VM 200. For example, when the client terminal 100 receives an input from the user via the displayed desktop screen of the VM 200, the client terminal 100 transmits the input information to the server device 11 of the data center 10.

  An example of a screen displayed by the client terminal 100 will be described with reference to FIG. FIG. 2 is a diagram illustrating an example of a screen displayed by the client terminal. As shown in FIG. 2, for example, the client terminal 100 displays a screen 2a. The screen 2a includes a region 2b and a region 2c. Among these, the area 2 b corresponds to the desktop screen of the client terminal 100. For example, when the client terminal 100 receives an input from the user via the area 2b, processing corresponding to the input is executed in the computer environment of the client terminal 100. The area 2c corresponds to the desktop screen of the VM 200. For example, when the client terminal 100 receives an input from the user via the area 2c, a process corresponding to the input is executed in the computer environment of the VM 200.

  In the embodiment, the computer environment of the client terminal 100 is also referred to as “physical environment”, and the computer environment of the VM 200 is also referred to as “virtual environment”. That is, the physical environment and the virtual environment are different computer environments. Specifically, it can be said that the virtual environment realized by the VM 200a and the virtual environment realized by the VM 200b are also different computer environments.

  Here, for example, in a computer environment realized in the information processing system 1, applications such as document creation software and spreadsheet software operate. Further, for example, the OS that operates in the information processing system 1 includes a function related to a clipboard that enables information to be exchanged between different applications. Hereinafter, the application is also referred to as “application”.

  Next, the functional configuration of the client terminal according to the first embodiment will be described. FIG. 3 is a block diagram illustrating an example of a functional configuration of the client terminal according to the first embodiment. As illustrated in FIG. 3, the client terminal 100 includes an input unit 101, an output unit 102, a communication control unit 103, a storage unit 110, and a control unit 120.

  The input unit 101 is an input device that receives input of various types of information, and corresponds to, for example, a keyboard and a mouse. For example, the input unit 101 receives input from the user via the desktop screen of the client terminal 100 displayed on the output unit 102 and the desktop screen generated by the VM 200 transmitted from the server device 11. For example, the input unit 101 receives an input of a command for copying data from a user.

  The output unit 102 is an output device that displays various types of information, and corresponds to, for example, a display or a monitor. For example, the output unit 102 displays the desktop screens of the client terminal 100 and the VM 200.

  The communication control unit 103 is a device that controls communication related to various types of information transmitted and received via the network 5, and corresponds to, for example, a NIC. For example, the communication control unit 103 transmits the input information input via the desktop screen of the VM 200 to the server device 11 of the data center 10. For example, the communication control unit 103 receives information on the desktop screen of the VM 200 on which the process has been executed from the server device 11 of the data center 10.

  The storage unit 110 stores clipboard information 111, log information 112, original information 113, and VM information 114. For example, the storage unit 110 corresponds to a semiconductor memory device such as a random access memory (RAM), a read only memory (ROM), or a flash memory, and a storage device such as a hard disk or an optical disk.

  The clipboard information 111 stores data used in various applications. For example, the clipboard information 111 is stored in an area of a shared memory that can be used by the control unit 120 described later in the storage unit 110. Hereinafter, the shared memory area is also referred to as a clipboard. FIG. 4 is a diagram illustrating an example of a data structure of clipboard information stored in the clipboard. As illustrated in FIG. 4, for example, the clipboard information 111 includes “data format” and “data”. Among these, the data format indicates the data format of the clipboard information 111. For example, the data format includes “text”, “RGB (Red Green Blue)”, “bitmap”, and the like. Data shows various data. For example, “100” and “(255, 0, 0)” are included. The clipboard is an example of a storage area shared by a plurality of applications executed by the computer. For example, the clipboard of the client terminal 100 exists in the storage area of the storage unit 110.

  As shown in FIG. 4, for example, the clipboard information 111 includes a data format “text” and data “100”. That is, the clipboard information 111 includes text data “100”. The clipboard information 111 is the same for other data.

  The log information 112 is information indicating a record of operations performed by the user. For example, the log information 112 is a record of operations related to the clipboard performed by the user. FIG. 5 is a diagram illustrating an example of log information. As illustrated in FIG. 5, the log information 112 includes information in which “name”, “occurrence date / time”, “classification”, “accompanying”, “content”, and “remarks” are associated with each other. Among these, the name is information indicating the name of the computer environment realized in the information processing system 1. The occurrence date and time is information indicating the date and time when the corresponding operation is performed. The category is information indicating the category of the corresponding operation. The incidental information is information indicating whether or not the original information regarding the corresponding operation has been acquired. For example, the accompanying “acquisition” indicates that the original information regarding the corresponding operation has been acquired, and the accompanying “null” indicates that it has not been acquired. The content is a summary of the content of the corresponding operation. Remarks include other information about the operation in question. Note that “null” indicates a blank.

