JP4787341B2 - Data processing apparatus, data processing method, and data processing program - Google Patents

Description

  The present invention relates to a data processing device, a data processing method, and a data processing program.

  With the improvement of the performance of communication terminals such as mobile phones, various high-function OSs (Operating Systems) have been installed in the communication terminals, and many functions such as e-mail and website browsing using this OS. Is used by the owner (user) of the communication terminal. In particular, it is particularly common to download contents such as incoming melody and standby image to a communication terminal using a browsing function of a website. Here, the handling of the content downloaded by the user of the communication terminal is often determined by the content provider. Specifically, for example, taking out downloaded content out of a communication terminal or using it after modification may be restricted by a content provider. In recent years, with regard to information such as personal information and e-mail held in communication terminals, terminal designs that emphasize protection of information that can be taken out in the same way as downloaded contents are being studied. is there.

  Recently, the development of a smartphone, which is a communication terminal that has a high affinity with a PC (Personal Computer) and has strength in customization, has been promoted. This smartphone has a feature that, like a PC, an application of a native code that can be directly executed by a CPU (Central Processing Unit) can be added, and the application can be executed at high speed. However, if a malicious application such as a virus is executed in the same way as a PC, personal information and data held in the communication terminal may be erased, altered, leaked, etc. Such protection of information may not be achieved. Therefore, various methods for achieving both use of an application and management of information to be protected in a communication terminal that uses an application of a native code like the above-described smartphone have been studied.

  For example, in Patent Document 1, by creating a virtual machine including a virtual CPU, a memory, a peripheral device, and the like by a program, a virtual machine that executes an application of native code in one physical communication terminal A configuration including a plurality of virtual machines including a virtual machine different from the virtual machine that inspects a file stored in the virtual machine is shown. By operating these virtual machines, an attack of a communication terminal by a malicious application is avoided by inspecting with a different virtual machine before executing a threatening application in the virtual machine.

  In Patent Document 2, a skeleton file for a content file stored in a remote server is held in advance in a virtual machine inside a communication terminal, and a program executed in the virtual machine accesses the skeleton file. In this case, a configuration is shown in which the content file corresponding to the skeleton file is acquired from the remote server.

  Japanese Patent Application Laid-Open No. 2004-228561 discloses a configuration that distinguishes between data that can be used in a plurality of virtual machines and data that is exclusively used in each virtual machine.

  Patent Document 4 discloses a configuration in which a corresponding program is dynamically generated and executed in a virtual machine based on a data display request by an application. According to the configuration, the details of the program generated in the virtual machine are concealed from the application, so that the problem that details of processing performed on the data display are leaked to the outside is reduced.

US Patent Application Publication No. 2008/0178290 US Pat. No. 6,735,601 US Pat. No. 6,738,977 US Pat. No. 6,604,111

  In current communication terminals, applications downloaded from a network are restricted so that important data cannot be used in order to protect important data such as personal information and contents. In order to realize the same restriction in a communication terminal using a native code application, a mechanism for operating the application used by the communication terminal by dividing it into two virtual machines provided in the communication terminal can be used. More specifically, the above-mentioned important data is placed under the jurisdiction of a specific virtual machine, and such data is used only by an application running on the virtual machine, while being downloaded from the network. The application is operated in a virtual machine different from the above virtual machine. As described above, even if the application downloaded from the network is malicious, important data under the jurisdiction of the virtual machine different from the virtual machine on which the application operates cannot be used. Therefore, a configuration for preventing falsification or leakage of important data is used.

  However, in the above configuration, although important data is prevented from being falsified or leaked, there is a problem that the application cannot sufficiently use the data. Specifically, for example, a telephone application that operates in a virtual machine that operates the application can use data under the control of the virtual machine as a ring tone, but data under the control of a different virtual machine. Cannot be used as a ringtone. As described above, even if the application that operates is a highly reliable application, the data held in the communication terminal cannot be fully used, and thus the user of the communication terminal cannot fully use the application. This problem cannot be solved by using the techniques described in Patent Documents 1 to 4 described above.

  For example, according to the technique described in Patent Document 1, since a test is performed by a different virtual machine before executing an application in a specific virtual machine, execution of a malicious application is avoided, but an unintended application However, there is a problem that tampering or leakage occurs due to access to important data.

  Further, according to the technique described in Patent Document 2, when a program in a virtual machine accesses a skeleton file, the contents of the content file stored in the remote server in association with the skeleton file are acquired. When a malicious program is executed, the contents of the content file may be leaked by the program.

  Further, according to the technique described in Patent Document 3, data that is exclusively used in each virtual machine cannot be used by an application of a different virtual machine. For example, this application is a reliable application. There is a problem that even if there is, data cannot be used sufficiently.

  Moreover, according to the technique described in Patent Document 4, although data display is performed by executing a program generated in a virtual machine, data management is performed when data to be displayed is important data. Since there is no disclosure, important data that needs to be kept secret may be displayed based on a request from an application.

  As described above, using the techniques described in Patent Documents 1 to 4 to appropriately use data held in the communication terminal and appropriately manage data to be protected. It is difficult.

  The present invention has been made in view of the above, and provides a data processing device, a data processing method, and a data processing program capable of preventing inappropriate use of data and appropriately using the data. Objective.

  In order to achieve the above object, a data processing apparatus according to the present invention is a data processing apparatus including a first virtual machine and a second virtual machine that are operated by different operation systems, and the first virtual machine executes A first storage means for storing virtual data associated with data stored in the second virtual machine, information for specifying the processing content, and virtual data Whether or not it is allowed to execute processing on virtual data based on receiving means for receiving a processing instruction using, and information specifying processing content included in the processing instruction received by the receiving means A determination unit that determines whether the virtual data is allowed to execute a process based on the information for specifying the processing content. Processing request means for requesting the second virtual machine to process the data associated with the virtual data, the second virtual machine using the second storage means for storing the data and the data Execution processing means for storing a program to be executed and executing the program using data based on a request from one virtual machine.

  According to the above data processing apparatus, processing instructions using virtual data received by the receiving means of the first virtual machine and stored in the first storage means are stored in advance in association with the virtual data and executed. Is determined to be acceptable processing content. If it is determined that the execution is permitted, the second virtual machine is requested to process data stored in the second storage unit in association with the virtual data, and the data is used. Execution of the program is performed in the second virtual machine. Thus, the virtual data associated with the data stored in the second storage unit of the second virtual machine is stored in the first storage unit of the first virtual machine, and the second data is received in response to the processing request for this virtual data. Since processing of data stored in the storage unit can be executed, as a result, data stored in the second virtual machine from the first virtual machine can be indirectly used. Further, according to the above data processing apparatus, the virtual data stored in the first storage unit of the first virtual machine is associated with information for specifying the processing content allowed to be executed on the data in advance. The processing request is transmitted to the second virtual machine only when the processing instruction of the processing content included in this information is received. For example, let's use the data stored in the second virtual machine. When a malicious processing instruction is received in the first virtual machine, it is possible to avoid giving an instruction to the second virtual machine based on this processing instruction. Can be prevented.

  Here, when the data stored in the second storage unit is updated, the second virtual machine sends update information including information related to the update of the data stored in the second storage unit to the first virtual machine. The first virtual machine further includes update means for acquiring update information notified from the notification means and updating virtual data stored in the first storage means based on the update information. It can be set as an aspect.

  In this way, the update contents of the data stored in the second storage means are notified to the first virtual machine, and the virtual data stored in the first storage means is updated based on the update contents of the data, for example, In accordance with the addition or deletion of data in the two storage means, the virtual data in the first storage means can be appropriately added or deleted. In addition, even when the processing content allowed for the data stored in the second storage unit is changed, this information is appropriately notified to the first virtual machine and stored in the first storage unit. By updating the information specifying the processing content associated with the virtual data, for example, it is possible to reduce the request from the first virtual machine to the second virtual machine for processing that has become unacceptable due to the above change. Therefore, the exchange of unnecessary information that occurs between the first virtual machine and the second virtual machine can be reduced.

  The first virtual machine further includes a process end requesting unit that requests the second virtual machine to end the data execution process, and the execution processing unit receives the data based on the request from the process end requesting unit. It is good also as an aspect which stops execution of the used program.

  According to the above configuration, when the program executed in the second virtual machine is a program that continues execution processing, for example, the first virtual machine sends a request to end the execution processing to the second virtual machine. By providing a configuration for stopping the execution of the program based on this request, the execution of the program can be stopped and the use of the data stored in the second storage means can be stopped.

  Further, the execution processing means can be in a mode in which data stored in the second storage means can be executed in advance.

  As described above, by setting the data in an executable state in advance, the data can be executed and processed earlier based on the processing request from the first virtual machine.

  The second virtual machine further includes event information receiving means for receiving event information, which is information related to an event that triggers reception of a processing command in the receiving means, and the execution processing means is configured such that the event information receiving means includes event information. For example, the program may be executed using data based on a request from the processing requesting unit only for a certain period of time after receiving.

  In this way, the event information receiving means performs the data execution process only for a certain time after receiving the event information, so that the process requested from the first virtual machine is appropriately executed based on the event information. In addition, for example, it is possible to avoid executing a program in response to an illegal processing request in the second virtual machine.

  Here, the second virtual machine stores the event information received by the event information receiving means in association with the data used when the execution processing means executes the program after receiving the event information. The execution processing means refers to the third storage means when the event information receiving means receives the event information, and stores it in association with the event information received by the event information receiving means. It is possible to make the data ready for execution in advance.

  As described above, by making the data stored in association with the event information based on the information stored in the third storage unit when the event information is received in advance, the first virtual machine can be executed. It is possible to expedite the start of the process of executing the program using the data based on the request from. In addition, when there is a plurality of data stored in the second virtual machine, it becomes clear which data can be executed in advance, and unnecessary processing such as making unnecessary data ready to be executed can be reduced. it can.

  Moreover, it can be set as the aspect further provided with the output means which outputs the result of having executed the program using data by the execution processing means.

  As described above, when the data processing apparatus of the present invention further includes an output unit, the result of executing the program using the data by the second virtual machine is transmitted to another apparatus and output. The execution result is output earlier, and the owner of the data processing device can confirm earlier.

  Here, the output means is a display controlled by the first virtual machine, the data is image data, and the first virtual machine further includes screen control means for controlling screen display on the display, The virtual machine further includes display means for displaying on the display a result of executing the program using the data by the execution processing means, and the screen control means virtually performs processing based on information for specifying the processing content by the determination means. When it is determined that the data is allowed to be executed on the data, an image display area for displaying a result of executing the program using the data in the display is set to a transparent color, and the display means The result of executing the program using can be displayed in the image display area.

  As described above, when the result of executing the program using data in the second virtual machine is output to the output means that is a display controlled by the first virtual machine, the screen control means of the first virtual machine determines Based on the determination result by the means, the image display area is made transparent, and the output result is displayed on the area by the display means of the second virtual machine. Thus, even if the output means is a display controlled by the first virtual machine, the result of processing by the second virtual machine can be suitably displayed. The image data here refers to data that can be displayed on a display, and includes moving images such as animation.

