JP6273880B2 - Virtual machine management system, virtual machine management apparatus, virtual machine management method, and virtual machine management program - Google Patents

Description

  The present invention relates to a virtual machine management system, a virtual machine management device, a virtual machine management method, and a virtual machine management program, and in particular, a virtual PC type virtual machine management system, a virtual machine management device, a virtual machine management method, and a virtual machine Regarding management programs.

  Thin client systems are spreading from the viewpoint of security, mobility, and machine management, mainly in companies. As a thin client system implementation method, for example, there is a so-called virtual PC type. The virtual PC type is a form in which a virtual PC (referred to as a virtual PC, virtual machine, VM (Virtual Machine), etc., hereinafter referred to as “virtual machine”) is created on a server machine and used via a network. .

  In a thin client system, connection management software (called a connection broker) may be used. The connection management software is used for determining which virtual machine to connect to when a user connects to a virtual machine from a terminal, managing user usage information, and the like. The user accesses the connection management software from the terminal, is allocated a virtual machine to be used, and uses the virtual machine by accessing the virtual machine.

  Thin client systems are used by many companies. In many companies, the start time is fixed, and logins often concentrate around the start time. This situation is sometimes referred to as a “login storm”. For a virtual PC server or storage, this login storm may be larger than the load during normal work. Therefore, as a means for solving the login storm, for example, there is a technique disclosed in Patent Document 1.

  Patent Document 1 discloses a technique related to a network boot system including a management server that starts a client device using a disk image stored in a storage device on a network or in a client device. The management server according to Japanese Patent Application Laid-Open No. 2004-228561 accesses the client device using the user authentication information and gives an operation instruction when the operating status of the client device meets a predetermined condition. The predetermined condition is, for example, in the middle of the night or early morning when the client device is not in operation and the user has almost left the office.

JP 2009-020748 A

  However, Patent Document 1 has a problem in that utilization efficiency may be insufficient because the degree of freedom in associating the user terminal with the client device to be logged in is not considered. In the technique according to Patent Document 1, when the operating status of the client device corresponding to the user terminal that is assumed to issue a login request is not operating and is in a predetermined time zone, there is no login request from the user terminal. Authentication processing is performed. That is, it can be said that the association between the user terminal and the client device is fixed.

  Here, determining the number of operating virtual PCs in one server or storage is called sizing. Sizing is important in terms of hardware costs. However, if sizing according to the load during business, there is a possibility of overload during login storm. On the other hand, sizing according to the load at the time of login storm may result in a low resource utilization rate during work and inefficiency.

  As one solution, it is also possible to perform a disconnection without logging out after the use of the virtual machine is finished. However, it is difficult to always maintain the login state, such as regular maintenance such as patch distribution to virtual machines.

  Even in a company where a login storm occurs every day, there is no guarantee that the same user logs in every time. Therefore, if the association between the user terminal and the client device is fixedly handled as in Patent Document 1, the resources allocated to the user who has not logged in as a result of the login storm time may be wasted. is there. For this reason, the technology according to Patent Document 1 may have poor resource utilization efficiency.

The present invention has been made in order to solve such problems, and provides a flexibility for reducing the load caused by the concentration of logins while providing flexibility in association between users and virtual machines. An object of the present invention is to provide a machine management server, a virtual machine management system, a virtual machine management method, and a virtual machine management program.

A virtual machine management system according to a first aspect of the present invention includes:
A storage device for storing virtual machine management information in which a combination of a plurality of user identification information is assigned to each of a plurality of virtual machine identification information;
A virtual machine management device that manages the plurality of virtual machines,
The virtual machine management device is:
A pre-login processing unit that executes a pre-login process that is a log-in process based on each user identification information assigned in the virtual machine management information for each of the plurality of virtual machines according to the connection status of the plurality of virtual machines When,
A connection request including one of the plurality of user identification information is received from an external terminal, and one of the virtual machines for which the pre-login process has been executed based on the user identification information included in the connection request is selected. A connection request processing unit that connects the selected virtual machine to the terminal so as to be accessible by the user identification information;
Is provided.

The virtual machine management device according to the second aspect of the present invention is:
A storage unit for storing virtual machine management information in which a combination of a plurality of user identification information is assigned to each of a plurality of virtual machine identification information;
A pre-login processing unit that executes a pre-login process that is a log-in process based on each user identification information assigned in the virtual machine management information for each of the plurality of virtual machines according to the connection status of the plurality of virtual machines When,
A connection request including one of the plurality of user identification information is received from an external terminal, and one of the virtual machines for which the pre-login process has been executed based on the user identification information included in the connection request is selected. A connection request processing unit that connects the selected virtual machine to the terminal so as to be accessible by the user identification information;
Is provided.

A virtual machine management method according to a third aspect of the present invention includes:
Depending on the connection status of a plurality of virtual machines, for each of the plurality of virtual machines, execute a pre-login process that is a log-in process based on a combination of a plurality of user identification information assigned in advance,
Accepting a connection request including one of the plurality of user identification information from an external terminal,
Select one of the virtual machines for which the pre-login process has been executed based on the user identification information included in the accepted connection request,
The selected virtual machine is connected to the terminal so as to be accessible by the user identification information.

A virtual machine management program according to the fourth aspect of the present invention includes:
A process of executing a pre-login process that is a log-in process based on a combination of a plurality of user identification information assigned in advance for each of the plurality of virtual machines according to the connection status of the plurality of virtual machines;
A process of accepting a connection request including one of the plurality of user identification information from an external terminal;
A process of selecting one of the virtual machines on which the pre-login process has been executed based on the user identification information included in the received connection request;
A process of connecting the selected virtual machine to the terminal so as to be accessible by the user identification information;
Is executed on the computer.

  According to the present invention, there is provided a virtual machine management server, a virtual machine management system, a virtual machine management method, and a virtual machine for reducing a load caused by concentration of login while providing flexibility in association between a user and a virtual machine. A machine management program can be provided.