  As shown in FIG. 5, for example, the log information 112 includes a name “PC001”, an occurrence date “2011/1/19 18:25”, a category “violation”, an accompanying “null”, and a content “clipboard operation”. Is forbidden ... "and remarks" ... "are stored in association with each other. That is, the log information 112 stores that at 18:25 on January 19, 2011, the operation relating to the clipboard is prohibited in the computer environment of PC001, and "..." is stored in the remarks. Further, the log information 112 includes a record relating to other operations.

  The original information 113 is original information that is a target of an operation related to the clipboard. For example, the original information 113 is obtained by storing information stored in the clipboard as an object of the operation when the recording of the operation by the user is recorded as the log information 112 as the original.

  The VM information 114 is information on the desktop screen of the VM 200. For example, the VM information 114 is information received from the server device 11 of the data center 10. Further, the VM information 114 is displayed on the output unit 102 as the area 2c in FIG. For example, the VM information 114 is displayed as a document or a spreadsheet that is a result processed by the server device 11.

  Returning to the description of FIG. The control unit 120 includes a screen generation unit 123 and a monitoring unit 125. The function of the control unit 120 can be realized by an integrated circuit such as an application specific integrated circuit (ASIC) or a field programmable gate array (FPGA). Further, the function of the control unit 120 can be realized, for example, by a CPU (Central Processing Unit) executing a predetermined program. The predetermined program is, for example, an OS, an application such as document creation software or spreadsheet software, or a monitoring application described later.

  The control unit 120 controls execution of an OS that is basic software for managing the entire computer system. For example, the control unit 120 executes processing for managing the process of the screen generation unit 123.

  Moreover, the control part 120 has a function regarding utilization of a clipboard, for example. This function is provided as an API (Application Program Interface) that is a set of commands and functions, for example. For example, the control unit 120 provides APIs such as “SetClipboard” that is an instruction to store data in the clipboard and “GetClipboard” that is an instruction to extract data from the clipboard. Hereinafter, “SetClipboard” is also referred to as “Set”, and “GetClipboard” is also referred to as “Get”.

  For example, the control unit 120 controls execution of an application such as document creation software or spreadsheet software. For example, when the control unit 120 receives an input of a command to copy data to the clipboard from the user, the application calls Set to store the data on the clipboard.

  For example, a case will be described in which a formula “= A + B” is set in a spreadsheet software, and a “copy” instruction is received from a user for a cell in which the text “100” is displayed as a red character. . In this case, for example, when the OS calls Set, the control unit 120 displays the text “100”, RGB “(255, 0, 0)”, and the formula “= A + B” on the clipboard as shown in FIG. And store. Further, for example, a case will be described in which a “paste” instruction is received from a user in a spreadsheet software cell. In this case, for example, the control unit 120 retrieves the text “100”, RGB “(255, 0, 0)”, and the formula “= A + B” from the clipboard of FIG. Paste to. Since the number of data extracted from the clipboard is one by calling Get once, Get is called three times to extract three pieces of data.

  The screen generation unit 123 controls execution of an application for browsing information transmitted / received via the network 5. For example, when receiving an input from the user via the area 2 c in FIG. 2, the screen generation unit 123 transmits the input information that has been input to the server device 11 of the data center 10. For example, the screen generation unit 123 receives the VM information 114 from the server device 11 of the data center 10 and stores the received VM information 114 in the storage unit 110. For example, the screen generation unit 123 displays the VM information 114 on the output unit 102. For example, the screen generation unit 123 displays the VM information 114 as the area 2c illustrated in FIG.

  In addition, the control unit 120 executes an application process for sharing data stored in the clipboard between different computer environments. The application process is also referred to as a clipboard process. For example, when an instruction to store data on the clipboard is generated, the control unit 120 transfers the data to another computer environment if the computer environment in which the data stored by the instruction exists is its own computer environment. To do. For example, when the OS calls Set, the control unit 120 transfers data stored in the Set to the VM 200 via the communication control unit 103.

  For example, when the control unit 120 receives data from a clipboard process in another computer environment, the clipboard process in its own computer environment calls Set, and stores the received data in the clipboard. For example, when the control unit 120 receives data from a clipboard process executed by the control unit 220 described later, the clipboard process executed by the control unit 120 calls Set and stores the received data in the clipboard of the storage unit 110. .

  The monitoring unit 125 is a processing unit that controls execution of the monitoring application. The function of the monitoring unit 125 is realized by, for example, installing an information processing program in the client terminal 100 and executing it by the CPU. As illustrated in FIG. 3, for example, the monitoring unit 125 includes a storage unit 125a, a determination unit 125b, and an execution unit 125c.

  When an instruction to store data on the clipboard is generated, if the computer environment in which the data exists is another computer environment, the storage unit 125a stores information indicating that the other computer environment is in a predetermined storage area. Store. For example, when the control unit 120 calls Set, the storage unit 125a stores, on the clipboard, the PC name of the transfer source of stored data. For example, a case where a “copy” instruction is received from the user in the virtual environment of FIG. 2 will be described. In this case, as illustrated in FIG. 4, the storage unit 125 a stores “VPC002”, which is the PC name of the VM 200 realizing the virtual environment, and the data format “PC name” in association with each other on the clipboard of the storage unit 110. . Although the case where the transfer source PC name is used as information indicating that the computer environment is another computer has been described here, the present invention is not limited to this. For example, the storage unit 125a may set a flag indicating that the computer environment is other on the clipboard. For example, when the control unit 120 calls Set, the storage unit 125a stores the data format “flag” and the data “1” in association with each other on the clipboard.