  Further, the screen control means notifies the display means of change information that is information related to the change of the image display area, and the display means indicates the result of executing the program using the data in the image display area based on the change information. It is good also as a mode to display.

  As described above, by displaying the result of executing the program by the display means based on the change information notified from the screen control means, the result executed according to the change of the image display area can be suitably displayed. .

  Here, when the change information is information related to the change in the position and size of the image display area, the display unit can take action according to the change in the position and size of the image display area, and the program is executed more. The result can be suitably displayed.

  In addition, the processing request unit may be configured to stop the data processing request for the second virtual machine when the output to the output unit is restricted.

  According to the above configuration, depending on the situation, it is possible to reduce the possibility of reproducing music data and outputting it from the output means when, for example, sound output causes trouble to the surroundings. Since the output can be appropriately restricted, the convenience in using data by the data processing device can be enhanced.

  Further, the data processing apparatus includes a plurality of output means, and the processing request means outputs a part of the plurality of output means when the result of executing the program using the data is output to the plurality of output means. Alternatively, the second virtual machine may be requested to output the result of executing the program only for the second virtual machine.

  According to the above configuration, for example, when the data output as the result of processing by the second virtual machine is processed as sound and image, only one of the results (for example, only the image) is output. Therefore, the convenience of using data by the data processing device can be further enhanced.

  The present invention can be described as an invention of a data processing apparatus as described above, and can also be described as an invention of a data processing method and an invention of a data processing program as follows. This is substantially the same invention only in different categories, and has the same operations and effects.

  In other words, the data processing method according to the present invention is a data processing method by a data processing apparatus including a first virtual machine and a second virtual machine that operate by different operation systems, and the first storage means of the first virtual machine The first storage step for storing the virtual data associated with the data stored in the second virtual machine, in which the processing content allowed to be executed is specified in advance, and the receiving means of the first virtual machine include: A reception step for receiving a processing instruction using virtual data, including information specifying processing contents that may be executed on the data, and a processing instruction received by the determination means of the first virtual machine in the reception step It is determined whether or not it is allowed to execute processing on virtual data based on information specifying processing content included in If it is determined that the processing request means of the first step and the processing request means of the first virtual machine are allowed to execute the processing based on the information for specifying the processing content on the virtual data in the determination step, the virtual data A processing request step for requesting processing of the associated data to the second virtual machine, a second storage step in which the second storage means of the second virtual machine stores the data, and an execution processing means of the second virtual machine, And an execution processing step of storing a program executed using data and executing the program using data based on a request from one virtual machine.

  The data processing program according to the present invention is a data processing program in a data processing apparatus including a first virtual machine and a second virtual machine that are operated by different operation systems, and is executed in the first virtual machine. First storage means for preliminarily specifying the processing content that is permitted and storing virtual data associated with data stored in the second virtual machine in association with data stored in the second virtual machine; A first storage means for storing virtual data for which processing content allowed to be executed in advance is specified in one virtual machine in association with data stored in the second virtual machine; Contains information that identifies the processing content that may be executed for the virtual data In the receiving means for receiving the logical command and the first virtual machine, the virtual data when it is determined by the determining means that the process based on the information specifying the processing content is allowed to be performed on the virtual data The processing request means for requesting the second virtual machine to process the data associated with the second virtual machine, the second storage means for storing data in the second virtual machine, and the second virtual machine using the data Execution processing means for storing a program and executing the program using data based on a request from one virtual machine causes the computer to function.

  According to the present invention, there are provided a data processing device, a data processing method, and a data processing program capable of preventing inappropriate use of data and appropriately using the data.

It is a block diagram explaining the structure of the data processor which concerns on 1st Embodiment of this invention. It is a figure explaining the hardware constitutions of a data processor. It is a figure explaining the software structure of a data processor. It is a figure explaining the example of matching with the real data stored in a 2nd memory | storage part, and the virtual data stored in a 1st memory | storage part. It is a figure explaining the example of matching with the real data stored in a 2nd memory | storage part, and the virtual data stored in a 1st memory | storage part. It is a figure explaining the example of matching with the real data stored in a 2nd memory | storage part, and the virtual data stored in a 1st memory | storage part. It is a flowchart explaining a data processing method (utilization processing of virtual data). It is a flowchart explaining a data processing method (processing request processing). It is a flowchart explaining a data processing method (execution process). It is a flowchart explaining a data processing method (notification processing and update processing). It is a block diagram explaining the structure of the data processor which concerns on 2nd Embodiment of this invention. It is a flowchart explaining a data processing method (end request process and end process). It is a flowchart explaining a data processing method (decoding process). It is a block diagram explaining the structure of the data processor which concerns on 3rd Embodiment of this invention. It is a flowchart explaining a data processing method (effective time control processing). It is a block diagram explaining the structure of the data processor which concerns on 4th Embodiment of this invention. It is a flowchart explaining a data processing method (history recording process). It is a flowchart explaining a data processing method (decoding process). It is a block diagram explaining the structure of the data processor which concerns on 5th Embodiment of this invention. It is a figure which shows the example of the image output to a display by the data processor which concerns on 5th Embodiment. It is a flowchart explaining a data processing method (a process request process and an execution process). It is a flowchart explaining a data processing method (an image display area notification process and an image display area change process). It is a block diagram explaining the structure of the data processor which concerns on 6th Embodiment of this invention. It is a flowchart explaining a data processing method (processing request processing). It is a block diagram explaining the structure of the data processing program which concerns on suitable embodiment of this invention.

  DESCRIPTION OF EMBODIMENTS Hereinafter, embodiments for carrying out the present invention will be described in detail with reference to the accompanying drawings. In the description of the drawings, the same elements are denoted by the same reference numerals, and redundant description is omitted.

(First embodiment)
<Configuration of Data Processing Device 1>
FIG. 1 is a block diagram illustrating the configuration of a data processing apparatus 1 according to the first embodiment of the present invention. As shown in FIG. 1, the data processing apparatus 1 includes a first virtual machine 41, a second virtual machine 42, a first storage unit 101, a second storage unit 102, and an output unit 105. . The data processing device 1 is realized as a device having a communication function such as a mobile phone, a PDA (Personal Digital Assistant), and a personal computer (PC). The first virtual machine 41 and the second virtual machine 42 included in the data processing apparatus 1 are virtual machines that operate with different operation systems. The “different operation system” here includes a mode in which the same type of operation system operates individually in each of the first virtual machine 41 and the second virtual machine 42. Note that the first storage unit 101 and the second storage unit 102 are included in the first virtual machine 41 and the second virtual machine 42, respectively, but in the present embodiment, the first storage unit 101 and the second storage unit 102 are the first storage unit 102 and the second storage unit 102. The first virtual machine 41 and the second virtual machine 42 are distinguished from each other.

  Before describing details of the configuration of the data processing apparatus 1, first, the first virtual machine 41 and the second virtual machine 42 included in the data processing apparatus 1 will be described. In this embodiment, virtualization means that a device (computer) having a hardware configuration for one device is virtually operated as a plurality of devices by executing virtualization software (Virtual Machine Monitor: VMM). That is. The first virtual machine 41 and the second virtual machine 42 included in the data processing apparatus 1 are virtual apparatuses created by virtualization software, and each of these virtual machines has an operating system (Operating System: OS). ) And an application program (program) are executed. The application program is, for example, a program for sounding a different incoming melody depending on a caller when the data processing apparatus 1 is a mobile phone and an incoming call is received from another mobile phone.

  The above virtual machine will be specifically described below with reference to FIGS. FIG. 2 is a diagram for explaining the hardware configuration of the data processing apparatus 1. FIG. 3 is a diagram for explaining the software configuration of the data processing apparatus 1.

  As shown in FIG. 2, the data processing device 1 includes a CPU (Central Processing Unit) 20, a memory 21, a storage device 30, a keypad 31, a display 32, a speaker 33, and a communication unit 34.

  The CPU 20 has a function of executing a program on the memory 21. In the data processing apparatus 1 according to the present embodiment, the first virtual machine 41 and the second virtual machine 42 are operated by operating a VMM that is a program that creates a plurality of virtual apparatuses (virtual machines) operating on one CPU 20. Is produced.

  The memory 21 has a function of storing programs and data loaded (read) from the storage device 30. In the data processing device 1, the above-described VMM, OS, application program, and the like are loaded from the storage device 30 and executed by the CPU 20.

  The storage device 30 has a function of storing programs and data that are loaded into the memory 21 and executed by the CPU 20. When the data processing device 1 is a PC, for example, a hard disk drive is used as the storage device 30. Further, when the data processing device 1 is a mobile phone, for example, a flash memory is used as the storage device 30.

  The keypad 31 is an input device for inputting to a program executed in the CPU 20.

  The display 32 is a device that displays the processing result of the program executed by the CPU 20. The speaker 33 is a device that outputs the processing result of the program executed in the CPU 20 by sound. When the program executed in the CPU 20 uses, for example, audio data or music data, audio or music is output from the speaker 33 as a processing result of the program. When the program executed in the CPU 20 uses data including an image and sound, for example, an image is displayed on the display 32 as a processing result of the program, and sound is output from the speaker 33.

  The communication unit 34 is an input / output device for the program executed by the CPU 20 to communicate with other devices. When the data processing apparatus 1 is a PC, an Ethernet adapter is used as the communication unit 34. When the data processing device 1 is a mobile phone, a communication processor of a mobile phone network is used as the communication unit 34.

  Next, with reference to FIG. 3, information for realizing the virtual machine stored in the memory 21 of the data processing apparatus 1 having the above hardware configuration will be described.

  The virtualization software (VMM) 40 is a program that creates a plurality of virtual devices (virtual machines) on one CPU 20, and the data processing device 1 according to the present embodiment is executed when the virtualization software 40 is executed. , Information for realizing the first virtual machine 41 and information for realizing the second virtual machine 42 are newly stored in the memory 21. Representative examples of the virtualization software 40 include VMWare, Xen, and Virtualbox (all are trade names). In the first virtual machine 41 and the second virtual machine 42, the OS and application programs are executed independently. However, as shown in FIG. 2, the data processing apparatus 1 has only one display 32 or speaker 33 that outputs the processing result of the program, and this is provided from the first virtual machine 41 or the second virtual machine 42. When using, access from each virtual machine may collide depending on the timing. The same applies to devices such as the keypad 31 for inputting data and the like to programs executed in the first virtual machine 41 and the second virtual machine 42 and the communication unit 34. Therefore, in a device that creates a virtual machine inside, such as the data processing device 1, a mechanism is built so that a plurality of OSs can share the above-described device.

