JPWO2009136628A1 - Information processing system and method and program - Google Patents

Abstract

The present invention is a system that enables a resource to be controlled to be determined by an information processing device when the process uses a resource provided in an external information processing device, not the information processing device in which the process is executed. , Provide methods and programs. When the process is activated by the secure OS (1021) of the information processing apparatus (1000), the designated process determination unit (1011) determines whether the process having the process identifier stored in advance in the designated process identifier storage unit (1022) is activated. And the policy transmission unit (1012) determines the access control rule of the process to be activated to the policy analysis unit (1111) of the information processing apparatus (1100) including the resource control OS. Then, the policy analysis means (1111) determines the resource of the resource identifier included in the received access control rule as a control target resource, and the resource control OS (1121) performs resource control for the resource ( FIG. 1).

Description

(Description of related applications)
The present invention is based on the priority claim of Japanese patent application: Japanese Patent Application No. 2008-122199 (filed on May 8, 2008), the entire contents of which are incorporated herein by reference. Shall.

  The present invention relates to a resource control technique, and more particularly to an information processing system, method, and program for generating a resource control rule for performing resource control used by a process.

  In recent years, information processing apparatuses having functions of distributed processing and device cooperation are increasing. As a result, each process can use not only the resource provided in the information processing apparatus in which the process is executed but also the resource provided in the external information processing apparatus.

  In addition, the information processing apparatus can provide resources not only to the processes being executed internally but also to processes being executed by other information processing apparatuses.

  In such an environment, in order to ensure the security of each information processing apparatus, it is necessary to perform access control with a secure OS (operating system) and to perform resource control to prevent resource occupation.

  Resource control includes bandwidth control using a network, memory usage control, and the like.

  In an information processing apparatus that provides resources, it is desired to provide resources to other information processing apparatuses without interfering with process processing in the information processing apparatus. In particular, it is necessary to guarantee the execution of a process that performs important processing in the information processing apparatus. Therefore, it is necessary to perform resource control and secure resources used by processes that perform important processing in the information processing apparatus.

  As access control of distributed computer resources, Patent Document 1 associates an access right certificate including computer resource identification information and identification information of a group having the access right of the computer resource with a computer resource. And store the membership certificate including the identification information of the group and the identification information of the user terminal belonging to the group, and associate it with the computer resource in another access control device in response to an acquisition request from the other access control device. A configuration is disclosed that enables efficient access control to computer resources distributed over a network by transmitting a given access right certificate. Further, in Patent Document 2, in a client / server combined computer having resources for personal use and shared resources for group use, only functions necessary for the server function can be effectively operated when the personal use is terminated. Thus, a method for realizing low power consumption and ensuring security of personal data in a state in which service provision using shared resources is inherited is disclosed. Further, as resource control, Patent Document 3 discloses a technique of identifying resources that are bottlenecks by measuring the performance of an information processing apparatus and appropriately performing resource control.

JP 2005-339055 A Japanese Patent Laid-Open No. 10-3322 JP 2007-48315 A

  The analysis according to the invention is given below.

  The first problem is that the process is not an information processing apparatus in which the process is executed (referred to as “first information processing apparatus”) but an external information processing apparatus (referred to as “second information processing apparatus”). When using a resource included in the first information processing apparatus, the first information processing apparatus cannot determine the resource to be controlled.

  When the process of the first information processing apparatus uses a resource included in the second information processing apparatus, it is the first information processing apparatus that performs resource control on the process.

  However, since the first information processing apparatus does not have information on the resource to be controlled, the resource to be controlled cannot be determined.

  Further, even for the same process, the resource to be controlled varies depending on which information processing apparatus resource the process uses.

  The second problem is that the first information processing apparatus cannot determine a resource that needs to be controlled before a bottleneck occurs.

  As in the method of Patent Document 3, when a resource in which a bottleneck has occurred is measured and the resource is controlled, if a bottleneck has occurred, a process that performs important processing in the second information processing apparatus May not be possible. Therefore, it is necessary to perform resource control on the process of the first information processing apparatus before the execution of the process that performs the important processing in the second information processing apparatus.

  The third problem is that in the second information processing apparatus, resource control cannot be performed on the process of the first information processing apparatus only when a specific process is executed.

  Only when a process that performs important processing in the second information processing apparatus is executed, it is desired to control the use of the resource from the first information processing apparatus.

  Thereby, only a minimum resource is controlled, and the resource can be effectively provided. However, in the method of Patent Document 3, resources where bottlenecks have occurred are measured, and all the resources are controlled.

  Accordingly, an object of the present invention is to provide a resource provided in an external information processing apparatus (second information processing apparatus), not in the information processing apparatus (first information processing apparatus) in which the process is executed. It is an object of the present invention to provide a system, a method, and a program for surely determining a resource that needs to be controlled when using.

  Another object of the present invention is to provide a system, a method, and a program that can determine a resource that needs to be controlled before executing a process that performs an important process in an external information processing apparatus.

  Still another object of the present invention is to provide a system, method, and program that can control only resources used by processes that perform important processing in an external information processing apparatus.

  The invention disclosed in the present application has the following configuration in order to solve the above-described problems.

  According to the present invention, in an information processing apparatus including a resource control mechanism that controls the amount of a resource used by a process, according to the access control rule, from an access control rule of an access control mechanism that controls access to a resource of a process, A system, method, and computer program for determining resources to be controlled are provided.

In the present invention, the resource control mechanism has a function of controlling the amount of resources used by a process according to a resource control rule,
Policy analysis means for determining a resource to be controlled from the access control rule and generating the resource control rule may be further provided.

  In the present invention, the resource control mechanism, the first information processing apparatus including the policy analysis unit, and the second information processing apparatus including the access control mechanism may be network-connected.

In the present invention, the access control mechanism stores a set consisting of a set of a process and a process identifier,
The second information processing apparatus further includes an access control policy for storing in advance a set consisting of a set of a process identifier and an access control rule,
The policy analysis unit may further include a function of receiving the access control rule of the access control policy.

In the present invention, the access control mechanism further includes a function of transmitting a process identifier of a process to be activated and waiting until a process execution permission signal is received, and a function of starting execution of the process to be activated when the process execution permission signal is received. Prepared,
The second information processing apparatus includes designated process identifier storage means for storing a set of process identifiers in advance;
A process identifier is received, it is determined whether the same process identifier as the received process identifier is stored in the designated process identifier storage means, and if received, the received process identifier is transmitted and stored If there is not, the designated process determination means for transmitting a process execution permission signal to the access control mechanism, the process identifier is received, the access control policy is referred to, and the access control rule stored as a set with the received process identifier is set. Policy transmission means for transmitting may further be provided, and the policy analysis means may further include a function of transmitting a process execution permission signal to the access control mechanism.

