JP5919877B2 - Thin client system, control server, terminal, security control method, and security control program - Google Patents

Description

  The present invention relates to a screen transfer type thin client system, and more particularly to a technique for performing security control in accordance with the status of a terminal.

  In recent years, a thin client system has appeared in which a client terminal used by a user has only a minimum necessary function and almost all other processing is performed on the server side. In particular, a technique of introducing a virtualization technology on the server side and constructing a PC environment used by a user in a virtual machine is often used.

  Well-known products using this technology include NEC “Virtual PC Center”, VMware “VMware View”, and Citrix “XenDesktop”. By using this technology, data is centrally managed on the server side, so there is an advantage that security such as information leakage prevention is enhanced. In addition, since the PC environment used by each user is all on the server side, there is an advantage that maintenance man-hours can be reduced.

  However, when connecting to a virtual machine without considering the location where the user exists, there is a demerit that it is possible to access confidential data in a public place.

  Furthermore, in the thin client system, the NW bandwidth and delay between the terminal and the connection destination virtual machine are very important for the user experience performance, but the background technology method does not consider the position where the user exists. There was a problem that could not connect to the optimal virtual machine.

  Here, as a related technique, in a thin client system, based on position information installed in a client terminal, a technique for grasping a necessary security level for a location used by a user and performing security control is disclosed in Patent Literature. 1-4.

JP 2006-209610 A JP 2010-097510 A JP 2010-108313 A JP 2011-204016 A

  The first problem is that in a screen transfer type thin client system, when a portable terminal such as a Slate PC or a tablet is mainly used as a terminal, the location where the administrator uses the thin client system is specified. That is not possible.

  In the thin client system in the background art, since the element that determines the virtual machine to connect to is based on the user to be used, even if it is a place with a low security level (for example, in a public facility), it handles confidential matters It was possible to connect to a virtual machine that can. Also, in the virtual machine, it is difficult to maintain the confidentiality of the contents because all the contents that can be handled by the user can be processed regardless of the location where the user is using.

  Further, the technique disclosed in Patent Document 1 has a problem that the state on the client terminal side cannot be controlled simultaneously.

  In addition, the techniques disclosed in Patent Documents 2 and 3 have a problem that a rough position where the user uses the terminal can be specified, but the state of the terminal and the user cannot be specified. Furthermore, the techniques disclosed in Patent Documents 2 and 3 do not perform any control on the terminal side.

  Further, the technique disclosed in Patent Document 4 has a problem that, for example, when a notebook personal computer or the like is used, the position cannot be specified only by the IP address. Furthermore, with the technology disclosed in Patent Document 4, only content control can be performed, and the security of the virtual machine or the terminal itself cannot be changed as it is.

  The second problem is that the optimal virtual machine as a connection destination differs depending on where the user uses the thin client system. If the location of the user and the location of the connected virtual machine are physically separated, the response of the thin client system will be poor. Therefore, it is necessary to change the optimal virtual machine as the connection destination depending on where the user is.

(Object of invention)
An object of the present invention is to solve the above-described problems and provide a thin client system, a control server, a terminal, a security control method, and a security control program that perform security control according to the status of the terminal.

  A first thin client system according to the present invention includes a thin client server including a virtual machine, a terminal connected to the virtual machine, and a control server that controls security of the terminal and the virtual machine. Position information acquisition means for acquiring position information indicating the status information, status information acquisition means for acquiring status information indicating whether or not the terminal is stationary, and information transmission means for transmitting the position information and status information to the control server Information processing in which the control server identifies the status of the terminal based on the location information and the status information, and determines whether the status is different from the status based on the location information and status information received immediately before If the means and the information processing means determine that the situation is different, it is determined whether or not the security policy of the terminal and the virtual machine to which the terminal is connected should be changed. If it is determined that it should comprise a policy processing means for generating information to be applied security policy, and information transmitting means for transmitting the information to be applied security policy to the virtual machine terminal and the terminal is connected.

  The first control server of the present invention is a control server that controls the security of the terminal and the virtual machine, specifies the status of the terminal based on the position information and the status information received from the terminal, and the status immediately before If the information processing means for determining whether the situation is different from the situation based on the received position information and status information and the information processing means judges that the situation is different, the security policy of the terminal and the virtual machine to which the terminal is connected is When it is determined whether or not to change, and when it is determined to be changed, policy processing means for generating security policy information to be applied, and a virtual machine to which the terminal and the terminal connect the security policy information to be applied Information transmission means for transmitting to the terminal, the position information is information indicating the position of the terminal, and the state information indicates whether or not the terminal is stationary. Is broadcast.

  The first terminal of the present invention is a terminal connected to a virtual machine, and includes position information acquisition means for acquiring position information indicating the position of the own terminal, and status information indicating whether the own terminal is in a stationary state. Status information acquisition means for acquiring information, and information transmission means for transmitting position information and status information to the control server.

  A first security control method of the present invention is a security control method in a thin client system comprising a thin client server including a virtual machine, a terminal connected to the virtual machine, and a control server for controlling security of the terminal and the virtual machine. The position information acquisition means provided in the terminal executes a position information acquisition step of acquiring position information indicating the position of the own terminal, and the state information acquisition means provided in the terminal determines whether or not the own terminal is in a stationary state. A state information acquisition step for acquiring the state information indicating the information information means provided in the terminal, the information transmission means provided in the control server for executing the information transmission step for transmitting the position information and the state information to the control server, The terminal status is specified based on the location information and the status information, and the status information and status information received immediately before the status is received. Information processing step for determining whether or not the situation is different from the situation based on the policy, and when the policy processing means provided in the control server judges that the situation is different in the information processing step, the terminal and the virtual machine to which the terminal is connected It is determined whether or not the security policy should be changed. If it is determined that the security policy should be changed, the policy processing step for generating the security policy information to be applied is executed, and the information transmission means provided in the control server applies An information transmission step of transmitting information on the security policy to be transmitted to the terminal and the virtual machine to which the terminal is connected is executed.

  A first security control program of the present invention is a security that operates on a thin client system including a thin client server including a virtual machine, a terminal connected to the virtual machine, and a control server that controls security of the terminal and the virtual machine. A control program that causes the position information acquisition unit provided in the terminal to execute position information acquisition processing for acquiring position information indicating the position of the terminal, and the state information acquisition unit provided in the terminal is in a stationary state. Information processing provided by the control server by causing the information transmission means provided in the terminal to execute information transmission processing for transmitting the position information and the status information to the control server. The terminal status is identified based on the location information and status information, and the status information received immediately before the status is received. Information processing that determines whether or not the situation is different from the situation based on the status information is executed, and if the policy processing means provided in the control server judges that the situation is different in the information processing, the terminal and the virtual to which the terminal is connected Determine whether the security policy of the machine should be changed. If it is determined that it should be changed, execute the policy processing to generate the security policy information to be applied and apply it to the information transmission means provided in the control server. Information transmission processing for transmitting information on the security policy to be transmitted to the terminal and the virtual machine to which the terminal is connected is executed.

  According to the present invention, security control can be performed according to the status of the terminal.

  The reason is that the situation of the user is judged from the position data and various sensor information obtained from the terminal, the security in the thin client system is dynamically switched, and the connection destination virtual machine of the thin client system is appropriately determined. This is because it is possible to optimize the security level in the thin client system and to connect to the optimum connection destination virtual machine.