  As a mechanism that allows a plurality of OSs to share and use a device, for example, the first virtual machine (information for controlling) as shown in FIG. 3 so that the virtual machine can individually control the operation of the device. In 41, information (for example, device driver) 41A for controlling the speaker 33 and information 41B for controlling the display 32 are stored. In the second virtual machine (information for controlling) 42, information 42A for controlling the speaker 33 and information 42B for controlling the display 32 are stored. The virtualization software 40 manages the association of which virtual machine is accessing which device. In this way, for example, the result of processing in the first virtual machine 41 is obtained by using the information 41A for controlling the speaker 33 and the information 41B for controlling the display 32, so that the speaker 33 and the display 32 is output. In addition to the above mechanism, a mode in which a specific virtual machine included in the data processing apparatus 1 centrally manages the operation of the device can be adopted.

  In the present embodiment, a case where the first virtual machine 41 and the second virtual machine 42 operate for different purposes will be described. Specifically, the first virtual machine 41 functions mainly for execution of application programs. When the application program is executed in the first virtual machine 41, the execution contents and the like are not limited as in the second virtual machine 42 described later. The application program may be added by the user of the data processing apparatus 1 in addition to the application program stored in the data processing apparatus 1 in advance. When an application program is added to the data processing apparatus 1, the application program is stored in the first virtual machine 41, and this application program is executed in the first virtual machine 41. Therefore, in the first virtual machine 41, there is a possibility that a malicious application program such as a virus or spyware may be added and executed. As a result, there is a risk that information leakage or malfunction occurs.

  On the other hand, the second virtual machine 42 functions mainly for holding important data that should not be exposed to threats from viruses, spyware, and the like, and for executing application programs using this information. The data held in the second virtual machine 42 includes, for example, data related to personal information, content data that is prohibited from being redistributed through a network, and the like. These pieces of information are stored in the second virtual machine (in the present embodiment, the second storage unit 102), and processing using the data is performed only in the second virtual machine 42. The application program used in the second virtual machine 42 is used only for processing using data held in the second virtual machine 42 and is stored in the data processing apparatus 1 in advance. is there. By adopting such an aspect, it is possible to prevent the data stored in the second virtual machine 42 from leaking to the outside or being erased or falsified by a malicious application program.

  In the present embodiment, a case where the data processing device 1 is a mobile phone having the above-described configuration will be described. Specifically, music data downloaded via the Internet or the like is stored in the second storage unit 102 included in the second virtual machine 42, and the second virtual machine is stored by the telephone application program stored in the first virtual machine 41. The case where the music data stored in 42 is used as a ring tone will be described.

  In the data processing apparatus 1, for example, when music data is purchased via the Internet or the like, for example, a copy of purchased music data (purchased music data) is created or deleted by a malicious application program. Since this is a business problem, the purchased music data is stored in the second storage unit 102. On the other hand, in the data processing device 1 according to the present embodiment, for example, when the data processing device 1 is a mobile phone and the data processing device 1 receives an incoming call, the function of sounding a ringtone and notifying the owner This is performed by an application program (phone application) stored in the first virtual machine 41. At this time, since the application program stored in the first virtual machine 41 cannot use the data stored in the second storage unit 102, the telephone application uses the purchased music data stored in the second storage unit 102. There is a problem that can not be. In the following description of the present embodiment, as described above, purchased music data is stored in the second storage unit 102, and the telephone application stored in the first virtual machine 41 uses the purchased music data as a ring tone. Will be described as an example.

  Returning to FIG. 1, a specific configuration of the data processing apparatus 1 including the first virtual machine 41 and the second virtual machine 42 will be described. As described above, the data processing apparatus 1 includes the first virtual machine 41, the second virtual machine 42, the first storage unit 101, the second storage unit 102, and the output unit 105. . The first storage unit 101 is a storage area dedicated to the first virtual machine 41 for storing data used in the first virtual machine 41, and the second storage unit 102 stores data used in the second virtual machine 42. This is a storage area dedicated to the second virtual machine 42 for storing.

  Here, data stored in the first storage unit 101 and the second storage unit 102 will be described. In the data processing apparatus 1 of the present embodiment, a processing instruction using data for the first virtual machine 41 is received, and stored in the second virtual machine (second storage unit 102 in the present embodiment) based on the processing instruction. The program is executed using the data. For this reason, the second storage unit 102 stores actual data D01 used in the present embodiment. On the other hand, the first storage unit 101 stores virtual data D11 associated with the actual data D01. The association between the virtual data D11 and the actual data D01 is performed, for example, by creating virtual data D11 having the same file name as the file name of the actual data D01 stored in the second storage unit 102. Further, as the contents of the process that can be performed on the virtual data D11, the contents of the process that can be performed using the actual data D01 are associated. The contents of processing that can be performed using the actual data D01 are based on the type of file specified by the extension of the actual data D01. For example, the extension of the actual data D01 is “.mp3”. "Is a process that is permitted to be performed using the actual data D01. Therefore, information for specifying “reproduction processing” is associated with the virtual data D11 as information for specifying the processing content allowed to be executed using the virtual data D11 associated with the actual data D01. Note that, as information for specifying the processing content to be executed using the virtual data D11, an application program that is used in the first virtual machine 41 and is assumed to request use of the actual data D01 is associated with the virtual data D11. May be. In the data processing apparatus 1 of the present embodiment, assuming that the telephone application operating in the first virtual machine 41 makes an output request for the actual data D01 that is purchased music data, the telephone application is associated with the virtual data D11. Yes.

  The correspondence between the virtual data D11 and the actual data D01 is collected in a table or the like and stored in the second storage unit 102, for example. That is, information indicating that the virtual data D11 is data used by the telephone application is stored in association with the virtual data D11, but information that identifies the actual data D01 associated with the virtual data D11. Are not stored in the first storage unit 101. Thereby, even when a malicious application program operates in the first virtual machine 41, it is possible to avoid the information specifying the actual data stored in the second virtual machine 42 being acquired by the application program. it can.

  Then, based on the processing instruction using the virtual data D11 received by the first virtual machine 41, the actual data associated with the virtual data D11 from the first virtual machine 41 to the second virtual machine 42. The process using D01 is requested, and the process using the actual data D01 is executed in the second virtual machine. As described above, the first virtual machine 41 does not hold information for specifying the actual data D01 associated with the virtual data D11. Therefore, the processing request made from the first virtual machine 41 to the second virtual machine 42 is not a processing request including information specifying the actual data D01. That is, by using the information specifying the virtual data D11, a request for processing of actual data corresponding to the virtual data D11 is made from the first virtual machine 41 to the second virtual machine 42.

  An example of association between the actual data D01 stored in the second storage unit 102 and the virtual data D11 stored in the first storage unit 101 will be described with reference to FIGS. In the example shown in FIG. 4, rules are determined in advance for file names to be assigned to real data and virtual data in the data processing apparatus 1, and this information is stored. Specifically, the file name of the real data stored in the second storage unit 102 is “real ***”, and the virtual data stored in the first storage unit 101 is “virtual *”. The rule “**” is determined in advance and stored in the second storage unit 102. When newly creating virtual data, a file name is assigned based on this rule. In FIG. 4, the file name of the real data D01 stored in the second storage unit 102 is “real.mp3”, and the content is purchased music data, and is associated with the real data D01 in the first storage unit 101. The file name of the virtual data D11 to be stored is “virtual.mp3”. Therefore, the fact that the real data D01 and the virtual data D11 are created in association with each other is referred to by referring to the association stored in the second storage unit 102, the second virtual machine 42. Can be determined. Note that the virtual data D11 is data in which no processing result is generated even if a program is executed using this data, such as data having only a file name. The other data D21 and D22 stored in the first storage unit 101 are data different from the purchased music data (for example, self-made data), and thus are stored in the first storage unit 101 and are stored in the first virtual machine. The application program (telephone application) stored in 41 can execute the program using these data D21 and D22.

  FIG. 5 is a diagram for explaining another example of associating real data with virtual data. In the example shown in FIG. 5, the common data D02 stored in the second storage unit 102 and the virtual data D12 stored in the first storage unit 101 have a common file name “music.mp3”. Furthermore, a flag indicating that this data is virtual data is described in the header of the virtual data D12. For example, a special value or character string that is not used for normal data is used as this flag. In this way, the file name is made common, and the virtual data header is given a flag indicating that the data is virtual data, so that the real data stored in the second storage unit 102 and the first storage unit 101 are stored. There is also a method for associating virtual data.

  FIG. 6 is a diagram for explaining another example of associating real data with virtual data. In the example illustrated in FIG. 6, the real data D03 stored in the second storage unit 102 and the virtual data D13 stored in the first storage unit 101 have a common file name “enka.mp3”. The real data D04 and the virtual data D14 are stored in the second storage unit 102 and the first storage unit 101, respectively, with a common file name “jazz.mp3”. Further, in the example illustrated in FIG. 6, a virtual data list D25 in which virtual data stored in the first storage unit 101 is collected in a table is stored. In this case, it is possible to confirm that the data stored in the first storage unit 101 is virtual data by referring to the virtual data list D25. As described above, the actual data stored in the second storage unit 102 and the virtual data stored in the first storage unit 101 can be associated with each other by various methods.

  Further, as another method for associating real data with virtual data, each virtual data included in the virtual data list D25 stored in the storage unit 101 in FIG. 6 is stored in the second storage unit 102. A list in which data is further associated may be stored in the second storage unit 102. In this case, it is not necessary to associate the file name of the virtual data stored in the first storage unit 101 and the file name of the actual data stored in the second storage unit 102 in the first virtual machine. It can be confirmed by referring to the list stored in the second storage unit 102 in the second virtual machine which virtual data stored in the second storage unit 102 corresponds to the virtual data stored in the second storage unit 102. it can.

  Returning to FIG. 1, the configuration of the first virtual machine 41 included in the data processing apparatus 1 will be described. The first virtual machine 41 includes a reception unit 201, a determination unit 202, a processing request unit 203, and an update unit 205.

  The receiving unit 201 includes information for specifying processing contents, and functions as a receiving unit that receives a processing instruction using virtual data. The processing command received by the receiving unit 201 is a command issued when an application program that can be executed in the first virtual machine 41 is executed, for example. More specifically, for example, in order to reproduce specific music data as a ring tone based on information of a transmission source by executing a telephone application when an incoming call is received to the data processing device 1 An instruction to be performed in the first virtual machine 41 in order to specify specific music data, reproduce the music data, and output the music data from the speaker 33 is called a processing instruction. Specifically, the use of the music data is requested. A command (use command) and a command (output command) for requesting output of the music data specified by the use command to the speaker 33 are included. Here, the processing command issued from the telephone application specifies specific data and requests the use of the data regardless of whether the target is actual data (for example, data D21 in FIG. 4) or virtual data. To do. In the present embodiment, an access to the virtual data D11 and a request for using the virtual data D11 are transmitted from the telephone application and received by the receiving unit 201. Then, the receiving unit 201 confirms whether this processing command is a processing command for the virtual data D11. If the processing command is a processing command for the virtual data D11, the reception unit 201 sends it to the determination unit 202. The usage command and the output command are transmitted from the telephone application at different timings in the order of the usage command and the output command, and are received individually by the receiving unit 201.