It is a block diagram which shows the whole structure of the virtual machine management system concerning Embodiment 1 of this invention. It is a flowchart which shows the flow of the virtual machine management process concerning Embodiment 1 of this invention. It is a block diagram which shows the structure of the thin client system concerning Embodiment 2 of this invention. It is a block diagram which shows the structure of the connection management table concerning Embodiment 2 of this invention. It is a flowchart for demonstrating the flow of the prior login object determination process concerning Embodiment 2 of this invention. It is a sequence diagram which shows the flow of the prior login process concerning Embodiment 2 of this invention. It is a flowchart for demonstrating the flow of the connection request | requirement process concerning Embodiment 2 of this invention. It is a block diagram which shows the structure of the thin client system concerning Embodiment 3 of this invention. It is a figure for demonstrating the concept of update and distribution of the virtual disk concerning Embodiment 3 of this invention.

  Hereinafter, specific embodiments to which the present invention is applied will be described in detail with reference to the drawings. In the drawings, the same elements are denoted by the same reference numerals, and redundant description will be omitted as necessary for the sake of clarity. It should be noted that the “virtual machine” in the following description is realized by the above-described virtual PC method.

<Embodiment 1 of the Invention>
FIG. 1 is a block diagram showing an overall configuration of a virtual machine management system 1000 according to the first embodiment of the present invention. The virtual machine management system 1000 includes a storage device 10, a virtual machine management device 20, and a terminal 30. The storage device 10 may be built in the virtual machine management device 20. Alternatively, the storage device 10 may be connected to the virtual machine management device 20 directly or via a network. Further, although there are a plurality of terminals 30, they are omitted in the drawing.

  The storage device 10 stores virtual machine management information 11. The virtual machine management information 11 is obtained by assigning a combination of a plurality of user identification information to each of the identification information of a plurality of virtual machines. The virtual machine management information 11 includes combinations 111, 112,. For example, in the combination 111, user identification information 1112 and 1113 are assigned to the virtual machine identification information 1111. In addition, user identification information 1122 and 1123 are assigned to the combination 112. Here, the combination of the plurality of user identification information includes all or part of the user identification information managed by the virtual machine management system 1000. Further, the combinations assigned between different virtual machine identification information may be different. Thereby, it is possible to give flexibility to the association between the user and the virtual machine.

  The virtual machine management device 20 includes a pre-login processing unit 21 and a connection request processing unit 22. The pre-login processing unit 21 executes a pre-login process that is a log-in process based on each user identification information assigned in the virtual machine management information 11 for each of the plurality of virtual machines according to the connection status of the plurality of virtual machines. To do. Here, the connection status indicates, for example, whether each virtual machine is logged in, that is, whether it is connected to the terminal 30. For example, it is desirable to perform in a situation where most of the plurality of virtual machines are not connected. The situation in which most of the plurality of virtual machines are not connected is, for example, after periodic maintenance of the virtual machine and before a login storm occurs.

  The login process includes, for example, an authentication process using user identification information and a predetermined password, a process of reading information corresponding to the user identification information into the virtual machine, and various setting processes for the user to use the virtual machine. Can be mentioned. However, the login process according to the first embodiment of the present invention only needs to include at least a process of reading information corresponding to the user identification information into the memory allocated to the virtual machine.

  Then, the pre-login processing unit 21 performs a login process for each user identification information assigned to each virtual machine identification information, regardless of a connection request from the terminal 30. At this time, password authentication may be omitted, or a fixed password for the new process of the pre-log may be used.

  The connection request processing unit 22 receives a connection request including one of a plurality of user identification information from the external terminal 30, and a virtual machine for which a pre-login process based on the user identification information included in the connection request has been executed. One of them is selected, and the selected virtual machine is connected to the terminal 30 so as to be accessible by the user identification information.

  The terminal 30 receives input of user identification information and the like from the user, and transmits a connection request including the user identification information and the like to the virtual machine management apparatus 20. In addition, after connecting to the virtual machine, the terminal 30 transmits the operation content to the virtual machine according to the operation by the user, receives a response from the virtual machine, and displays the response on a screen (not shown).

  FIG. 2 is a flowchart showing the flow of the virtual machine management process according to the first embodiment of the present invention. First, the pre-login processing unit 21 performs a pre-login process according to the connection status of a plurality of virtual machines (S11). The pre-login process is to execute a predetermined log-in process based on a combination of a plurality of user identification information assigned in advance for each of the plurality of virtual machines.

  Next, the connection request processing unit 22 receives a connection request including one of a plurality of user identification information from the external terminal 30 (S12). Then, the connection request processing unit 22 selects one of the virtual machines for which the pre-login process has been executed based on the user identification information included in the received connection request (S13). It is assumed that the virtual machine selected at this time is not connected by another user, that is, a terminal. Thereafter, the connection request processing unit 22 connects the selected virtual machine to the terminal 30 so as to be accessible by the user identification information (S14).

  As described above, in the first embodiment of the present invention, login processing (pre-login processing) is performed in advance on a plurality of user identification information per virtual machine, and each user identification information is pre-logged into a plurality of virtual machines. Thus, when connection requests from terminals are concentrated, it is possible to quickly connect a virtual machine that has been previously logged in. In addition, since the virtual machine management information 11 allows flexibility in associating the virtual machine with the user identification information, even if some users do not log in at the time of login concentration, the virtual machine Since other users who have previously logged in to the user can connect immediately, the utilization efficiency of the virtual machine can be improved as a result. Therefore, it is possible to reduce the load caused by concentration of logins while giving flexibility to the association between the user and the virtual machine.

<Embodiment 2 of the Invention>
FIG. 3 is a block diagram showing a configuration of the thin client system 2000 according to the second embodiment of the present invention. The thin client system 2000 includes a connection management server 100, a virtual machine execution server 200, and a terminal 400, and each is connected via a network 500.