  When an instruction to extract data from the clipboard is generated, the determination unit 125b determines whether or not information indicating that the computer environment is other is stored in a predetermined storage area. For example, when the control unit 120 calls Get, the determination unit 125b determines whether the transfer source PC name is stored in the clipboard of the storage unit 110. For example, when the control unit 120 calls Get, the determination unit 125b determines whether the PC name is stored in the clipboard illustrated in FIG. For example, the determination unit 125b outputs a determination result to the execution unit 125c.

  The execution unit 125c executes an instruction to retrieve data when the determination unit 125b determines that information indicating that the computer environment is another is not stored. For example, when the PC name is not stored in the clipboard of the storage unit 110, the execution unit 125c extracts data from the clipboard.

  In addition, the execution unit 125c rejects an instruction to retrieve data when the determination unit 125b determines that information indicating that the computer environment is another is stored. For example, the execution unit 125c rejects the Get called by the control unit 120 when the PC name is stored in the clipboard of the storage unit 110.

  In addition, when the execution unit 125c rejects an instruction to retrieve data, the execution unit 125c records that the instruction has been rejected. For example, when the execution unit 125c rejects the Get called by the control unit 120, the execution unit 125c records the fact as the log information 112. For example, a case where Get is rejected in the computer environment of PC001 at 18:25 on January 19, 2011 will be described. In this case, as shown in FIG. 5, for example, the execution unit 125 c prohibits the operation “clipboard operation” with the name “PC001”, the date and time of occurrence “2011/1/19 18:25”, the classification “violation”. "..." and remarks "..." are recorded in association with each other.

  In addition, when the execution unit 125c records that the instruction to retrieve data is rejected, the execution unit 125c suppresses recording of an instruction including the same data format as that included in the instruction for a predetermined time. For example, when the execution unit 125c rejects an instruction to retrieve the data format “text” and records that as the log information 112, the execution unit 125c suppresses recording that the instruction to retrieve the data format “text” is rejected for 3 seconds. To do. This is because there may be an application that executes a retry when a predetermined command is rejected. That is, the purpose is to prevent the same record from being recorded as the log information 112 by executing the retry. Although the case where 3 seconds is set as the predetermined time has been described here, the present invention is not limited to this. For example, the user using the client terminal 100 may set the predetermined time to an arbitrary value.

  In addition, the execution unit 125c executes an instruction to retrieve data when the determination unit 125b determines that information indicating that the computer environment is another is stored, and indicates that the instruction has been executed. Record. For example, when the PC name is stored in the clipboard, the execution unit 125c extracts data from the clipboard in the storage unit 110 and records the fact as the log information 112.

  In addition, the execution unit 125c records data extracted by an instruction to extract data when the determination unit 125b determines that information indicating that the computer environment is another is stored. For example, when the PC name is stored in the clipboard of the storage unit 110, the execution unit 125c records the data stored in the clipboard as the original information 113.

  Next, a functional configuration of the VM according to the first embodiment will be described. FIG. 6 is a block diagram illustrating an example of a functional configuration of the VM according to the first embodiment. As illustrated in FIG. 6, the VM 200 includes a storage unit 210 and a control unit 220. For example, the storage unit 210 is a virtual memory realized by the hypervisor 13 allocating a predetermined area in the memory of the server device 11 for the VM 200. Further, for example, the control unit 220 is a virtual processor that is realized by the hypervisor 13 assigning the predetermined processing capability in the processor of the server device 11 for the VM 200.

  The storage unit 210 includes clipboard information 211, log information 212, and original information 213. Among these, the description of the clipboard information 211, the log information 212, and the original information 213 is the same as the description of the clipboard information 111, the log information 112, and the original information 113 shown in FIG. Further, for example, the clipboard of the VM 200 exists in the storage area of the storage unit 210.

  The control unit 220 includes a monitoring unit 224. Further, for example, like the control unit 120, the control unit 220 controls execution of an OS that is basic software for managing the entire computer system. Further, for example, the control unit 220 has a function related to the use of the clipboard, like the control unit 120. Further, for example, like the control unit 120, the control unit 220 executes an application process for sharing data stored in the clipboard between different computer environments.

  The monitoring unit 224 is a processing unit that controls execution of the monitoring application. The monitoring unit 224 includes a storage unit 224a, a determination unit 224b, and an execution unit 224c. Among these, the description of the storage unit 224a, the determination unit 224b, and the execution unit 224c is the same as the description of the storage unit 125a, the determination unit 125b, and the execution unit 125c.