  The determination unit 202 determines whether or not to execute the process on the virtual data D11 based on the information specifying the processing content included in the processing instruction (use instruction) received by the receiving unit 201. It functions as a determination means for determining. Specifically, it is determined whether or not the process is permitted based on whether or not the telephone application is associated with the virtual data D11. In the present embodiment, since the telephone application is associated with the virtual data D11 in advance, it is determined that the process using the telephone application can be executed using the virtual data D11. In this case, for example, the determination unit 202 holds a flag indicating that the telephone application is using the virtual data D11.

  Here, when the determination unit 202 determines that the information specifying the processing content included in the processing instruction (in this embodiment, the telephone application) is not associated with the virtual data D11, the processing is performed based on the processing instruction. The subsequent processing is canceled without performing the operation. In addition, the determination unit 202 notifies the telephone application that has made an access request from the determination unit 202 that the subsequent processing has been stopped. The reception unit 201 and the determination unit 202 are realized as, for example, a ring tone determination module.

  The process request unit 203 functions as a process request unit that requests the second virtual machine 42 to process the actual data D01 associated with the virtual data D11 based on the determination result in the determination unit 202. In the present embodiment, after receiving the processing command from the telephone application, the information specifying the virtual data D11 is used based on the output command for requesting the output of the virtual data D11 transmitted from the telephone application to the speaker 33. The second virtual machine 42 is requested to output real data associated with the virtual data D11. At this time, the processing request unit 203 confirms whether the processing command (use command) from the telephone application is determined by the determination unit 202 as processing content that allows processing using the actual data D01. As described above, the presence or absence of the flag held in the determination unit 202 is confirmed. When the processing request unit 203 can confirm the flag, the above-described processing is performed. However, since the first virtual machine 41 including the processing request unit 203 does not grasp the actual data corresponding to the virtual data D11, the corresponding actual data is specified in the second virtual machine 42 described later. The processing request unit 203 is also realized as an audio driver that itself issues an output instruction to the output unit 105.

  The update unit 205 functions as an update unit that updates virtual data stored in the first storage unit 101 based on change information notified from a notification unit 212 included in the second virtual machine 42 described later. The update content by the update unit 205 includes, for example, creation of new virtual data and deletion, as well as change of processing information allowed for real data associated with virtual data, for example. When the updating unit 205 performs the update, the virtual data having a new file name is created based on the rules for associating the actual data with the virtual data, as in the above example, or the virtual data Deletion is performed.

  Next, the configuration of the second virtual machine 42 included in the data processing apparatus 1 will be described. The second virtual machine 42 includes an execution processing unit 211 and a notification unit 212.

  The execution processing unit 211 stores a program to be executed using the real data D01, and executes the program using the real data D01 corresponding to the virtual data D11 based on a request from the first virtual machine 41 It functions as a processing means. The execution processing unit 211 stores in advance a program (in this embodiment, a program that reproduces music data and outputs the result to the speaker 33) corresponding to processing that is allowed to be executed using the actual data D01. First, the actual data D01 associated with the virtual data D11 is identified based on the processing request for the actual data associated with the information identifying the virtual data D11 transmitted from the processing request unit 203 of the first virtual machine 41. Subsequently, a program for outputting the actual data D01 to the speaker 33 is executed. Specifically, the actual data D01 is read, decoded as necessary, and further output to a device (reproduction device or the like). When the data processing device 1 outputs the result of the above processing, the result is transmitted to the output unit 105 described later. Further, when the result of processing is output by another device or the like, the processing result is transmitted to the other device. When performing the above processing, the execution processing unit 211 needs to determine the type of data of the actual data D01 (for example, image data, music data, etc.). Specifically, for example, in addition to a method of referring to an extension added to the file name of the actual data D01, a header in which information specifying the data type of the actual data D01 is described is executed. A method directly referred to by the unit 211 can be used. The execution processing unit 211 is realized as, for example, a ring tone reproduction module.

  The notification unit 212 notifies the first virtual machine 41 of update information including information related to the update of the actual data in the second storage unit 102 when the actual data stored in the second storage unit 102 is changed. Functions as a notification means. When there is a change in the actual data stored in the second storage unit 102, the notification unit 212 specifies information (for example, a file name) corresponding to the changed actual data and the details of the change. To the first virtual machine 41. The information related to the change of the actual data in the second storage unit 102 is determined in advance, for example, by a rule such as notifying the notification unit 212 when each unit of the second virtual machine 42 performs an operation on the actual data. As a result, information can be obtained in the notification unit 212. The second storage unit 102 also stores information that is restricted from being output in response to a request from another virtual machine. Since it is not necessary to create virtual data for such information, it is not necessary to notify the first virtual machine 41 of change information. Whether or not notification is necessary for the first virtual machine 41 is, for example, whether or not use in the first virtual machine 41 is assumed when data is newly stored in the second storage unit 102. The flag is set, and the notification unit 212 determines whether or not the flag is present.

  Further, the data processing device 1 is configured to include an output unit 105. The output unit 105 functions as an output unit that outputs a result of executing a program using the real data D01 in the second virtual machine 42. The output unit 105 includes a display 32 and a speaker 33. When the above-described execution processing unit 211 reproduces the actual data D01 (purchased music data) based on a request from the first virtual machine 41, this result is output from the output unit 105 (speaker 33). As a result, the owner of the data processing apparatus 1 can confirm the output result.

  As described above, each unit included in the data processing device 1 functions as described above, whereby the data processing according to the present embodiment is performed.

<Data Processing Method by Data Processing Device 1>
Next, a data processing method by the data processing apparatus 1 will be described with reference to FIGS. 7 to 10 are flowcharts for explaining data processing performed by the data processing apparatus 1.

(1) Virtual Data Utilization Processing FIG. 7 is a flowchart relating to virtual data utilization processing performed when the first virtual machine 41 receives a processing command. First, the use processing of the virtual data D11 is started when a processing command for the virtual data D11 is received by the receiving unit 201 of the first virtual machine 41 (S100, receiving step). For the processing command received by the receiving unit 201, the receiving unit 201 first determines whether the data targeted by the processing command is virtual data D11 (S101). Here, when the target of the processing instruction is data (for example, data D21 or D22 in FIG. 4) stored in the first storage unit 101 unlike the virtual data D11, the subsequent virtual data is used. The processing is terminated, and the program using this data is executed in the first virtual machine 41 of the data processing apparatus 1. On the other hand, if the processing instruction designates the virtual data D11, next, the request source program is specified by the receiving unit 201 (S102). In the present embodiment, the processing command received by the receiving unit 201 is a command whose processing content is to use the virtual data D11 by the telephone application, and the receiving unit 201 confirms that the request source program is the telephone application. The The information specifying the request source program is sent to the determination unit 202 together with the information specifying the virtual data D11.

  The determination unit 202 refers to the virtual data D11 stored in the first storage unit 101 based on the information transmitted from the reception unit 201, so that the processing content performed by the request source program is associated with the virtual data D11. Then, it is determined whether the process is permitted to be executed using the actual data D01 (S103, determination step). The processing instruction from the telephone application for the virtual data D11 in the present embodiment is executed using the actual data D01 because the telephone application is stored in the first storage unit 101 in association with the virtual data D11 in advance. Is determined to be acceptable processing. Then, the determination unit 202 holds a flag indicating that the program (phone application) is using the virtual data D11 based on the determination result (S104), and after processing for the virtual data D11 is started, In consideration of the time lag until the output command related to the output of the virtual data D11 is performed, this processing ends with this flag held. If it is determined that the processing content is not associated with the virtual data D11 (S103), the fact that an error has occurred during the processing is notified to the program (in this embodiment, the telephone application) that issued the processing command. (S105), and the subsequent processing is stopped. In this case, it is also possible to add a process of not accepting an access request for the virtual data D11 from the program from the next time.

(2) Processing Request Processing for Second Virtual Machine FIG. 8 is a flowchart when requesting processing to the second virtual machine 42. This process is performed after the virtual data utilization process (S100 to S104) shown in FIG. 7 is performed, and is started when an output command for outputting the virtual data D11 is received (S200).

  The processing request unit 203 receives the output command for outputting the virtual data D11, and identifies the program (phone application in this embodiment) that has transmitted the processing command (output command) from the information transmitted from the determination unit 202. (S201) Referring to this program, it is confirmed whether or not a flag indicating a state that the program is using the virtual data D11 is held (S202). Specifically, by confirming the flag held in the determination unit 202 (S104), it is confirmed that the output command transmitted from the telephone application is for the virtual data D11. This confirmation is performed in order to confirm whether or not a request related to the subsequent processing may be transmitted to the second virtual machine 42. More specifically, even when the telephone application intends to use actual data (normal data) stored in the first storage unit 101, the telephone application uses a usage instruction and an output instruction that specify the actual data. Therefore, it is confirmed at this stage that the output command transmitted by the telephone application is for the virtual data D11. Therefore, when the flag indicating that the virtual data D11 is being used is not held, the telephone application issues a processing command to other data (actual data) stored in the first storage unit 101. The subsequent processing is terminated. When the telephone application according to the present embodiment transmits a use instruction for the virtual data D11 and is held in a state where the virtual data D11 is being used, a processing request unit is used using information specifying the virtual data D11. A processing request is issued from 203 to the second virtual machine 42 (S203, processing request step). Thus, the process for making a process request to the second virtual machine 42 ends.

(3) Execution Processing in Second Virtual Machine FIG. 9 is a flowchart when execution processing is performed in the second virtual machine 42 based on a processing request from the first virtual machine 41. As shown in FIG. 8, the processing request unit 203 of the first virtual machine 41 requests the second virtual machine 42 to perform processing using actual data associated with the virtual data D11 (S203). And started after being received by the execution processing unit 211 of the second virtual machine 42 (S300). The series of processes shown in FIG. 9 is described by, for example, one program, and is executed by executing this program in the execution processing unit 211.

  When the execution processing unit 211 receives a request for processing using the real data corresponding to the virtual data D11, the execution processing unit 211 executes the real data associated with the virtual data D11 based on information specifying the virtual data D11 included in the request. It is confirmed whether the data D01 is stored in the second storage unit 102 (S301). At this time, since the information related to the association between the virtual data D11 and the actual data D01 is stored in the second storage unit 102 as described above, the actual data D01 is specified based on this information. Here, if the actual data specified in the processing request is not stored in the second storage unit 102, for example, because the processing request from the first virtual machine 41 is invalid, the processing is performed. Cancel. On the other hand, when it is confirmed that the actual data D01 is stored in the second storage unit 102, the execution processing unit 211 confirms the output destination device by confirming the file format of the actual data D01. After that, the actual data D01 is read from the second storage unit 102 (S302, execution processing step), and the actual data D01 is further decoded (S303, execution processing step). Decoding performed here is processing performed when the actual data D01 is encoded in advance. For example, when the extension of the actual data is “.mp3”, the speaker included in the output unit 105 This is a process for outputting to H.33. Therefore, when the actual data D01 is in a format that can be directly output, it is not necessary to perform decoding, and the process proceeds to the next process. Then, the decoded actual data D01 is output to the speaker 33 which is a device included in the output unit 105 in accordance with a request from the first virtual machine 41 (S304, execution processing step). As a result, the actual data D01 stored in the second virtual machine 42 is output from the speaker 33 as a ringtone. As a result of the above processing, the output unit 105 outputs the processing result for the processing command received by the receiving unit 201 of the first virtual machine 41. The reading (S302), decoding (S303), and outputting to the device (S303) of the actual data D01 are repeatedly executed at a constant cycle until the actual data D01 is completely output. Thus, a series of processes is completed.