In the present invention, the access control mechanism further includes a function of transmitting a process identifier of a process to be activated and waiting until a process execution permission signal is received, and a function of starting execution of the process to be activated when the process execution permission signal is received. Prepared,
The second information processing apparatus includes designated process identifier storage means for storing a set of process identifiers in advance;
A process identifier is received, it is determined whether the same process identifier as the received process identifier is stored in the designated process identifier storage means, and if received, the received process identifier is transmitted and stored If there is not, a designated process determination means for transmitting a process execution permission signal to the access control mechanism, a process identifier is received, the access control policy and the received process identifier are transmitted, and a process execution permission signal is transmitted to the access control mechanism. It further comprises policy transmission means for transmitting,
The policy analysis means further comprises a function of transmitting a process execution permission signal to the access control mechanism,
The first information processing apparatus receives an access control policy and a process identifier, acquires an access control rule stored as a set with the process identifier received from the access control policy, and transmits the acquired access control rule. You may further provide a receiving means.

  In the present invention, the access control mechanism may be a secure OS.

  In the information processing system of the present invention, the access control mechanism may be a resource control OS.

  In the information processing system of the present invention, the resource control rule may include an access control rule.

  ADVANTAGE OF THE INVENTION According to this invention, when using the resource with which an external information processing apparatus (2nd information processing apparatus) is used, the resource which needs control can be decided. This is because the policy analysis unit of the first information processing apparatus generates a resource control rule for the process of the first information processing apparatus from the access control rule of the second information processing apparatus.

  According to the present invention, it is possible to determine resources necessary for control before executing a process for performing important processing in the second information processing apparatus. The reason is that, when the process is activated, the designated process discriminating means discriminates whether or not the process having the process identifier stored in advance in the designated process identifier storage means is activated, and the process is judged to be activated. The policy transmission unit transmits the access control rule of the process activated by the policy transmission unit to the policy analysis unit of the first information processing apparatus, and the policy analysis unit controls the resource of the resource identifier included in the received access control rule. This is because a resource control rule for the process of the information processing apparatus is generated.

  According to the present invention, it is possible to control only the resources used by processes that perform important processing in the second information processing apparatus. The reason is that when the process is started in the second information processing apparatus, the specified process determination unit determines whether the process with the process identifier stored in advance in the specified process identifier storage unit is started, and starts If it is determined that the access control rule of the process activated by the policy transmission unit is transmitted to the policy analysis unit of the first information processing apparatus, the policy analysis unit transmits the resource identifier included in the received access control rule. This is because a resource control rule for controlling resources is generated, the generated resource control rule is stored as a resource control policy, and resource control is performed on the process of the first information processing apparatus according to the resource control policy.

It is a figure which shows the structure of the 1st Embodiment of this invention. It is a figure explaining the 1st Embodiment of this invention. It is a flowchart explaining the operation | movement of the 1st Embodiment of this invention. It is a flowchart explaining the operation | movement of the 1st Embodiment of this invention. It is a flowchart explaining the operation | movement of the 1st Embodiment of this invention. It is a flowchart explaining the operation | movement of the 1st Embodiment of this invention. It is a figure which shows the structure of the 2nd Embodiment of this invention. It is a flowchart explaining the operation | movement of the 2nd Embodiment of this invention. It is a flowchart explaining the operation | movement of the 2nd Embodiment of this invention. It is a figure explaining the 1st Example of this invention. It is a figure explaining the 2nd Example of this invention.

  Next, embodiments of the present invention will be described in detail with reference to the drawings. Referring to FIG. 1, the first embodiment of the present invention operates with an information processing apparatus 1000 including a data processing apparatus 1010 that operates under program control and a storage apparatus 1020 that stores information, and with program control. And an information processing device 1100 including a storage device 1120 for storing information. The information processing apparatus 1000 and the information processing apparatus 1100 are connected to a network.

  The storage device 1020 of the information processing device 1000 includes a secure OS 1021 processed by the data processing device 1010, a designated process identifier storage unit 1022, and an access control policy 1023.

  The data processing apparatus 1010 of the information processing apparatus 1000 includes a designated process determination unit 1011 and a policy transmission unit 1012.

  The storage device 1120 of the information processing device 1100 includes a resource control OS 1121 processed by the data processing device 1110 and a resource control policy 1122.

  The data processing device 1110 of the information processing device 1100 includes policy analysis means 1111.

  The secure OS 1021 includes processes 0 to P (P is an integer greater than or equal to 0), process identifiers 0 to P that are identifiers thereof, resources 0 to R (R is an integer greater than or equal to 0), and resource identifiers 0 to 0 that are identifiers thereof. R is stored.

  Resources 0 to R are objects managed by the secure OS 1021 to be accessed by the process.

The secure OS 1021
A function for performing access control according to the access control policy 1023;
A function of transmitting a process identifier Px of the process Px to the designated process determination unit 1011 and receiving a process execution permission signal when starting the process Px (Px is an integer of 0 or more and P or less);
A function of starting execution of the process Px when receiving the process execution permission signal;
Is provided.

  An example of the secure OS 1021 is SELinux. The secure OS 1021 may be another access control mechanism regardless of the secure OS as long as it has an equivalent function.

  The designated process identifier storage unit 1022 stores process identifiers Pd0 to Pdx (Pd0 and Pdx are integers of 0 or more and P or less and Pd0 ≦ Pdx) in advance.

  The access control policy 1023 stores in advance a set of process identifiers 0 to P of processes 0 to P and access control rules 0 to P of processes 0 to P.

  The access control rule is an operation for the resources 0 to R permitted to the processes 0 to P. The operation is an operation that can be controlled by the secure OS 1021.

  FIG. 2 is a diagram for explaining the present embodiment. FIG. 2 shows an example of an access control rule (a set of a process identifier and an access control rule) in the access control policy 1023, an example of a resource control rule in the resource control policy 1122, and a storage content (process identifier) of the designated process identifier storage unit 1022 An example of is shown. In the access control rule, access (Read / Write) permitted for a resource number (identifier) is defined.

The designated process discriminating means 1011
A function for receiving the process identifier Px;
A function of referring to the designated process identifier storage unit 1022 to determine whether or not the same process identifier as the process identifier Px is stored in the designated process identifier storage unit 1022;
When the process identifier Px is the same as the process identifier Px stored in the designated process identifier storage unit 1022, the process identifier Px is transmitted to the policy transmission unit 1012, and the same process identifier as the process identifier Px is not stored In addition, a function of transmitting a process execution permission signal to the secure OS 1021,
Is provided.

Policy transmission means 1012
A function for receiving the process identifier Px;
A function of referring to the access control policy 1023, acquiring the access control rule Px stored as a set with the process identifier Px, and transmitting the access control rule Px to the policy analysis unit 1111 of the information processing apparatus 1100;
Is provided.

  The resource control OS 1121 stores processes 0 to Q (Q is an integer of 0 or more) and process identifiers 0 to Q that are identifiers thereof.

  Processes 0 to Q use resources 0 to R stored in the secure OS 1021 of the information processing apparatus 1000.

  The resource control OS 1121 has a function of performing resource control according to the resource control policy 1122.

