JP3189894B2 - Virtual computer system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a virtual computer system in which a plurality of operating systems (hereinafter, referred to as OS) operate on one computer.

[0002]

2. Description of the Related Art A file protection method is used to prevent a file from being misused, erroneously modified, and prevented from being accessed by another person who has limited access to a specific file. In the conventional file protection method, a specific file or a part of a specific file is provided by attaching a symbol, label, etc. to each file to identify each file from other files and providing access restrictions according to the symbols and labels. Erroneous processing and correction was prevented.

[0003]

However, the conventional file protection method has the following problems.
In a virtual machine system in which a plurality of OSs share a file and operate on one system, when each OS shares one storage device (disk), each OS individually assigns a symbol or label to a file in the disk. Can be attached.
Therefore, it is not possible to prevent file destruction that occurs when each OS erroneously stores the same size file having the same symbol or label at the same address on the same disk.

SUMMARY OF THE INVENTION The present invention has been made in view of the above-mentioned problems of the conventional technology, and has been developed in a virtual computer system in which a plurality of operating systems share files and operate on one system. However, an object of the present invention is to realize a file protection method capable of preventing access to a data file of another OS and a virtual computer system based on the file protection method.

[0005]

A virtual computer system according to the present invention comprises a central processing unit, a main storage device for storing a plurality of operating systems and application programs, and a plurality of disk devices for respectively storing files. A virtual computer system in which a plurality of operating systems operate by sharing a plurality of files, and an input / output processing device accommodating a plurality of channels connected to the central processing unit and the main storage device via a system bus. Each file stored in the plurality of disk devices is set with an OS number indicating an operating system capable of accessing the file, and the central processing unit reads a predetermined file from a predetermined operating system. Upon detecting an I / O instruction containing a request to access, The input / output processing unit defines input / output for executing the program, sends an I / O control word to which an OS number indicating a predetermined operating system is assigned, and stores a predetermined file in the disk device. Is set only when the OS number set in the I / O control word matches the OS number set in the I / O control word.
The process according to the / O command is continued, and the OS number assigned to the I / O control word is received via a predetermined channel accommodated in the input / output device.

A virtual machine system according to another aspect of the present invention includes a central processing unit, a main storage device for storing a plurality of operating systems and application programs, and a plurality of disk devices for storing files, respectively. Operating system in which a plurality of files are shared and operates, comprising an input / output processing device accommodating a plurality of channels connected to the central processing unit and the main storage device via a system bus. Each file stored in the plurality of disk devices is set with an OS number indicating an operating system capable of accessing the file, and the central processing unit accesses a predetermined file from a predetermined operating system. When an I / O instruction containing a request is detected, A disk device that defines an input / output for executing a program to the input / output processing device, sends an I / O control word to which an OS number indicating a predetermined operating system is added, and stores a predetermined file, Is set only when the OS number set in the I / O control word matches the OS number set in the I / O control word.
If the OS number set in the file does not match the OS number assigned to the I / O control word, an error status is output to the central processing unit. An OS number assigned to the I / O control word is received via a predetermined channel accommodated in the output device.

In any of the above, a peripheral control device is further provided between a plurality of channels and a plurality of disk devices, and the disk device assigns the I / O control word via the peripheral control device. The received OS number may be received.

[0008]

[0009]

[0010]

According to the present invention, when the OS accesses a file of a peripheral device, the peripheral device permits access only when the OS of the access request source matches the OS number to which the file belongs, and detects a mismatch. Since the error is notified to the CPU, a file used by another OS is not erroneously accessed.

[0012]

Next, an embodiment of the present invention will be described with reference to the drawings.

FIG. 1 is a block diagram showing the configuration of an embodiment of a system for implementing a file protection system according to the present invention.