(4) Virtual Data Update Processing FIG. 10 shows virtual data stored in the first storage unit 101 in association with the actual data D01 when the actual data D01 stored in the second storage unit 102 is changed. It is a flowchart explaining the process which updates D11. More specifically, FIG. 10A is a process performed by the first virtual machine 41, and FIG. 10B is a process performed by the second virtual machine. In these processes, when any change such as addition / deletion / rewrite is performed on the data stored in the second storage unit 102, the notification unit 212 detects the information and the second virtual machine 42 The process is started (S400).

  First, when there is a change to the data stored in the second storage unit 102, the notification unit 212 of the second virtual machine 42 determines whether the change is a change that requires updating of virtual data ( S401). This is determined, for example, based on whether or not a flag indicating whether or not use in the first virtual machine 41 is assumed is given to the data that has been changed this time. Here, when it is confirmed that the use in the first virtual machine 41 is not assumed, the notification unit 212 does not need to notify the first virtual machine 41 of the change, and the subsequent processing is stopped. The On the other hand, when it is confirmed that the use in the first virtual machine 41 is assumed, it is determined that the virtual data D11 needs to be updated, and the change content is notified to the first virtual machine 41 as update information. (S402, notification step). Thus, the process for notifying the change in the second virtual machine 42 is completed.

  On the other hand, the process in the first virtual machine 41 is started when the update unit 205 receives the update information transmitted from the second virtual machine 42 (S500). When the receiving unit 201 receives the update information, the virtual data stored in the first storage unit 101 is updated according to the information included in the update information (S501, update step). For example, when new real data D01 is stored in the second storage unit 102, virtual data D11 associated with the real data D01 is created, and execution of the virtual data D11 is permitted. Information on the contents (that is, information on processing contents that are allowed to be executed on the actual data D01) is associated with each other and stored in the first storage unit 101. When the actual data D01 is deleted, the virtual data D11 associated with the actual data D01 is deleted. Furthermore, when the information on the processing content that is allowed to be executed on the actual data D01 is changed, the information associated with the virtual data D11 is updated based on this information. Through the above process, the virtual data D11 is updated, the virtual data D11 stored in the first storage unit 101 becomes information associated with the actual data D01, and the process related to the update of the virtual data D11 is ended.

<Effects according to this embodiment>
As described above, according to the data processing device 1 and the data processing method by the data processing device 1 according to the present embodiment, the data is received by the receiving unit 201 of the first virtual machine 41 and stored in the first storage unit 101. The determination unit 202 determines whether a processing instruction using the virtual data D11 (in this embodiment, a usage instruction and an output instruction) is stored in advance in association with the virtual data D11 and is permitted to be executed. Is done. If it is determined that execution is permitted, the processing request unit 203 performs processing of the actual data D01 stored in the second storage unit 102 of the second virtual machine 42 and associated with the virtual data D11. Requested for the second virtual machine 42. Then, the execution of the program using the actual data D01 is performed in the execution processing unit 211 of the second virtual machine 42. As described above, the virtual data D11 associated with the actual data D01 stored in the second storage unit 102 of the second virtual machine 42 is stored in the first storage unit 101 of the first virtual machine 41, and this virtual data D11. The processing of the actual data D01 stored in the second storage unit 102 can be executed in response to the processing request for. Therefore, as a result, the first virtual machine 41 can indirectly use the actual data D01 stored in the second virtual machine 42. Further, according to the data processing apparatus 1 according to the present embodiment, the virtual data D11 stored in the first storage unit 101 of the first virtual machine 41 is allowed to be executed using the actual data D01 in advance. A process request is transmitted to the second virtual machine 42 only when information specifying process contents is associated and a process command (use command and output command) corresponding to this information is received. For example, in the first virtual machine 41, when a malicious application program tries to use the real data D01 stored in the second virtual machine 42, this can be avoided. Therefore, inappropriate use by a malicious application program or the like can be prevented.

  Further, in the data processing device 1 in the present embodiment, change information related to the actual data D01 stored in the second storage unit 102 is notified from the notification unit 212 to the first virtual machine 41, and the update unit 205 changes the information. The virtual data D11 stored in the first storage unit 101 is updated based on the information included in the information. Therefore, for example, the virtual data D11 in the first storage unit 101 can be appropriately added or deleted in accordance with the addition or deletion of the actual data D01 in the second storage unit 102. In addition, when the processing content allowed to be executed on the actual data D01 stored in the second storage unit 102 is changed (for example, when the data usage range is changed due to expiration), etc. By appropriately notifying this information to the first virtual machine 41 and updating the information specifying the processing content associated with the virtual data D11 stored in the first storage unit 101, for example, the above change This can occur between the first virtual machine 41 and the second virtual machine 42 because it is possible to reduce requests from the first virtual machine 41 to the second virtual machine 42 for processing that has become unacceptable. Exchange of unnecessary information can be reduced, and inappropriate use of the actual data D01 stored in the second storage unit 102 can be further suppressed.

(Second Embodiment)
<Configuration of Data Processing Device 2 and Data Processing Method>
(1) Execution Processing Completion Processing FIG. 11 is a block diagram illustrating the configuration of the data processing device 2 according to the second embodiment of the present invention. The following two points are different from the data processing device 1 among the components included in the data processing device 2. That is, the first point is that the first virtual machine 41 includes the processing end request unit 204, and the execution processing unit 211 performs processing based on a request from the processing end request unit 204. The second point is that the execution processing unit 211 of the second virtual machine 42 makes the actual data D01 executable beforehand.

  Of the new configuration and new data processing method in the data processing apparatus 2 described above, the first point will be described first with reference to FIGS. 11 and 12.

  The process end request unit 204 functions as a process end request unit that requests the second virtual machine 42 to end the execution process using the actual data corresponding to the virtual data D11 (actual data D01 in this embodiment). . For example, in the case of conventional music data reproduction, the execution process for the actual data D01 is completed when the entire process is performed up to the end of the actual data D01, or as in endless reproduction. The reproduction process is repeated. However, when the process for the actual data D01 is a reproduction process as a ring tone as in the present embodiment, the owner of the data processing device 2 responds before the process is completed until the end of the actual data D01. In this case, the processing (that is, the reproduction of the ring tone) needs to be stopped. Therefore, when an event that terminates the process (for example, a response by the owner) occurs and the process end request unit 204 detects the information, the second virtual machine 42 is executed based on the information. The end of the execution process using the data D01 is requested. Note that the timing of the end request of the execution process by the process end request unit 204 is not limited to when an event occurs as described above, and may be, for example, the time when the timer has expired.

  On the other hand, when the execution processing unit 211 receives a request related to the end of the execution process from the processing end request unit 204, the execution processing unit 211 uses the actual data D01 based on the request (that is, relates to the output from the speaker 33) A function for terminating the processing is newly provided. When the execution processing unit 211 ends the processing based on the request from the processing end request unit 204, the output of the actual data D01 from the output unit 105 (speaker 33) is stopped.

  A data processing method by the data processing apparatus 2 having the above configuration will be described with reference to the flowchart of FIG. FIG. 12 is a flowchart for explaining processing for ending execution processing using actual data D01. More specifically, FIG. 12A shows processing performed in the first virtual machine 41, and FIG. 12B shows processing performed in the second virtual machine 42. These processes are started when an event (for example, the response of the owner of the data processing device 2) that terminates the execution of the program using the first virtual machine 41, for example, the real data D01, occurs (for example, S800).

  When an event for terminating the execution of the program using the real data D01 occurs, the process end request unit 204 confirms whether the process related to the real data D01 is requested to the second virtual machine 42 (S801). This can be confirmed, for example, by inquiring whether the request has already been sent to the process request unit 203 for the process specifying the virtual data D11 for the second virtual machine 42. As a result, if it is confirmed that the second virtual machine 42 has not yet been requested to perform processing using the actual data D01 corresponding to the virtual data D11, the subsequent processing is stopped. On the other hand, if it is confirmed that a request for processing using the actual data D01 corresponding to the virtual data D11 has already been made, the processing using the actual data D01 has been started in the second virtual machine 42, so 2 Request the virtual machine 42 to end the process (S802, end request step). Thus, the process related to the termination request in the first virtual machine 41 is completed.

  On the other hand, the process in the second virtual machine 42 is started when the execution processing unit 211 receives a process end request using the real data D01 transmitted from the first virtual machine 41 (S900). When receiving the end request, the execution processing unit 211 stops the output of the actual data D01 to the device (speaker 33) based on this request (S901, execution processing step). Then, the decoding of the actual data D01 is terminated (S902, execution process step), and the actual data D01 being read is closed (S903, execution process step). With the above process, the process related to the end of the process using the actual data D01 in the second virtual machine 42 ends. The flowchart shown in FIG. 12 describes a case where the actual data D01 is purchased music data and is output to the output unit 105 (speaker 33) provided in the data processing device 2. Therefore, for example, when outputting the processing result using the actual data D01 from another device, the processing is performed by transmitting a message notifying the output stop to the device that outputs the processing result. Terminate.

(2) Decoding Process for Real Data Next, the second point of the new configuration and the new data processing method in the data processing apparatus 2 will be described with reference to FIGS. 11 and 13.

  In the present embodiment, the execution processing unit 211 further includes a function of setting the actual data D01 in an executable state in advance. Here, “to enter an executable state” means that a process that needs to be performed in order to output the actual data D01 from the output unit 105 is performed in advance. Specifically, the actual data D01 is read and decoded in advance, instead of starting to read the actual data D01 from the time when the processing request from the processing request unit 203 of the first virtual machine 41 is received. Therefore, by setting the state ready for immediate output, the time for reading and decoding the actual data D01 required until the actual data D01 is output is shortened, and the execution process of the actual data D01 is started. It is a thing.