  As an example of the resource control OS, there is CKRM (Class Based Kernel Resource Management). Alternatively, even a general-purpose OS such as Linux can perform resource control by changing the priority of process scheduling.

  The resource control policy 1122 stores resource control rules 0 to Q of processes 0 to Q.

  The resource control rule is a control method when the processes 0 to Q use the resources 0 to R.

  Control by a resource control rule is control of the amount that a process uses a resource.

  An example of a resource control rule is shown in FIG. The MAX 70% of the resource identifier Q defines that the memory usage rate is 70% at maximum. Examples of resources to be controlled include control of the global bandwidth using the network, memory usage, and the like, and the number of times of communication with a specific process may be used.

Resource control methods include
How to control the rate at which a process uses its resources,
There is a method of controlling the absolute amount that the process uses its resources.

  Furthermore, in these control methods, it is needless to say that the ratio and absolute amount of resources permitted to be used for the process may be zero.

Policy analysis means 1111
A function of receiving the access control rule Px;
A function of determining resources R0 to Rx (R0 and Rx are integers of 0 or more and R or less and R0 ≦ Rx) included in the access control rule Px as resources to be controlled;
A function of generating resource control rules R0 to Rx for resources R0 to Rx and storing them in the resource control policy 1122;
A function of transmitting a process execution permission signal to the secure OS 1021 is provided. Note that the generated resource control rule may include an access control rule.

  Next, the overall operation of the present embodiment will be described in detail with reference to the flowcharts of FIGS. 3, 4, 5, and 6. FIG. 3 is a flowchart showing the processing procedure of the secure OS 1021. FIG. 4 is a flowchart showing the processing procedure of the designated process discriminating means 1011. FIG. 5 is a flowchart showing a processing procedure of the policy transmission unit 1012. FIG. 6 is a flowchart illustrating a processing procedure of the policy analysis unit 1111 of the information processing apparatus 1100.

  A case where the process Px is started in the information processing apparatus 1000 will be described.

  When the secure OS 1021 starts the process Px (step A1 in FIG. 3), the secure OS 1021 transmits the process identifier Px of the process Px to the designated process determination unit 1011 (step A2 in FIG. 3) until the process execution permission signal is received. Wait (step A3 in FIG. 3).

  Upon receiving the process identifier Px (step B1 in FIG. 4), the designated process determination unit 1011 refers to the designated process identifier storage unit 1022 (step B2 in FIG. 4), and stores the same process identifier as the process identifier Px. (Step B3 in FIG. 4).

  If the same process identifier as the process identifier Px is not stored in the designated process identifier storage unit 1022, the designated process determination unit 1011 transmits a process execution permission signal to the secure OS 1021 (step B4 in FIG. 4).

  When the same process identifier as the process identifier Px is stored in the designated process identifier storage unit 1022, the designated process determination unit 1011 transmits the process identifier Px to the policy transmission unit 1012 (step B5 in FIG. 4). .

  When the policy transmission unit 1012 receives the process identifier Px from the designated process determination unit 1011 (step C1 in FIG. 5), the policy transmission unit 1012 acquires the access control rule Px stored as a pair with the process identifier Px from the access control policy 1023 (FIG. 5). 5, the access control rule Px is transmitted to the policy analysis unit 1111 of the information processing apparatus 1100 (step C 3 in FIG. 5).

  When the policy analysis unit 1111 of the information processing device 1100 receives the access control rule Px from the policy transmission unit 1012 of the information processing device 1000 (step D1 in FIG. 6), the resource identifiers R0 to Rx included in the access control rule Px R0 to Rx are determined as resources to be controlled (step D2 in FIG. 6), resource control rules R0 to Rx for controlling the resources R0 to Rx are generated (step D3 in FIG. 6), and stored in the resource control policy 1122 (Step D4 in FIG. 6).

  Then, the policy analysis unit 1111 of the information processing apparatus 1100 transmits a process execution permission signal to the secure OS 1021 of the information processing apparatus 1000 (step D5 in FIG. 6).

  When the secure OS 1021 of the information processing apparatus 1000 receives the process execution permission signal from the policy analysis unit 1111 of the information processing apparatus 1100, the secure OS 1021 starts executing the process Px (step A4 in FIG. 3).

  Then, the resource control OS 1121 of the information processing device 1100 controls the usage amount of the resources R0 to Rx used by the processes 0 to Q in accordance with the resource control policy 1122.

  Next, the effect of this Embodiment is demonstrated.

This embodiment is
-When starting a process with the secure OS, the designated process discriminating means discriminates whether or not the process with the process identifier stored in advance in the designated process identifier storage means is activated,
When the designated process determining means determines that the process having the process identifier stored in advance in the designated process identifier storage means is activated, the policy transmission means determines the access control rule of the process to be activated as the policy analysis means. To
The policy analysis means determines the resource with the resource identifier included in the received access control rule as a resource to be controlled, generates a resource control rule for controlling the resource,
The policy analysis means stores the generated resource control rule as a resource control policy,
The resource control OS performs resource control according to the resource control policy.

  Next, a second embodiment of the present invention will be described in detail with reference to the drawings.

  Referring to FIG. 7, in the second embodiment of the present invention, an information processing device 2000 including a data processing device 2010 that operates according to program control, a storage device 2020 that stores information, and data that operates according to program control. An information processing device 2100 including a processing device 2110 and a storage device 2120 for storing information is provided. The information processing apparatus 2000 and the information processing apparatus 2100 are connected to a network.

  The storage device 2020 of the information processing device 2000 includes a secure OS 2021 processed by the data processing device 2010, a designated process identifier storage unit 2022, and an access control policy 2023.

  The data processing apparatus 2010 of the information processing apparatus 2000 includes a designated process determination unit 2011 and a policy transmission unit 2012.

  The storage device 2120 of the information processing device 2100 includes a resource control OS 2121 processed by the data processing device 2110 and a resource control policy 2122.

  The data processing device 2110 of the information processing device 2100 includes a policy receiving unit 2112 and a policy analyzing unit 2111.

  The secure OS 2021, the designated process identifier storage unit 2022, the access control policy 2023, the designated process determination unit 2011, the resource control OS 2121, the resource control policy 2122, and the policy analysis unit 2111 are respectively the secure OS 1021 and the designated process identifier of the first embodiment. The storage unit 1022, the access control policy 1023, the resource control OS 1121, the resource control policy 1122, and the policy analysis unit 1111 have the same functions.

  The policy transmission unit 2012 has a function of receiving the process identifier Px and a function of transmitting the access control policy 2023 and the process identifier Px to the policy reception unit 2112 of the information processing apparatus 2100.

In the information processing apparatus 2100, the policy receiving unit 2112
A function of receiving the access control policy 2023 and the process identifier Px from the policy transmission means 2012;
A function of referring to the access control policy 2023, obtaining the access control rule Px stored as a set with the process identifier Px, and transmitting the access control rule Px to the policy analysis means 2111;
Is provided.