  The virtual machine execution server 200 is a server device that executes a plurality of virtual machines 300a, 300b,. The virtual machine execution server 200 includes an execution control unit (not shown) that controls the start and stop of the execution of the virtual machines 300a to 300n. However, the execution control unit can be realized by a known one.

  Since the virtual machines 300a to 300n have the same configuration, the virtual machine 300a will be described below as a representative. The virtual machine 300a includes a login reception unit 310, a login processing unit 320, and a login monitoring unit 330. Login accepting unit 310 accepts a pre-login instruction from pre-login instructing unit 110 and accepts a login request from terminal 400. The login processing unit 320 executes login processing in response to the login instruction received by the login receiving unit 310. The login monitoring unit 330 monitors login completion and notifies the table management unit 130 of the connection management server 100 of login completion.

  The connection management server 100 is an example of the virtual machine management apparatus 20 and includes a pre-login instruction unit 110, a connection reception unit 120, a table management unit 130, and a connection management table 140. The pre-login instruction unit 110 is an example of the pre-login processing unit 21, determines which user's log-in process is to be executed for each of the virtual machines 300a to 300n, and instructs pre-login. The connection reception unit 120 receives a connection request from the terminal 400 and returns connection destination information indicating the connection destination virtual machine to the terminal 400. The table management unit 130 exchanges with the virtual machines 300a to 300n, and manages the connection management table 140 according to the state of each virtual machine. The connection accepting unit 120 and the table management unit 130 are examples of the connection request processing unit 22. The table management unit 130 plays a role of the pre-login processing unit 21 together with the pre-login instruction unit 110.

  The connection management table 140 is an example of the virtual machine management information, and is a table for managing the connection state of virtual machines. FIG. 4 is a block diagram showing an example of the configuration of the connection management table 140 according to the second embodiment of the present invention. In the connection management table 140, a virtual machine ID 141, a login state 142, an assigned user ID 143, a login user ID 144, and a pre-login user ID 145 are stored in association with each other.

  The virtual machine ID 141 is identification information of the virtual machines 300a to 300n. The login state 142 indicates any state of “logged in”, “pre-login”, and “no login”. In addition, the name and kind which show each state are not limited to this. The “logged in” state indicates a state in which the virtual machine is connected to the terminal and logged in with a specific user ID. The “pre-login in progress” state indicates a state where the virtual machine is not connected to the terminal but the pre-login process has been executed. The “no login” state indicates a state in which the virtual machine is not connected to the terminal and the pre-login process is not performed.

  The assigned user ID 143 indicates a user ID assigned to the virtual machine ID 141. A plurality of assigned user IDs 143 may exist for each virtual machine ID 141. One user ID may be assigned to a plurality of virtual machine IDs.

  The login user ID 144 indicates a user ID that has logged into the corresponding virtual machine. Note that there is one login user ID 144 per virtual machine. The pre-login user ID 145 indicates a user ID that pre-login to the corresponding virtual machine. From the above, a plurality of pre-login user IDs 145 may exist for each virtual machine ID 141. Similarly, one user ID can log in to a plurality of virtual machines in advance.

  The method of managing the connection state of the virtual machine is not limited to the connection management table 140. For example, to which virtual machine the user is assigned and whether or not the user is logged in, whether or not the user is logged in in advance, can be realized by a general account management mechanism.

  Returning to FIG. 3, the description will be continued. The terminal 400 is a so-called thin client, and includes a connection request unit 410 and a login request unit 420. The connection request unit 410 transmits a connection request including the login target user ID to the connection reception unit 120 of the connection management server 100 and receives connection destination information. The login request unit 420 transmits a login request to any of the virtual machines 300a to 300n indicated by the received connection destination information. The login request includes a user ID and a password.

  The network 500 is a network such as an intranet or the Internet.

  Here, when the connection reception unit 120 receives a connection request from the terminal 400, the connection reception unit 120 is a virtual machine that has been pre-logged in for the user ID included in the connection request and other users have not logged in. The selected virtual machine is returned to the terminal 400 as connection destination information. At this time, the connection reception unit 120 performs logout processing for user IDs other than the user ID included in the connection request among the user IDs for which the pre-login processing has been executed for the selected virtual machine. Thereby, the load of the connected virtual machine can be reduced. The logout process may be executed while avoiding the login storm time zone.

  In addition, when the connection reception unit 120 receives a connection request from the terminal 400, if there is no virtual machine for which the pre-login process based on the user ID included in the connection request has been executed, one of the other virtual machines The selected virtual machine is connected to the terminal 400 so as to be accessible by the user ID, and logout processing is performed for a user ID other than the user ID included in the connection request.

  Further, the pre-login instruction unit 110 reads, for each of the plurality of virtual machines, information corresponding to each user identification information assigned in the virtual machine management information into the corresponding virtual machine. Then, when receiving a connection request from the terminal 400, the connection receiving unit 120 performs authentication processing using the user ID and password included in the connection request. To be accessible by the user ID. As a result, the security level can be maintained while minimizing the processing according to the connection request.

  The table management unit 130 updates the connection management table 140 with the login status information (for example, the login status 142) of the virtual machine that has executed the preliminary login processing as the preliminary login processing has been performed (for example, “preliminary login is in progress”). . Further, the table management unit 130 refers to the login state 142 of the connection management table 140 to determine whether or not the virtual machine has been subjected to the pre-login process. Then, the table management unit 130 updates the connection management table 140 so that the login state 142 is connected (for example, “logged in”) for the virtual machines that are connected in an accessible manner.

  Next, the operation in Embodiment 2 of the present invention will be described. First, pre-login processing will be described. The pre-login instructing unit 110 determines a virtual machine to be logged in and a log-in user in order to perform a pre-login process to the virtual machines 300a to 300n with a certain trigger as a trigger. The trigger in this case may be manually performed by the system administrator, may be started at a predetermined time by a timer, etc., or may be performed in accordance with the completion of restart of all virtual machines. good.