  FIG. 13 is a flowchart for explaining the above processing. This process can be started at an arbitrary timing (S1000). For example, the process may be performed every time the data processing apparatus 2 is turned on, or the actual data D01 is first stored in the data processing apparatus 2. After reading and decoding, it may be reused. As shown in FIG. 13, first, the execution processing unit 211 first checks whether the actual data D01 is stored in the second storage unit 102 (S1001). Here, for example, when the actual data D01 is not stored in the second storage unit 102, this process is terminated, but when it is confirmed that the actual data D01 is stored in the second storage unit 102, The execution processing unit 211 reads the actual data D01 (S1002), and further performs decoding (S1003), so that the actual data D01 can be output. Thus, the process (decoding process) for making the actual data D01 ready to be output is completed. Note that this preliminary decoding process may be stopped halfway before the entire actual data D01 is completely decoded. That is, if a request for processing on the actual data D01 is received while the decoding processing is being performed on the actual data D01, the above-described advance decoding processing is stopped at that time. Then, the data of the part for which the decoding process has been completed is immediately output without being read and decoded. However, the data of the part that has not been subjected to the decoding process is read in the same manner as in the first embodiment, and the data is output to the output unit 105 by periodically repeating decoding and output.

<Effects according to this embodiment>
As described above, according to the data processing apparatus 2 according to the second embodiment, first, the first virtual machine 41 includes the process end request unit 204, so that the program executed in the second virtual machine 42 is executed, for example. If the program is a program that continues processing, the first virtual machine 41 transmits a request to end the execution processing to the second virtual machine 42, and the execution processing unit 211 stops the execution of the program based on this request. Therefore, the use of the actual data D01 stored in the second storage unit 102 can be stopped.

  Also, by making the actual data D01 executable (decoded) in the second virtual machine 42 in advance, the data is faster than when processing is started based on the processing request from the first virtual machine 41. Is output to the output unit 105 (speaker 33).

(Third embodiment)
<Configuration of Data Processing Device 3 and Data Processing Method>
FIG. 14 is a block diagram illustrating the configuration of the data processing device 3 according to the third embodiment of the present invention. Among the configurations included in the data processing device 3, the differences from the data processing devices 1 and 2 are as follows. That is, the second virtual machine 42 includes an event information receiving unit 213 that receives event information.

  The event information receiving unit 213 functions as an event information receiving unit that receives event information that is information related to an event that triggers reception of a processing command in the receiving unit 201 of the first virtual machine 41. The event information here is information that triggers the program stored in the first virtual machine 41 to transmit a processing command. For example, in the case of this embodiment, a processing command for reproducing the virtual data D11 as a ring tone is received by the receiving unit 201. This command is received from a person who has set the virtual data D11 as a ring tone in advance. When the incoming call information is received by an incoming call control unit (not shown) of the data processing apparatus 1 and this information is sent to the first virtual machine 41, the call application of the first virtual machine 41 performs the incoming call information. Therefore, the event information receiving unit 213 of the second virtual machine 42 receives, as event information, information indicating that there is an incoming call from a specific person from the incoming call control unit. Note that, for example, key input using the keypad of the data processing device 2 or a specific portion pressed on the touch panel can be used as event information. In this way, the event information receiving unit 213 is notified to the execution processing unit 211 that the event information has been received.

  The execution processing unit 211 further includes a function of receiving a processing request from the first virtual machine 41 only for a certain period from the time when the event information is received by the event information receiving unit 213. In the first virtual machine 41, the same event information is received almost simultaneously with the time when the event information is received by the event information receiving unit 213 of the second virtual machine 42, and the process related to the event is performed in the first virtual machine 41. Later, when a process is requested to the second virtual machine 42, the process request unit 203 should make a request to the second virtual machine 42. Therefore, the execution processing unit 211 receives the processing request from the first virtual machine 41 only for a certain time after receiving the event information, thereby reliably receiving the processing request from the first virtual machine 41. be able to. This fixed time is the time when the first virtual machine 41 receives event information, and the processing request unit 203 performs processing using the actual data D01 based on the event information to the second virtual machine 42. It can be determined as appropriate in consideration of the time required until the requested time.

  FIG. 15 is a flowchart for explaining the above processing. First, for example, when the event information receiving unit 213 receives event information, the effective time control process is started (S1100, event information receiving step). Then, this information is notified from the event information receiving unit 213 to the execution processing unit 211, and the execution processing unit 211 starts accepting a processing request. The valid time for accepting this processing request is set in advance, for example, for each type of event information. Next, as a result of the processing performed in response to the reception of the event information in the first virtual machine 41, a request for processing related to actual data corresponding to the virtual data D11 is transmitted to the second virtual machine 42 and executed. The processing unit 211 receives this request (S1101, execution processing step). Here, the execution processing unit 211 determines whether the processing request has been made within the valid time (S1102, execution processing step). Whether or not the processing request is made within the valid time is confirmed by, for example, starting reception at the execution processing unit 211 and setting the reception end time based on the valid time in advance. Then, the time when the processing request is received by the execution processing unit 211 of the second virtual machine 42 is compared with the end time of the reception, and if the received time is before the end time, the processing request is within the valid time. Various methods such as a method of judging that the above has been made are used. Here, if the processing request from the first virtual machine 41 is outside the valid time, there is a possibility that it is not a processing request created by regular processing, so the processing in the second virtual machine 42 ends. No further processing is performed. On the other hand, when the processing request from the first virtual machine 41 is within the valid time, it is considered that the request is triggered by the reception of the event information, so execution using the actual data D01 specified by this request The processing is started (S1103, execution processing step). The execution process itself is the same as in the first embodiment. Thus, the control process using the valid time is completed.

<Effects according to this embodiment>
As described above, according to the above embodiment, the data execution processing unit 211 accepts a processing request from the first virtual machine 41 only for a predetermined time after the event information receiving unit 213 receives the event information. Thus, for example, when a large number of processing requests are transmitted to the second virtual machine 42 due to a malicious application program operating in the first virtual machine 41, an official request (for example, from the first virtual machine 41 (for example, It is possible to reduce the problem that requests based on incoming calls etc. cannot be processed. Therefore, the execution process requested from the first virtual machine 41 based on the event information can be appropriately executed, and the program is received by the second virtual machine 42 upon receiving an illegal process request by a malicious application program or the like. Can be avoided.

(Fourth embodiment)
<Configuration of Data Processing Device 4 and Data Processing Method>
FIG. 16 is a block diagram illustrating the configuration of the data processing device 4 according to the fourth embodiment of the present invention. Among the configurations included in the data processing device 4, the points different from the data processing device 3 are as follows. That is, the third storage unit 103 is a storage unit different from the first storage unit 101 and the second storage unit 102.

  The third storage unit 103 is a storage area dedicated to the second virtual machine 42. In the third storage unit 103, the execution processing unit 211 executes the execution process within a predetermined time after receiving the event information received by the event information reception unit 213 and the event information in the same manner as the data processing device 3. It functions as a third storage means for associating the information specifying the actual data D01 with the history information D30. As the history information D30 stored in the third storage unit 103, for example, information indicating an incoming call from another communication terminal is event information, and based on a processing command transmitted from the telephone application based on the event information. In the case of the output of actual data, when the telephone number of the transmission source communication terminal that transmits the event information is A, the actual data A is reproduced, and when the telephone number is B, the actual data B is A table or the like in which telephone numbers and actual data are associated with each other is used such as reproduction.

  When the event information receiving unit 213 newly receives event information, the execution processing unit 211 notified of the reception of the event information from the event information receiving unit 213 receives the third storage unit 103 based on the content of the event information. To obtain the information related to the actual data D01 stored in association with the event information. Based on this result, the actual data D01 stored in the second storage unit 102 is made ready to be executed. As described above, the data processing device 4 according to the present embodiment can identify actual data that can be executed in advance based on the history information D30 stored in the third storage unit 103, and can execute the actual data in advance. It has the feature of being in a state. Note that the “executable state” here refers to performing in advance a process that needs to be performed in order to output the actual data D01 from the output unit 105, as described above.

  Of the data processing method performed by the data processing apparatus 4 having the above-described configuration, points different from the processing described in the above embodiments will be described with reference to FIGS. 17 and 18.

  FIG. 17 is a flowchart illustrating a process of recording a history in the history information D30 of the third storage unit 103. This process is started when the event information is received by the event information receiving unit 213 and notified to the execution processing unit 211 (S1200, execution processing step). The execution processing unit 211 first identifies the event content from the information included in the event information (S1201, execution processing step). Specifically, for example, when the event is an incoming call from another mobile phone, the caller's telephone number is used as the event content. For example, when key input is handled as event information, a key code is used as event contents. Subsequently, when there is a processing request based on the reception of the event information from the first virtual machine 41, the actual data D01 corresponding to the virtual data D11 for which the processing request has been made is specified (S1202). Then, it is confirmed whether the correspondence between the actual data D01 specified in this step and the event contents is already stored as the history information D30 in the third storage unit 103 (S1203). Here, if the above correspondence is already stored in the history information D30, the processing related to history recording is terminated in order to avoid duplicate storage. However, if the above correspondence relationship is not stored in the history information D30, the correspondence relationship between the event contents and the actual data D01 is added to the history information D30 as new history data (S1204). Thus, the process related to history recording ends.

  FIG. 18 is a flowchart illustrating a decoding process using history information D30 in which a history is described by the process shown in FIG. Compared with the decoding process performed by the data processing apparatus 2 according to the second embodiment shown in FIG. 13, the decoding process shown in this flowchart has received event information at the event information receiving unit 213 when the decoding process starts (S1000). The point of time is different. Further, an event content specification (S1004) and a process of specifying actual data from the event content and history (S1005) are added.

  That is, in the flowchart shown in FIG. 18, when the event information receiving unit 213 first receives event information, this information is sent from the event information receiving unit 213 to the execution processing unit 211, and then included in the event information. Event content to be identified (S1004, execution processing step). Then, with reference to the third storage unit 103, it is confirmed whether or not the information specifying the actual data D01 associated with the event content is described in the history information D30 (S1005, execution processing step). Then, it is confirmed whether or not the actual data D01 associated with the event information specified by referring to the history information D30 is stored in the second storage unit 102 (S1001). Is read (S1002, execution processing step), and further decoded (S1003, execution processing step), so that the target real data D01 can be executed in advance (a state in which it can be output from the output unit 105). Thus, the decoding process ends. Here, if the actual data D01 is not stored in the second storage unit 102, the subsequent processing is stopped because the actual data to be subjected to the decoding process cannot be specified in advance. When the execution processing unit 211 receives a request for processing using actual data from the first virtual machine 41, the actual data specified in the request for this processing has been made executable by the above processing. In the case of actual data, output processing is performed using the actual data. Further, if the actual data specified in the processing request is different from the data that can be executed in advance (the data that has been decoded), the actual data specified in the request from the first virtual machine 41 Is newly read, and a series of processing relating to the output of the actual data is performed.

<Effects according to this embodiment>
As described above, according to the above embodiment, when event information is received in the second virtual machine 42, the event information is stored in the third storage unit 103 before the processing request from the first virtual machine 41 is officially received. Based on the information, the actual data D01 stored in association with the event information can be made ready to be executed in advance. Therefore, it is possible to speed up the start of the process of executing the program using the actual data based on the request from the first virtual machine 41. Further, when there are a plurality of real data stored in the second virtual machine 42, which real data D01 is to be executed in advance before referring to the processing request transmitted from the first virtual machine 41. It becomes clear and unnecessary processing such as making unnecessary data ready for execution can be reduced.