It is a block diagram which shows the structure of the thin client system by the 1st Embodiment of this invention. It is a figure which shows the structural example of the condition management table by the 1st Embodiment of this invention. It is a figure which shows the structural example of the security policy management table by the 1st Embodiment of this invention. It is a figure which shows the structural example of the security policy setting table by the 1st Embodiment of this invention. It is a figure which shows the structural example of the connection destination management table by the 1st Embodiment of this invention. It is a block diagram which shows the structure of the thin client system by the 2nd Embodiment of this invention. It is a figure which shows the structural example of the condition management table by the 2nd Embodiment of this invention. It is a figure which shows the structural example of the security policy management table by the 2nd Embodiment of this invention. It is a figure which shows the structural example of the security policy setting table by the 2nd Embodiment of this invention. It is a figure which shows the structural example of the connection destination management table by the 2nd Embodiment of this invention. It is a block diagram which shows the structure of the thin client system by the 3rd Embodiment of this invention. It is a figure which shows the structural example of the condition management table by the 3rd Embodiment of this invention. It is a figure which shows the structural example of the security policy management table by the 3rd Embodiment of this invention. It is a figure which shows the structural example of the security policy setting table by the 3rd Embodiment of this invention. It is a figure which shows the structural example of the connection destination management table by the 3rd Embodiment of this invention. It is a block diagram which shows the structure of the thin client system by the 4th Embodiment of this invention. It is a figure which shows the structural example of the condition management table by the 4th Embodiment of this invention. It is a figure which shows the structural example of the security policy management table by the 4th Embodiment of this invention. It is a figure which shows the structural example of the security policy setting table by the 4th Embodiment of this invention. It is a figure which shows the structural example of the connection destination management table by the 4th Embodiment of this invention. It is a flowchart which shows operation | movement of the thin client system by the 1st Embodiment of this invention. It is a flowchart which shows operation | movement of the thin client system by the 1st Embodiment of this invention. It is a flowchart which shows operation | movement of the thin client system by the 2nd Embodiment of this invention. It is a flowchart which shows operation | movement of the thin client system by the 2nd Embodiment of this invention. It is a flowchart which shows operation | movement of the thin client system by the 3rd Embodiment of this invention. It is a flowchart which shows operation | movement of the thin client system by the 3rd Embodiment of this invention. It is a flowchart which shows operation | movement of the thin client system by the 4th Embodiment of this invention. It is a flowchart which shows operation | movement of the thin client system by the 4th Embodiment of this invention. It is a block diagram which shows the minimum structure of the thin client system of this invention. It is a block diagram which shows the hardware structural example of the control server of this invention.

  In order to clarify the above and other objects, features and advantages of the present invention, embodiments of the present invention will be described in detail below with reference to the accompanying drawings. In addition to the above-described object of the present invention, other technical problems, means for solving the technical problems, and operational effects thereof will become apparent from the disclosure of the following embodiments.

  In all the drawings, the same reference numerals are given to the same components, and the description will be omitted as appropriate.

(First embodiment)
A first embodiment of the present invention will be described in detail with reference to the drawings. In this embodiment, the basic embodiment of the present invention is assumed, and it is assumed that a position sensor and a state sensor are mounted on the terminal side. Based on the position information (latitude and longitude) obtained from the position sensor and the terminal state obtained from the state sensor, the terminal position and state are identified from the management table, and appropriate security settings and appropriate connection destination settings are made is there.

  A first embodiment of the present invention will be described with reference to FIGS.

  Referring to FIG. 1, a thin client system 10 according to the present embodiment includes a terminal 100, a control server 200, and a thin client server 300.

  The terminal 100 is a computer that operates under program control, and an OS (Operating System) 110 is operating. On the O step S110, a policy control unit 120, a sensor processing unit 130, a connection processing unit 140, and an information transmission unit 150 are included. It is working. In addition, status information acquisition means 160 and position information acquisition means 170 are connected to the terminal 100. The terminal 100 may be not only a general computer but also a portable terminal called a Slate PC or a tablet.

  The policy control unit 120 has a function of changing the security of the terminal 100 based on the security policy information to be applied, which is transmitted from the control server 200.

  The sensor processing unit 130 has a function of collecting and processing the position information of the terminal 100 and the state information of the terminal 100 from the state information acquisition unit 160 and the position information acquisition unit 170.

  The connection processing unit 140 has a function of connecting the terminal 100 to the virtual machine 320 based on the information of the virtual machine 320 to be connected transmitted from the control server 200.

  The information transmission unit 150 has a function of transmitting necessary information from the terminal 100 to the control server 200. Specifically, the information transmission unit 150 transmits the position information and state information of the terminal 100 collected by the sensor processing unit 130 to the control server 200.

  The state information acquisition unit 160 is a single sensor or a plurality of sensors connected to the terminal 100, and has a function of generating information necessary for specifying whether or not the terminal 100 is in a stationary state as the state information. For example, an inclination sensor, a geomagnetic sensor, an acceleration sensor, an electronic compass, and the like correspond to this.

  The position information acquisition unit 170 is a single sensor or a plurality of sensors connected to the terminal 100 and has a function of generating position information of the terminal 100. For example, a GPS sensor corresponds to this.

  The control server 200 is a computer that operates under program control, and an OS (Operating System) 210 is operating. On the OS 210, policy processing means 220, connection management means 230, information processing means 240, and information transmission means 250 are operating.

  The control server 200 also includes a status management table 2410 (FIG. 2) and a security policy management table 2420 (FIG. 3). The status management table 2410 and the security policy management table 2420 are used by the information processing means 240.

  FIG. 2 is a diagram illustrating a configuration example of the situation management table 2410 according to the present embodiment. The status management table 2410 defines the status of the terminal 100 for the combination of the location information and status information of the terminal 100. For example, referring to FIG. 2, when the position information is “north latitude: 35.6851, east longitude: 139.710” and the status information is “still”, it is recognized that the situation is “in-house-normal”. .

  FIG. 3 is a diagram showing a configuration example of the security policy management table 2420 according to this embodiment. The security policy management table 2420 defines an appropriate security policy for the situation obtained from the situation management table 2410. For example, referring to FIG. 3, it can be seen that an appropriate security policy for the situation “in-house-normal” is “in-house”.

  The control server 200 includes a security policy setting table 2210 (FIG. 4). The security policy setting table 2210 is used by the policy processing means 220.

  FIG. 4 is a diagram showing a configuration example of the security policy setting table 2210 according to this embodiment. The security policy setting table 2210 defines what kind of security is actually applied to the security policy obtained from the security policy management table 2420. For example, referring to FIG. 4, for the security policy “in-house”, in fact, full access is permitted to confidential content, access to confidential content is restricted, Web access is restricted, and the terminal It can be seen that nothing is done for 100 screens.

  The control server 200 also includes a connection destination management table 2310 (FIG. 5). The connection destination management table 2310 is used by the connection management unit 230.

  FIG. 5 is a diagram showing a configuration example of the connection destination management table 2310 according to this embodiment. The connection destination management table 2310 defines which connection destination is valid for the situation obtained from the situation management table 2410. For example, referring to FIG. 5, it can be seen that the virtual machine A is defined as the connection destination in the situation of “in-house-normal”.

  The policy processing unit 220 operates according to an instruction from the information processing unit 240 and has a function of selecting a security policy to be applied to the terminal 100 and virtual machines 320 (320-1 to 320-2) described later. Further, the policy processing means 220 has a capability of instructing the information transmitting means 250 to perform processing in order to transmit the security policy information to be applied to the terminal 100 and the virtual machine 320. In order to select a security policy to be applied, the policy processing means 220 has an access right to the security policy setting table 2210.

  The connection management unit 230 operates in accordance with an instruction from the information processing unit 240 and has a function of the terminal 100 selecting an appropriate virtual machine 320 as a connection destination. In addition, in order to transmit new connection destination information to the terminal 100, the information transmission unit 250 has an ability to instruct processing. In order to select an appropriate virtual machine 320 as a connection destination, the connection destination management unit 230 has an access right to the connection destination management table 2310.