  FIG. 5 is a flowchart for explaining a pre-login target determination process according to the second embodiment of the present invention, that is, a flow of determining a pre-login target virtual machine and a login user. The virtual machine to be pre-logged in and the login user are determined by the table management unit 130 referring to the connection management table 140 to determine which virtual machine 300 is to execute the pre-login process of which user. This method is described below.

  First, the table management unit 130 selects one virtual machine from the connection management table 140 (S101). That is, the table management unit 130 refers to the connection management table 140 and selects one of the plurality of virtual machine IDs 141.

  Next, the table management unit 130 determines whether or not the login state 142 of the selected virtual machine is in the “logged in” state (S102). At this time, if the login state 142 is “no login” or “pre-login”, the process proceeds to step S103, and if it is “login”, the process proceeds to step S110.

  Subsequently, the table management unit 130 determines whether or not the assigned user ID 143 is set for the selected virtual machine (S103). At this time, if the assigned user ID 143 is set, the process proceeds to step S104, and if the assigned user ID 143 is not set, the process proceeds to step S110.

  Then, the table management unit 130 selects one of the allocated user IDs 143 (S104). Next, the table management unit 130 determines whether or not the selected user has logged in to another virtual machine (S105). Specifically, the table management unit 130 refers to the connection management table 140 and determines whether or not the selected user ID is set for the login user ID 144 associated with the other virtual machine ID 141. If it is determined that the user selected in step S105 has already logged in to another virtual machine, the process proceeds to step S108. On the other hand, if it is determined that the user has not logged in, the process proceeds to step S106, and the pre-login instruction unit 110 executes a pre-login process (S106). The prior login process will be described in detail with reference to FIG.

  And the table management part 130 puts waiting time after the start of a prior login process (S107). This is to reduce the load on the entire connection management server 100.

  If YES in step S105 or after step S107, the table management unit 130 determines whether there is an assigned user in addition to the user (S108). That is, it is determined whether or not an unselected user ID is assigned to the assigned user ID 143 except for the user ID to be processed. If no other assigned user exists, the process proceeds to step S110. If another assigned user exists, the table management unit 130 selects the next user ID (S109). Then, the process returns to step S105, and thereafter, the process is repeated until there is no unselected assigned user.

  If YES in step S102, NO in step S103, or NO in step S108, the table management unit 130 determines whether or not the next virtual machine exists (S110). Specifically, the table management unit 130 refers to the connection management table 140 and determines whether there is an unselected one among the plurality of virtual machine IDs 141. When determining that there is an unselected virtual machine, the table management unit 130 selects the next virtual machine (S111), and returns to step S102. Thereafter, the process is repeated until there are no unselected virtual machines. If it is determined in step S110 that there is no unselected virtual machine, the table management unit 130 ends the process.

FIG. 6 is a sequence diagram showing the flow of the pre-login process according to the second embodiment of the present invention. That is, the process in step S106 in FIG. 5 will be described. Here, it is assumed that the virtual machine 300a is selected as a target for prior login.

  First, the pre-login instruction unit 110 instructs the log-in reception unit 310 of the pre-login target virtual machine 300a to perform log-in processing with the determined user ID (S201). Normally, the login process requires a user ID and a password, but the password is not necessarily required if only the preliminary login process is performed. Also, even when using a password in consideration of security, unlike a password that a user enters on a terminal (a password for using a virtual machine), a dedicated password only for executing login processing (for example, each password) A simple one common to users) is sufficient.

  The login reception unit 310 instructs the login processing unit 320 to log in with the received user ID (S202). The login processing unit 320 executes login processing with the instructed user ID (S203). Here, the login process includes (1) authentication with a user ID and password, (2) reading a profile corresponding to the user ID from a file server (not shown), and a storage device (not shown) in the virtual machine execution server 200. And (3) loading the profile into a memory (not shown) in the virtual machine execution server 200. However, as described above, password authentication can be omitted in (1). If the profile is stored in the virtual machine execution server 200 in advance, (2) can be omitted. Therefore, if the profile corresponding to the user ID can be specified, it can be realized by the process (3) at the minimum. Thereby, the load of the prior login process itself can be reduced.

  Subsequently, when the login monitoring unit 330 detects login (S204), the login monitoring unit 330 transmits a login completion notification to the table management unit 130 of the connection management server 100 (S205). Thereafter, the table management unit 130 adds the user ID to the pre-login user ID 145 of the connection management table 140, and sets the log-in state 142 to “pre-login in progress” (S206).

  Next, processing until the user operates the terminal to access the virtual machine is described. FIG. 7 is a flowchart for explaining the flow of a connection request process according to the second embodiment of the present invention.

  First, the user inputs a user ID to the terminal 400 and instructs a connection request. The connection request unit 410 of the terminal 400 transmits a connection request including the input user ID to the connection reception unit 120. The connection reception unit 120 refers to the connection management table 140, determines a virtual machine ID that is a connection destination to be distributed to the user who has requested connection, and transmits the virtual machine ID to the connection request unit 410 of the terminal 400 as connection destination information. This procedure is described below.

  First, the connection reception unit 120 determines whether there is a virtual machine to which the user is logged in (S301). If it exists, the virtual machine is distributed (S302). Specifically, the table management unit 130 that has received a request from the connection reception unit 120 searches the login user ID 144 of the connection management table 140. When the search is hit, the connection accepting unit 120 transmits the virtual machine ID 141 corresponding to the login user ID 144 as the connection destination information to the terminal 400.