(Fifth embodiment)
<Configuration of Data Processing Device 5>
FIG. 19 is a block diagram illustrating the configuration of the data processing device 5 according to the fifth embodiment of the present invention. Of the components included in the data processing device 5, the following two points are different from the data processing device 2. That is, the first point is that the output unit 105 is a specific device called the display 32. The second point is that the display 32 is controlled by the screen control unit 206 newly provided in the first virtual machine 41 and the result of the processing executed by the second virtual machine 42 is displayed on the display 32. On the other hand, the output is performed by the display unit 214. The output means included in the data processing apparatus is diverse, such as speakers, storage, IrDA (Infrared Data Association), network, etc., most of which can be controlled directly from the second virtual machine 42. However, depending on the internal configuration of the data processing apparatus, there is an output unit that can control some events even from the first virtual machine 41 like the display 32 of the present embodiment. In the present embodiment, the data processing apparatus 5 includes a display 32 that is controlled by a first virtual machine 41 for GUI (Graphical User Interface) output, and the second virtual machine 42 processes the display 32. A case of outputting the result is described.

  The screen control unit 206 uses the actual data D01 in the display 32 when the determination unit 202 determines that the process based on the information specifying the processing content is allowed to be performed using the actual data D01. A function for setting the image display area for displaying the result of executing the program to a transparent color.

  When the first virtual machine 41 performs overall management of output control, the first virtual machine 41 normally outputs data, whereby the entire image of the display 32 is formed. In this case, even if a process of displaying an image on the display 32 from the second virtual machine 42 is performed, the image formed by the first virtual machine 41 is preferentially displayed on the display 32, so the second virtual machine The image sent from 42 is not displayed. Therefore, in order to display the image from the second virtual machine 42 on the display 32, the screen control unit 206 needs to perform a process for forming an area for displaying the image from the second virtual machine 42. In the present embodiment, as one of the processing methods, an area for displaying an image from the second virtual machine 42 is set to a transparent color by the screen control unit 206, so that the image from the second virtual machine 42 is displayed in the area. Is displayed. The specific processing will be described below.

  First, whether or not the display destination of the actual data D01 is the display 32 is determined in the first virtual machine 42 based on whether or not the actual data D01 associated with the virtual data D11 is image data. As this determination method, for example, there is a method of determining whether or not the virtual data D11 associated with the actual data D01 has an extension indicating that it is image data. The determination may be made by referring to the contents of the virtual data D11 and directly confirming the file format of the file. Then, when it is determined that the actual data D01 corresponding to the virtual data D11 is image data and it is allowed to execute the processing content that requires the use of the actual data D01, the screen control unit 206 An image display area for opening and displaying the actual data D01 is provided, and a transparent color is set in this area. This image display area is provided on the entire surface of the display 32 or a part thereof. When the image display area is not set to the transparent color, the image displayed on the second virtual machine 42 cannot be output to the screen drawn by the first virtual machine 41, but by setting the transparent color, Control can be performed by the display unit 214 of the second virtual machine 42 only in this area.

  On the other hand, the display unit 214 of the second virtual machine 42 has a function as display means for displaying the result output using the actual data D01 in the second virtual machine 42 within the image display area.

  Here, an example of a screen displayed on the display 32 by the screen control unit 206 and the display unit 214 will be described with reference to FIG. FIG. 20A shows an example of an image displayed on the display 32 from the first virtual machine 41. Specifically, an image display area A1 set to a transparent color is formed near the center of the screen. FIG. 20B is an example of an image displayed on the display 32 from the second virtual machine 42, and image data displayed by the display unit 214 is included in the center of the screen. Further, FIG. 20C is set to the transparent color of FIG. 20A by superimposing the display images by the first virtual machine 41 and the second virtual machine 42 shown in FIGS. 20A and 20B. Since the image shown in FIG. 20B is transmitted through the image display area A1, the image data displayed by the display unit 214 is displayed inside the image display area A1 of the screen configured by the screen control unit 206. This is an example. As described above, the display unit 214 displays the result of executing the execution process using the actual data D01 on the image display area A1 whose background is set to the transparent color, whereby the second virtual The result of the processing by the machine 42 can be displayed on the display 32 that is managed by the first virtual machine 41.

  The screen control unit 206 according to the present embodiment has a function of notifying the display unit 214 of change information, which is information related to the change of the image display area, as a further function. As a further function, the display unit 214 has a function of outputting the actual data D01 to the image display area based on the change information based on the change information. These functions will be specifically described below.

  When the image display area is changed, the screen control unit 206 changes the transparent color area of the display 32 and notifies the display unit 214 of change information that is information related to the change. Have The image display area is not always constant because, for example, the display position and the size thereof vary for each application program. More specifically, for example, when the display method of the display 32 is changed from vertical display to horizontal display, the image display area needs to be changed. In this case, for example, a function unit that changes the display method of the display 32 requests the screen control unit 206 to change the display method, and the screen control unit 206 performs processing based on this request. When it is necessary to change the image display area, the image display area is changed by the screen control unit 206, and the change information is notified to the display unit 214. Here, the information notified from the screen control unit 206 to the display unit 214 is information on the position and size of the image display area after the change. On the other hand, the display unit 214 receives the information related to the change of the image display area notified from the screen control unit 206 as described above, and based on this information, the execution processing unit 211 executes a program using the actual data D01. The executed result is displayed on the image display area of the display 32. As a result, the execution result of the program using the actual data D01 is appropriately displayed even in the changed image display area.

<Data Processing Method by Data Processing Device 5>
Next, a data processing method by the data processing apparatus 5 according to the present embodiment will be described with reference to FIGS. 21 and 22. FIG. 21A is a flowchart for describing processing for making a processing request from the first virtual machine 41 to the second virtual machine 42. FIG. 21B is a flowchart for describing processing performed in the second virtual machine 42 in response to a processing request transmitted from the first virtual machine 41. FIG. 22 is a flowchart for explaining processing when the image display area is changed.

  The flowchart shown in FIG. 21A is a program (in this embodiment) that transmits a processing command (output command) as compared with the flowchart related to the processing request processing by the data processing apparatus 1 of the first embodiment shown in FIG. After confirming whether or not a flag indicating that the telephone application is using the virtual data D11 is held (S202), a processing request is transmitted to the second virtual machine 42 based on the result (S203). ) Before the processing request unit 203 instructs the screen control unit 206 to give an instruction to set a transparent color in the image display area. The screen control unit 206 sets a transparent color in the image display area based on an instruction from the processing request unit 203 (S204, screen control step). Thereafter, a request for processing using the actual data D01 is made to the second virtual machine 42 (S203).

  In the flowchart shown in FIG. 21B, processing after decoding of the actual data D01 is added as compared to the flowchart related to the execution processing by the data processing apparatus 1 of the first embodiment shown in FIG. Specifically, after the real data D01 specified by the processing request transmitted from the first virtual machine 41 is confirmed by the execution processing unit 211 (S301), the real data D01 is read (S302) and decoded (S303). Is done. Furthermore, in the data processing method according to the present embodiment, since the output destination is the image display area in the display 32, the result of the output process is output to the image display area by the display unit 214 (S305). An output process to the display 32 (S306) is performed. As a result of the above process, the result of the process executed in the second virtual machine 42 is output to the display 32 that is under the jurisdiction of the first virtual machine 41.

  The flowchart shown in FIG. 22 is a flowchart for explaining processing related to the change of the image display area, and FIG. 22 (A) explains the processing for notifying the change of the image display area performed in the first virtual machine 41. is there. As described above, this processing is started when the screen control unit 206 receives a request for changing the image display area from the function unit that changes the display method of the display 32 (S1300). When the screen control unit 206 receives a request to change the screen display including the change of the image display area, the screen control unit 206 determines the position and size of the new image display area (S1301). Then, the change information of the image display area including the position and size information is notified to the second virtual machine 42, and the change is instructed (S1302). Through the above processing, the first virtual machine 41 notifies the second virtual machine 42 of the change of the image display area.

  FIG. 22B illustrates the processing related to the change of the image display area, which is started when the second virtual machine 42 receives the change information of the image display area from the first virtual machine 41 (S1400). is there. Upon receiving the change information of the image display area from the first virtual machine 41, the display unit 214 of the second virtual machine 42 grasps the position and size of the image display area after the change (S1401). When the execution result of the program using the actual data D01 performed in the execution processing unit 211 is displayed, the change information of the image display area is reflected and displayed (S1402). With the above processing, the change in the image display area notified from the first virtual machine 41 can be reflected.

<Effects of this embodiment>
As described above, according to the present embodiment, when outputting the result of processing using data in the second virtual machine 42 to the output means that is the display 32 controlled by the first virtual machine 41, The screen control unit 206 of the first virtual machine 41 changes the image display area to a transparent color based on the determination result by the determination unit 202, and the data processing result is displayed on the area by the display unit 214 of the second virtual machine 42. The As described above, even when the output unit 105 performs screen GUI control by the first virtual machine 41 and outputs the result to the display 32, the result of processing by the second virtual machine 42 can be suitably displayed.

  Information specifying the image display area notified from the screen control unit 206 to the display unit 214 is, for example, “1: QCIF horizontal, 2: QCIF vertical, 3: QVGA horizontal, 4: QVGA vertical”. There is also a method in which a number used between the screen control unit 206 and the display unit 214 is determined in advance for each specific image display region, and the image display region is notified using this number. However, as described above, the screen control unit 206 notifies the change information including the position and size information of the image display area to the display unit 214 of the second virtual machine 42, and the display unit 214 includes the change information. In the case where the result of processing using the actual data D01 is displayed on the display 32, the image display area can be changed more flexibly, and the result executed according to the change of the image display area is displayed on the display 32. Can be suitably displayed.

(Sixth embodiment)
<Configuration of Data Processing Device 6 and Data Processing Method>
FIG. 23 is a block diagram illustrating the configuration of the data processing device 6 according to the sixth embodiment of the present invention. Of the components included in the data processing device 6, the data processing device 6 is different from the data processing device 5 in that the data processing device 6 includes a display 32 and a speaker 33 as output means, and the actual data D01 is transferred to the display 32 as, for example, moving image data. This is data including image data to be output and audio data to be output to the speaker 33, and the processing result by the execution processing unit 211 is output to the display 32 and the speaker 33. Note that the display 32 is GUI-controlled by the first virtual machine 41 in the same manner as the data processing device 5. Further, the result of the processing by the execution processing unit 211 is sent to the display 32 via the display unit 214.

  In the data processing apparatus 6 according to the present embodiment, since the actual data D01 is moving image data as described above, when processing is performed using the actual data D01, the processing result is conventionally obtained by the display 32 and the speaker 33. And output. However, for example, when the owner sets the data processing device 6 to the manner mode or the like, the actual data when the audio output from the speaker 33, which is one of the plurality of output means, is prohibited. The process of D01 will be described.