  Whether the information processing means 240 needs to receive the location information and status information of the terminal 100 from the terminal 100 and change the security policy and the connection destination virtual machine 320 using the received information. It has a function to determine whether or not.

  The information processing unit 240 has a function of instructing the policy processing unit 220 to perform processing when it is determined that the security policy needs to be changed. The information processing unit 240 has a function of instructing the connection management unit 230 to perform processing when it is determined that the connection destination needs to be changed.

  The information processing means 240 has an access right to the status management table 2410, the security policy management table 2420, and the connection destination management table 2310 in order to make an appropriate determination.

  The information transmission unit 250 operates in accordance with instructions from the policy processing unit 220 and the connection management unit 230, and has a function of transmitting predetermined information to the terminal 100 and the virtual machine 320.

  The thin client server 300 is a computer that operates under program control, and a virtual machine monitor (VMM) 310 is operating.

  The VMM 310 is software (hypervisor) necessary for running a VM (Virtual Machine), and has a function of allocating resources such as a CPU (Central Processing Unit) and memory of the server 300 to each VM.

  The virtual machines 320 (320-1 to 320-2) are logical machines that operate on the VMM 310 and emulate physical machines. In other words, the virtual machine 320 is configured by an environment in which a virtual HW (Hardware) 321 that is virtual hardware is mounted, an O step S322 operates thereon, and a business operation AP 324 further operates thereon. Yes. In the present embodiment, two virtual machines 320 are configured. However, the present invention is not limited to this, and an arbitrary number can be used. In addition, the thin client server 300 can also have a plurality of configurations.

  The policy control unit 323 has a function of changing the security of the virtual machine 320 based on information on the security policy to be applied transmitted from the control server 200.

(Description of the operation of the first embodiment)
Next, the operation of the thin client system 10 according to the present embodiment will be described in detail with reference to the drawings.

  First, with reference to FIG. 21, dynamic security policy application and connection destination switching operation in the present embodiment will be described. The flowchart shown in FIG. 21 is started when the location of the terminal 100 is changed, or after a certain period of time or an instruction from the user.

  First, the sensor processing unit 130 acquires the position information and state information of the terminal 100 from the state information acquisition unit 160 and the position information acquisition unit 170 connected to the terminal 100 (step S101).

  Next, the information transmission unit 150 transmits the position information and state information to the control server 200 (step S102).

  The transmitted information is received by the information processing means 240 of the control server 200, and the information processing means 240 identifies the status of the terminal 100 based on the information and the status management table 2410 (step S103).

  Next, the information processing means 240 compares the situation of the terminal 100 identified in step S103 with the situation of the terminal 100 when the information was received immediately before to determine whether or not the situation has changed (step S104). ). If there is no change in the situation, this flow ends. Note that the status of the terminal 100 when the information is immediately before can be compared by temporarily storing the status information in a data storage area such as a main storage device.

  If the information processing means 240 determines that the state of the terminal 100 has been changed, then the policy processing means 220 determines whether or not the security policy should be changed (step S105).

  The policy processing means 220 first selects a security policy to be applied based on the status of the terminal 100 and information in the security policy management table 2420 specified in step S103 (step S106).

  Next, the policy processing means 220 compares the selected security policy with the security policy currently applied to the terminal 100 and the virtual machine 320, and determines whether or not the security policy should be changed. If there is no policy to be changed, the process proceeds to step S108.

  Here, for example, when the selected security policy is different from the currently applied security policy, the policy processing means 220 determines that the selected security policy should be changed.

  Note that the security policy currently applied to the terminal 100 and the virtual machine 320 may be centrally managed by the control server 200, or the terminal 100 may transmit together with location information and the like.

  When the policy processing unit 220 determines that the security policy needs to be changed, the policy processing unit 220 generates security policy information to be applied to the terminal 100 and the virtual machine 320, and the information transmission unit 250 transmits the information to the terminal 100 and the virtual machine 320. Transmit (step S107).

  In step S107, the policy processing unit 220 generates a security policy to be applied based on information in the security policy setting table 2210.

  In the terminal 100 that has received the information on the security policy to be applied, the policy control unit 120 applies the security policy based on the information. Similarly, in the virtual machine 320 that has received the information on the security policy to be applied, the policy control unit 323 applies the security policy to the information based on the information (step S120).

  After step S107, the connection management unit 230 determines whether or not the connection destination virtual machine 320 of the terminal 100 needs to be changed based on the status of the terminal 100 and the connection destination management table 2310 (step S107). S108). If it is determined that it is not necessary to change the connection destination, this flow ends.

  Here, for example, when the virtual machine 320 defined for the status of the terminal 100 in the connection destination management table 2310 is different from the virtual machine 320 to which the terminal 100 is currently connected, the connection management unit 230 connects to the connection destination. Is determined to be changed to the virtual machine 320 defined in the connection destination management table 2310.

  If the connection management unit 230 determines that the connection destination needs to be changed, the connection management unit 230 generates new connection destination information based on the status of the terminal 100 and the connection destination management table 2310 (step S109).

  Next, the information transmission unit 250 transmits the information on the new connection destination to the terminal 100 (step S110).

  In the terminal 100 that has received the new connection destination information, the connection processing unit 140 connects to the new virtual machine 320 based on the received information (step S111).

  Next, an optimal connection operation to the virtual machine 320 in this embodiment will be described with reference to FIG. The flowchart shown in FIG. 22 is started in response to a connection instruction from the user.

  First, the sensor processing unit 130 acquires the position information and state information of the terminal 100 from the state information acquisition unit 160 and the position information acquisition unit 170 connected to the terminal 100 (S201).

  Next, the information transmission unit 150 transmits the information collected by the sensor processing unit 130 and a new connection request to the virtual machine 320 to the control server 200 (S202).

  The transmitted information is received by the information processing means 240 of the control server 200, and the information processing means 240 identifies the status of the terminal 100 based on the information (S203). The status management table 2410 is used to specify the state of the terminal 100.

  Next, the connection management unit 230 selects an optimum connection destination based on the status of the terminal 100 identified in step S203 and the connection destination management table 2310, and generates information on the connection destination (S204).

  Next, the information transmission unit 250 transmits the information generated in S204 to the terminal 100 (S205).

  In the terminal 100 that has received the connection destination information, the connection processing unit 140 connects to the virtual machine 320 based on the received information (S206).

(Effects of the first embodiment)
According to this embodiment, the security of the thin client system can be easily improved by controlling the security policy and the connection destination based on the location information and status information of the terminal.

  The reason is that the location information and status information of the terminal is automatically sent to the control server, and the control server can change the security policy of the terminal and the virtual machine connected to it at any time, and the terminal is connected This is because the virtual machine to be switched can be switched at an arbitrary timing.

  Moreover, according to this Embodiment, a user's experience can be raised by making it connect automatically to the virtual machine suitable for a user's place.

  The reason is that when connecting to a virtual machine from a terminal, the optimal connection destination virtual machine can be determined on the control server side by transmitting location data from the terminal to the control server. As a result, the connection destination virtual machine can be determined from the terminal. This is because the network up to this point is optimized and the user experience performance can be improved.

  Further, according to the present embodiment, the security policy and connection destination information can be centrally managed on the server side, so that the administrator can immediately switch the security policy and connection destination as necessary.

  The reason is that the security policy and connection destination information are centrally managed on the control server side, and the security policy and connection destination virtual machine can be dynamically switched for terminals and virtual machines as needed. It is.