  Next, with reference to the flowcharts of FIGS. 8 and 9, the overall operation of the present embodiment will be described mainly with respect to the differences from the first embodiment.

  Hereinafter, a case where the process Px is activated in the information processing apparatus 2000 will be described.

  This embodiment is different from the first embodiment in that the operation of the policy transmission unit 2012 and the policy reception unit 2112 newly operate. Other operations are the same as those in the first embodiment. FIG. 8 is a flowchart showing a processing procedure of the policy transmission unit 2012. FIG. 9 is a flowchart showing the processing procedure of the policy receiving means 2112.

  The operations of the policy transmission unit 2012 and the policy reception unit 2112 which are different in operation from the first embodiment will be described.

  When the policy transmission unit 2012 receives the process identifier Px (step C1 in FIG. 8), the policy transmission unit 2012 transmits the access control policy 2023 and the process identifier Px to the policy reception unit 2112 of the information processing apparatus 2100 (step C4 in FIG. 8).

  When the policy receiving means 2112 receives the access control policy 2023 and the process identifier Px (step E1 in FIG. 9), the policy receiving means 2112 refers to the access control policy 2023 and acquires the access control rule Px stored as a set with the process identifier Px. (Step E2 in FIG. 9), the access control rule Px is transmitted to the policy analysis means 2111 (Step E3 in FIG. 9).

  Next, the effect of this Embodiment is demonstrated.

  In the present embodiment, in addition to the effects of the first embodiment, the policy transmission unit 2012 transmits the process identifier and the access control policy to the policy reception unit 2112, and the policy reception unit 2112 receives the received access control policy. Thus, by acquiring the access control rule paired with the received process identifier and transmitting the acquired access control rule to the policy analysis unit 2111, processing performed by the secure OS can be reduced. Specific examples will be described below.

<Example 1>
Next, a first embodiment of the present invention will be described with reference to FIG. This example corresponds to the specific example of the first embodiment.

  In this embodiment, a computer 100 and a computer 110 that operate under program control are provided. The computer 100 and the computer 110 each have a memory area (not shown). The computer 100 and the computer 110 are connected to a network. In this embodiment, two computers are used for the sake of simplification of explanation, but it goes without saying that the number of computers is not limited to two.

  In the memory area of the computer 100, a secure OS 101, an access control policy 104, and storage contents of the designated process identifier storage means 105 are stored.

  The secure OS 101 includes a NIC (Network Interface Card) with a resource identifier R0 and an SD card with a resource identifier R1.

  The access control policy 104 stores access control rules for processes operating on the secure OS 101. The contents are as schematically shown in FIG.

In the example shown in FIG. 10, as the access control rule P0 corresponding to the process P0,
-Use of NIC with resource identifier R0 (Read, Write),
-Use of SD card with resource identifier R1 (Read, Write)
Is allowed.

  The designated process identifier storage unit 105 stores a process identifier P0.

  In the computer 100, a secure OS 101, a designated process determination unit 102, and a policy transmission unit 103 are executed. In this embodiment, each process of the secure OS 101, the designated process determination unit 102, and the policy transmission unit 103 is realized by a program executed on the computer 100.

  The secure OS 101 operates the process P0 having the process identifier P0. Further, the resources provided in the secure OS 101 are provided to the computer 110. As a providing method, for example, there is provision by NFS (Network File System).

  A resource control OS 111 and a resource control policy 113 are stored in the memory area of the computer 110.

  The resource control policy 113 stores resource control rules for processes operating on the resource control OS 111.

  In the computer 110, a resource control OS 111 and policy analysis means 112 are executed. In this embodiment, each process of the resource control OS 111 and the policy analysis unit 112 is realized by a program executed on the computer 110.

  In the resource control OS 111, the process Q0 with the process identifier Q0 is operating.

  During operation, the process Q0 uses the NIC with the resource identifier R0 of the computer 100 and the SD card with the resource identifier R1.

  Assume that the secure OS 101 starts the process P0. The secure OS 101 transmits the process identifier P0 of the process P0 to the designated process determination unit 102 and waits until a process execution permission signal is received.

  Upon receiving the process identifier P0, the designated process determination unit 102 refers to the designated process identifier storage unit 105. Then, it is determined whether or not the process identifier transmitted from the secure OS 101 is stored in the designated process identifier storage unit 105. Here, since the process identifier P0 is stored in the designated process identifier storage unit 105, the process identifier P0 is transmitted to the policy transmission unit 103.

  When the policy transmission unit 103 receives the process identifier P0, the policy transmission unit 103 acquires the access control rule P0 stored as a pair with the process identifier P0 from the access control policy 104, and the policy analysis of the computer 110 analyzes the acquired access control rule P0. Transmit to means 112.

  When the policy analysis unit 112 receives the access control rule P0, the policy analysis unit 112 determines the NIC with the resource identifier R0 and the SD card with the resource identifier R1 included in the access control rule P0 as the resources to be controlled. Then, a resource control rule R0 that controls the use of the NIC and a resource control rule R1 that controls the use of the SD card are generated, and the generated resource control rules R0 and R1 are stored in the resource control policy 113.

  The contents of the resource control rule R0 and the resource control rule R1 generated by the policy analysis unit 112 are as shown in FIG. 10, for example. In the example shown in FIG. 10, a resource control rule that allows the use of each resource up to 50% is generated. However, the resource control rule is not limited to such a configuration, and any resource control rule is generated. Of course, it may be.

  The policy analysis unit 112 transmits a process execution permission signal to the secure OS 101.

  When the secure OS 101 receives the process execution permission signal from the policy analysis unit 112, the secure OS 101 starts executing the process P0.

  Then, according to the resource control policy 113, the resource control OS 111 controls the use of the NIC with the resource identifier R0 used by the process Q0 and the SD card with the resource identifier R1.

<Example 2>
Next, a second embodiment of the present invention will be described with reference to FIG. This example corresponds to the specific example of the second embodiment.

  In this embodiment, a computer 200 and a computer 210 that operate under program control are provided, and each of the computer 200 and the computer 210 has a memory area (not shown). The computer 200 and the computer 210 are connected to a network. In this embodiment, two computers are used for the sake of simplification of explanation, but it goes without saying that the number of computers is not limited to two.

  In the memory area of the computer 200, the secure OS 201, the access control policy 204, and the storage contents of the designated process identifier storage means 205 are stored.

  The secure OS 201 includes a camera device with a resource identifier R2.

  The access control policy 204 stores access control rules for processes operating on the secure OS 201. The contents are as shown in FIG. Referring to FIG. 11, in the process P1, use of the camera device (Read, Write) is permitted.

  The designated process identifier storage unit 205 stores a process identifier P1 and a process identifier P2.

  In the computer 200, a secure OS 201, a designated process determination unit 202, and a policy transmission unit 203 are executed. Note that the processes of the secure OS 201, the designated process determination unit 202, and the policy transmission unit 203 are realized by a program executed on the computer 200.