  Next, a processing procedure of the monitoring unit according to the first embodiment will be described. 7 and 8 are flowcharts illustrating the processing procedure of the monitoring unit according to the first embodiment. The processing illustrated in FIGS. 7 and 8 is executed at predetermined time intervals, for example, while power is supplied from the power source to the illustrated devices. In the following description, the processing procedure of the monitoring unit 125 in the client terminal 100 will be described, but the processing procedure of the monitoring unit 224 in the VM 200 executes the same processing.

  As shown in FIG. 7, when Set is called by the clipboard process (step S101 Yes), the storage unit 125a stores the PC name of the transfer source of stored data on the clipboard (step S102).

  As shown in FIG. 8, when Get is called by the clipboard process (step S201 Yes), the determination unit 125b determines whether the transfer source PC name is stored in the clipboard (step S202).

  If the PC name is stored in the clipboard (Yes at Step S202), the execution unit 125c rejects the Get called by the clipboard process (Step S203). On the other hand, when the PC name is not stored in the clipboard (No in step S202), Get called by the clipboard process is executed.

  Next, an operation example of the information processing system according to the first embodiment will be described. FIG. 9 is a diagram for explaining an operation example of the information processing system according to the first embodiment. In the example illustrated in FIG. 9, a case where a “copy” instruction is received from a user in a virtual environment will be described. Here, as an example, a case where a “copy” instruction is received from a user in a virtual environment will be described, but the present invention is not limited to this. For example, even when a “copy” instruction is received from a user in a physical environment, the information processing system operates similarly. Here, the PC name of the VM 200 that realizes the virtual environment is “VPC002”, and the PC name of the client terminal 100 that realizes the physical environment is “PC001”.

  As shown in FIG. 9, when an input of a command to copy data is received from the user in the virtual environment (S11), the application on the VPC002 side calls Set and the data to be set is placed on the clipboard on the VPC002 side. Store (S12). When Set is called in its own environment, the clipboard process on the VPC 002 side transfers data stored in the Set to the client terminal 100 “PC001” (S13).

  In the physical environment, when the clipboard process on the PC001 side receives data from the clipboard process on the VPC002 side, it calls Set and stores the data to be set in the clipboard on the PC001 side (S14). When the clipboard process on the PC 001 side calls Set, the storage unit 125a stores the PC name “VPC002” of the transfer target data on the clipboard (S15).

  Here, when an instruction of “paste” is received from the user in the physical environment (S16), the application on the PC 001 side calls Get (S17). The determining unit 125b refers to the clipboard on the PC001 side and determines that the transfer source PC name “VPC002” is stored in the clipboard (S18).

  Since the PC name “VPC002” is stored in the PC001 clipboard, the execution unit 125c rejects the Get called by the PC001 application and records the data stored in the PC001 clipboard as the original information 113. (S19). Note that the execution unit 125c may execute the process of S20 instead of the process of S19 according to the setting of the user. That is, the execution unit 125c may record the fact as the log information 112 when the application on the PC 001 side extracts and pastes data from the clipboard.

  On the other hand, when an instruction of “paste” is received from the user in the virtual environment (S21), the application on the VPC002 side calls Get (S22). The determination unit 224b refers to the clipboard on the VPC002 side and determines that no other PC name is stored in the clipboard (S23). Since no other PC name is stored in the clipboard on the VPC002 side, the application on the VPC002 side takes out data from the clipboard and executes paste (S24).

  Next, effects of the client terminal 100 according to the first embodiment will be described. When an instruction to store data on the clipboard is generated, if the computer environment in which the data exists is another computer environment, the client terminal 100 stores information indicating that the other computer environment is in a predetermined storage area. Store. When an instruction to extract data from the clipboard is generated, the client terminal 100 determines whether or not information indicating that the computer environment is other is stored in a predetermined storage area. If it is determined that information indicating that the computer environment is another computer environment is not stored, the client terminal 100 executes an instruction to retrieve data. For this reason, the client terminal 100 can prevent information leakage while preventing deterioration in convenience.

  For example, the client terminal 100 exchanges information by copying and pasting between applications existing on a remote computer. In addition, for example, the client terminal 100 executes information transfer by copying and pasting between applications existing on the local computer. As described above, when there is no risk of information leakage due to information transfer between the remote computer and the local computer, the client terminal 100 executes information transfer by copying and pasting. For this reason, the client terminal 100 can prevent information leakage while preventing deterioration in convenience.

  For example, the client terminal 100 stores information indicating that it is another computer environment in the clipboard of its own environment. The clipboard has a feature of deleting data previously stored in the clipboard each time Set is called. For this reason, the client terminal 100 stores information indicating the other computer environment in the clipboard of the own environment only when Set is called in the other computer environment. For this reason, the client terminal 100 can determine whether information is transferred in a different computer environment by determining whether information indicating that it is in another computer environment is stored. .

  Further, for example, when it is determined that information indicating that the computer environment is another computer environment is stored, the client terminal 100 rejects an instruction to retrieve data. As described above, when there is a risk of information leakage due to information transfer between the remote computer and the local computer, the client terminal 100 rejects information transfer by copy and paste. For this reason, the client terminal 100 can prevent information leakage while preventing deterioration in convenience.