  If it is determined in step S301 that there is no virtual machine to which the user is logged in, the connection receiving unit 120 determines whether there is a virtual machine to which the user has previously logged in (S303). If it exists, the virtual machine is allocated (S304). Specifically, the table management unit 130 that has received a request from the connection reception unit 120 searches the pre-login user ID 145 in the connection management table 140. When the search is hit, the connection accepting unit 120 transmits the virtual machine ID 141 corresponding to the pre-login user ID 145 as connection destination information to the terminal 400.

  If it is determined in step S303 that there is no virtual machine to which the user has previously logged in, the connection receiving unit 120 determines whether there is a virtual machine in the “no login” state (S305). If it exists, one virtual machine is selected and distributed (S306). Specifically, the table management unit 130 that has received a request from the connection reception unit 120 searches for a virtual machine in which the login state 142 of the connection management table 140 is in the “no login” state. When the search is hit, the connection receiving unit 120 transmits the corresponding virtual machine ID 141 as the connection destination information to the terminal 400.

  If there is no virtual machine in the “no login” state in step S305, the connection receiving unit 120 determines whether there is a virtual machine to which another user has logged in in advance (S307). If it exists, one virtual machine is selected and distributed (S308). Specifically, the table management unit 130 that has received a request from the connection reception unit 120 searches for a virtual machine in which the login state 142 of the connection management table 140 is in the “pre-login in progress” state. When the search is hit, the connection receiving unit 120 transmits the corresponding virtual machine ID 141 as the connection destination information to the terminal 400.

  In step S307, if there is no virtual machine to which another user has pre-logged in, that is, if a user other than the user has logged in to all virtual machines, the user has no virtual machine to be allocated. The process ends (S309).

  The procedure until the connection reception unit 120 refers to the connection management table 140 to determine connection destinations to be distributed to users who have requested connection and transmits the connection destination information to the connection request unit 410 of the terminal 400 as connection destination information. It is.

  Thereafter, the connection request unit 410 that has received the allocated connection destination information passes the connection destination information to the login request unit 420. The login request unit 420 connects to the received connection destination, and executes login with its own account (user ID) and password. At this time, if the login process has already been performed (case of S302), the login process is not newly performed, and the login reception unit 310 immediately uses the virtual machine. Further, if the previous login has been made with the user ID requested to be logged in (case of S304), the login processing unit 320 executes an authentication process with the user ID and the password, and if authenticated, the login receiving unit 310 Use the virtual machine. At this time, the login processing unit 320 may log out another user ID that has been previously logged in.

  Furthermore, if the login process and the pre-login process are not performed with the user ID requested to be logged in (in the case of S306 or S308), the login processing unit 320 executes the login process at this point. If another user has previously logged in, the login processing unit 320 logs out the user ID.

  As described above, in the thin client system 2000 according to the second embodiment of the present invention, it is possible to reduce a load (CPU load or storage load of the virtual machine execution server) due to concentration of logins. This can reduce the problem of time-consuming login. Furthermore, virtual machines can be flexibly allocated by performing prior login to a plurality of user IDs per virtual machine and a plurality of virtual machines per user ID. Further, by logging in to a virtual machine and logging out another user ID that has been pre-logged in to the virtual machine, the resource utilization efficiency of the virtual machine can be improved. Further, by logging in to a certain virtual machine and then logging out the user ID that has been pre-logged in to the other virtual machine, the resource utilization efficiency of the other virtual machine can be improved.

<Third Embodiment of the Invention>
Embodiment 3 of the present invention provides a method for storing a plurality of user profiles in advance in a master virtual machine and deploying the virtual machine. This method can be added to Embodiment 1 or 2 described above, or can be performed independently.

  FIG. 8 is a block diagram showing a configuration of the thin client system 3000 according to the third embodiment of the present invention. The thin client system 3000 includes a virtual machine management apparatus 20a, a file server 40, a virtual machine execution server 50, and terminals 31 and 32, which are connected via a network 500. In addition, about the structure equivalent to FIG. 1 or FIG. 3, the same code | symbol is attached | subjected and description is abbreviate | omitted suitably.

  The virtual machine execution server 50 includes a storage unit 51 and an execution unit 52. The storage unit 51 stores a plurality of disk data corresponding to a plurality of virtual machines. In FIG. 8, two disk data 511 and 512 corresponding to two virtual machines are shown, but the embodiment of the present invention is not limited to this. The execution unit 52 reads the disk data 511 and 512 from the storage unit 51 and executes them as two virtual machines.

  The file server 40 includes a storage unit 41 that is a storage device. The storage unit 41 stores master disk data 411 and profile information 412 and 413. The master disk data 411 is a reference for the disk data 511 and 512. The profile information 412 and 413 is information about each user, that is, data unique to the user, for example, a mobile user profile. The storage unit 41 may be built in the virtual machine management apparatus 20a. Further, the connection management table 140 may be stored.

  The virtual machine management apparatus 20a includes a pre-login processing unit 21, a connection request processing unit 22, and an update processing unit 23. Here, after logout of each user from each of the plurality of virtual machines, the update processing unit 23 extracts a plurality of profile information 412 and 413 related to each user included in the plurality of disk data 511 and 512 from the storage unit 51. . Then, the update processing unit 23 stores the extracted plurality of profile information 412 and 413 in the storage unit 41 of the file server 40. Then, the update processing unit 23 updates the master data 411 by adding a plurality of stored profile information 412 and 413 to the master data 411 stored in the storage unit 41 of the file server 40. Thereafter, the update processing unit 23 overwrites the updated master data 411 on each of the plurality of disk data 511 and 512 stored in the storage unit 51 of the virtual machine execution server 50. Note that the update processing unit 23 may exist other than the virtual machine management apparatus 20a, for example, may exist in the virtual machine execution server 50.