  In the secure OS 201, the process P1 with the process identifier P1 operates. Further, the resources provided in the secure OS 201 are provided to the computer 210.

  A resource control OS 211 and a resource control policy 213 are stored in the memory area of the computer 210.

  The resource control policy 213 stores resource control rules for processes operating on the resource control OS 211.

  The computer 210 executes processing of the resource control OS 211, the policy reception unit 214, and the policy analysis unit 213. Each process of the resource control OS 211, the policy reception unit 214, and the policy analysis unit 212 is realized by a program executed on the computer 210.

  In the resource control OS 211, the process Q1 with the process identifier Q1 is operating. Process Q1 uses the camera device with resource identifier R2 of computer 200 during operation.

  Assume that the secure OS 200 starts the process P1. The secure OS 201 transmits the process identifier P1 of the process P1 to the designated process determination unit 202 and waits until a process execution permission signal is received.

  Upon receiving the process identifier P1, the designated process determination unit 202 refers to the designated process identifier storage unit 205. Then, it is determined whether the process identifier transmitted from the secure OS 201 is stored in the designated process identifier storage unit 205.

  Here, since the process identifier P1 is stored in the designated process identifier storage unit 205, the process identifier P1 is transmitted to the policy transmission unit 203.

  When the policy transmission unit 203 receives the process identifier P1, the policy transmission unit 203 transmits the access control policy and the process identifier P1 to the policy reception unit 214 of the computer 210.

  When the policy receiving unit 214 receives the access control policy and the process identifier P1, the policy receiving unit 214 acquires the access control rule P1 stored as a set with the process identifier P1 from the access control policy, and the policy access unit 214 acquires the acquired access control rule P1. Send to.

  When the policy analysis unit 212 receives the access control rule P1, the policy analysis unit 212 determines the camera device having the resource identifier R2 included in the access control rule P1 as a control target resource. Then, the policy analysis unit 212 generates a resource control rule R2 that controls the use of the camera device.

  The content of the resource control rule generated by the policy analysis unit 212 is as shown in FIG. 11, for example. In the example of FIG. 11, the CPU usage rate in the computer 210 of the process Q1 that uses the camera device is controlled in order to control the use of the camera device.

  In the example of FIG. 11, the use of the camera device is also controlled by controlling the execution time of the process Q1, but the configuration is not limited to this configuration, and any resource control rule is generated. Of course, it is also good.

  Then, the policy analysis unit 212 transmits a process execution permission signal to the secure OS 201. When the secure OS 201 receives the process execution permission signal, the secure OS 201 starts executing the process P1. Then, the resource control OS 211 executes the process Q1 according to the resource control policy 213.

  The present invention can be applied as a resource control rule generating means. Here, the information processing apparatus can be applied from a personal computer to a built-in computer such as a mobile communication terminal such as a mobile phone or a PDA, a game machine, and a multi-function copying machine.

  It should be noted that the disclosures of the above patent documents are incorporated herein by reference. Within the scope of the entire disclosure (including claims) of the present invention, the embodiments and examples can be changed and adjusted based on the basic technical concept. Further, various combinations or selections of various disclosed elements are possible within the scope of the claims of the present invention. That is, the present invention of course includes various variations and modifications that could be made by those skilled in the art according to the entire disclosure including the claims and the technical idea.

  According to the present invention, the following configuration is provided.

(Appendix 1)
A resource control mechanism that controls the amount of resources used by the process;
An information processing system comprising policy analysis means for determining a resource to be controlled by the resource control mechanism from the access control rule in the access control mechanism that controls access to a resource of a process according to an access control rule.

(Appendix 2)
The resource control mechanism controls the amount of resources used by a process according to resource control rules,
The information processing system according to appendix 1, wherein the policy analysis unit determines a resource to be controlled and generates the resource control rule.

(Appendix 3)
A first information processing apparatus comprising the resource control mechanism and the policy analysis means;
A second information processing apparatus comprising the access control mechanism;
The information processing system according to appendix 1 or 2, wherein is connected to the network.

(Appendix 4)
The access control mechanism stores a set of the process and the process identifier;
The second information processing apparatus includes an access control policy for storing in advance a set of the process identifier and a set of the access control rules related to the process identifier,
The information processing system according to appendix 3, wherein the policy analysis unit of the first information processing apparatus receives the access control rule of the access control policy from the second information processing apparatus.

(Appendix 5)
The access control mechanism transmits a process identifier of a process to be activated, waits until a process execution permission signal is received, and upon receiving the process execution permission signal, performs control to start execution of the process to be activated,
The second information processing apparatus includes designated process identifier storage means for storing a set of process identifiers in advance;
Receiving a process identifier from the access control mechanism, determining whether the same process identifier as the received process identifier is stored in the designated process identifier storage means;
If the same process identifier as the received process identifier is stored in the designated process identifier storage means, the received process identifier is transmitted. If not, the process control is executed to the access control mechanism. A designated process determination means for transmitting a permission signal;
Policy transmission means for receiving a process identifier from the designated process determination means, referring to the access control policy, and transmitting an access control rule stored as a set with the received process identifier to the policy analysis means,
The information processing system according to appendix 4, wherein the policy analysis unit transmits a process execution permission signal to the access control mechanism.

(Appendix 6)
The access control mechanism transmits a process identifier of a process to be activated, waits until a process execution permission signal is received, and performs control to start execution of the process to be activated when the process execution permission signal is received;
The second information processing apparatus includes designated process identifier storage means for storing a set of process identifiers in advance;
Receiving a process identifier from the access control mechanism, determining whether the same process identifier as the received process identifier is stored in the designated process identifier storage means;
If the same process identifier as the received process identifier is stored in the designated process identifier storage means, the received process identifier is transmitted. If not, the process execution is executed to the access control mechanism. A designated process determination means for transmitting a permission signal;
Policy transmitting means for receiving a process identifier from the designated process determining means, transmitting the access control policy and the received process identifier to the first information processing apparatus, and transmitting a process execution permission signal to the access control mechanism. In addition,
The policy analysis means of the first information processing apparatus transmits a process execution permission signal to the access control mechanism,
The first information processing apparatus receives the access control policy and the process identifier from the policy transmission unit, acquires an access control rule stored as a set with the process identifier received from the access control policy, and acquires The information processing system according to appendix 4, further comprising policy receiving means for transmitting the access control rule that has been sent to the policy analyzing means.

(Appendix 7)
The access control mechanism includes a secure OS (operating system);
The information processing system according to any one of appendices 1 to 6, wherein the resource control mechanism includes a resource control OS.

(Appendix 8)
The information processing system according to any one of appendices 2 to 7, wherein the resource control rule includes the access control rule.

(Appendix 9)
The information processing system according to any one of appendices 1 to 8, wherein the resource is at least one of a network, a storage area, a CPU, a file, and a process.