  The setting for prohibiting voice output as described above is performed by the owner operating the data processing device 6. Information indicating that this setting has been made is stored in the processing request unit 203 of the first virtual machine 41 in the data processing device 6. When the processing request unit 203 requests the second virtual machine 42 to perform processing using the actual data D01 based on the determination result by the determination unit 202, the output to a specific output unit (for example, the speaker 33). Is restricted, the output to the output means is not requested to the second virtual machine 42, and only the process related to the output to the output means (for example, the display 32) whose output is not restricted is requested. To do. Then, the execution processing unit 211 of the second virtual machine 42 executes program execution processing using the actual data D01 on the basis of a request from the first virtual machine 41 and assuming output only to a specific output means. Done.

  The above processing will be described more specifically with reference to FIG. FIG. 24 is a flowchart for explaining processing related to a processing request to the second virtual machine 42 performed by the processing request unit 203 in the data processing method by the data processing device 6. In the processing in FIG. 24, the application program that issued the processing instruction uses the virtual data D11 in the determination unit 202 as compared to the flowchart relating to the processing request processing by the data processing device 5 of the fifth embodiment shown in FIG. After determining whether or not the program holds a flag indicating that the program is being used (S202), before setting a transparent color in the image display area (S204), the output means It is confirmed whether there is an output limitation (S205). The confirmation of output restriction performed here is confirmation of whether or not the output from the display 32 or the speaker 33 is restricted by, for example, the manner mode setting as described above, and there are a plurality of output means. Is done individually. For example, when the manner mode is set and the output of only the speaker 33 is restricted, the processing related to the output to the speaker 33 is stopped here. On the other hand, since the output to the display 32 is not particularly limited, the processing is continued, and an image display area for displaying image data is set (S204), as in the processing shown in FIG. A process request is made to the second virtual machine 42 for only image data in the result of the process for the actual data D01 (S205). Through the above processing, the second virtual machine 42 is requested to process only the image data among the data included in the actual data D01, and the second virtual machine 42 performs processing based on this request, and the processing The result is output to the display 32 via the display unit 214.

<Effects of this embodiment>
As described above, according to the present embodiment, for example, when output to some of the plurality of output units (the speaker 33 in the above example) is restricted, the process of the first virtual machine 41 is performed. The request unit 203 determines whether or not output to each output means is possible, and based on the result, the second virtual machine 42 is requested to process the actual data D01. As a result, the result of processing performed using the actual data D01 in the second virtual machine 42 can be set to a mode in which only a part of output means (display 32 in the above example) is output. Convenience when using the actual data D01 by the processing device 6 can be further enhanced.

  In the above-described embodiment, the case where the processing result of the actual data D01 is output to a plurality of output units has been described. However, there is one output unit that outputs the processing result using the actual data D01. When the output by the output means is restricted, the second virtual machine 42 is not requested to process using the actual data D01. More specifically, for example, when the actual data D01 is music data, the result of the reproduction process using the actual data D01 is output only to the speaker 33. Here, when the sound output from the speaker 33 is restricted by the setting of the manner mode or the like, the processing request unit 203 confirms the restriction of the output according to the flowchart shown in FIG. Since it is confirmed that the audio output is restricted, the process related to the audio output is ended here. Then, the result of the process using the actual data D01 by the second virtual machine 42 is not output to other output means. Therefore, it is not necessary to send a request for processing using the actual data D01 to the second virtual machine 42, and the subsequent processing is stopped. In this way, since the request for processing to be output to the output means for which output is restricted is not transmitted from the first virtual machine 41 to the second virtual machine 42, the second virtual machine 42 Output is stopped without determining whether output is necessary, and the convenience when using data by the data processing device 6 can be enhanced. Further, unnecessary processing is not performed in the second virtual machine 42, and the above processing can be performed more efficiently in the data processing device 6.

  In addition to the manner mode, for example, the data processing device 6 is set to the self mode for blocking communication with the outside, and the result of processing using the actual data D01 needs to be transmitted to the outside. It can also be applied to. In this case, since the processing request for the second virtual machine 42 is canceled in the first virtual machine 41 by the same processing as the case where the manner mode is set as described above, the actual data D01 in the second virtual machine 42 is stored. The processing related to the execution of the used processing and the transmission of the result is not performed.

(Data processing program)
Subsequently, a data processing program for causing a computer configured as the above-described data processing devices 1 to 5 to execute the above-described series of data processing will be described. As shown in FIG. 25, the data processing program 61 is stored in a program storage area 60a formed in a recording medium 60 provided in the computer.

  The data processing program 61 includes a main module 61a that supervises processing, a receiving module 61b, a determination module 61c, a processing request module 61d, and an execution processing module 61e. The functions realized by executing the reception module 61b, the determination module 61c, the processing request module 61d, and the execution processing module 61e are the reception unit 201, the determination unit 202, and the processing request unit 203 described above. The functions of the execution processing unit 204 are the same.

(Modification)
Although the preferred embodiments of the present invention have been described above, the data processing apparatus, the data processing method, and the data processing program according to the present invention can be variously modified.

  In the above embodiment, the case where the data processing devices 1 to 6 include output means (output unit) and output the execution result of the program using the actual data D01 to the output means has been described. It is good also as an aspect which is an external apparatus. In this case, by communicating with the outside via the communication unit 34, the processing result of the execution of the program using the actual data D01 in the second virtual machine 42 is transmitted to the external device, thereby 2 The owner of the data processing apparatus can confirm the result of processing using the actual data D01 stored in the virtual machine 42.

1, 2, 3, 4, 5 ... data processing device, 41 ... first virtual machine, 42 ... second virtual machine, 101 ... first storage unit, 102 ... second storage unit, 201 ... receiving unit, 202 ... determination , 203 ... processing request part, 205 ... update part, 211 ... execution processing part, 212 ... notification part, D01 ... real data, D11 ... virtual data.

Claims (14)

A data processing apparatus comprising a first virtual machine and a second virtual machine that are operated by different operation systems,
The first virtual machine is
A first storage unit that stores in advance virtual data associated with data stored in the second virtual machine, in which processing content allowed to be executed is specified in advance;
Receiving means for receiving a processing command using the virtual data, including information for specifying processing contents to be executed using the data;
Determination means for determining whether or not to execute processing on the virtual data based on information specifying the processing content included in the processing instruction received by the receiving means;
When it is determined by the determination means that the process based on the information specifying the process content is allowed to be performed on the virtual data, the process of the data associated with the virtual data is performed Processing request means for requesting the second virtual machine;
With
The second virtual machine is
Second storage means for storing the data;
Execution processing means for storing a program executed using the data and executing the program using the data based on a request from the one virtual machine;
A data processing apparatus comprising: When the data stored in the second storage unit is updated, the second virtual machine receives update information including information relating to the update of the data stored in the second storage unit. A notification means for notifying the virtual machine;
The first virtual machine further comprises update means for acquiring the update information notified from the notification means and updating the virtual data stored in the first storage means based on the update information. The data processing apparatus according to claim 1. The first virtual machine further includes processing end request means for requesting the second virtual machine to end the data execution processing,
The data processing apparatus according to claim 1, wherein the execution processing unit stops the execution of the program using the data based on a request from the processing end request unit.   The data processing apparatus according to any one of claims 1 to 3, wherein the execution processing unit makes the data stored in the second storage unit ready to be executed. The second virtual machine is
Event information receiving means for receiving event information that is information related to an event that triggers reception of the processing command in the receiving means,
The execution processing means executes the program using the data based on a request from the processing requesting means only for a certain time after the event information receiving means receives the event information. The data processing apparatus as described in any one of Claims 1-4. The second virtual machine is
A third storage means for storing the event information received by the event information receiving means and the data used by the execution processing means after receiving the event information in association with each other;
The execution processing means refers to the third storage means when the event information receiving means receives the event information, and stores the data stored in association with the event information received by the event information receiving means The data processing apparatus according to claim 5, wherein the data processing apparatus is in an executable state.   The data processing apparatus according to claim 1, further comprising an output unit that outputs a result of executing the program using the data by the execution processing unit. The output means is a display controlled by the first virtual machine,
The data is image data,
The first virtual machine further includes screen control means for controlling screen display of the display,
The second virtual machine further includes display means for causing the display to display a result of executing the program using the data by the execution processing means,
The screen control unit uses the data in the display when the determination unit determines that the process based on the information specifying the processing content is allowed to be performed on the virtual data. Set the image display area for displaying the result of executing the program to transparent color,
The data processing apparatus according to claim 7, wherein the display unit displays a result of executing the program using the data in the image display area. The screen control means notifies the display means of change information that is information relating to the change of the image display area,
The data processing apparatus according to claim 8, wherein the display unit displays a result of executing the program using the data in the image display area based on the change information.   The data processing apparatus according to claim 9, wherein the change information is information related to a change in position and size of the image display area.   10. The process request unit according to claim 7, wherein when the output to the output unit is restricted, the process request unit stops the data processing request to the second virtual machine. The data processing device according to item. The data processing device comprises a plurality of the output means,
The processing requesting means, when a result of executing the program using the data is output to the plurality of output means, the program is executed only for some output means of the plurality of output means. The data processing apparatus according to any one of claims 7 to 10, wherein an output of an execution result is requested to the second virtual machine. A data processing method by a data processing apparatus comprising a first virtual machine and a second virtual machine that operate with different operation systems,
A first storage step of storing virtual data associated with data stored in the second virtual machine, wherein the first storage means of the first virtual machine is specified in advance as processing contents allowed to be executed. When,
A receiving step for receiving a processing command using the virtual data, including information for specifying a processing content to be executed by the receiving unit of the first virtual machine using the data;
Whether the determination unit of the first virtual machine is allowed to execute processing on the virtual data based on information specifying the processing content included in the processing instruction received in the receiving step A determination step for determining whether or not;
When it is determined that the process requesting unit of the first virtual machine is allowed to execute the process based on the information specifying the process content in the determination step for the virtual data, the virtual data A process requesting step of requesting the second virtual machine to process the data associated with
A second storage step in which the second storage means of the second virtual machine stores the data;
An execution processing step of storing a program executed using the data, and executing the program using the data based on a request from the first virtual machine;
A data processing method comprising: A data processing program in a data processing apparatus comprising a first virtual machine and a second virtual machine that operate with different operation systems,
A first storage unit that stores in advance virtual data associated with data stored in the second virtual machine, in which processing content allowed to be executed in the first virtual machine is specified in advance;
In the first virtual machine, receiving means for receiving a processing command using the virtual data, including information specifying processing contents to be executed using the data;
In the first virtual machine, when it is determined that the process based on the information specifying the processing content is permitted to be performed on the virtual data by the determination unit, the first virtual machine is associated with the virtual data. Processing request means for requesting the second virtual machine to process the data;
A second storage means for storing the data in the second virtual machine;
Execution processing means for storing a program executed using the data in the second virtual machine and executing the program using the data based on a request from the one virtual machine;
A data processing program for causing a computer to function.

Images