KR20110004138A - Method for providing security for application virtualization - Google Patents

Abstract

PURPOSE: A method for providing security for application virtualization is provided to set a problem of security due to a difference of information used in a real system and virtualized information for application virtualization, thereby a user can set a security. CONSTITUTION: A first processing device(100) stored in a stored type application/data is connected to a second processing device(200) and executes the stored type application by the second processing device. A security module included in a first processing device is loaded to the second processing device. The stored type application/data is converted into a realized application/data type, which can be executed in the second processing device, and a host device is installed. If the realized type application is executed, the security module controls access control about the realized data/application based on security policy information.

Description

Method for providing security for application virtualization

The present invention relates to a method for providing security for application virtualization, and more particularly, to a method for providing various security techniques for problems that may occur when an application virtualized on a specific device is executed on another device. It is about.

Today, the IT system field is competing globally to reduce costs and improve work efficiency through system virtualization. By virtualizing the hardware, you can install multiple systems at the same time by dividing the idle time of the hardware to effectively use the system, and reduce software license costs and reduce software obstacles through application virtualization using software streaming or roaming technology. It is reducing the maintenance cost.

Since virtualization is a method that can solve many problems until now by increasing the utility of IT resources, more and more companies are adopting virtualization in various fields, and accordingly, companies that develop and commercialize various methods of virtualization technology The trend is also increasing. Virtualization is now a widely used term in IT infrastructures, and each company is moving beyond the physical infrastructure of IT infrastructure, from server-based virtualization to presentation virtualization, application virtualization, desktop virtualization, storage virtualization, and network virtualization. In order to increase the efficiency of services, virtual technology has been developed and introduced.

Dual application virtualization is an important part of many virtualization technologies. Application virtualization uses software streaming technology to run applications streamed from a central server in a virtual area of the system, and software roaming technology enables portable devices to be installed on any device (eg computer). There is a way to make it easier to use.

Such application virtualization can increase the system's high availability and improve the work efficiency through application roaming, but there is a new area in which existing security products cannot be applied. That is, in order for a virtualized system (application) to operate normally on an actual processing device, a process of changing the virtualized application to operate on an operating system of the actual processing device is required. This process can be referred to as a realization process.

Applications running in virtualized environments pose not only all known security threats, but also new security risks not found in traditional environments.

When running applications installed on a central server by streaming, data virtualization can reduce the risk of data loss, but cannot directly prevent data leakage while running on the client. There is a risk of spreading damage to multiple clients.

In addition, in the case of the virtualization method that is installed as a portable USB storage device to increase the rate by roaming the application, the problem is more serious, and there is a risk of maximizing the spread of damage caused by data or application leakage or virus infection. .

Against this risk, traditional security products can't protect applications that are running correctly or prevent data leakage because there is a difference between the virtualized application or data stored in the media and the application or data when executed on a computer.

Accordingly, the method for providing security for application virtualization according to an embodiment of the present invention, in application virtualization, analyzes the correspondence between the virtualized application and the actually executed application when the virtualized application is executed in a specific processing device. Correspondence provides a way to protect applications and data running on processing devices.

In the security provision method for application virtualization for providing the technical idea, a first processing device storing a storage application and the storage data is connected to a second processing device, and the storage application is executed by the second processing device. When the stored application is executed, a security module included in the first processing device is loaded into the second processing device, and each of the stored application and the stored data is stored in the stored application and the stored type. Converting into a form of an executable application and executable data corresponding to each data and executable in the second processing device, and installing the executable data on the host device; and when the installed executable application is executed, the loaded security module is loaded. The executable data and the thread The access control type of the application includes the step of controlling, based on a predetermined security policy information.

The security providing method for application virtualization further includes the step of executing the mapping module included in the first processing device in the second processing device, wherein each of the stored application and the stored data is the stored application and Converting into a form of an executable application and executable data corresponding to each of the stored data and executable in the second processing device, and installing in the host device may include executing the mapping module with the stored application and the stored data. Analyzing a process of converting each of the stored data into the form of the executable application and the executable data, and mapping each of the stored application and the stored data to indicate a correspondence between the executable application and the executable data. To generate data It includes a system, the security module may be based on the generated map data and the security policy information to control the running type application and access control for the data alone.

The security policy information may be input from a user and stored in the mapping module.