(Appendix 10)
Resource control processing for controlling the amount of resources used by the process;
A policy analysis process for determining a resource to be controlled in the resource control process from the access control rule in the access control process for controlling access to the resource of the process according to the access control rule;
Including an information processing method.

(Appendix 11)
The resource control process controls the amount of resources used by a process according to a resource control rule,
The information processing method according to appendix 10, wherein the policy analysis process determines a resource to be controlled and generates the resource control rule.

(Appendix 12)
A first information processing apparatus that executes the resource control process and the policy analysis process;
A second information processing apparatus that executes the access control process;
12. The information processing method according to appendix 10 or 11, wherein the network is connected to the network.

(Appendix 13)
In the access control processing, a set of the process and the process identifier is stored,
The second information processing apparatus stores a set of access control rules corresponding to the process identifier and the process identifier in an access control policy in advance.
The information processing method according to attachment 12, wherein the policy analysis processing of the first information processing apparatus receives the access control rule of the access control policy.

(Appendix 14)
In the access control process, the process identifier of the process to be activated is transmitted, waits until a process execution permission signal is received, and when the process execution permission signal is received, the process of starting the process to be started is performed,
The second information processing apparatus stores a set of process identifiers in a designated process identifier storage unit in advance,
Receiving a process identifier from the access control process, determining whether the same process identifier as the received process identifier is stored in the designated process identifier storage means;
If the same process identifier as the received process identifier is stored in the designated process identifier storage means, the received process identifier is transmitted. If not, the process control is executed to the access control mechanism. Send a permission signal,
Receiving a process identifier, referring to the access control policy, and transmitting an access control rule stored as a pair with the received process identifier to the policy analysis process;
14. The information processing method according to appendix 13, wherein the policy analysis process transmits a process execution permission signal to the access control process.

(Appendix 15)
In the access control process, the process identifier of the process to be activated is transmitted, waits until a process execution permission signal is received, and when the process execution permission signal is received, the process of starting the process is started.
The second information processing apparatus stores a set of process identifiers in a designated process identifier storage unit in advance,
Receiving a process identifier from the access control process, determining whether the same process identifier as the received process identifier is stored in the designated process identifier storage means;
If the same process identifier as the received process identifier is stored in the designated process identifier storage means, the received process identifier is transmitted. If not, the process execution is executed to the access control mechanism. Send a permission signal,
Receiving a process identifier, transmitting the access control policy and the received process identifier to the first information processing apparatus, transmitting a process execution permission signal to the access control mechanism;
The policy analysis means of the first information processing apparatus transmits a process execution permission signal to the access control mechanism,
The first information processing apparatus receives the access control policy and the process identifier, acquires an access control rule stored as a pair with the process identifier received from the access control policy, and acquires the acquired access control rule. The information processing method according to appendix 13, which is transmitted to the policy analysis process.

(Appendix 16)
The access control process includes a secure OS (operating system);
The information processing method according to any one of appendices 10 to 15, wherein the resource control process includes a resource control OS.

(Appendix 17)
The information processing method according to any one of appendices 11 to 16, wherein the resource control rule includes the access control rule.

(Appendix 18)
The information processing method according to any one of appendices 10 to 17, wherein the resource is at least one of a network, a storage area, a CPU, a file, and a process.

(Appendix 19)
Resource control processing for controlling the amount of resources used by the process;
A policy analysis process for determining a resource to be controlled in the resource control process from the access control rule in the access control process for controlling access to the resource of the process according to the access control rule;
For causing an information processing apparatus to execute the program.

(Appendix 20)
The resource control process controls the amount of resources used by a process according to a resource control rule,
The program according to appendix 19, wherein the policy analysis process determines a resource to be controlled and generates the resource control rule.

(Appendix 21)
A first information processing apparatus that executes the resource control process and the policy analysis process;
A second information processing apparatus that executes the access control process;
The program according to appendix 19 or 20, wherein is connected to the network.

(Appendix 22)
In the access control processing, a set of the process and the process identifier is stored,
The second information processing apparatus previously stores a set of the process identifier and a set of access control rules related to the process identifier in an access control policy,
The program according to appendix 21, wherein the policy analysis processing of the first information processing apparatus receives the access control rule of the access control policy.

(Appendix 23)
In the access control process, the process identifier of the process to be activated is transmitted, waits until a process execution permission signal is received, and when the process execution permission signal is received, the process of starting the process to be started is performed,
The second information processing apparatus stores a set of process identifiers in a designated process identifier storage unit in advance,
Receiving a process identifier from the access control process, determining whether the same process identifier as the received process identifier is stored in the designated process identifier storage means;
If the same process identifier as the received process identifier is stored in the designated process identifier storage means, the received process identifier is transmitted. If not, the process control is executed to the access control mechanism. Send a permission signal,
Receiving a process identifier, referring to the access control policy, and transmitting an access control rule stored as a pair with the received process identifier to the policy analysis process;
The program according to appendix 22, wherein the policy analysis process transmits a process execution permission signal to the access control process.

(Appendix 24)
In the access control process, the process identifier of the process to be activated is transmitted, waits until a process execution permission signal is received, and when the process execution permission signal is received, the process of starting the process is started.
The second information processing apparatus stores a set of process identifiers in a designated process identifier storage unit in advance,
Receiving a process identifier from the access control process, determining whether the same process identifier as the received process identifier is stored in the designated process identifier storage means;
If the same process identifier as the received process identifier is stored in the designated process identifier storage means, the received process identifier is transmitted. If not, the process execution is executed to the access control mechanism. Send a permission signal,
Receiving a process identifier, transmitting the access control policy and the received process identifier to the first information processing apparatus, transmitting a process execution permission signal to the access control mechanism;
The policy analysis means of the first information processing apparatus transmits a process execution permission signal to the access control mechanism,
The first information processing apparatus receives the access control policy and the process identifier, acquires an access control rule stored as a pair with the process identifier received from the access control policy, and acquires the acquired access control rule. The program according to appendix 22, which is transmitted to the policy analysis process.

(Appendix 25)
The access control process includes a secure OS (operating system);
The program according to any one of appendices 19 to 24, wherein the resource control process includes a resource control OS.

(Appendix 26)
The program according to any one of appendices 19 to 25, wherein the resource control rule includes the access control rule.

(Appendix 27)
The program according to any one of appendices 19 to 26, wherein the resource is at least one of a network, a storage area, a CPU, a file, and a process.