  Here, FIG. 29 shows a minimum configuration capable of solving the problems of the present invention. The thin client system 10 includes a thin client server 300 including a virtual machine 320, a terminal 100 connected to the virtual machine 320, and a control server 200 that controls the security of the terminal 100 and the virtual machine 320. Position information acquisition means 170 for acquiring position information indicating the position of the terminal, state information acquisition means 160 for acquiring state information indicating whether or not the terminal is stationary, and the control server 200 Information transmission means 150 for transmitting to the control server 200 specifies the status of the terminal based on the location information and the status information, and the status is different from the status based on the location information and status information received immediately before If the information processing means 240 that determines whether or not the information processing means 240 determines that the situation is different, the terminal 10 And a policy processing unit 220 that generates information on a security policy to be applied when it is determined whether or not to change the security policy of the virtual machine 320 to which the terminal 100 is connected, and application The above-described problem of the present invention can be solved by providing the terminal 100 and the information transmission unit 250 that transmits information on the security policy to be transmitted to the virtual machine 320 to which the terminal 100 is connected.

(Second Embodiment)
Next, a second embodiment of the present invention will be described with reference to the drawings. The present embodiment is different from the first embodiment in that a GIS (Geographic Information System) service is used based on position information obtained from a position sensor. In the present embodiment, by using the GIS service, information related to a location (location type: park, train, station, etc.), which is specific information related to the location of the terminal, is specified and used appropriately. Security settings and appropriate connection destination settings.

  A second embodiment of the present invention will be described with reference to FIGS. It should be noted that the description of the outline of each drawing and components other than those described in the first embodiment or components different in function from the first embodiment will be omitted.

  Referring to FIG. 6, the thin client system 10 according to the present embodiment has a configuration in which a GIS service 400 is added to the configuration of the first embodiment. In addition, the control server 200 further includes position inquiry means 260.

  FIG. 7 is a diagram showing a configuration example of the status management table 2410 according to this embodiment. The status management table 2410 according to the present embodiment defines the status of the terminal 100 with respect to the combination of the information about the location where the terminal 100 is located and the status information of the terminal 100 obtained from the GIS service 400. is there. For example, referring to FIG. 7, when the terminal 100 is in “Ox company” and the status information is “stationary”, it is recognized that the situation is “in-house-normal”.

  FIG. 8 is a diagram showing a configuration example of the security policy management table 2420 according to this embodiment. The security policy management table 2420 according to this embodiment defines an appropriate security policy for the situation obtained from the situation management table 2410. For example, referring to FIG. 8, it can be seen that an appropriate security policy in the “in-house-normal” situation is in-house.

  FIG. 9 is a diagram showing a configuration example of the security policy setting table 2210 according to this embodiment. The security policy setting table 2210 according to the present embodiment defines what kind of security is actually applied to the security policy obtained from the security policy management table 2420. For example, referring to FIG. 9, for the internal security policy, in fact, full access is permitted to confidential content, access to confidential content is restricted, web access is restricted, and the terminal screen It turns out that nothing is done to.

FIG. 10 is a diagram showing a configuration example of the connection destination management table 2310 according to this embodiment. The connection destination management table 2310 according to this embodiment defines which connection destination is valid for the situation obtained from the situation management table 2410. For example, referring to FIG. 10, it can be seen that the virtual machine A is defined as the connection destination in the in-house-normal situation.

  The position inquiry unit 260 operates by receiving position information from the terminal 100, and has a function of inquiring information regarding a location where the terminal 100 is located to the GIS service 400 using the received position information.

  The GIS service 400 is a service having a function of specifying an attribute relating to a place from position information.

(Description of operation of second embodiment)
Next, the operation of the thin client system 10 according to the present embodiment will be described in detail with reference to the drawings.

  With reference to FIG. 23, dynamic security policy application and connection destination switching operation according to the present embodiment will be described.

  The flowchart shown in FIG. 23 is the same as the operation of the first embodiment shown in FIG. 21 except for step S303 and step S304, and thus the description thereof is omitted.

  When the information processing means 240 of the control server 200 receives the position information and status information of the terminal 100 transmitted from the terminal 100 in step S302, the position inquiry means 260 sends to the GIS service 400 the location where the terminal 100 is located. Information is inquired (step S303).

  The GIS service 400 is prepared separately from this system, and by using this service, the location name and attributes (how to determine the location) from the location information (for example, longitude and latitude) received from the terminal 100 are used. It is possible to obtain information on the location such as the location.

  Next, the information processing means 240 identifies the status of the terminal 100 with reference to the status management table 2410 based on the information regarding the location obtained in step S303 and the status information received from the terminal 100 (step S304).

  Next, with reference to FIG. 24, the optimum connection operation to the virtual machine 320 in the present embodiment will be described.

  The flowchart shown in FIG. 24 is the same as the operation of the first embodiment shown in FIG. 22 except for steps S403 and S404, and a description thereof will be omitted.

  When the information processing unit 240 of the control server 200 receives the position information, the state information, and the connection request transmitted from the terminal 100 in step S402, the position inquiry unit 260 makes an inquiry about information regarding the location of the terminal 100 to the GIS service 400. Perform (S403).

  Next, the information processing means 240 identifies the status of the terminal 100 with reference to the status management table 2410 based on the information regarding the location obtained in step S403 and the status information received from the terminal 100 (S404).

(Effects of the second embodiment)
According to the present embodiment, even if the terminal is held at an unknown position, the system can be operated without changing the setting information.

  The reason is that it is possible to identify a specific location attribute from unknown location information in cooperation with the GIS service, and to set a security policy or the like for the location attribute in advance. Because.

(Third embodiment)
Next, a third embodiment of the present invention will be described with reference to the drawings. In the present embodiment, in addition to the configuration of the first embodiment, the user and the terminal include user sensors. In this Embodiment, the distance information of a user and a terminal can be acquired by providing a user sensor. As a result, appropriate security settings and appropriate connection destination settings are made assuming that the user is temporarily away from the desk or the terminal is stolen.

  A third embodiment of the present invention will be described with reference to FIGS. It should be noted that the description of the outline of each figure and components other than those described in the first embodiment or components different in function from the first embodiment will be omitted.

  Referring to FIG. 11, the thin client system 10 according to the present embodiment has a configuration in which a user 500 having a user sensor 510 is added to the configuration of the first embodiment. The terminal 10 further includes a user sensor 180.

  The user sensor 180 is a single sensor or a plurality of sensors connected to the terminal 100. The user sensor 180 communicates with the user sensor 510 included in the user 500 who uses the terminal 100 and has a function of measuring the distance between the terminal 100 and the user 500.

  FIG. 12 is a diagram showing a configuration example of the situation management table 2410 according to this embodiment. The status management table 2410 according to the present embodiment defines the status of the terminal 100 with respect to the combination of the position information and status information of the terminal 100 and the distance information between the user and the terminal 100. For example, referring to FIG. 12, when the position information is “north latitude: 35.6851, east longitude: 139.710”, the status information is “still”, and the distance information is “near”, the situation is recognized as “in-house-normal”. You can see that

  Whether the distance between the user sensors is near or far can be determined, for example, by using an arbitrary distance as a threshold, farther if the distance is greater than or equal to the threshold, and closer if less than the threshold.

  FIG. 13 is a diagram showing a configuration example of the security policy management table 2420 according to this embodiment. The security policy management table 2420 according to this embodiment defines an appropriate security policy for the situation obtained from the situation management table 2410. For example, referring to FIG. 13, it can be seen that an appropriate security policy in the situation “in-house-normal” is “in-house”.

  FIG. 14 is a diagram showing a configuration example of the security policy setting table 2210 according to this embodiment. The security policy setting table 2210 according to the present embodiment defines what kind of security is actually applied to the security policy obtained from the security policy management table 2420. For example, referring to FIG. 14, for the security policy of “in-house”, in practice, full access is permitted to confidential content, access to confidential content is restricted, Web access is restricted, and the terminal You can see that nothing is done to the screen.

  FIG. 15 is a diagram showing a configuration example of the connection destination management table 2310 according to this embodiment. The connection destination management table 2310 according to the present embodiment defines which connection destination is valid for the situation obtained from the situation management table 2410. For example, referring to FIG. 15, in the situation “in-house-normal”, it can be seen that the virtual machine A is defined as the connection destination.