The controlling of the access control for the executable data and the executable application by the security module based on predetermined security policy information may be performed by the security module for accessing at least one of the executable application or the executable data. Controlling at least one of the message or the function.

The controlling the at least one of a message or a function for accessing at least one of the executable application or the executable data by the security module may be performed by the loaded security module from a predetermined process performed by the second processing device. Or hooking at least one of a function, determining whether at least one of the hooked or the function corresponds to the security policy information, and if the determination does not correspond to the security policy information, the message or And controlling at least one of the functions to not be performed.

The security policy information may be stored in a location where at least one of information about an application accessible to at least one of the executable data or generated data generated based on the executable data, the executable data, or the generated data may be stored. Information about the user, or information about a user who can use the executable application or the accessible application.

In the security providing method for application virtualization, when predetermined execution information is registered in the second processing device while the execution application is installed, the security module deletes the predetermined registration information after the execution of the execution application ends. It may further comprise the step.

The first processing device may include at least one of a server that can be connected to the second processing device through a network or a portable memory device that can be connected to the second processing device. The application virtualization program may be stored in a computer-readable recording medium having recorded thereon.

According to the security providing method for application virtualization according to the present invention, it is possible to solve the security problems caused by the difference between the virtualized information for the application virtualization and information used in the actual system, the user can set the security as desired, If the information stored on the other device is leaked against the user's intention, the source can be blocked.

In addition, even if it is necessary to register the predetermined registration information in the OS of a specific device to execute the virtualized application program, when the use of the specific device is terminated, the registration information may be automatically deleted. Information that can be leaked can be blocked, and there is an effect of preventing unnecessary information from being stored and maintained even from the viewpoint of the specific device.

In order to fully understand the present invention, the operational advantages of the present invention, and the objects achieved by the practice of the present invention, reference should be made to the accompanying drawings which illustrate preferred embodiments of the present invention and the contents described in the accompanying drawings.

Also, in this specification, when any one element 'transmits' data to another element, the element may transmit the data directly to the other element, or may be transmitted through at least one other element And may transmit the data to the other component.

Conversely, when one element 'directly transmits' data to another element, it means that the data is transmitted to the other element without passing through another element in the element.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings. Like reference numerals in the drawings denote like elements.

1 is a schematic diagram illustrating a security providing method for application virtualization according to an exemplary embodiment of the present invention.

1, a first processing device 100 and a second processing device 200 may be provided for a security providing method for application virtualization according to an exemplary embodiment of the present invention.

The first processing apparatus 100 may be used to include all types of data processing apparatuses that store virtualized applications in order to implement the technical spirit of the present invention. For example, the first processing apparatus 100 may be implemented as a predetermined server that may be connected to the second processing apparatus 200 through a predetermined network. In this case, the second processing apparatus 100 may be streamed. The virtualized application may be provided from the server. According to another embodiment, the first processing device 100 may be a predetermined mobile memory device (for example, a universal serial bus (USB) device), and in this case, the second processing device 200 may be roaming through the mobile device. The virtualized application may be provided from the memory device.

The virtualized application may comprise a predetermined storage application 2 and storage data 3. The storage application 2 may be an application included in the storage application 2 and executed in the actual host device 200, that is, an application in which the executable application is virtually packaged. The stored data 3 may be used to include all data files used and / or referenced by the executable application. In FIG. 1, the storage-type application 2 and the storage-type data 3 included in the first processing apparatus 100 are separately displayed to represent that they may be logically divided, and the storage-type application is necessarily represented. It does not mean that (2) and the storage data (3) are separately packaged or implemented as separate files.

The stored application 2 includes an executable application 20 and an executable application 20 which are installed in the second processing apparatus 200 and are actual applications to be executed in the second processing apparatus 200. Various information required when installed in the two processing apparatus 200 may be packaged together. Accordingly, the storage application 2 may be implemented by adding a predetermined depackaging device for depackaging the storage application 2 in the second processing device 200. In addition, according to an embodiment of the present invention, the storage-type application 2 may include a predetermined security module 1 for implementing the technical idea of the present invention. In addition, the storage application 2 may include a predetermined mapping module 4 for implementing the technical idea of the present invention. Of course, according to another embodiment, the security module 1 and / or mapping module 4 may be stored separately in the first processing device 100, the virtualized stored in the first processing device 100 When realzation of an application is started, the application may be loaded and activated in a predetermined memory of the second processing apparatus 200. Realization refers to a series of processes in which the virtualized application is converted and installed in accordance with an environment of the second processing device 200 to be executed in a specific data processing device such as the second processing device 200. can do. In addition, the executable data 30 and the generated data in which the executable data 30 is changed or newly generated are again virtualized into second storage data which is predetermined virtualized storage data, and thus the first processing apparatus 100. It may be stored in).

