JP4422559B2 - Program execution system, program execution method, and data management program - Google Patents

Description

  The present invention relates to a program execution device, a program execution method, and a program execution program.

  In recent years, the use of computers and networks in lessons has been rapidly progressing in the classroom. In addition to computer operation instruction, effective use of computers for learning, information morals and copyrights that should be considered in network communication, etc. Learning across a wide range of fields such as understanding related laws and regulations.

  However, regarding the dangers of computer networks, such as computer viruses, no matter how much the teacher explains in words, if students do not experience the actual situation of virus infection, students will have a real danger. Not recognized as. In some schools, there are cases where a teacher-created virus-like program is actually sent to students by e-mail, but this may flow out of school beyond the scope of the class, making the program harmless. Even if something is wrong, there is a problem that it may cause unnecessary anxiety to the other party or develop into a virus riot.

  Even if it is possible to detect and remove virus transmissions at gateways, etc., there is a possibility that, for example, the virus program received by students in the class may be taken out of school on an external storage device (flexible disk etc.) and transferred from a home computer. It is difficult to prevent the leakage of virus programs with existing technologies.

  In order to solve the above-described problems caused by the prior art, the present invention provides a program execution apparatus capable of selectively executing a program only in a predetermined environment (for example, a specific application is installed), and program execution It is an object to provide a method and a program execution program.

  In order to solve the above-described problems and achieve the object, a program execution system according to the present invention includes a client terminal group, a program providing terminal that provides a predetermined program to the client terminal group, and the client terminal group. A program execution system including a management terminal that manages transmission / reception of data to / from the program providing terminal, wherein the management terminal determines whether or not the program can be executed based on an environment of the execution source A transmission unit for transmitting a template including a determination module and the program executable only when it is determined to be executable by the determination module, between the client terminals, or between the client terminal and the program provision Sending / receiving the template to / from the terminal Tracking means for tracking a situation, and the program providing terminal includes receiving means for receiving the template from the management terminal, and transmitting means for attaching the template to an e-mail and transmitting the template to the client terminal. The client terminal extracts the e-mail transmitted from the program providing terminal, and extracts the determination module and the program from the template attached to the e-mail received by the receiving means. It comprises: extraction means; first execution means for executing the determination module; and second execution means for executing the program when the determination module determines that execution is possible.

  According to the present invention, the program extracted from the attached file of the electronic mail is executed only when the execution source environment satisfies the predetermined condition.

  In the program execution system according to the present invention, in the above invention, the client terminal further displays a message indicating that the program cannot be executed when the determination module determines that the program cannot be executed. A display means is provided.

  According to the present invention, when the environment of the execution source does not satisfy the predetermined condition, the program is not executed and only an error to that effect is displayed.

  In the program execution system according to the present invention as set forth in the invention described above, the determination module determines whether or not a specific program is installed in the client terminal.

  According to the present invention, the program extracted from the attached file of the electronic mail is executed only when a specific program is installed at the execution source.

  The program execution method according to the present invention includes a client terminal group, a program providing terminal that provides a predetermined program to the client terminal group, and data transmission / reception between the client terminal group and the program providing terminal. A determination module that determines whether or not the program can be executed based on an environment of the execution source in the management terminal, and a determination module that determines whether or not the program can be executed in the management terminal. A transmission step of transmitting a template including the program that can be executed only when it is determined to be executable by the program providing terminal, and the template between the client terminals or between the client terminal and the program providing terminal. Send / receive status Tracking step, and in the program providing terminal, including a receiving step of receiving the template from the management terminal, and a transmitting step of attaching the template to an e-mail and transmitting the template to the client terminal, In the client terminal, a receiving step of receiving the e-mail attached with the template from the program providing terminal, and extracting the determination module and the program from the template attached to the e-mail received in the receiving step And a second execution step of executing the program when it is determined that the determination module is executable.

  According to the present invention, the program extracted from the attached file of the electronic mail is executed only when the execution source environment satisfies the predetermined condition.

  In the program execution method according to the present invention, in the above invention, the client terminal further displays a message indicating that the program cannot be executed when the determination module determines that the program cannot be executed. A display step is included.