(Appendix 28)
A first information processing apparatus including a first OS (operating system), a resource control policy, and policy analysis means;
A second information processing apparatus including a second OS, an access control policy, a designated process identifier storage unit, a designated process determination unit, and a policy transmission unit;
The first and second information processing devices are connected to a network,
The access control policy stores a process identifier of a process and an access control rule that is an operation on a resource permitted to the process in association with each other,
The second OS stores a process and a process identifier that is an identifier thereof, a resource to be accessed by the process and a resource identifier that is an identifier thereof, and performs access control according to the access control policy,
When starting the process, the process identifier of the process is transmitted to the designated process determination means, and when the process execution permission signal is received, the process is started to be executed.
The designated process identifier storage means stores a process identifier in advance,
When the designated process determination unit receives the process identifier from the second OS, the designated process determination unit refers to the designated process identifier storage unit, and if the same process identifier as the received process identifier is stored, the designated process identifier is stored. When the process identifier that is the same as the process identifier is not stored, the process execution permission signal is transmitted to the second OS.
The policy transmission means obtains an access control rule with reference to the access control policy upon receiving a process identifier from the designated process determination means, and transmits the access control rule to the policy analysis means.
The first OS stores a process that uses a resource stored in the second OS and a process identifier that is an identifier thereof, performs resource control according to the resource control policy,
When the policy analysis unit receives the access control rule from the policy transmission unit, the policy analysis unit determines the resource included in the access control rule as a target resource to be controlled, generates a resource control rule for the resource, and sets the resource control rule to An information processing system that stores in a resource control policy and transmits a process execution permission signal to the second OS.

(Appendix 29)
The first information processing apparatus further comprises policy receiving means;
In the second information processing apparatus, when the policy transmission unit receives a process identifier from the designated process determination unit, the policy transmission unit transmits the access control policy and the process identifier to the policy reception unit.
In the first information processing apparatus, when the policy receiving unit receives the access control policy and the process identifier from the policy transmitting unit, the policy receiving unit refers to the access control policy and sets an access control rule corresponding to the process identifier. Obtain and send access control rules to policy analysis means,
When the policy analysis unit receives the access control rule from the policy transmission unit, the policy analysis unit determines the resource included in the access control rule as a resource to be controlled, generates a resource control rule for the resource, and the resource control rule 29. The information processing system according to appendix 28, wherein the information is stored in a resource control policy and a process execution permission signal is transmitted to the second OS.

100, 110, 200, 210 Computer 101, 201, 1021, 2021 Secure OS
102, 202, 1011, 2011 Designated process discrimination means 103, 203, 1012, 2012 Policy transmission means 104, 204, 1023, 2023 Access control policy 105, 205, 1022, 2022 Designated process identifier storage means 111, 211, 1121, 2121 Resource control OS
112, 212, 1111, 2111 Policy analysis means 113, 213, 1122, 2122 Resource control policy 214, 2112 Policy reception means 1000, 1100, 2000, 2100 Information processing device 1010, 1110, 2010, 2110 Data processing device 1020, 1120, 2020, 2120 storage device

Claims (29)