When the realization process of the virtualized application is completed, the second processing device 200 is installed with the executable application 20 and the executable data 30 used and / or referenced by the executable application 30. Can be. The executable application 20 may be used and accessed by the second processing device 200, and may be controlled (controlled) by a predetermined security policy. This process is shown in FIG.

2 schematically illustrates a configuration of a second processing apparatus when realization is completed by a method for providing security for application virtualization according to an embodiment of the present invention.

1 and 2, the security module 1 is loaded on the second processing apparatus 200 to implement the technical idea of the method for providing security for application virtualization according to an embodiment of the present invention. The data flow of the processing device 200 may be monitored and controlled. To this end, after the first processing device 100 is directly connected to the second processing device 200 or through a network, the security module 1 is selected or executed by the user. The security module 1 may be loaded into a main memory of the host device 200. In addition, a predetermined depackager combined with the stored application 2 depackets a predetermined executable application (eg, 21, 22) to be installed in the second processing apparatus 200, and the depackaged files It may be installed in the second processing apparatus 200.

In addition, the security module 1 operates on a predetermined virtual machine, as shown in FIG. 2, so that various resources (eg, other loaded processes or devices) of the host device 200 can be obtained. You can monitor the messages requested by). In addition, if the monitored message (or request) does not comply with the security provision method for application virtualization according to an embodiment of the present invention, it may provide a method of implementing the technical idea of the present invention by controlling the requested message not to be processed. Can be. The request corresponding to the security providing method for application virtualization according to an embodiment of the present invention may mean a request corresponding to predetermined security policy information. The security policy information may exist as a separate file, or may be stored by a predetermined mapping module 4 as described below.

The mapping module 4 may include predetermined security policy information set by an administrator. In addition, when the storage application 2 is executed, it is executed and / or loaded in the second processing device 200, the storage application 2 and the executable application 20 and the storage data ( Information about the correspondence between 3) and the executable data 30, that is, mapping data, may be analyzed and generated.

This is because the stored application 2 stored in the first processing apparatus 100 may be executed in the second processing apparatus 200 in order to be executed in the second processing apparatus 200. Must be converted to In this case, the path in which the executable application 20 is installed and predetermined registration information may be different for each of the second processing apparatuses 200. Therefore, if application virtualization is made, if the conventional method does not know exactly how the path is actually installed in the second processing apparatus 200, it may not be able to provide an effective security method. Therefore, in the security providing method for application virtualization according to an embodiment of the present invention, the mapping module 4 may generate the mapping data. Therefore, even if the security policy information stored in the mapping module 4 is set for each of the storage type application 2 and the storage type data 3, each of the executable application 20 corresponding thereto is provided. And the security policy information may be applied to the executable data 30. Of course, in order for the stored data 3 to be usable in the host device 200, a process of converting the stored data 3 into predetermined executable data 30 may be required.

In addition, when each of the stored applications 2 is converted into the executable application 20 and installed in the second processing apparatus 200 to be executed in the second processing apparatus 200, the executable application ( 20, predetermined registration information (for example, information to be registered in a registry), or temporary file temporarily generated, which is information to be registered in an operating ysytem (OS) of the second processing apparatus 200 for an environment to be executed. Information, etc.). Such registration information may also be a subject of a security policy according to the technical spirit of the present invention. In addition, such registration information may be deleted from the second processing apparatus 200 when the first processing apparatus 100 is separated or disconnected from the second processing apparatus 200. Therefore, it is preferable that information related to any application and data stored in the first processing apparatus 100 is not stored in the second processing apparatus 200. Therefore, such registration information is also preferably managed and maintained according to an embodiment of the present invention.

To this end, according to the security method according to an embodiment of the present invention, when the storage-type application (2) is executed, and the security module (1) is loaded in response to the execution, the mapping module (4) can be activated, The mapping module 4 may also analyze and store such registration information.