  According to the present invention, when the environment of the execution source does not satisfy the predetermined condition, the program is not executed and only an error to that effect is displayed.

  In the program execution method according to the present invention as set forth in the invention described above, the determination module determines whether or not a specific program is installed in the client terminal.

  According to the present invention, the program extracted from the attached file of the electronic mail is executed only when a specific program is installed at the execution source.

  Further, a data management program according to the present invention includes a determination module that determines whether or not the program can be executed based on an environment of the execution source, to a computer serving as a management terminal constituting the program execution system, and the determination module A transmission step of transmitting a template including the program that can be executed only when it is determined to be executable to the program providing terminal; and the template between the client terminals or between the client terminal and the program providing terminal. And a tracking step for tracking a transmission / reception state.

  According to the program execution device, the program execution method, and the program execution program according to the present invention, there is an effect that the program can be selectively executed only under a predetermined environment.

  Exemplary embodiments of a program execution device, a program execution method, and a program execution program according to the present invention will be explained below in detail with reference to the accompanying drawings.

  FIG. 1 is an explanatory diagram showing the overall configuration of the experience learning system according to the embodiment of the present invention. As shown in the figure, this system has a configuration in which one server 100 and a plurality of clients 101 and 102 are connected via a LAN. Here, it is assumed that a school is specifically assumed as an introduction destination of the above system, and the client 101 is assigned to each student and the client 102 is assigned to each teacher.

  In addition, the server 100 and the clients 101 and 102 are installed with “Tatsuwaru Net Teen's @ Friend” (hereinafter simply referred to as “Tatsuwaru Net”), which is an educational groupware developed by the present applicant. To do. In addition to functions that support the whole school life such as e-mails and bulletin boards, “Tsuwaru Net” provides various templates (“practical templates”) that are useful for experiential learning such as virus mails and chain mails.

  For example, as a template for virus experience, a file “OMIKUJI.EXE” is prepared which is used as an attachment to a normal electronic mail. This “OMIKUJI.EXE” is a self-extracting executable file, and includes the following three files.

(1) TSTSEXT. INI
A setting file that specifies a file to be executed immediately after execution of “OMIKUJI.EXE” (immediately after self-decompression). Here, specifically, “TSTWEXP.EXE” is designated as the file.

(2) TSTWEXP. EXE
A program that checks whether or not "Tataru Net" is installed and executes "PROG.EXE" only when it is installed. Note that in an environment where “Tataru Net” is not installed, an error screen as shown in FIG. 2 is only displayed.

(3) PROG. EXE
A pseudo virus program created with Flash. Here, the so-called “Omikuji Software” is imitated. When you draw an Omikuji on the screen, the contents (fortune, etc.) of the Omikuji are displayed, and then a window that opens one after another as if it were infected with a virus ( A message screen (FIG. 4) indicating that the file has been deleted is displayed. Finally, this is a demonstration, and a message is displayed to remind you not to open the attachment easily (Figure 5).

  For example, “Taro Koyama” who is the user (ie, teacher) of the client 102 attaches “OMIKUJI.EXE” downloaded from the server 100 to the e-mail, and “Ichiro Agawa” who is the user (ie, student) of the client 101. In accordance with the setting of “TSTSEXT.INI”, first, the client 101 executing this checks whether or not “Tatsuru Net” is installed with “TSTWEXP.EXE”. Since “Tatsuru Neru” exists in the client 101, “PROG.EXE” is executed subsequent to “TSTWEXP.EXE”.

  In addition, when “Agawa Ichiro” forwards the above e-mail to his friend “Boba Jiro”, “Tatari Net” is also present on the client 101 of “B Jiro”, so the pseudo virus program is executed in the same manner. The On the other hand, even if “Akawa Ichiro” transfers the above e-mail to the PC 103 at the home of a friend “C Tasaburo” outside the school (for example, on the Internet to which the system is connected), As long as “Tataru Net” is not installed, nothing happens except the error screen shown in FIG.

  Thus, by creating a template so that it cannot be executed in an environment without specific groupware, execution of a pseudo virus program or the like in the template can be limited to the inside of this system. Although it is not possible to prevent the program from spreading beyond the lesson frame itself, it may be said that at least the execution of the program can be limited to an environment where “Tatsuru Net” is installed. Note that a device that receives and executes “OMIKUJI.EXE”, that is, in the above example, the client 101 and the PC 103 correspond to the program execution device according to the present invention.