In this embodiment, a system bus 0, a central processing unit (CPU) 1, a main storage unit (MMU) 2 for storing a plurality of OSs and application programs, an input / output processing unit (IOP) 3, A plurality of channels 4-1 to 4-n accommodated in the input / output processing device 3 and a peripheral control device (P
CU) 5 and a plurality of disk devices 6-1 to 6-n. Files 2-1 to 8-n are stored in directories 7-1 to 7-n of a plurality of disk devices 6-1 to 6-n.
n is stored.

The central processing unit 1 is connected to the main storage unit 2 and the input / output processing unit 3 via the system bus 0, and executes the OS and application programs stored in the main storage unit 2.

When the main storage device 2 detects an input / output (I / O) command, it prepares a channel program, in this embodiment, a channel program 10 in response to the input / output (I / O) command.
An I / O control word for performing I / O processing is sent to the input / output processing device 3.

The input / output processing device 3 has a channel program 1
0 to perform input / output processing between the main storage device 2 and the peripheral control device 5.

The peripheral control device 5 includes a plurality of channels 4-1.
To 4-n and a plurality of disk devices 6-1
6-n, and executes command execution and data transfer control.

The channel program 10 is composed of a program described in a command format and a seek data format. FIG. 2 is a diagram showing the structure of each data used in this embodiment. 2A and 2B show the structure of a command format 12 and a seek data format 13 constituting the channel program 10, and FIG. 2C shows the directories 7 of the disk devices 6-1 to 6-n. -1 to 7-n
FIG. 2D shows an I / O control word 1 output from the main storage device 2 to the input / output processing device 3.
5 is a diagram illustrating a format of No. 5. FIG.

The command format 12 is composed of a command type, a device number, an access error (AE), a flag, a channel command for designating an operation to be performed on a channel, and data indicating a record number. The corresponding seek data format 13 is composed of an address and a count indicating the number of bytes to be transferred. In the embodiment shown in FIG. 1, a state in which the seek data 11 is read out in the command format 12 and the seek data format is shown.

The data 14 of each directory is composed of an address and a count of each directory, an OS number corresponding thereto, and a VMID # in the illustrated example. The I / O control word 15 is a connect type, A
E, OS number, channel number and addressing mode.

The above-mentioned OS numbers indicate a plurality of OSs. In this embodiment, the directory data 14 and the I / O control words 15 are given OS numbers. The directory data 14 indicates an OS that can access the file, and the OS number assigned to the I / O control word indicates the OS that has generated the I / O command. Is allowed.

Each of the plurality of disk devices 6-1 to 6-n accesses the file 8 specified by the seek data 11 among the plurality of files 8-1 to 8-n.
When the inconsistency between the OS requesting the access and the OS number of the directory corresponding to the file 8 is detected, an error status is notified to the OS and the I / O processing is terminated. FIG.
Is a flowchart showing the operation of this embodiment, and the operation of this embodiment will be described below with reference to FIG.

On the central processing unit 1, a plurality of OSs and application programs operate. When the central processing unit 1 detects an I / O command from a predetermined OS (step S
1) Prepare a channel program 10 corresponding to the I / O command in the main storage device 2 (step S2), and send an I / O control word 15 to the input / output processing device 3 (step S3).
The input / output processing device 3 notifies the peripheral control device 5 connected to the channel (for example, 4-1) corresponding to the channel number included in the I / O control word 15 that there is an I / O request (step). S4).

Peripheral controller 5 that has received an I / O request
Requests the input / output processing device 3 to send a command via the channel (4-1) (step S5).

The input / output processing device 3 has a channel program 1
0, the command is read from the OS, and the OS in the I / O control word 15 is read.
A number is added and sent to the peripheral control device 5 (step S
6).

The peripheral control device 5 decodes the command and requests the input / output processing device 3 for seek data (step S).
7).

The input / output processing device 3 has a channel program 1
The seek data 11 designated by the address / count of 0 is read and sent to the peripheral control device 5 (step S8).

The peripheral controller 5 sends the seek data 11 and the OS number to the disk device (for example, 6-1) corresponding to the device number in the command (step S9).