The mapping module 4 is a program and / or code included in the storage type application 2 when the storage type application 2 is installed in the second processing apparatus 200 as the execution type application 20. May generate and store information about which program and / or code included in the executable application 20 corresponds to.

3 illustrates an example of mapping data in a security providing method for application virtualization according to an embodiment of the present invention.

As shown in FIG. 3, the mapping data includes information that a code called prg1 included in the storage application 2 is depackaged and converted into PRG1, which is an executable application 20, and which file is included in the PRG1. The PRG1 may include a path installed in the second processing apparatus 200.

In addition, the mapping data may include information indicating that dat1, which is the storage type data 3, is converted into a certain file (for example, DAT1, etc.) and / or a path in which the converted file is installed.

In addition, when predetermined registration information is registered in the second processing apparatus 200 as described above, the mapping module 4 may analyze the registration information and include it in the mapping data. For example, in the case where prg1 is converted to PRG1 and installed, predetermined information a should be registered in the registry, the mapping module 4 indicates that the information a is registration information corresponding to the prg1 or the PRG1, and the information a Can store information about registered registries. As such, based on the generated mapping data and the security policy information, the security module 1 generates generated data in which the executable application 20, the executable data 30, and the executable data 30 are changed or updated. Access control can be performed.

Meanwhile, the security policy information may be set in advance by the administrator through the mapping module 4. That is, the administrator may set policy information that the virtualized application should be used while creating the virtualized application. The set security policy information may be included in the mapping module 4. When the mapping module 4 is executed (or loaded) in the second processing apparatus 200 through realization, the security module 1 may be included in the mapping module 4. The access control may be performed based on the security policy information stored in the mapping module 4.

The security policy information includes information about an application accessible to at least one of the executable data 30 or generated data generated based on the executable data, and at least one of the executable data 30 or the generated data. It may include at least one of information about a location that can be stored, or information about a user who can use the executable application or the accessible application. Of course, the security policy information may be set based on the storage type data 3 or the storage application 2, but the security module 1 may be easily executed based on the mapping data. 30) or the policy information based on the executable application 20 can be grasped.

For example, an administrator may set to use the executable application 20 to access the executable data 30. That is, only an application provided by the first processing apparatus 100 may be set to access the executable data 30 and / or generated data. Therefore, the executable data 30 cannot be accessed by an application other than a preset application. In addition, even when the same application as the executable application 20 corresponding to the stored application 2 stored in the first processing apparatus 100 is already installed in the second processing apparatus 200, the present invention may be used. According to an embodiment of the present disclosure, the executable application 20 corresponding to the stored application 2 stored in the first processing apparatus 100 is executed, not the host program pre-installed in the second processing apparatus 200. You can do that. Therefore, the administrator can limit a specific function or add a specific function through the mapping module 4, thereby preventing the administrator from using the executable data 30 undesirably. In addition, even when there are a plurality of applications accessible to the executable data 30, only the executable application 30 designated by the administrator may access the specific executable data 30.

In addition, the administrator may set the information on the location and / or path where the executable data 30 or generated data can be stored. For example, the executable data 30 and / or generated data may be set to not be stored or copied in a path other than the first processing device 100 or the second processing device 200.

The administrator may also set security policy information based on the user. To this end, the security policy information may include authentication information for each predetermined user, and only if the authentication information is input to the executable application 20, the executable data 30, and / or generated data. You can also have access. Unique information of the second processing apparatus 200 may be used for a security policy based on a user. For example, when the second processing apparatus 200 is a predetermined removable memory device, unique identification information of the removable memory device may be included in the security policy information. Then, only the pre-authenticated removable memory device may use the above-mentioned applications by the security providing method for application virtualization according to an embodiment of the present invention. When the specific system can be used by using the authentication of the removable memory device can be usefully applied.

4 is a diagram illustrating a method of performing a security module access control for a method for providing security for application virtualization according to an embodiment of the present invention.