  FIG. 9 is a diagram for explaining the concept of updating and distributing a virtual disk according to the third embodiment of the present invention. Here, it is assumed that the virtual disk M exists as disk data corresponding to the master virtual machine VMm, and the disk data 511 and 512 in the virtual machine execution server 50 are generated in advance based on the virtual disk M. The disk data 511 and 512 have the same contents as the virtual disk M except for unique information such as virtual machine names and IDs. Then, it is assumed that disk data 511 and 512 are executed by the execution unit 52 and are operating as virtual machines VMa and VMb. Also, it is assumed that the unique data a is stored as the user A profile information 412 and the unique data b is stored as the user B profile information 413 in the storage unit 41 of the file server 40.

  Here, it is assumed that the user A logs in to the virtual machine VMa (S401). At this time, the virtual machine VMa reads the unique data a from the file server 40, stores it in the internal (storage unit 51) (S402), and makes it accessible to the user A. At this time, the disk data 511 of the virtual machine VMa becomes M + a. Then, the unique data a is updated by various processes during login of the user A, and then the user A logs out from the virtual machine VMa. Accordingly, the update processing unit 23 extracts the unique data a from the disk data 511 of the virtual machine VMa and stores it in the file server 40 (S403).

  Similarly, when the user B logs in to the virtual machine VMb (S411), the disk data 512 of the virtual machine VMb becomes M + b (S412). When the user B logs out from the virtual machine VMb, the update processing unit 23 extracts the unique data b from the disk data 512 of the virtual machine VMb and stores it in the file server 40 (S413).

  Next, a process for updating the virtual disk M, which is master disk data, will be described. For example, when the next morning login storm is expected, for example, after the night virtual machine is restarted, the data of the master virtual machine VMm is updated. For this purpose, first, logout of all virtual machines is executed, and the latest unique data of all users is written back to the file server.

  Here, the update processing unit 23 reads the unique data a and b from the file server 40, adds them to the virtual disk M, and updates the virtual disk M (S421 and S422). The master data of the updated master virtual machine VMm2 is assumed to be a virtual disk M ′. Here, the virtual disk M ′ is M + a + b +. Thereafter, the update processing unit 23 updates the disk data 511 and 512 in the virtual machine execution server 50 based on the virtual disk M ′ (S423 and S424). Thereby, since the profile information is included in advance in the target of the pre-login process (S430), the read process from the file server 40 can be omitted in the pre-login process. Therefore, the advance login process can be speeded up and the load can be reduced. Even if the prior login process is not performed, the profile information corresponding to the user ID of the login request already exists in the disk data, so that the normal login process can be speeded up. Therefore, the load accompanying the concentration of login can be reduced. By applying the first or second embodiment to the pre-login process, it is possible to provide flexibility in associating the user with the virtual machine.

  When the number of users is enormous, it is not realistic for all users to log in. Therefore, when updating a virtual disk M by designating some users instead of all users, only the profile information of some designated users is acquired to generate the virtual disk M ′. Good. In this case, for example, the specified user may be set as the assigned user ID 143 in the connection management table 140.

  That is, the update processing unit according to the third embodiment of the present invention generates a first master data by adding a part of the stored plurality of profile information to the master data, and generates the first master data. , Overwriting a part of the plurality of disk data stored in the storage unit, assigning a user ID corresponding to a part of the profile information to the virtual machine ID corresponding to the first master data, and storing it in the storage device The virtual machine management information may be updated.

<Other embodiments of the invention>
Another embodiment of the present invention can be expressed as follows. In other words, in a virtual PC type thin client system, login is performed in advance in order to reduce a load caused by concentration of login to a virtual machine. As another form, the user data required at the time of login is copied in advance to the master virtual machine, and each virtual machine is expanded to reduce the load at the time of login.

  Furthermore, the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the gist of the present invention described above. For example, in the above-described embodiment, the present invention has been described as a hardware configuration, but the present invention is not limited to this. The present invention can also realize arbitrary processing by causing a CPU (Central Processing Unit) to execute a computer program. In this case, the computer program can be stored using various types of non-transitory computer readable media and supplied to the computer.

  Non-transitory computer readable media include various types of tangible storage media. Examples of non-transitory computer-readable media include magnetic recording media (for example, flexible disks, magnetic tapes, hard disk drives), magneto-optical recording media (for example, magneto-optical disks), CD-ROMs (Read Only Memory), CD-Rs, CD-R / W, DVD (Digital Versatile Disc), BD (Blu-ray (registered trademark) Disc), semiconductor memory (for example, mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), flash ROM, RAM ( Random Access Memory)). The computer program may also be supplied to the computer by various types of transitory computer readable media. Examples of transitory computer readable media include electrical signals, optical signals, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire and an optical fiber, or a wireless communication path.

  Note that the present invention is not limited to the above-described embodiment, and can be changed as appropriate without departing from the spirit of the present invention. Furthermore, a part or all of the above-described embodiment can be described as in the following supplementary notes, but is not limited thereto.