  Further, for example, when the client terminal 100 rejects an instruction to retrieve data, the client terminal 100 records that the instruction has been rejected, so that information leakage can be prevented while preventing a decrease in convenience.

  For example, when the client terminal 100 records that the instruction to retrieve data is rejected, the client terminal 100 suppresses recording of an instruction including the same data format as that included in the instruction for a predetermined time. For this reason, the client terminal 100 can prevent the same record from being recorded as the log information 112 by performing the retry.

  For example, when it is determined that information indicating that the computer environment is another computer environment is stored, the client terminal 100 executes an instruction to retrieve data and records that the instruction has been executed. . For this reason, the client terminal 100 can prevent information leakage while preventing deterioration in convenience.

  Further, for example, when it is determined that information indicating that the computer environment is another computer environment is stored, the client terminal 100 records the data extracted by an instruction to extract data. For this reason, the client terminal 100 can refer to data that may leak information later.

  In the first embodiment, the case where the information processing program is installed in both the virtual environment and the physical environment has been described. However, the present invention is not limited to this. For example, an information processing program may be installed in a computer environment on which data copied in a different computer environment is pasted. Thus, in a second embodiment, a case where a “copy” instruction is received from a user in a virtual environment when an information processing program is installed in the physical environment will be described.

  First, the functional configuration of the client terminal according to the second embodiment will be described. Similar to the client terminal 100 illustrated in FIG. 3, the client terminal 100 according to the second embodiment includes an input unit 101, an output unit 102, a communication control unit 103, a storage unit 110, and a control unit 120. Here, the description of the input unit 101, the output unit 102, the communication control unit 103, the storage unit 110, and the control unit 120 is the same as the input unit 101, the output unit 102, the communication control unit 103, the storage unit 110, and the control shown in FIG. This is the same as the description of the unit 120.

  Next, a functional configuration of the VM according to the second embodiment will be described. Similar to the VM 200 illustrated in FIG. 6, the VM 200 according to the second embodiment includes a storage unit 210 and a control unit 220. Among these, description of the memory | storage part 210 is the same as that of the memory | storage part 210 shown in FIG.

  The control unit 220 does not have the monitoring unit 224. The description of the control unit 220 is the same as the description of the control unit 220 illustrated in FIG. 6 except that the control unit 220 does not include the monitoring unit 224. That is, for example, like the control unit 120, the control unit 220 controls the execution of an OS that is basic software for managing the entire computer system. Further, for example, the control unit 220 has a function related to the use of the clipboard, like the control unit 120. Further, for example, like the control unit 120, the control unit 220 executes an application process for sharing data stored in the clipboard between different computer environments.

  Next, an operation example of the information processing system according to the second embodiment will be described. FIG. 10 is a diagram for explaining an operation example of the information processing system according to the first embodiment. Here, the PC name of the VM 200 that realizes the virtual environment is “VPC002”, and the PC name of the client terminal 100 that realizes the physical environment is “PC001”.

  As shown in FIG. 10, when an input of a command to copy data is received from the user in the virtual environment (S11), the VPC002-side application calls Set and the data to be set is placed on the clipboard on the VPC002 side. Store (S12). When Set is called in its own environment, the clipboard process on the VPC 002 side transfers data stored in the Set to the client terminal 100 “PC001” (S13).

  In the physical environment, when receiving data from the clipboard process 223, the control unit 120 calls Set and stores the data to be set in the clipboard information 111 (S14). When the control unit 120 calls Set, the storage unit 125a stores the PC name “VPC002” of the transfer target data in the clipboard information 111 (S15).

  Here, when an instruction of “paste” is received from the user in the physical environment (S16), the application on the PC 001 side calls Get (S17). The determining unit 125b refers to the clipboard on the PC001 side and determines that the transfer source PC name “VPC002” is stored in the clipboard (S18).

  Since the PC name “VPC002” is stored in the PC001 clipboard, the execution unit 125c rejects the Get called by the PC001 application and records the data stored in the PC001 clipboard as the original information 113. (S19). Note that the execution unit 125c may execute the process of S20 instead of the process of S19 according to the setting of the user. That is, the execution unit 125c may record the fact as the log information 112 when the application on the PC 001 side extracts and pastes data from the clipboard.

  On the other hand, when an instruction of “paste” is received from the user in the virtual environment (S21), the application on the VPC002 side calls Get (S22), retrieves data from the clipboard on the VPC002 side, and executes paste (S24). .

  Next, effects of the client terminal 100 according to the second embodiment will be described. When an instruction to store data on the clipboard is generated, if the computer environment in which the data exists is another computer environment, the client terminal 100 stores information indicating that the other computer environment is in a predetermined storage area. Store. When an instruction to extract data from the clipboard is generated, the client terminal 100 determines whether or not information indicating that the computer environment is other is stored in a predetermined storage area. If it is determined that information indicating that the computer environment is another computer environment is not stored, the client terminal 100 executes an instruction to retrieve data. For this reason, the client terminal 100 can prevent information leakage while preventing deterioration in convenience.