Referring to FIG. 4, when the stored application 2 is executed, a realization process may be performed. In this case, the security module 1 may be loaded into the memory of the host device 200 (S100). When the installed executable application 20 is PRG1 and the PRG1 is executed, a process corresponding to the executable application PRG1 may be loaded into the memory (S200). Then, the security module 1 may hook a request, that is, a message or a function, which is called from the process or the OS of the host device 200 (S400) (S500). The function may include various API functions. In addition, the hooking may use an API (Application Protocol Interface) hooking. Then, the security module 1 may analyze the hooked message (function) and control access control according to the security policy information included in the mapping module 4. For example, the security policy may be as follows. As a result of analyzing the hooked message (function) by the security module 1, the message (function) is included in the executable data 30 (eg, DAT 1) or the executable application (PRG 1). In the case of an I / O (Input / Ouput) message (function) for storing at least one of the generated data (eg, NDAT1) that is data generated by the first processing device 100, the security module (1) may output a response or a message for rejecting the request of the I / O message (function) to the process or OS that called the message (function). In this specification, outputting a response or a message rejecting a request may include a case in which no response is made to the request, that is, a case in which a null message is output. The generated data may include data in which data (eg, DAT1) included in the executable data 30 is updated. Therefore, according to an embodiment of the present invention, after the first processing apparatus 100 is connected to and / or connected to the second processing apparatus 200, the execution data (eg, DAT 1) may be used. The application (PRG 1) also prevents data from leaking outside. In addition, even if a program included in the execution application 20 is not a execution application that is set to use specific data (eg, DAT1) by an administrator, or is not included in the execution application 20 ( For example, a program installed in the second processing apparatus 200 may prevent access to the data (eg, DAT 1).

To this end, the security module 1 may hook a message (or a function) called by a predetermined process (for example, PRG A) or the OS of the second processing apparatus 200 (S600) (S700).

Then, the security module 1 analyzes the hooked message (or function) so that the predetermined process (eg, PRG A) is an application installed in the second processing apparatus 200 or the first processing apparatus 100. It is determined whether or not the application included in the process corresponds to an application program not designated to use the specific data DAT 1. In this case, the security module 1 may refer to the mapping data stored in the mapping module 4. Thus, the mapping data can be used to determine whether the message (or function) is a message relating to the executable data 30, whether the process can access the executable data 30, and / or whether to transmit it externally. You can judge. As a result of the determination, when the predetermined process PRG A is a process that cannot access the execution data DAT 1, the security module 1 returns a response (message) that rejects the request of the message (or function). The message (or function) can be output to the calling process or OS.

Meanwhile, when the user's work is finished, the executable data 30 and the generated data may be stored in the first processing apparatus 100 again. To this end, the security module 1 may generate virtualized second storage data by virtualizing the executable data 30 and the generated data. The generated second storage data may refer to virtualized data in which the storage data 3 includes data generated by a user's work. Of course, the second storage data may be generated with the same name as the storage data 3. The generated second storage data may be stored in the first processing apparatus 100. To this end, the security module 1 checks which executable data 30 and / or generated data correspond to the stored data 3 through the mapping data stored in the mapping module 4, and checks the identified information. Virtualization can be performed based on this.

In addition, according to the method for providing security for virtualization of an application according to an embodiment of the present invention, after the user completes a necessary task, a predetermined registration registered with the host device 200 to execute the executable application 20 is performed. It provides a technical idea that even information (for example, registry information) can be deleted. Of course, all of the installed executable application 20 can be deleted.

To this end, the security module 1 may refer to registration information stored in the mapping module 4 and information on mapping information and / or paths for the executable application 20, and the like. Therefore, if predetermined registration information is registered in the second processing apparatus 200 while the executable application 20 is installed, the security module 1 is after the execution of the executable application 20 ends. The predetermined registration information may be deleted. Deletion means that the security module 1 deletes information registered or stored in an OS terminal or a local storage device (ie, a file system) of the host device 200 by a processor of the second processing device 200. This may mean transmitting a predetermined control signal (eg, a command). Based on this information, the second processing apparatus 200 may perform an operation similar to so-called uninstall as well known. Therefore, as described in the spirit of the present invention, predetermined registration information for application virtualization may be deleted from the second processing apparatus 200 after the user is disconnected from the first processing apparatus 100. The point in time at which the security module 1 deletes the registration information is only after the execution of the executable application 20 is finished. For example, immediately after the execution of the executable application 20 is terminated or before or after the first processing apparatus 100 is connected to or disconnected from the second processing apparatus 200. For example, when the first processing device 100 is a mobile memory device, when the user inputs information that the mobile memory device is to be detached before being separated from the second processing device 200, the information. After inputting the registration information can be deleted by the security module (1). Alternatively, when a predetermined signal indicating that the removable memory device is detached is recognized by the second processing device (eg, the host device 200), the security module 1 deletes predetermined registration information in response to the signal. After that, the security module 1 may be automatically terminated.