(Appendix 1)
A storage device for storing virtual machine management information in which a combination of a plurality of user identification information is assigned to each of a plurality of virtual machine identification information;
A virtual machine management device that manages the plurality of virtual machines,
The virtual machine management device is:
A pre-login processing unit that executes a pre-login process that is a log-in process based on each user identification information assigned in the virtual machine management information for each of the plurality of virtual machines according to the connection status of the plurality of virtual machines When,
A connection request including one of the plurality of user identification information is received from an external terminal, and one of the virtual machines for which the pre-login process has been executed based on the user identification information included in the connection request is selected. A connection request processing unit that connects the selected virtual machine to the terminal so as to be accessible by the user identification information;
A virtual machine management system comprising:
(Appendix 2)
The connection request processing unit
The virtual machine management system according to claim 1, wherein logout processing is performed for user identification information other than user identification information included in the connection request among user identification information for which the pre-login processing has been performed on the selected virtual machine.
(Appendix 3)
The connection request processing unit
If there is no virtual machine for which the pre-login process has been executed based on the user identification information included in the connection request, select one of the other virtual machines, and select the selected virtual machine for the terminal. The virtual machine management system according to Supplementary Note 1 or 2, wherein the virtual machine management system performs a logout process with respect to user identification information other than the user identification information included in the connection request, while making the connection accessible by the user identification information.
(Appendix 4)
The pre-login processing unit
For each of the plurality of virtual machines, information corresponding to each user identification information assigned in the virtual machine management information is read into the corresponding virtual machine,
The connection request further includes a password corresponding to the user identification information included in the connection request,
The connection request processing unit
Any one of appendices 1 to 3, wherein authentication processing is performed using user identification information and a password included in the connection request, and when the authentication is authenticated, the selected virtual machine is connected to the terminal so as to be accessible by the user identification information. The virtual machine management system according to claim 1.
(Appendix 5)
A virtual machine execution server that has a storage unit that stores a plurality of disk data corresponding to the plurality of virtual machines, reads each of the plurality of disk data from the storage unit, and executes the plurality of disk data as the plurality of virtual machines; ,
The storage device further stores master data serving as a reference for the plurality of disk data,
The virtual machine management device is:
After logout of each user from each of the plurality of virtual machines, extract a plurality of profile information about each user included in the plurality of disk data from the storage unit,
Storing the extracted plurality of profile information in the storage device;
Update the master data by adding the saved plurality of profile information to the master data stored in the storage device,
The virtual machine management system according to any one of claims 1 to 4, further comprising an update processing unit that overwrites each of the plurality of disk data stored in the storage unit with the updated master data.
(Appendix 6)
The update processing unit
A part of the stored plurality of profile information is added to the master data to generate first master data,
Overwriting the first master data on a part of the plurality of disk data stored in the storage unit,
The virtual machine management information stored in the storage device is updated by allocating user identification information corresponding to the partial profile information to virtual machine identification information corresponding to the first master data. The described virtual machine management system.
(Appendix 7)
The virtual machine management information includes login state information indicating a login state in each virtual machine,
The pre-login processing unit
The virtual machine management information is updated with the pre-login process being executed as the log-in status information about the virtual machine that has executed the pre-login process,
The connection request processing unit
By referring to the login status information of the virtual machine management information, it is determined whether or not the pre-login process has been executed,
The virtual machine management system according to any one of appendices 1 to 6, wherein the virtual machine management information is updated by setting the login state information of the virtual machine connected to be accessible as connected.
(Appendix 8)
A storage unit for storing virtual machine management information in which a combination of a plurality of user identification information is assigned to each of a plurality of virtual machine identification information;
A pre-login processing unit that executes a pre-login process that is a log-in process based on each user identification information assigned in the virtual machine management information for each of the plurality of virtual machines according to the connection status of the plurality of virtual machines When,
A connection request including one of the plurality of user identification information is received from an external terminal, and one of the virtual machines for which the pre-login process has been executed based on the user identification information included in the connection request is selected. A connection request processing unit that connects the selected virtual machine to the terminal so as to be accessible by the user identification information;
A virtual machine management device.
(Appendix 9)
Depending on the connection status of a plurality of virtual machines, for each of the plurality of virtual machines, execute a pre-login process that is a log-in process based on a combination of a plurality of user identification information assigned in advance,
Accepting a connection request including one of the plurality of user identification information from an external terminal,
Select one of the virtual machines for which the pre-login process has been executed based on the user identification information included in the accepted connection request,
A virtual machine management method for connecting the selected virtual machine to the terminal so as to be accessible by the user identification information.
(Appendix 10)
A process of executing a pre-login process that is a log-in process based on a combination of a plurality of user identification information assigned in advance for each of the plurality of virtual machines according to the connection status of the plurality of virtual machines;
A process of accepting a connection request including one of the plurality of user identification information from an external terminal;
A process of selecting one of the virtual machines on which the pre-login process has been executed based on the user identification information included in the received connection request;
A process of connecting the selected virtual machine to the terminal so as to be accessible by the user identification information;
Virtual machine management program that causes a computer to execute.
(Appendix 11)
A virtual machine execution server that has a storage unit that stores a plurality of disk data corresponding to a plurality of virtual machines, reads each of the plurality of disk data from the storage unit, and executes them as the plurality of virtual machines;
A storage device for storing master data serving as a reference for the plurality of disk data;
An update unit for updating the master data,
The update unit
After logout of each user from each of the plurality of virtual machines, extract a plurality of profile information about each user included in the plurality of disk data from the storage unit,
Storing the extracted plurality of profile information in the storage device;
Update the master data by adding the saved plurality of profile information to the master data stored in the storage device,
A virtual machine management system that overwrites each of the plurality of disk data stored in the storage unit with the updated master data.

1000 Virtual machine management system 10 Storage device 11 Virtual machine management information 111 Combination 1111 Virtual machine identification information 1112 User identification information 1113 User identification information 112 Combination 1121 Virtual machine identification information 1122 User identification information 1123 User identification information 20 Virtual machine management device 21 Advance Login processing unit 22 Connection request processing unit 30 Terminal 31 Terminal 32 Terminal 2000 Thin client system 100 Connection management server 110 Pre-login instruction unit 120 Connection reception unit 130 Table management unit 140 Connection management table 200 Virtual machine execution server 300a Virtual machine 300b Virtual machine 300n virtual machine 310 login acceptance unit 320 login processing unit 330 login monitoring unit 400 terminal 410 connection request unit 420 b In requesting section 500 network 141 virtual machine ID
142 Login status 143 Assigned user ID
144 Login user ID
145 Pre-login user ID
3000 Thin client system 20a Virtual machine management device 23 Update processing unit 40 File server 41 Storage unit 411 Master disk data 412 Profile information 413 Profile information 50 Virtual machine execution server 51 Storage unit 511 Disk data 512 Disk data 52 Execution unit VMm Master virtual machine VMa virtual machine VMb virtual machine VMm2 master virtual machine VMa2 virtual machine VMb2 virtual machine M virtual disk a unique data b unique data M 'virtual disk