A resource control mechanism that controls the amount of resources used by the process;
An information processing system comprising policy analysis means for determining a resource to be controlled by the resource control mechanism from the access control rule in the access control mechanism that controls access to a resource of a process according to an access control rule. The resource control mechanism controls the amount of resources used by a process according to resource control rules,
The information processing system according to claim 1, wherein the policy analysis unit determines a resource to be controlled and generates the resource control rule. A first information processing apparatus comprising the resource control mechanism and the policy analysis means;
A second information processing apparatus comprising the access control mechanism;
The information processing system according to claim 1 or 2 connected to a network. The access control mechanism stores a set of the process and the process identifier;
The second information processing apparatus includes an access control policy for storing in advance a set of the process identifier and a set of the access control rules related to the process identifier,
The information processing system according to claim 3, wherein the policy analysis unit of the first information processing apparatus receives the access control rule of the access control policy from the second information processing apparatus. The access control mechanism transmits a process identifier of a process to be activated, waits until a process execution permission signal is received, and upon receiving the process execution permission signal, performs control to start execution of the process to be activated,
The second information processing apparatus includes designated process identifier storage means for storing a set of process identifiers in advance;
Receiving a process identifier from the access control mechanism, determining whether the same process identifier as the received process identifier is stored in the designated process identifier storage means;
If the same process identifier as the received process identifier is stored in the designated process identifier storage means, the received process identifier is transmitted. If not, the process control is executed to the access control mechanism. A designated process determination means for transmitting a permission signal;
Policy transmission means for receiving a process identifier from the designated process determination means, referring to the access control policy, and transmitting an access control rule stored as a set with the received process identifier to the policy analysis means,
The information processing system according to claim 4, wherein the policy analysis unit transmits a process execution permission signal to the access control mechanism. The access control mechanism transmits a process identifier of a process to be activated, waits until a process execution permission signal is received, and performs control to start execution of the process to be activated when the process execution permission signal is received;
The second information processing apparatus includes designated process identifier storage means for storing a set of process identifiers in advance;
Receiving a process identifier from the access control mechanism, determining whether the same process identifier as the received process identifier is stored in the designated process identifier storage means;
If the same process identifier as the received process identifier is stored in the designated process identifier storage means, the received process identifier is transmitted. If not, the process execution is executed to the access control mechanism. A designated process determination means for transmitting a permission signal;
Policy transmitting means for receiving a process identifier from the designated process determining means, transmitting the access control policy and the received process identifier to the first information processing apparatus, and transmitting a process execution permission signal to the access control mechanism. In addition,
The policy analysis means of the first information processing apparatus transmits a process execution permission signal to the access control mechanism,
The first information processing apparatus receives the access control policy and the process identifier from the policy transmission unit, acquires an access control rule stored as a set with the process identifier received from the access control policy, and acquires 5. The information processing system according to claim 4, further comprising a policy receiving unit that transmits the access control rule that has been set to the policy analyzing unit. The access control mechanism includes a secure OS (operating system);
The information processing system according to claim 1, wherein the resource control mechanism includes a resource control OS.   The information processing system according to claim 2, wherein the resource control rule includes the access control rule.   The information processing system according to claim 1, wherein the resource is at least one of a network, a storage area, a CPU, a file, and a process. Resource control processing for controlling the amount of resources used by the process;
A policy analysis process for determining a resource to be controlled in the resource control process from the access control rule in the access control process for controlling access to the resource of the process according to the access control rule;
Including an information processing method. The resource control process controls the amount of resources used by a process according to a resource control rule,
The information processing method according to claim 10, wherein the policy analysis process determines a resource to be controlled and generates the resource control rule. A first information processing apparatus that executes the resource control process and the policy analysis process;
A second information processing apparatus that executes the access control process;
The information processing method according to claim 10 or 11, wherein the network is connected to a network. In the access control processing, a set of the process and the process identifier is stored,
The second information processing apparatus stores a set of access control rules corresponding to the process identifier and the process identifier in an access control policy in advance.
The information processing method according to claim 12, wherein the policy analysis process of the first information processing apparatus receives the access control rule of the access control policy. In the access control process, the process identifier of the process to be activated is transmitted, waits until a process execution permission signal is received, and when the process execution permission signal is received, the process of starting the process to be started is performed,
The second information processing apparatus stores a set of process identifiers in a designated process identifier storage unit in advance,
Receiving a process identifier from the access control process, determining whether the same process identifier as the received process identifier is stored in the designated process identifier storage means;
If the same process identifier as the received process identifier is stored in the designated process identifier storage means, the received process identifier is transmitted. If not, the process control is executed to the access control mechanism. Send a permission signal,
Receiving a process identifier, referring to the access control policy, and transmitting an access control rule stored as a pair with the received process identifier to the policy analysis process;
The information processing method according to claim 13, wherein the policy analysis process transmits a process execution permission signal to the access control process. In the access control process, the process identifier of the process to be activated is transmitted, waits until a process execution permission signal is received, and when the process execution permission signal is received, the process of starting the process is started.
The second information processing apparatus stores a set of process identifiers in a designated process identifier storage unit in advance,
Receiving a process identifier from the access control process, determining whether the same process identifier as the received process identifier is stored in the designated process identifier storage means;
If the same process identifier as the received process identifier is stored in the designated process identifier storage means, the received process identifier is transmitted. If not, the process execution is executed to the access control mechanism. Send a permission signal,
Receiving a process identifier, transmitting the access control policy and the received process identifier to the first information processing apparatus, transmitting a process execution permission signal to the access control mechanism;
The policy analysis means of the first information processing apparatus transmits a process execution permission signal to the access control mechanism,
The first information processing apparatus receives the access control policy and the process identifier, acquires an access control rule stored as a pair with the process identifier received from the access control policy, and acquires the acquired access control rule. The information processing method according to claim 13, wherein the information processing method is transmitted to the policy analysis process. The access control process includes a secure OS (operating system);
The information processing method according to claim 10, wherein the resource control process includes a resource control OS.   The information processing method according to claim 11, wherein the resource control rule includes the access control rule.   The information processing method according to claim 10, wherein the resource is at least one of a network, a storage area, a CPU, a file, and a process. Resource control processing for controlling the amount of resources used by the process;
A policy analysis process for determining a resource to be controlled in the resource control process from the access control rule in the access control process for controlling access to the resource of the process according to the access control rule;
For causing an information processing apparatus to execute the program. The resource control process controls the amount of resources used by a process according to a resource control rule,
The program according to claim 19, wherein the policy analysis process determines a resource to be controlled and generates the resource control rule. A first information processing apparatus that executes the resource control process and the policy analysis process;
A second information processing apparatus that executes the access control process;
21. The program according to claim 19 or 20, which is connected to a network. In the access control processing, a set of the process and the process identifier is stored,
The second information processing apparatus previously stores a set of the process identifier and a set of access control rules related to the process identifier in an access control policy,
The program according to claim 21, wherein the policy analysis processing of the first information processing apparatus receives the access control rule of the access control policy. In the access control process, the process identifier of the process to be activated is transmitted, waits until a process execution permission signal is received, and when the process execution permission signal is received, control to start execution of the process to be activated is performed.
The second information processing apparatus stores a set of process identifiers in a designated process identifier storage unit in advance,
Receiving a process identifier from the access control process, determining whether the same process identifier as the received process identifier is stored in the designated process identifier storage means;
If the same process identifier as the received process identifier is stored in the designated process identifier storage means, the received process identifier is transmitted. If not, the process control is executed to the access control mechanism. Send a permission signal,
Receiving a process identifier, referring to the access control policy, and transmitting an access control rule stored as a pair with the received process identifier to the policy analysis process;
The program according to claim 22, wherein the policy analysis process transmits a process execution permission signal to the access control process. In the access control process, the process identifier of the process to be activated is transmitted, waits until a process execution permission signal is received, and when the process execution permission signal is received, the process of starting the process is started.
The second information processing apparatus stores a set of process identifiers in a designated process identifier storage unit in advance,
Receiving a process identifier from the access control process, determining whether the same process identifier as the received process identifier is stored in the designated process identifier storage means;
If the same process identifier as the received process identifier is stored in the designated process identifier storage means, the received process identifier is transmitted. If not, the process execution is executed to the access control mechanism. Send a permission signal,
Receiving a process identifier, transmitting the access control policy and the received process identifier to the first information processing apparatus, transmitting a process execution permission signal to the access control mechanism;
The policy analysis means of the first information processing apparatus transmits a process execution permission signal to the access control mechanism,
The first information processing apparatus receives the access control policy and the process identifier, acquires an access control rule stored as a pair with the process identifier received from the access control policy, and acquires the acquired access control rule. The program according to claim 22, which is transmitted to the policy analysis process. The access control process includes a secure OS (operating system);
The program according to any one of claims 19 to 24, wherein the resource control process includes a resource control OS.   The program according to any one of claims 19 to 25, wherein the resource control rule includes the access control rule.   The program according to any one of claims 19 to 26, wherein the resource is at least one of a network, a storage area, a CPU, a file, and a process. A first information processing apparatus including a first OS (operating system), a resource control policy, and policy analysis means;
A second information processing apparatus including a second OS, an access control policy, a designated process identifier storage unit, a designated process determination unit, and a policy transmission unit;
The first and second information processing devices are connected to a network,
The access control policy stores a process identifier of a process and an access control rule that is an operation on a resource permitted to the process in association with each other,
The second OS stores a process and a process identifier that is an identifier thereof, a resource to be accessed by the process and a resource identifier that is an identifier thereof, and performs access control according to the access control policy,
When starting the process, the process identifier of the process is transmitted to the designated process determination means, and when the process execution permission signal is received, the process is started to be executed.
The designated process identifier storage means stores a process identifier in advance,
When the designated process determination unit receives the process identifier from the second OS, the designated process determination unit refers to the designated process identifier storage unit, and if the same process identifier as the received process identifier is stored, the designated process identifier is stored. When the process identifier that is the same as the process identifier is not stored, the process execution permission signal is transmitted to the second OS.
The policy transmission means obtains an access control rule with reference to the access control policy upon receiving a process identifier from the designated process determination means, and transmits the access control rule to the policy analysis means.
The first OS stores a process that uses a resource stored in the second OS and a process identifier that is an identifier thereof, performs resource control according to the resource control policy,
When the policy analysis unit receives the access control rule from the policy transmission unit, the policy analysis unit determines the resource included in the access control rule as a target resource to be controlled, generates a resource control rule for the resource, and sets the resource control rule to An information processing system that stores in a resource control policy and transmits a process execution permission signal to the second OS. The first information processing apparatus further comprises policy receiving means;
In the second information processing apparatus, when the policy transmission unit receives a process identifier from the designated process determination unit, the policy transmission unit transmits the access control policy and the process identifier to the policy reception unit.
In the first information processing apparatus, when the policy receiving unit receives the access control policy and the process identifier from the policy transmitting unit, the policy receiving unit refers to the access control policy and sets an access control rule corresponding to the process identifier. Obtain and send access control rules to policy analysis means,
When the policy analysis unit receives the access control rule from the policy transmission unit, the policy analysis unit determines the resource included in the access control rule as a resource to be controlled, generates a resource control rule for the resource, and the resource control rule Is stored in a resource control policy, and a process execution permission signal is transmitted to the second OS.

Images