Security providing method for application virtualization according to an embodiment of the present invention can be implemented as a computer-readable code on a computer-readable recording medium. Computer-readable recording media include all kinds of recording devices that store data that can be read by a computer system. Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, hard disk, floppy disk, optical data storage, and the like, and also in the form of carrier waves (e.g., transmission over the Internet). It also includes implementations. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion. And functional programs, codes and code segments for implementing the present invention can be easily inferred by programmers in the art to which the present invention belongs.

Although the present invention has been described with reference to one embodiment shown in the drawings, this is merely exemplary, and those skilled in the art will understand that various modifications and equivalent other embodiments are possible therefrom. Therefore, the true technical protection scope of the present invention will be defined by the technical spirit of the appended claims.

BRIEF DESCRIPTION OF THE DRAWINGS In order to better understand the drawings cited in the detailed description of the invention, a brief description of each drawing is provided.

1 is a schematic diagram illustrating a security providing method for application virtualization according to an exemplary embodiment of the present invention.

2 schematically illustrates a configuration of a second processing apparatus when realization is completed by a method for providing security for application virtualization according to an embodiment of the present invention.

3 illustrates an example of mapping data in a security providing method for application virtualization according to an embodiment of the present invention.

4 is a diagram illustrating a method of performing a security module access control for a method for providing security for application virtualization according to an embodiment of the present invention.

Claims (9)

Connecting the first processing device storing the stored application and the stored data to a second processing device, and executing the stored application by the second processing device; When the stored application is executed, a security module included in the first processing device is loaded into the second processing device, and each of the stored application and the stored data is stored in each of the stored application and the stored data. Converting into a form of an executable application and executable data corresponding to and executed in the second processing device, and installing the same on the host device; And When the installed executable application is executed, the loaded security module controls access control to the executable data and the executable application based on predetermined security policy information. . The method of claim 1, wherein the security providing method for virtualizing the application comprises: The step of executing the mapping module included in the first processing device in the second processing device, Each of the stored application and the stored data is converted into a form of an executable application and executable data corresponding to each of the stored application and the stored data and executed in the second processing device. The steps to be installed, The execution of the mapping module analyzes the process of converting each of the stored application and the stored data into the form of the executable application and the executable data, so that each of the stored application and the stored data is executable. Generating mapping data representing a correspondence between an application and the executable data; The security module provides a security method for a mobile memory device for application virtualization that controls access control to the executable application and the executable data based on the generated mapping data and the security policy information. The method of claim 2, wherein the security policy information, Security input method for application virtualization, characterized in that the input from the user is stored in the mapping module. The method of claim 1, wherein the controlling of the access control to the executable data and the executable application by the security module is based on predetermined security policy information. And controlling, by the security module, at least one of a message or a function for accessing at least one of the executable application or the executable data. The method of claim 4, wherein the controlling of the message for accessing at least one of the executable application or the executable data by the security module comprises: Hooking at least one of a message or a function outputted from a predetermined process performed in the second processing apparatus by the loaded security module; Determining whether at least one of the hooked message or function corresponds to the security policy information; And And if it is determined that the security policy information does not correspond, controlling at least one of the message or the function not to be performed. The method of claim 1, wherein the security policy information, Information about an application accessible to at least one of the executable data or generated data generated based on the executable data, information on a location where at least one of the executable data or the generated data can be stored, or the And at least one of information about a user who can use the executable application or the accessible application. The method of claim 1, wherein the security providing method for virtualizing the application comprises: When the execution application is installed and predetermined registration information is registered in the second processing device, the security module further includes the step of deleting the predetermined registration information after the execution of the execution application is terminated. How to Provide Security The method of claim 1, wherein the first processing device, And at least one of a server that can be connected to the second processing device through a network or a mobile memory device that can be connected to the second processing device. A computer-readable recording medium having recorded thereon a program for performing the method according to any one of claims 1 to 8.

Images