  The user 500 uses the thin client service using the terminal 100.

  The user sensor 510 is a single sensor or a plurality of sensors owned by the user 500, and has a function of communicating with the user sensor 180 connected to the terminal 100 and measuring the distance between the terminal 100 and the user 500. .

(Description of the operation of the third embodiment)
Next, the operation of the thin client system 10 according to the present embodiment will be described in detail with reference to the drawings.

With reference to FIG. 25, dynamic security policy application and connection destination switching operation in the present embodiment will be described.

  First, the sensor processing unit 130 acquires the state information acquisition unit 160, the position information acquisition unit 170, the position information and state of the terminal 100 connected to the terminal 100, and the distance information between the terminal 100 and the user 500 ( S501).

  Next, the information transmission unit 150 transmits the information collected by the sensor processing unit 130 to the control server 200 (S502).

  The transmitted information is received by the information processing unit 240 of the control server 200, and the information processing unit 240 refers to the status management table 2410 based on the information and identifies the status of the terminal 100 (S503).

  Since step S504 and subsequent steps are the same as the operation of the first embodiment shown in FIG. 21, description thereof is omitted.

  Next, with reference to FIG. 26, the optimum connection operation to the virtual machine in the present embodiment will be described.

  First, the sensor processing unit 130 acquires the state information acquisition unit 160, the position information acquisition unit 170, the position information and state of the terminal 100 connected to the terminal 100, and the distance information between the terminal 100 and the user 500 ( S601).

  Next, the information transmission unit 150 transmits the information collected by the sensor processing unit 130 to the control server 200 (S602).

  The transmitted information is received by the information processing unit 240 of the control server 200, and the information processing unit 240 refers to the status management table 2410 based on the information and identifies the status of the terminal 100 (S603).

  The operation after step S604 is the same as that of the first embodiment shown in FIG.

(Effects of the third embodiment)
According to the present embodiment, it is possible to set a security policy when the terminal is away from the user, and it is possible to operate in consideration of theft.

  The reason is that the user and the terminal each have a sensor, and the sensors can recognize the distance by communicating with each other, and the security policy can be defined based on the recognized information.

(Fourth embodiment)
Next, a fourth embodiment of the present invention will be described with reference to the drawings. In this embodiment, in addition to the configuration of the first embodiment, an NFC (Near Field Communication) reader mounted on the terminal side as a position sensor and an NFC tag embedded in a desk or the like are used for pinpointing. The location is specified, and more appropriate security settings and appropriate connection destination settings are made.

  A fourth embodiment of the present invention will be described with reference to FIGS. It should be noted that the description of the outline of each figure and components other than those described in the first embodiment or components different in function from the first embodiment will be omitted.

  Referring to FIG. 16, the thin client system 10 according to the present embodiment has a configuration in which an NFC tag 600 is added to the configuration of the first embodiment. Further, the terminal 100 includes an NFC reader 190 instead of the position information acquisition unit 170.

The NFC reader 190 is a single sensor or a plurality of sensors connected to the terminal 100, and is embedded in a desk or the like. The NFC reader 190 communicates with the NFC tag 600 and has a function of reading a unique identifier (ID) registered in the NFC tag 600.
Here, NFC is a non-contact type device, and Felica is a part thereof.

  FIG. 17 is a diagram showing a configuration example of the situation management table 2410 according to the present embodiment. The status management table 2410 according to this embodiment defines the status of the terminal 100 with respect to the combination of the ID of the NFC tag 600 and the status information of the terminal 100 obtained from the terminal. For example, referring to FIG. 17, when the ID of the NFC tag 600 is “010” and the status information is “still”, the situation may be recognized as “HR department (location where the HR department is located)”. Recognize.

  FIG. 18 is a diagram showing a configuration example of the security policy management table 2420 according to this embodiment. The security policy management table 2420 according to this embodiment defines an appropriate security policy for the situation obtained from the situation management table 2410. For example, referring to FIG. 18, it can be seen that an appropriate security policy in the situation of “HR” is “Secure HR”.

  FIG. 19 is a diagram showing a configuration example of the security policy setting table 2210 according to this embodiment. The security policy setting table 2210 according to the present embodiment defines what kind of security is actually applied to the security policy obtained from the security policy management table 2420. For example, referring to FIG. 19, with respect to the security policy of “secure personnel department”, in reality, full access is permitted to personnel contents, access to accounting contents is disabled, and Web access is restricted. It turns out that the terminal screen is set to the peep prevention mode.

  FIG. 20 is a diagram showing a configuration example of the connection destination management table 2310 according to this embodiment. The connection destination management table 2310 defines which connection destination is valid for the situation obtained from the situation management table 2410. For example, referring to FIG. 20, in the situation of “secure personnel department”, it can be seen that virtual machine A is defined as a connection destination.

  The NFC tag 600 is installed in a fixed state on a desk or the like, and has a function of responding to the radio wave 700 from the NFC reader 190 mounted on the terminal 100 and returning a unique identifier.

  The radio wave 700 is transmitted from the NFC reader 190 mounted on the terminal 100 and used when exchanging information with the NFC tag 600.

(Description of the operation of the fourth embodiment)
Next, the operation of the thin client system 10 according to the present embodiment will be described in detail with reference to the drawings.

  With reference to FIG. 27, the dynamic security policy application and the connection destination switching operation in the present embodiment will be described.

  First, the sensor processing unit 130 acquires the state information of the terminal 100 and the ID of the NFC tag 600 from the state information acquisition unit 160 and the NFC reader 190 connected to the terminal 100 (S701).

  Next, the information transmission unit 150 transmits the information collected by the sensor processing unit 130 to the control server 200 (S702).

  The transmitted information is received by the information processing unit 240 of the control server 200, and the information processing unit 240 refers to the status management table 2410 based on the information and identifies the status of the terminal 100 (S703).

  The operations after step S704 are the same as the operations in the first embodiment shown in FIG.

  Next, an optimal connection operation to the virtual machine 320 in the present embodiment will be described with reference to FIG.

  First, the sensor processing unit 130 acquires the state information of the terminal 100 and the ID of the NFC tag 600 from the state information acquisition unit 160 and the NFC reader 190 connected to the terminal 100 (S801).

  Next, the information transmission unit 150 transmits the information collected by the sensor processing unit 130 to the control server 200 (S802).

  The transmitted information is received by the information processing unit 240 of the control server 200, and the information processing unit 240 refers to the status management table 2410 based on the information and identifies the status of the terminal 100 (S803).

  Since the operation after step S804 is the same as that of the first embodiment shown in FIG. 21, the description thereof is omitted.

(Effects of the fourth embodiment)
According to the present embodiment, by using NFC as location information, it becomes possible to specify a pinpoint location, and as a result, even for those that can only give access permission in a more secure environment, Using this system enables integrated management.

  Next, a hardware configuration example of the control server 200 of the present invention will be described with reference to FIG. FIG. 30 is a block diagram illustrating a hardware configuration example of the control server 200 of the present invention.

  Referring to FIG. 30, the control server 200 of the present invention has a hardware configuration similar to that of a general computer device, and includes data such as a CPU (Central Processing Unit) 801 and a RAM (Random Access Memory). The main storage unit 202 used for the work area and the temporary data storage area, the communication unit 203 that transmits / receives data via the network, the input device 205, the output device 206, and the storage device 207 are connected to the input / output device. An output interface unit 204 and a system bus 208 for connecting the above components to each other are provided. The storage device 207 is realized by, for example, a hard disk device including a ROM (Read Only Memory), a magnetic disk, and a nonvolatile memory such as a semiconductor memory.