  Next, FIG. 6 is an explanatory diagram showing an example of a hardware configuration of each device constituting the experience learning system shown in FIG. For convenience of explanation, it is assumed that the server 100, the clients 101 and 102, and the PC 103 all have the same hardware configuration.

  In the figure, reference numeral 601 denotes a CPU that controls the entire apparatus, 602 denotes a ROM that stores basic input / output programs, and 603 denotes a RAM that is used as a work area of the CPU 601.

  Reference numeral 604 denotes an HDD (hard disk drive) that controls reading / writing of data with respect to the HD (hard disk) 605 according to the control of the CPU 601, and reference numeral 605 denotes an HD that stores data written according to the control of the HDD 604. Yes. Reference numeral 606 denotes an FDD (flexible disk drive) that controls reading / writing of data with respect to the FD (flexible disk) 607 according to the control of the CPU 601, and detachable FD that stores data written according to the control of the FDD 606. Respectively.

  Reference numeral 608 denotes a CD-RW drive that controls reading / writing of data to / from a CD-RW, CD-R, or CD-ROM 609 according to the control of the CPU 601, and 609 is read / written according to the control of the CD-RW drive 608. A removable CD-RW, CD-R, or CD-ROM for storing data is shown.

  Reference numeral 610 denotes a cursor, menu, window, or display for displaying various data such as characters and images, 611 denotes a keyboard having a plurality of keys for inputting characters, numerical values, various instructions, and the like, and 612 denotes various types. A mouse for selecting and executing instructions, selecting a processing target, moving a mouse pointer, and the like is shown.

  Reference numeral 613 denotes a network I / F that is connected to a LAN or the Internet via a communication cable 614 and functions as an interface between the network and the CPU 601, and 600 denotes a bus for connecting the above-described units.

  Next, FIG. 7 is an explanatory diagram functionally showing the configuration of the experience learning system shown in FIG. In the figure, reference numerals 700 a to 700 e denote functional units on the server 100, reference numerals 701 a to 701 d denote functional units on the client 101, and reference numerals 702 a to 702 c denote functional units on the client 102. Note that each unit shown in the figure is realized by the CPU 601 and the RAM 603 that execute “Tetsuru Net” unless otherwise specified below.

  In the figure, reference numeral 700a denotes a template management unit, which is a functional unit that holds various templates used for experiential learning. A template reading unit 700b is a functional unit that receives a request from the client 102, reads a template and its attribute information held in the template management unit 700a, and transmits them to the requesting client 102.

  Reference numeral 700c denotes a mail management unit, which is a functional unit that holds e-mail data transmitted and received by a user of this system. The email is stored in the mailbox of the user who sent or received the email.

  A mail receiving unit 700d is a functional unit that receives an e-mail transmitted from inside and outside the system and saves the data in the user's mailbox designated as the destination (the destination is the main address). If the user is outside the system, the mail is transferred to a gateway (not shown)). A mail transmission unit 700e is a functional unit that receives a request from the client 101 and transmits data in the user's mailbox to the request source.

  Although the description will be mixed, the function of the client 102 will be described next. Reference numeral 702a denotes a template reading unit on the client 102 side, which is a functional unit that requests the template reading unit 700b on the server 100 side to acquire a template and attribute information held in the template management unit 700a.

  Reference numeral 702b denotes an input / output unit, which is a functional unit that displays screens such as those shown in FIGS. 8 and 9 on the display 610 and receives designation of a template that the user (here, a teacher) wants to use. The screen of FIG. 9 is displayed when the “practice” button 800 is pressed on the screen of FIG. At this time, the input / output unit 702b instructs the template reading unit 702a to inquire the template reading unit 700b on the server 100 side for the attribute information of all templates on the server 100. Then, the attribute information acquired from the server 100 is displayed in a list in the template list area 900 of FIG.