  Although the embodiments of the present invention have been described so far, the present invention may be implemented in other embodiments besides the above-described embodiments. Therefore, other embodiments will be described below.

  For example, in the first and second embodiments, the case where the data copied to the clipboard is stored together with the information indicating the computer environment that accepted the input of the command for copying the data has been described. This includes a case in which data is stored in the clipboard and information indicating a computer environment that accepts an input of an instruction to copy the data is stored in another storage area. For example, a shared folder may be provided in the client terminal 100, and information indicating that the computer environment is other may be stored in the shared folder. Therefore, here, an operation example in the case of storing information indicating that the computer environment is in another shared folder will be described.

  FIG. 11 is a diagram for explaining an operation example of the information processing system according to the third embodiment. Here, the PC name of the VM 200 that realizes the virtual environment is “VPC002”, and the PC name of the client terminal 100 that realizes the physical environment is “PC001”.

  As shown in FIG. 11, in the virtual environment, when an input of a command to copy data is received from the user (S11), the application on the VPC002 side calls Set, and the data to be set is placed on the clipboard on the VPC002 side. Store (S12). When Set is called in its own environment, the clipboard process on the VPC 002 side transfers data stored in the Set to the client terminal 100 “PC001” (S13).

  In the physical environment, when the clipboard process on the PC001 side receives data from the clipboard process on the VPC002 side, it calls Set and stores the data to be set in the clipboard on the PC001 side (S14). When the clipboard process on the PC 001 side calls Set, the storage unit 125a stores the transfer source PC name “VPC002” in the shared folder (S30).

  Here, when an instruction of “paste” is received from the user in the physical environment (S16), the application on the PC 001 side calls Get (S17). The determination unit 125b refers to the shared folder and determines that the transfer source PC name “VPC002” is stored in the shared folder (S31).

  Since the PC name “VPC002” is stored in the shared folder, the execution unit 125c rejects the Get called by the application on the PC001 side and records the data stored in the clipboard on the PC001 side as the original information 113 (S32). ). Note that the execution unit 125c may execute the process of S33 instead of the process of S32 in accordance with the user setting. That is, the execution unit 125c may record the fact as the log information 112 when the application on the PC 001 side extracts and pastes data from the clipboard.

  On the other hand, when an instruction of “paste” is received from the user in the virtual environment (S21), the application on the VPC002 side calls Get (S22). The determination unit 224b refers to the shared folder of the client terminal 100 and determines that no other PC name is stored in the shared folder (S34). Since no other PC name is stored in the shared folder, the application on the VPC002 side takes out the data from the clipboard on the VPC002 side and executes the paste (S35).

  As described above, the client terminal 100 accepts an input of a command for copying data. The client terminal 100 stores the copied data in a storage area shared by a plurality of applications executed by the computer, together with information indicating a computer environment that has received an input of a command for copying the data. When an instruction to extract data from the storage area is generated, the client terminal 100 determines whether to execute the instruction to extract based on information indicating the computer environment. For this reason, the client terminal 100 can prevent information leakage while preventing deterioration in convenience.

  Further, for example, among the processes described in the first and second embodiments, all or part of the processes described as being automatically performed can be manually performed, or can be manually performed. All or part of the described processing can be automatically performed by a known method. In addition, the processing procedures, control procedures, specific names, and information including various data and parameters shown in the above-described document and drawings can be arbitrarily changed unless otherwise specified.

  Each component of the client terminal 100 and the VM 200 shown in FIGS. 3 and 6 is functionally conceptual and does not necessarily need to be physically configured as illustrated. That is, the specific form of the distribution / integration of the client terminal 100 and the VM 200 is not limited to the illustrated one, and all or a part thereof can be functionally or physically processed in an arbitrary unit according to various loads and usage conditions. Can be distributed and integrated. For example, of the functions of the execution unit 125c illustrated in FIG. 3, the function of recording the log information 112 may be provided to another processing unit.

  In addition, the client terminal 100 and the VM 200 can be realized by installing the functions of the client terminal 100 and the VM 200 in a known information processing apparatus. The known information processing apparatus corresponds to an apparatus such as a personal computer, a workstation, a mobile phone, a PHS (Personal Handy-phone System) terminal, a mobile communication terminal, or a PDA (Personal Digital Assistant).

  FIG. 12 is a diagram illustrating an example of a computer that executes an information processing program. As illustrated in FIG. 12, the computer 300 includes a CPU 301 that executes various arithmetic processes, an input device 302 that receives data input from a user, and a monitor 303. The computer 300 also includes a medium reading device 304 that reads a program or the like from a storage medium, an interface device 305 for connecting to another device, and a wireless communication device 306 for connecting to another device wirelessly. The computer 300 also includes a RAM (Random Access Memory) 307 that temporarily stores various types of information and a hard disk device 308. Each device 301 to 308 is connected to a bus 309.