  Each function of the control server 200 of the present invention is realized by implementing circuit operations, which are hardware components such as LSI (Large Scale Integration), in which a program is incorporated, to realize the operation in hardware. A program that provides the function can be realized in software by storing the program in the storage device 207, loading the program into the main storage unit 202, and executing it by the CPU 201.

  Further, the terminal 100 and the thin client server 300 of the present invention also have the hardware configuration as described above, and realize the functions of the terminal 100 and the thin client server 300 in terms of hardware or software.

  The present invention has been described above with reference to preferred embodiments. However, the present invention is not necessarily limited to the above embodiments, and various modifications can be made within the scope of the technical idea. it can.

  In the above embodiment, the case where the connection destination is a virtual machine has been described. However, only the case is considered, but it goes without saying that the present invention can be applied even when the connection destination is a physical server or a physical client. It is also possible to combine the first to fourth embodiments.

  Furthermore, even if the policy control means included in the terminal and the virtual machine is outside the terminal and the virtual machine, the present invention can be applied as long as the security policy can be applied to the terminal and the virtual machine. In the above-described embodiment, the restrictions on content access and Web access are taken up as the security policy. However, more detailed settings can be made, and other security restrictions can be added.

  In the above embodiment, only one connection destination is defined in connection with the connection destination information in each situation, but the connection destination information can be used even when there are a plurality of connection destinations.

  The various tables shown in the above embodiment are examples, and the present invention is not limited to this.

  It should be noted that any combination of the above-described constituent elements and a conversion of the expression of the present invention between a method, an apparatus, a system, a recording medium, a computer program, etc. are also effective as an aspect of the present invention.

  The various components of the present invention do not necessarily have to be independent of each other. A plurality of components are formed as a single member, and a single component is formed of a plurality of members. It may be that a certain component is a part of another component, a part of a certain component overlaps with a part of another component, or the like.

  Moreover, although the several procedure is described in order in the method and computer program of this invention, the order of the description does not limit the order which performs a several procedure. For this reason, when implementing the method and computer program of this invention, the order of the several procedure can be changed in the range which does not interfere in content.

  The plurality of procedures of the method and the computer program of the present invention are not limited to being executed at different timings. For this reason, another procedure may occur during the execution of a certain procedure, or some or all of the execution timing of a certain procedure and the execution timing of another procedure may overlap.

  Further, a part or all of the above-described embodiment can be described as in the following supplementary notes, but is not limited thereto.

(Appendix 1)
A thin client server containing a virtual machine;
A terminal connected to the virtual machine;
A control server for controlling security of the terminal and the virtual machine,
The terminal is
Position information acquisition means for acquiring position information indicating the position of the own terminal;
State information acquisition means for acquiring state information indicating whether or not the terminal is stationary;
Information transmitting means for transmitting the position information and the state information to the control server;
The control server is
Information processing means for identifying the status of the terminal based on the location information and the status information, and determining whether the status is different from the status based on the location information and the status information received immediately before; ,
When the information processing means determines that the situation is different, it determines whether or not to change the security policy of the terminal and the virtual machine to which the terminal is connected. Policy processing means for generating security policy information to be
A thin client system comprising: information on the security policy to be applied; and information transmission means for transmitting the terminal and the virtual machine to which the terminal is connected.

(Appendix 2)
The control server is
A situation management table that defines the situation of the terminal for a combination of the location information and the status information;
The information processing means is
The thin client system according to appendix 1, wherein the status of the terminal is specified with reference to the status management table.

(Appendix 3)
The control server is
Using a GIS service, comprising location inquiry means for obtaining information on the location of the terminal from the location information,
The information processing means is
The thin client system according to appendix 1, wherein the status of the terminal is specified based on the state information and the information acquired by the position inquiry unit.

(Appendix 4)
The control server is
A situation management table that defines the situation of the terminal for a combination of the status information and information about the location of the terminal;
The information processing means is
The thin client system according to appendix 3, wherein the status of the terminal is specified with reference to the status management table.

(Appendix 5)
The terminal is
Provided with a distance measuring means for detecting the distance to the sensor possessed by the user as distance information,
The information transmitting means is
Transmitting the position information, the state information, and the distance information to the control server;
The information processing means is
The thin client system according to appendix 1, wherein the terminal status is specified based on the position information, the state information, and the distance information.

(Appendix 6)
The control server is
A situation management table that defines the situation of the terminal for a combination of the location information, the status information, and the distance information;
The information processing means is
The thin client system according to appendix 5, wherein the status of the terminal is specified with reference to the status management table.

(Appendix 7)
The thin client system according to any one of appendix 1 to appendix 6, wherein the location information acquisition means is a GPS sensor, and the location information is longitude and latitude.

(Appendix 8)
Any one of appendix 1 to appendix 6, wherein the location information acquisition means is an NFC reader that reads information from an NFC tag installed at a predetermined location, and the location information is an identifier of the NFC tag. 2. A thin client system according to item 1.

(Appendix 9)
The control server is
When the information processing means determines that the situation is different, it is determined whether it is necessary to change the virtual machine that is the connection destination of the terminal, and it is necessary to change the virtual machine that is the connection destination If it is determined, a connection management means for generating new connection destination information is provided.
The information transmitting means is
The thin client system according to any one of appendix 1 to appendix 8, wherein the new connection destination information is transmitted to the terminal.

(Appendix 10)
The control server is
A connection destination management table that defines the virtual machine suitable as a connection destination for the status of the terminal,
The connection management means is
The thin client system according to appendix 9, wherein the new connection destination information is generated based on the connection destination management table.

(Appendix 11)
The control server is
A security policy management table that defines the security policy of the virtual machine to which the terminal and the terminal are connected with respect to the status of the terminal;
A security policy setting table that defines specific setting contents for the security policy;
The policy processing means is
Based on the security policy management table, select a security policy to be applied to the terminal and the virtual machine to which the terminal is connected,
11. The thin client system according to claim 1, wherein information on a security policy to be applied is generated based on the selected security policy and the security policy setting table.

(Appendix 12)
A control server for controlling security of the terminal and the virtual machine,
Information that identifies the status of the terminal based on location information and status information received from the terminal, and determines whether the status is different from the status based on the location information and status information received immediately before Processing means;
When the information processing means determines that the situation is different, it determines whether or not to change the security policy of the terminal and the virtual machine to which the terminal is connected. Policy processing means for generating security policy information to be
Information transmission means for transmitting information on the security policy to be applied to the terminal and the virtual machine to which the terminal is connected;
The location information is
Information indicating the location of the terminal;
The state information is
It is information which shows whether the said terminal is a stationary state. The control server characterized by the above-mentioned.

(Appendix 13)
A situation management table that defines the situation of the terminal for a combination of the location information and the status information;
The information processing means is
The control server according to appendix 12, wherein the status of the terminal is specified with reference to the status management table.

(Appendix 14)
Using a GIS service, comprising location inquiry means for obtaining information on the location of the terminal from the location information,
The information processing means is
The control server according to appendix 12, wherein the status of the terminal is specified based on the state information and the information acquired by the position inquiry means.

(Appendix 15)
A situation management table that defines the situation of the terminal for a combination of the status information and information about the location of the terminal;
The information processing means is
The control server according to appendix 14, wherein the status of the terminal is specified with reference to the status management table.

(Appendix 16)
The information processing means is
Based on the position information and the state information and distance information received from the terminal, the situation of the terminal is identified,
The distance information is
The control server according to appendix 12, wherein the control server is information indicating a distance between a sensor possessed by a user and the terminal.

(Appendix 17)
A situation management table that defines the situation of the terminal for a combination of the location information, the status information, and the distance information;
The information processing means is
The control server according to appendix 16, wherein the status of the terminal is specified with reference to the status management table.