  In the figure, as the attribute information, specifically, “heading”, “tool”, and “description” are illustrated. “Tool” indicates which of the various tools (programs) provided by “Tataru Net” is a tool that can use the template. For example, “virus mail” in the figure is a template for “mail”, that is, a template that can be used in a program for sending and receiving electronic mail. In addition, there are various tools such as “Bulletin Board” and “Questionnaire”, as shown in the figure, and various templates are prepared for each of them, but here they are not directly related to the present invention. Description is omitted.

  When an OK button 901 in the figure is pressed, the input / output unit 702b that detects this is instructed to the template reading unit 702a to acquire the template currently selected from the server 100. For example, if the currently selected template is “virus mail”, the mail template itself attached with the corresponding fortune-telling program is downloaded from the server 100 to the client 102.

  Thereafter, the input / output unit 702b displays a mail creation screen and allows the user to specify necessary items for transmitting the template attached to the e-mail. As the attached file, the template downloaded above is set by the input / output unit 702b, so that the user only has to input the mail address.

  Returning to the description of FIG. 7, a mail transmission unit 702 c receives an instruction from the input / output unit 702 b and creates an electronic mail having the content specified on the mail creation screen. This is a functional unit that transmits to the mail receiving unit 700d.

  Next, functions of the client 101 will be described sequentially. First, a mail receiving unit 701a is a functional unit that requests the mail sending unit 700e of the server 100 to send an e-mail in the mailbox and receives the sent e-mail.

  Next, reference numeral 701b denotes a program execution unit, which includes an attached file (here, “OMIKUJI.EXE”) received by the mail receiving unit 701a, or an execution file (“PROG.EXE”) in the file. It is a functional part to be executed.

  Next, reference numeral 701c denotes a program execution possibility determination unit, which is a functional unit that determines whether a specific program in an attached file executed (decompressed) by the program execution unit 701b may be executed. That is, it is checked whether or not “Tatsuru Net” is installed by referring to the registry of the client 101 and the like, and if “Tataru Net” is installed, it is determined to be executable, and if it is not installed, it is determined to be non-executable. Only when it is executable, the program execution unit 701b is instructed to execute the program. The program execution feasibility determination unit 701c is specifically realized by the CPU 601 that executes the above-mentioned “OMIKUJI.EXE” (particularly “TSTWEXP.EXE” in the above).

  Next, reference numeral 701d denotes an input / output unit that receives an instruction to execute an attached file from a user and starts the program execution unit 701b, or sequentially displays the screens shown in FIGS. 3 to 5 delivered from the program execution unit 701b. 610 is a functional unit that displays on the screen.

  Next, FIG. 10 is a flowchart showing the procedure of virus mail transmission processing in the client 102. When the input / output unit 702b of the client 102 detects that the “practice” button 800 is pressed on the screen of FIG. 8 (“practice” instruction is present) (step S1001: Yes), an instruction from the input / output unit 702b is given. The received template reading unit 702a acquires attribute information of all templates in the template management unit 700a (reads attribute information) from the template reading unit 700b of the server 100 (step S1002). Then, the input / output unit 702b displays a list of these attribute information as shown in FIG. 9 (step S1003).

  Next, when the input / output unit 702b detects that the template selection instruction, specifically, the OK button 901 has been pressed on the screen of FIG. 9 (step S1004: Yes), the instruction from the input / output unit 702b is received. The template reading unit 702a acquires (template reading) the template data selected when the button is pressed from the template reading unit 700b of the server 100 (step S1005). Then, the input / output unit 702b displays an e-mail creation screen with the template as an attached file (step S1006).

  Next, when the input / output unit 702b detects that there is an email transmission instruction on the screen (step S1007: Yes), the email transmission unit 702c that receives the instruction from the input / output unit 702b is designated on the screen. An e-mail with the contents is created and transmitted to the server 100 (step S1008). The transmitted mail is received by the mail receiving unit 700d of the server 100 and stored in the user's mailbox designated as the destination in the mail management unit 700c.

  Next, FIG. 11 is a flowchart showing a procedure of virus mail reception processing and attached file execution processing in the client 101. When the input / output unit 701d of the client 101 detects a mail reception instruction from the user (step S1101: Yes), the mail reception unit 701a that has received the instruction from the input / output unit 701d receives the above instruction from the mail transmission unit 700e of the server 100. An electronic mail addressed to the user (mail stored in the user's mailbox in the mail management unit 700c) is acquired (step S1102).