  The hard disk device 308 stores an information processing program having the same function as the monitoring unit 125 illustrated in FIG. The hard disk device 308 stores various data for realizing the information processing program.

  The CPU 301 reads each program stored in the hard disk device 308, develops it in the RAM 307, and performs various processes. Further, these programs can cause the computer to function as the monitoring unit 125 shown in FIG.

  Note that the above information processing program is not necessarily stored in the hard disk device 308. For example, the computer 300 may read and execute a program stored in a computer-readable recording medium. As the computer-readable recording medium, for example, a portable recording medium such as a CD-ROM, a DVD disk, and a USB memory, a semiconductor memory such as a flash memory, a hard disk drive, and the like are supported. Further, the program may be stored in a device connected to a public line, the Internet, a LAN (Local Area Network), a WAN (Wide Area Network), etc., and the computer 300 may read and execute the program therefrom. good.

  The following supplementary notes are further disclosed with respect to the embodiments including the above examples.

(Supplementary note 1)
Accept input of instruction to copy data,
Storing the copied data in a storage area shared by a plurality of applications executed by the computer together with information indicating a computer environment that accepts an input of an instruction to copy the data;
An information processing program for executing a process of determining whether or not to execute the instruction to be extracted based on information indicating the computer environment when an instruction to extract data from the storage area is generated.

(Additional remark 2) When the instruction | command which stores data in the said storage area generate | occur | produces, if the computer environment where this data exists is another computer environment, the said process to store will show the information which shows another computer environment Store it in the storage area,
The determination process determines whether or not the information is stored in the storage area when an instruction to extract data from the storage area is generated,
The information processing program according to appendix 1, wherein an instruction to retrieve the data is executed when it is determined that the information is not stored by the determination process.

(Supplementary note 3) The information processing program according to supplementary note 1 or 2, wherein the storing process stores information indicating the data and the computer environment in the clipboard as the storage area.

(Additional remark 4) When it determines with the said information being memorize | stored by the said determination process in the said computer, the process which rejects the command which takes out the said data is further performed, The additional remarks 1-3 characterized by the above-mentioned The information processing program as described in any one.

(Supplementary note 5) The information processing program according to supplementary note 4, wherein when the instruction to retrieve the data is rejected to the computer, a process for recording the rejection of the instruction is further executed.

(Additional remark 6) The said process to record suppresses recording of the said instruction | command containing the data format same as the data format contained in this instruction for a predetermined time, when recording that the said instruction was rejected. The information processing program according to appendix 4 or 5.

(Supplementary note 7) When it is determined that the information is stored in the computer by the determination process, an instruction to retrieve the data is executed, and a process of recording the execution of the instruction is further performed The information processing program according to any one of appendices 1 to 3, wherein the information processing program is executed.

(Supplementary note 8) When the computer determines that the information is stored by the determination process, the computer further executes a process of recording the data extracted by an instruction to extract the data The information processing program according to any one of appendices 1 to 7.

(Supplementary Note 9) A reception unit that receives an input of a command to copy data;
A storage unit that stores the copied data in a storage area shared by a plurality of applications executed by the computer together with information indicating a computer environment that accepts an input of an instruction to copy the data;
An information processing apparatus comprising: a determination unit that determines whether or not to execute the instruction to be extracted based on information indicating the computer environment when an instruction to extract data from the storage area is generated.

(Additional remark 10) When the command which stores data in the said storage area generate | occur | produces, if the computer environment where this data exists is another computer environment, the said storage part will memorize | store the information which shows another computer environment Store in the area,
The determination unit determines whether or not the information is stored in the storage area when an instruction to extract data from the storage area is generated,
The information processing apparatus according to appendix 9, further comprising an execution unit that executes an instruction to retrieve the data when the determination unit determines that the information is not stored.

(Additional remark 11) The said storage part stores the information which shows the said data and the said computer environment in the said clipboard as said predetermined | prescribed storage area, Information processing apparatus of Additional remark 9 or 10 characterized by the above-mentioned.

(Additional remark 12) The said execution part further performs the process which rejects the command which takes out the said data, when it determines with the said information being memorize | stored by the said determination part. The information processing apparatus according to any one of the above.

(Supplementary note 13) The information processing apparatus according to supplementary note 12, wherein the execution unit further executes a process of recording that the instruction is rejected when the instruction to retrieve the data is rejected.

(Supplementary note 14) When the execution unit records that the instruction is rejected, the execution unit suppresses recording of the instruction including the same data format as that included in the instruction for a predetermined time. The information processing apparatus according to appendix 12 or 13.

(Supplementary Note 15) If the determination unit determines that the information is stored, the execution unit further executes a process of executing an instruction to retrieve the data and recording that the instruction has been executed. The information processing apparatus according to any one of appendices 9 to 11, wherein the information processing apparatus is executed.

(Supplementary Note 16) When the determination unit determines that the information is stored, the execution unit further executes a process of recording the data extracted by an instruction to extract the data The information processing apparatus according to any one of appendices 9 to 15.