(Appendix 18)
The control server according to any one of appendix 12 to appendix 17, wherein the position information is longitude and latitude.

(Appendix 19)
18. The control server according to any one of appendix 12 to appendix 17, wherein the position information is an identifier of an NFC tag installed at a predetermined location.

(Appendix 20)
When the information processing means determines that the situation is different, it is determined whether it is necessary to change the virtual machine that is the connection destination of the terminal, and it is necessary to change the virtual machine that is the connection destination If it is determined, a connection management means for generating new connection destination information is provided.
The information transmitting means is
The control server according to any one of appendix 12 to appendix 19, wherein the information on the new connection destination is transmitted to the terminal.

(Appendix 21)
A connection destination management table that defines the virtual machine suitable as a connection destination for the status of the terminal,
The connection management means is
The control server according to appendix 20, wherein the new connection destination information is generated based on the connection destination management table.

(Appendix 22)
A security policy management table that defines the security policy of the virtual machine to which the terminal and the terminal are connected with respect to the status of the terminal;
A security policy setting table that defines specific setting contents for the security policy;
The policy processing means is
Based on the security policy management table, select a security policy to be applied to the terminal and the virtual machine to which the terminal is connected,
The control server according to any one of appendix 12 to appendix 21, wherein information on a security policy to be applied is generated based on the selected security policy and the security policy setting table.

(Appendix 23)
A terminal connected to a virtual machine,
Position information acquisition means for acquiring position information indicating the position of the own terminal;
State information acquisition means for acquiring state information indicating whether or not the terminal is stationary;
An information transmission means for transmitting the position information and the state information to a control server.

(Appendix 24)
The terminal is
Provided with a distance measuring means for detecting the distance to the sensor that the user has as distance information,
The information transmitting means is
The terminal according to appendix 23, wherein the position information, the state information, and the distance information are transmitted to the control server.

(Appendix 25)
25. The terminal according to appendix 23 or appendix 24, wherein the location information acquisition means is a GPS sensor, and the location information is longitude and latitude.

(Appendix 26)
25. The appendix 23 or appendix 24, wherein the location information acquisition means is an NFC reader that reads information from an NFC tag installed at a predetermined location, and the location information is an identifier of the NFC tag. Terminal.

(Appendix 27)
A security control method in a thin client system comprising a thin client server including a virtual machine, a terminal connected to the virtual machine, and a control server that controls security of the terminal and the virtual machine,
Location information acquisition means provided in the terminal,
Execute a location information acquisition step for acquiring location information indicating the location of the terminal,
The state information acquisition means provided in the terminal is
Execute a state information acquisition step for acquiring state information indicating whether or not the terminal is stationary;
Information transmitting means provided in the terminal,
An information transmission step of transmitting the position information and the state information to the control server;
Information processing means provided in the control server includes
An information processing step of identifying a status of the terminal based on the location information and the status information, and determining whether the status is different from the status based on the location information and the status information received immediately before. Run,
The policy processing means provided in the control server includes:
When it is determined that the situation is different in the information processing step, it is determined whether or not the security policy of the virtual machine to which the terminal and the terminal are connected should be changed. Execute policy processing steps to generate information on security policies to be
Information transmitting means provided in the control server,
An information transmission step of transmitting information on the security policy to be applied to the terminal and the virtual machine to which the terminal is connected is executed.

(Appendix 28)
In the information processing step,
28. The security control method according to appendix 27, wherein the status of the terminal is specified with reference to a status management table that defines the status of the terminal with respect to a combination of the position information and the status information.

(Appendix 29)
The position inquiry means provided in the control server includes:
Using a GIS service to perform a location query step for obtaining information about the location of the terminal from the location information;
In the information processing step,
28. The security control method according to appendix 27, wherein the status of the terminal is specified based on the state information and the information acquired in the location inquiry step.

(Appendix 30)
In the information processing step,
The security control method according to appendix 29, wherein the status of the terminal is specified by referring to a status management table that defines the status of the terminal with respect to a combination of the status information and information regarding the location of the terminal. .

(Appendix 31)
The distance measuring means included in the terminal is
Execute a distance measurement step that detects the distance to the sensor that the user has as distance information,
In the information transmission step,
Transmitting the position information, the state information, and the distance information to the control server;
In the information processing step,
28. The security control method according to appendix 27, wherein the status of the terminal is specified based on the position information, the state information, and the distance information.

(Appendix 32)
In the information processing step,
The situation of the terminal is specified by referring to a situation management table that defines the situation of the terminal with respect to a combination of the position information, the status information, and the distance information. Security control method.

(Appendix 33)
33. The security control method according to any one of appendix 27 to appendix 32, wherein the location information acquisition means is a GPS sensor, and the location information is longitude and latitude.

(Appendix 34)
Any one of appendix 27 to appendix 32, wherein the location information acquisition means is an NFC reader that reads information from an NFC tag installed at a predetermined location, and the location information is an identifier of the NFC tag. The security control method according to Item 1.

(Appendix 35)
Connection management means provided in the control server,
When it is determined that the situation is different in the information processing step, it is determined whether it is necessary to change the virtual machine that is the connection destination of the terminal, and it is necessary to change the virtual machine that is the connection destination If it is determined, execute a connection management step to generate new connection destination information,
In the information transmission step,
The security control method according to any one of appendix 27 to appendix 34, wherein the information on the new connection destination is transmitted to the terminal.

(Appendix 36)
In the connection management step,
36. The security control method according to appendix 35, wherein the information of the new connection destination is generated based on a connection destination management table that defines the virtual machine appropriate as a connection destination for the status of the terminal.

(Appendix 37)
In the policy processing step,
A security policy to be applied to the terminal and the virtual machine to which the terminal is connected based on a security policy management table defining the security policy of the terminal and the virtual machine to which the terminal is connected with respect to the status of the terminal. Selected,
The information of the security policy to be applied is generated based on the selected security policy and a security policy setting table that defines specific setting contents for the security policy. The security control method according to any one of claims.

(Appendix 38)
A security control program that operates on a thin client system comprising a thin client server including a virtual machine, a terminal connected to the virtual machine, and a control server that controls security of the terminal and the virtual machine,
In the position information acquisition means provided in the terminal,
Execute location information acquisition processing to acquire location information indicating the location of the terminal,
In the state information acquisition means provided in the terminal,
Execute state information acquisition processing to acquire state information indicating whether or not the terminal is stationary,
In the information transmission means provided in the terminal,
Causing information transmission processing to transmit the position information and the state information to the control server;
In the information processing means provided in the control server,
Executes information processing for identifying the status of the terminal based on the location information and the status information, and determining whether the status is different from the status based on the location information and the status information received immediately before Let
In the policy processing means provided in the control server,
When it is determined that the situation is different in the information processing, it is determined whether the security policy of the virtual machine to which the terminal and the terminal are connected should be changed. Execute policy processing to generate security policy information to be
In the information transmission means provided in the control server,
An information transmission process for transmitting information on the security policy to be applied to the terminal and the virtual machine to which the terminal is connected is executed.

(Appendix 39)
In the information processing,
The security control program according to appendix 38, wherein the status of the terminal is specified with reference to a status management table that defines the status of the terminal with respect to a combination of the position information and the status information.

(Appendix 40)
The position inquiry means provided in the control server uses a GIS service to execute position inquiry processing for acquiring information on the location of the terminal from the position information,
In the information processing process,
The security control program according to appendix 38, wherein the status of the terminal is specified based on the state information and the information acquired by the location inquiry process.

(Appendix 41)
In the information processing process,
41. The security control program according to appendix 40, wherein the status of the terminal is specified with reference to a status management table that defines the status of the terminal with respect to a combination of the status information and information regarding the location of the terminal. .