  Thereafter, when the input / output unit 701d detects an execution instruction of “OMIKUJI.EXE” attached to the e-mail (step S1103: Yes), the program execution unit 701b receiving the instruction from the input / output unit 701d Is executed (decompressed) (step S1104). Note that the files extracted from “OMIKUJI.EXE” by this decompression (here, “TSTSEXT.INI”, “TSTWEX.EXE”, and “PROG.EXE”) are temporarily stored in a predetermined temporary folder. .

  Next, the program execution feasibility determination unit 701c realized by “TSTWEXP.EXE” extracted from “OMIKUJI.EXE” confirms the installation status of “Tatsuru Net” in this client 101 (Step S1105). If "Net" is installed, it can be executed (step S1106: Yes), and if it is not installed, it is determined that execution is not possible (step S1106: No).

  If execution is possible, the program execution unit 701b that has received an instruction from the program execution availability determination unit 701c executes “PROG.EXE” extracted from “OMIKUJI.EXE” (step S1107). In this case, the input / output unit 701d that has received an instruction from the program execution permission determination unit 701c displays an error screen as shown in FIG. 2 (step S1108). Thereafter, the three files in the temporary folder are deleted (step S1109), and the processing according to this flowchart is terminated.

  According to the embodiment described above, even if a pseudo virus program or the like is distributed by e-mail as part of a lesson, the scope of use is limited to the inside of this system, so it may be leaked outside the school by any chance. There is no risk of problems. In addition, since teachers do not need to create viruses themselves as in the past, it is possible to easily carry out virus experience learning at the educational site, which allows students to develop the information literacy required for the future information society. Can be worn reliably.

  In the above-described embodiment, the execution file (pseudovirus program) is included in the template, and whether or not this file can be executed is determined based on the execution source environment. For example, instead of the execution file, a text file or HTML is used. If a file is included, a document file that can be activated only in an environment where a specific application is installed can be distributed in EXE format. Like in the case of chain mail experiential learning, there was a concern about the spread of e-mails outside the school, especially in classes where e-mail transmissions inevitably occur. it can.

  In the above-described embodiment, whether or not the program can be executed is determined based on the presence or absence of a specific application (here, “Tatsuru Net”). In addition, the usage range can be more strictly limited (in the above-described embodiment, the virus program can be executed at the transfer destination in another class or grade as long as it is in the school). In this case, for example, a class name list may be included in the template, and the program execution permission determination unit 701c may check the name list against the user name of the client 101 to determine whether or not execution is possible.

  In addition to limiting the range of use of the template, a function that traces how the template was actually transferred may be provided in “Tsuru Net”. In addition, a predetermined flag may be set for emails sent and received using the template, and the emails may be deleted collectively after a certain period. Alternatively, it may be possible to delete only e-mails for experiential learning by designating grades, groups, e-mail transmission dates and the like.

  In the above-described embodiment, the use at school is mainly assumed. However, the present invention can be applied to a group of users who use a specific application such as a company, an organization, an organization, and a circle in addition to a school. Needless to say.

  In the above-described embodiment, it is assumed that the program is distributed by e-mail. However, for example, when it is desired to distribute some tool only to a user of a specific application, the installer of the tool and the above-described “TSTSEXT. It is also possible to create a self-extracting executable file consisting of “INI” and “TSTWEXP.EXE” and publish it on a Web server or the like.

  The program execution method described in this embodiment can be realized by executing a program prepared in advance on a computer such as a personal computer or a workstation. This program is recorded on a computer-readable recording medium such as HD, FD, CD-ROM, CD-R, CD-RW, MO, and DVD, and is executed by being read from the recording medium by the computer. The program may be a transmission medium that can be distributed via a network such as the Internet.

  As described above, the program execution device, the program execution method, and the program execution program according to the present invention are useful for applications that limit the range of use of a program distributed on a network. In particular, the program is a pseudo virus program or the like. Therefore, it is suitable when it is not desirable to spread to other than a specific user.