(Supplementary note 17) An information processing method executed by a computer,
Accept input of instruction to copy data,
Storing the copied data in a storage area shared by a plurality of applications executed by the computer together with information indicating a computer environment that accepts an input of an instruction to copy the data;
An information processing method for determining whether or not to execute the instruction to be extracted based on information indicating the computer environment when an instruction to extract data from the storage area is generated.

(Supplementary Note 18) When an instruction for storing data is generated in the storage area, if the computer environment in which the data exists is another computer environment, the storing process stores information indicating the other computer environment. Store it in the storage area,
The determination process determines whether or not the information is stored in the storage area when an instruction to extract data from the storage area is generated,
18. The information processing method according to appendix 17, wherein an instruction to retrieve the data is executed when it is determined that the information is not stored by the determination process.

(Supplementary note 19) The information processing method according to supplementary note 17 or 18, wherein in the storing process, the data and information indicating the computer environment are stored in the clipboard as the predetermined storage area.

(Supplementary note 20) Any one of Supplementary notes 17 to 19, wherein the process to be executed rejects an instruction to retrieve the data when it is determined that the information is stored by the determination process. Information processing method described in one.

(Supplementary note 21) The information processing method according to supplementary note 20, wherein when the instruction to retrieve the data is rejected, the process to be executed records that the instruction is rejected.

(Supplementary note 22) The recording process is characterized in that, when recording that the instruction is rejected, the recording of the instruction including the same data format as that included in the instruction is suppressed for a predetermined time. The information processing method according to appendix 20 or 21,

(Supplementary note 23) The process to be executed is to execute an instruction to retrieve the data and record that the instruction has been executed when it is determined that the information is stored by the determination process. The information processing method according to any one of supplementary notes 17 to 19, characterized by:

(Additional remark 24) The said process to perform records the said data taken out by the command which takes out the said data, when it determines with the said information being memorize | stored by the said determination process, Additional remarks 17- 24. The information processing method according to any one of 23.

DESCRIPTION OF SYMBOLS 1 Information processing system 5 Network 10 Data center 11 Server apparatus 12 Communication control part 13 Hypervisor 100 Client terminal 101 Input part 102 Output part 103 Communication control part 110 Storage part 111 Clipboard 112 Log information 113 Original information 114 VM information 120 Control part 123 Screen generator 125 Monitoring unit 125a Storage unit 125b Determination unit 125c Execution unit 210 Storage unit 211 Clipboard 212 Log information 213 Original information 220 Control unit 224 Monitoring unit 224a Storage unit 224b Determination unit 224c Execution unit 300 Computer 301 CPU
302 Input Device 303 Monitor 304 Medium Reading Device 305 Interface Device 306 Wireless Communication Device 307 RAM
308 Hard disk device 309 Bus

Claims (10)

On the computer,
Accept input of instruction to copy data,
Storing the copied data in a storage area shared by a plurality of applications executed by the computer together with information indicating a computer environment that accepts an input of an instruction to copy the data;
An information processing program for executing a process of determining whether or not to execute the instruction to be extracted based on information indicating the computer environment when an instruction to extract data from the storage area is generated. In the storing process, when an instruction to store data in the storage area is generated, if the computer environment in which the data exists is another computer environment, information indicating the other computer environment is stored in the storage area. And
The determination process determines whether or not the information is stored in the storage area when an instruction to extract data from the storage area is generated,
The information processing program according to claim 1, wherein an instruction to retrieve the data is executed when it is determined that the information is not stored by the determination process.   The information processing program according to claim 1, wherein the storing process stores the data and information indicating the computer environment in the clipboard as the storage area.   The process for rejecting an instruction for retrieving the data is further executed when it is determined that the information is stored in the computer by the determination process. Information processing program described in 1.   5. The information processing program according to claim 4, further comprising the step of recording the fact that the command is rejected when the computer rejects the command to retrieve the data.   5. The recording process according to claim 4, wherein when the fact that the instruction is rejected is recorded, the recording of the instruction including the same data format as that included in the instruction is suppressed for a predetermined time. Or the information processing program of 5.   If it is determined that the information is stored in the computer, the computer executes an instruction to retrieve the data, and further executes a process of recording that the instruction has been executed. The information processing program according to any one of claims 1 to 3.   The process for recording the data extracted by an instruction to extract the data when the information is determined to be stored in the computer by the determination process. The information processing program according to any one of 7 above. A reception unit that receives input of an instruction to copy data;
A storage unit that stores the copied data in a storage area shared by a plurality of applications executed by the computer together with information indicating a computer environment that accepts an input of an instruction to copy the data;
An information processing apparatus comprising: a determination unit that determines whether or not to execute the instruction to be extracted based on information indicating the computer environment when an instruction to extract data from the storage area is generated. An information processing method executed by a computer,
Accept input of instruction to copy data,
Storing the copied data in a storage area shared by a plurality of applications executed by the computer together with information indicating a computer environment that accepts an input of an instruction to copy the data;
An information processing method for determining whether or not to execute the instruction to be extracted based on information indicating the computer environment when an instruction to extract data from the storage area is generated.

Images