(Appendix 42)
In the distance measuring means provided in the terminal,
Execute distance measurement processing to detect the distance to the sensor that the user has as distance information,
In the information transmission process,
Transmitting the position information, the state information, and the distance information to the control server;
In the information processing,
The security control program according to appendix 38, wherein the status of the terminal is specified based on the position information, the state information, and the distance information.

(Appendix 43)
In the information processing,
The situation of the terminal is specified with reference to a situation management table that defines the situation of the terminal with respect to a combination of the position information, the state information, and the distance information. Security control program.

(Appendix 44)
44. The security control program according to any one of appendix 38 to appendix 43, wherein the location information acquisition means is a GPS sensor, and the location information is longitude and latitude.

(Appendix 45)
Any one of appendix 38 to appendix 43, wherein the location information acquisition means is an NFC reader that reads information from an NFC tag installed at a predetermined location, and the location information is an identifier of the NFC tag. The security control program according to item 1.

(Appendix 46)
In the connection management means provided in the control server,
When it is determined that the situation is different in the information processing, it is determined whether the connection destination virtual machine needs to be changed, and the connection destination virtual machine needs to be changed. If you do, execute the connection management process to generate new connection destination information,
In the information transmission process,
The security control program according to any one of appendix 38 to appendix 45, wherein the new connection destination information is transmitted to the terminal.

(Appendix 47)
In the connection management process,
47. The security control program according to appendix 46, wherein information on the new connection destination is generated based on a connection destination management table that defines the virtual machine appropriate as a connection destination for the status of the terminal.

(Appendix 48)
In the policy processing process,
A security policy to be applied to the terminal and the virtual machine to which the terminal is connected based on a security policy management table defining the security policy of the terminal and the virtual machine to which the terminal is connected with respect to the status of the terminal. Selected,
The information of the security policy to be applied is generated based on the selected security policy and a security policy setting table that defines specific setting contents for the security policy. The security control program according to any one of claims.

  INDUSTRIAL APPLICABILITY According to the present invention, the present invention can be applied to uses such as improving security and user experience performance in a thin client system.

10: Thin client system 100: Terminal 110: OS
120: Policy control means 130: Sensor processing means 140: Connection processing means 150: Information transmission means 200: Control server 201: CPU
202: Main storage unit 203: Communication unit 204: Input / output interface unit 205: Input device 206: Output device 207: Storage device 208: System bus 210: OS
220: Policy processing means 2210: Security policy setting table 230: Connection management means 2310: Connection destination management table 240: Information processing means 2410: Situation management table 2420: Security policy management table 250: Information transmission means 300: Thin client server 310: VMM
320 (320-1 to 320-2): virtual machine 321: virtual HW
322: OS
323: Policy control means 324: Business AP

Claims (9)

A thin client server containing a virtual machine;
A terminal connected to the virtual machine;
A control server for controlling security of the terminal and the virtual machine,
The terminal is
Position information acquisition means for acquiring position information indicating the position of the own terminal;
State information acquisition means for acquiring state information indicating whether or not the terminal is stationary;
Information transmitting means for transmitting the position information and the state information to the control server;
The control server is
Information processing means for identifying the status of the terminal based on the location information and the status information, and determining whether the status is different from the status based on the location information and the status information received immediately before; ,
When the information processing means determines that the situation is different, it determines whether or not to change the security policy of the terminal and the virtual machine to which the terminal is connected. Policy processing means for generating security policy information to be
A thin client system comprising: information on the security policy to be applied; and information transmission means for transmitting the terminal and the virtual machine to which the terminal is connected. The control server is
A situation management table that defines the situation of the terminal for a combination of the location information and the status information;
The information processing means is
The thin client system according to claim 1, wherein the status of the terminal is specified with reference to the status management table. The control server is
Using a GIS service, comprising location inquiry means for obtaining information on the location of the terminal from the location information,
The information processing means is
The thin client system according to claim 1, wherein the status of the terminal is specified based on the state information and the information acquired by the position inquiry unit. The terminal is
Provided with a distance measuring means for detecting the distance to the sensor that the user has as distance information,
The information transmitting means is
Transmitting the position information, the state information, and the distance information to the control server;
The information processing means is
The thin client system according to claim 1, wherein the terminal status is specified based on the position information, the state information, and the distance information. The control server is
When the information processing means determines that the situation is different, it is determined whether it is necessary to change the virtual machine that is the connection destination of the terminal, and it is necessary to change the virtual machine that is the connection destination If it is determined, a connection management means for generating new connection destination information is provided.
The information transmitting means is
The thin client system according to any one of claims 1 to 4, wherein the information on the new connection destination is transmitted to the terminal. The control server is
A security policy management table that defines the security policy of the virtual machine to which the terminal and the terminal are connected with respect to the status of the terminal;
A security policy setting table that defines specific setting contents for the security policy;
The policy processing means is
Based on the security policy management table, select a security policy to be applied to the terminal and the virtual machine to which the terminal is connected,
The thin client system according to any one of claims 1 to 5, wherein information on a security policy to be applied is generated based on the selected security policy and the security policy setting table. A control server that controls security of a virtual machine on a thin client server and a terminal connected to the virtual machine ,
Information that identifies the status of the terminal based on location information and status information received from the terminal, and determines whether the status is different from the status based on the location information and status information received immediately before Processing means;
When the information processing means determines that the situation is different, it determines whether or not to change the security policy of the terminal and the virtual machine to which the terminal is connected. Policy processing means for generating security policy information to be
Information transmission means for transmitting information on the security policy to be applied to the terminal and the virtual machine to which the terminal is connected;
The location information is
Information indicating the location of the terminal;
The state information is
It is information which shows whether the said terminal is a stationary state. The control server characterized by the above-mentioned. A security control method in a thin client system comprising a thin client server including a virtual machine, a terminal connected to the virtual machine, and a control server that controls security of the terminal and the virtual machine,
Location information acquisition means provided in the terminal,
Execute a location information acquisition step for acquiring location information indicating the location of the terminal,
The state information acquisition means provided in the terminal is
Execute a state information acquisition step for acquiring state information indicating whether or not the terminal is stationary;
Information transmitting means provided in the terminal,
An information transmission step of transmitting the position information and the state information to the control server;
Information processing means provided in the control server includes
An information processing step of identifying a status of the terminal based on the location information and the status information, and determining whether the status is different from the status based on the location information and the status information received immediately before. Run,
The policy processing means provided in the control server includes:
When it is determined that the situation is different in the information processing step, it is determined whether or not the security policy of the virtual machine to which the terminal and the terminal are connected should be changed. Execute policy processing steps to generate information on security policies to be
Information transmitting means provided in the control server,
An information transmission step of transmitting information on the security policy to be applied to the terminal and the virtual machine to which the terminal is connected is executed. A security control program that operates on a thin client system comprising a thin client server including a virtual machine, a terminal connected to the virtual machine, and a control server that controls security of the terminal and the virtual machine,
In the position information acquisition means provided in the terminal,
Execute location information acquisition processing to acquire location information indicating the location of the terminal,
In the state information acquisition means provided in the terminal,
Execute state information acquisition processing to acquire state information indicating whether or not the terminal is stationary,
In the information transmission means provided in the terminal,
Causing information transmission processing to transmit the position information and the state information to the control server;
In the information processing means provided in the control server,
Executes information processing for identifying the status of the terminal based on the location information and the status information, and determining whether the status is different from the status based on the location information and the status information received immediately before Let
In the policy processing means provided in the control server,
If the information Hosho the availability management is different from the judgment, if the terminal and the terminal determines whether to change the security policy of the virtual machine to be connected, and determining to change, Execute policy processing to generate security policy information to be applied,
In the information transmission means provided in the control server,
An information transmission process for transmitting information on the security policy to be applied to the terminal and the virtual machine to which the terminal is connected is executed.

Images