The disk device (6-1) searches the directory (7-1) for an entry corresponding to the seek data 11. If there is no corresponding entry, a new entry is registered. If there is a corresponding entry, it is compared with the OS number of the seek data 11 (step S10). Thereafter, as a result of the comparison in step S10, it is confirmed whether or not the OS numbers match (step S11). If the OS numbers match, the disk device (6-1) executes I / O processing (step S12). If they do not match, an error status is returned to the peripheral control device 5 (step S13).

The peripheral controller 5 notifies the central processor 1 of the error status via the CH 4 and the input / output processor 3.

[0032]

As described above, according to the present invention, when a plurality of OSs access a file of a disk device in an environment operating on one system, a file from an OS other than the OS that created the file is used. By detecting the request, there is an effect that it is possible to prevent a data file of another OS from being accessed by mistake.

[Brief description of the drawings]

FIG. 1 is a block diagram showing the configuration of an embodiment of a system for implementing a file protection method according to the present invention.

FIGS. 2A and 2B are diagrams showing the structure of each data used in the embodiment shown in FIG. 1; FIGS. 2A and 2B show the structure of a command format 12 and a seek data format 13 constituting a channel program 10; , (C) shows each disk device 6-
6 shows the structure of data 14 indicating directories 7-1 to 7-n 1 to 6-n, and FIG. 9D shows the format of an I / O control word 15 output from the main storage device 2 to the input / output processing device 3. FIG.

FIG. 3 is a flowchart showing an operation of the embodiment shown in FIG. 1;

[Explanation of symbols]

 0 System bus 1 Central processing unit 2 Main storage unit 3 I / O processing unit 4-1 to 4-n Channel 5 Peripheral control unit 6-1 to 6-n Disk unit 7-1 to 7-n Directory 8-1 to 8 −n file 10 channel program 11 seek data 12 command format 13 seek data format 14 data indicating directory 15 I / O control word

Claims (3)

(57) [Claims] 1. A system comprising: a central processing unit; a main storage device for storing a plurality of operating systems and application programs; and a plurality of disk devices for storing files, respectively, wherein a plurality of operating systems share a plurality of files. A central processing unit and an input / output processing device accommodating a plurality of channels connected to a main storage device via a system bus, and stored in the plurality of disk devices. An OS number indicating an operating system capable of accessing the file is set in each file, and the central processing unit includes an I / O including a request from a predetermined operating system to access a predetermined file.
When an instruction is detected, an input / output for defining an input / output for executing a program in the input / output processing device and an OS number indicating a predetermined operating system are added.
The disk device that sends out the control word and stores the predetermined file, according to the I / O command, only when the OS number set in the file matches the OS number assigned to the I / O control word. A virtual computer system which continues the above processing and receives an OS number assigned to the I / O control word via a predetermined channel accommodated in the input / output device. 2. A system comprising a central processing unit, a main storage device for storing a plurality of operating systems and application programs, and a plurality of disk devices for storing files, respectively, wherein a plurality of operating systems share a plurality of files. A central processing unit, a main storage device, and an input / output processing device for accommodating a plurality of channels connected via a system bus, and stored in the plurality of disk devices. An OS number indicating an operating system that can access the file is set in each file, and the central processing unit includes an I / O including a request from a predetermined operating system to access a predetermined file.
When an instruction is detected, an I / O to which an input / output for executing a program is defined in the input / output processing device and to which an OS number indicating a predetermined operating system is assigned.
The disk device that sends out the control word and stores the predetermined file, according to the I / O command, only when the OS number set in the file matches the OS number assigned to the I / O control word. If the OS number set in the file does not match the OS number assigned to the I / O control word, an error status is output to the central processing unit, and the file is stored in the input / output device. I through a predetermined channel
A virtual computer system for receiving an OS number assigned to a / O control word. 3. The virtual computer system according to claim 1, further comprising a peripheral control device provided between a plurality of channels and a plurality of disk devices, wherein the disk device is a peripheral control device. Receiving the OS number assigned to the I / O control word via a virtual machine.