It is explanatory drawing which shows the whole structure of the experience learning system concerning embodiment of this invention. It is explanatory drawing which shows an example of the error screen displayed when a pseudo virus program cannot be performed. It is explanatory drawing which shows an example of the screen displayed by a pseudo virus program. It is explanatory drawing which shows another example of the screen displayed by a pseudo virus program. It is explanatory drawing which shows an example of the screen displayed by a pseudo virus program. It is explanatory drawing which shows an example of the hardware constitutions of each apparatus which comprises the experience learning system shown in FIG. It is explanatory drawing which shows the structure of the experience learning system shown in FIG. 1 functionally. 6 is an explanatory diagram illustrating an example of a “guide menu” screen displayed on a client 102. FIG. 6 is an explanatory diagram illustrating an example of a “practice template” screen displayed on a client 102. FIG. 6 is a flowchart illustrating a procedure of virus mail transmission processing in the client 102; 4 is a flowchart illustrating a procedure of virus mail reception processing and attached file execution processing in a client 101;

Explanation of symbols

100 server 101 client (receiver of virus mail)
102 Client (virus mail sender)
103 PC
700a Template management unit 700b Template reading unit 700c Mail management unit 700d Mail reception unit 700e Mail transmission unit 701a Mail reception unit 701b Program execution unit 701c Program execution availability determination unit 701d Input / output unit 702a Template reading unit 702b Input / output unit 702c Mail transmission unit

Claims (7)

A client terminal group; a program providing terminal that provides a predetermined program to the client terminal group; and a management terminal that manages transmission and reception of data between the client terminal group and the program providing terminal. A program execution system,
The management terminal
A template including a determination module that determines whether or not the program can be executed based on an environment of an execution source thereof and the program that can be executed only when the determination module determines that the program can be executed is transmitted to the program providing terminal. A transmission means;
Tracking means for tracking the transmission / reception status of the template between the client terminals or between the client terminal and the program providing terminal,
The program providing terminal is:
Receiving means for receiving the template from the management terminal;
Sending means for attaching the template to an e-mail and sending it to the client terminal,
The client terminal is
Receiving means for receiving the e-mail transmitted from the program providing terminal ;
Extracting means for extracting the determination module and the program from the template attached to the e-mail received by the receiving means;
First execution means for executing the determination module;
Second execution means for executing the program when the determination module determines that execution is possible ;
A program execution system comprising: The said client terminal is further provided with the display means which displays the message to the effect that the said program cannot be executed when it is determined by the said determination module that the said program cannot be executed. Program execution system . The program execution system according to claim 1 or 2, wherein the determination module determines whether or not a specific program is installed in the client terminal . A client terminal group; a program providing terminal that provides a predetermined program to the client terminal group; and a management terminal that manages transmission and reception of data between the client terminal group and the program providing terminal. A program execution method in a program execution system, comprising:
In the management terminal,
A template including a determination module that determines whether or not the program can be executed based on an environment of an execution source thereof and the program that can be executed only when the determination module determines that the program can be executed is transmitted to the program providing terminal. Sending process;
A tracking step of tracking transmission / reception status of the template between the client terminals or between the client terminal and the program providing terminal,
In the program providing terminal,
A receiving step of receiving the template from the management terminal;
Sending the template attached to an e-mail and sending it to the client terminal,
In the client terminal,
Receiving the e-mail attached with the template from the program providing terminal ;
An extracting step of extracting the determination module and the program from the template attached to the e-mail received in the receiving step;
A first execution step of executing the determination module;
A second execution step of executing the program when it is determined by the determination module to be executable ;
A program execution method comprising: 5. The client terminal according to claim 4, further comprising a display step of displaying a message indicating that the program cannot be executed when the determination module determines that the program cannot be executed by the determination module . Program execution method. 6. The program execution method according to claim 4 , wherein the determination module determines whether or not a specific program is installed in the client terminal . A data management program that is executed by a computer serving as a management terminal that manages transmission / reception of data between a program providing terminal that provides a predetermined program to a client terminal group and the client terminal group,
A template including a determination module that determines whether or not the program can be executed based on an environment of an execution source thereof and the program that can be executed only when the determination module determines that the program can be executed is transmitted to the program providing terminal. Sending process;
A tracking step of tracking a transmission / reception state of the template between the client terminals or between the client terminal and the program providing terminal;
A data management program for causing a computer to execute

Images