Claims (9)

A storage device for storing virtual machine management information in which a combination of a plurality of user identification information is assigned to each of a plurality of virtual machine identification information;
A virtual machine management device that manages the plurality of virtual machines,
The virtual machine management device is:
A pre-login processing unit that executes a pre-login process that is a log-in process based on each user identification information assigned in the virtual machine management information for each of the plurality of virtual machines according to the connection status of the plurality of virtual machines When,
A connection request including one of the plurality of user identification information is received from an external terminal, and one of the virtual machines for which the pre-login process has been executed based on the user identification information included in the connection request is selected. A connection request processing unit that connects the selected virtual machine to the terminal so as to be accessible by the user identification information;
Equipped with a,
The pre-login processing unit
Load the profile corresponding to each user identification information assigned in the virtual machine management information, execute the process of starting the corresponding virtual machine as the pre-login process,
The connection request processing unit
Logout processing is performed for user identification information other than user identification information included in the connection request among user identification information for which the pre-login processing has been performed on the selected virtual machine
Virtual machine management system. The connection request processing unit
If there is no virtual machine for which the pre-login process has been executed based on the user identification information included in the connection request, select one of the other virtual machines, and select the selected virtual machine for the terminal. The virtual machine management system according to claim 1, wherein the virtual machine management system according to claim 1, wherein the user identification information is connected so as to be accessible and the user identification information other than the user identification information included in the connection request is logged out. The pre-login processing unit
For each of the plurality of virtual machines, information corresponding to each user identification information assigned in the virtual machine management information is read into the corresponding virtual machine,
The connection request further includes a password corresponding to the user identification information included in the connection request,
The connection request processing unit
Performs an authentication process by the user identification information and password included in the connection request, if it is authenticated, the virtual machine the selected to the terminal in claim 1 or 2 connected to be accessible by the user identification information The described virtual machine management system. A virtual machine execution server that has a storage unit that stores a plurality of disk data corresponding to the plurality of virtual machines, reads each of the plurality of disk data from the storage unit, and executes the plurality of disk data as the plurality of virtual machines; ,
The storage device further stores master data serving as a reference for the plurality of disk data,
The virtual machine management device is:
After logout of each user from each of the plurality of virtual machines, extract a plurality of profile information about each user included in the plurality of disk data from the storage unit,
Storing the extracted plurality of profile information in the storage device;
Update the master data by adding the saved plurality of profile information to the master data stored in the storage device,
The master data after the update is overwritten to each of the plurality of disk data stored in the storage unit, the virtual machine management system according to any one of claims 1 to 3 further comprising an update processing unit. The update processing unit
A part of the stored plurality of profile information is added to the master data to generate first master data,
Overwriting the first master data on a part of the plurality of disk data stored in the storage unit,
The identification information of the virtual machine corresponding to the first master data, assign the user identification information corresponding to the part of the profile information, according to claim 4 configured to update the virtual machine management information stored in the storage device The virtual machine management system described in 1. The virtual machine management information includes login state information indicating a login state in each virtual machine,
The pre-login processing unit
The virtual machine management information is updated with the pre-login process being executed as the log-in status information about the virtual machine that has executed the pre-login process,
The connection request processing unit
By referring to the login status information of the virtual machine management information, it is determined whether or not the pre-login process has been executed,
The virtual machine management system according to any one of claims 1 to 5 , wherein the virtual machine management information is updated by setting the login state information of the virtual machine connected to be accessible as connected. A storage unit for storing virtual machine management information in which a combination of a plurality of user identification information is assigned to each of a plurality of virtual machine identification information;
A pre-login processing unit that executes a pre-login process that is a log-in process based on each user identification information assigned in the virtual machine management information for each of the plurality of virtual machines according to the connection status of the plurality of virtual machines When,
A connection request including one of the plurality of user identification information is received from an external terminal, and one of the virtual machines for which the pre-login process has been executed based on the user identification information included in the connection request is selected. A connection request processing unit that connects the selected virtual machine to the terminal so as to be accessible by the user identification information;
Equipped with a,
The pre-login processing unit
Load the profile corresponding to each user identification information assigned in the virtual machine management information, execute the process of starting the corresponding virtual machine as the pre-login process,
The connection request processing unit
Logout processing is performed for user identification information other than user identification information included in the connection request among user identification information for which the pre-login processing has been performed on the selected virtual machine
Virtual machine management device. Depending on the connection status of a plurality of virtual machines, for each of the plurality of virtual machines, execute a pre-login process that is a log-in process based on a combination of a plurality of user identification information assigned in advance,
Accepting a connection request including one of the plurality of user identification information from an external terminal,
Select one of the virtual machines for which the pre-login process has been executed based on the user identification information included in the accepted connection request,
The selected virtual machine is connected to the terminal so as to be accessible by the user identification information ,
Out of user identification information for which the pre-login process has been performed on the selected virtual machine, logout processing is performed for user identification information other than user identification information included in the connection request,
A virtual machine management method for executing a process of loading a profile corresponding to each previously assigned user identification information and starting a corresponding virtual machine as the pre-login process . A process of executing a pre-login process that is a log-in process based on a combination of a plurality of user identification information assigned in advance for each of the plurality of virtual machines according to the connection status of the plurality of virtual machines;
A process of accepting a connection request including one of the plurality of user identification information from an external terminal;
A process of selecting one of the virtual machines on which the pre-login process has been executed based on the user identification information included in the received connection request;
A process of connecting the selected virtual machine to the terminal so as to be accessible by the user identification information;
A process of performing a logout process for user identification information other than the user identification information included in the connection request among the user identification information for which the pre-login process has been performed on the selected virtual machine;
To the computer ,
The process of executing the pre-login process is:
Load the profile corresponding to the user identification information which the pre-allocated, the virtual machine management program that executes a process to start a virtual machine as the pre-login process.

Images