KR20120000870A - System for providing virtual machine based on location information and server and method used in the system - Google Patents

Abstract

PURPOSE: A system for providing a virtual machine based on location information and server and method used in the system are provided to selectively control the state of a virtual machine by the location of a user. CONSTITUTION: A hypervisor(120) selectively offers VM(Virtual Machine)(131,141,151) in which the user terminal is connectable. If the location of the user terminal is changed after accessing the VM, a VM controller(190) changes the state of the VM into the preset operation state in the changed location. The VM controller checks the VM in which the user terminal is connected using the identification information of the user terminal and determines the VM as the preset VM state.

Description

System for Providing Virtual Machine based on Location Information and Server and Method used in the System}

The present invention relates to a system for providing a virtual machine based on location information, a server used therein, and a method thereof, and more particularly, to a location capable of controlling a state of a virtual machine in consideration of a location of a user terminal and a user. A system for providing a virtual machine based on information, a server used therein, and a method thereof.

Virtualization technology is a technology for operating multiple operating systems (OS) in one computer. With the spread of the Internet and the advancement of virtualization technology, users can place their personal computers on a server in the form of a virtual machine and connect to the server's virtual machines to use desired functions.

However, the existing server does not consider security-related matters such as the user's location or access rights, and provides a desired virtual machine when a user requests it. In other words, the server accompanying the existing virtualization technology provides a variety of information to the user without establishing a separate policy considering the security, it is necessary to maintain security in advance by taking measures such as information leakage.

Accordingly, an object of the present invention to solve the above problems is to provide a virtual machine based on the location information that can be secured by allowing the authenticated user to use the virtual machine in the authorized location, use thereof It is to provide a server and its method.

According to one embodiment of the invention, a plurality of virtual machines to which the user terminal is accessible; A hypervisor unit selectively providing the plurality of virtual machines; And after the user terminal is connected to at least one virtual machine of the plurality of virtual machines, and when the location of the user terminal is changed, change the state of the provided virtual machine to an operation state specified at the changed location. A server for providing a virtual machine is provided based on location information including a virtual machine controller for requesting a visor unit.

The virtual machine controller may identify the at least one virtual machine to which the user terminal is connected using the identification information of the user terminal, and determine the at least one identified virtual machine and an operation state assigned to the changed position. This can be determined by the state of the machine.

When the operation state is not specified at the changed position, the virtual machine controller may determine a default operation state as the state of the virtual machine.

A first deactivation state in which power is turned off, a second deactivation state in which resource usage rights are reclaimed, a third deactivation state in which usage rights of the resources are maintained and an input / output control authority is reclaimed, and an activation state operating by allocating necessary resources. It may include.

For each of the plurality of virtual machines, a database for mapping and storing the identification information of the user terminals connected to the plurality of virtual machines and the operation state specified in a specific location with each other;

The virtual machine controller, when the connection of the at least one virtual machine is requested from the user terminal, when the user terminal is located at a position where the connection of the at least one virtual machine is permitted, to the at least one virtual machine The connection can be granted.

If the user of the user terminal is authorized to access the at least one virtual machine, the virtual machine controller is connected to the at least one virtual machine when the user terminal is requested to access the at least one virtual machine. Can be granted.

The location of the user terminal may be a logical location divided according to the purpose or purpose of the place.

On the other hand, according to another embodiment of the present invention, a plurality of virtual machines connected to the user terminal; A hypervisor unit selectively providing the plurality of virtual machines; And a position determining unit to determine a current position of the user terminal. And providing the user terminal with at least one virtual machine to be executed at the determined current position among the plurality of virtual machines, and when the location of the user terminal is changed, the operating state of the provided virtual machine in the changed operation state. A server for providing a virtual machine is provided based on location information, the virtual machine controller including requesting the hypervisor to change a state.

And a database in which the information of the plurality of virtual machines, accessible locations, and operating states are mapped and stored with each other. The virtual machine controller may further include an operation state assigned to the at least one virtual machine and the changed location. The state of the virtual machine may be determined.

When the operation state is not specified at the changed position, the virtual machine controller may determine a default operation state as the state of the virtual machine.

And a database in which accessible locations for each of the plurality of virtual machines are mapped and stored with each other. The virtual machine controller may include the database when a connection request of the at least one virtual machine is requested from the user terminal. If the user terminal is located at a location where the connection of the at least one virtual machine is permitted, the requested connection may be granted.

And a database in which user identification information, to which access rights are granted, is stored for each of the plurality of virtual machines. The virtual machine controller may further include the data when the connection of the at least one virtual machine is requested from the user terminal. If the user of the user terminal has a right to access the at least one virtual machine by referring to a base, the requested connection may be granted.

Meanwhile, according to another embodiment of the present invention, in a virtual machine loading system including a user terminal and a server loading at least one virtual machine provided to the user terminal, the server is based on the location of the user terminal. Thus, the operating state of the loaded virtual machine can be changed.

The server includes a plurality of virtual machines to which the user terminal is connected; A hypervisor unit selectively providing the plurality of virtual machines; And a position determining unit to determine a current position of the user terminal. And providing the user terminal with at least one virtual machine to be executed at the determined current position among the plurality of virtual machines, and when the location of the user terminal is changed, the operating state of the provided virtual machine in the changed operation state. And a virtual machine controller for requesting the hypervisor to change the state.

The virtual machine controller, when the connection of the at least one virtual machine is requested from the user terminal, when the user terminal is located at a position where the connection of the at least one virtual machine is permitted, to the at least one virtual machine The connection can be granted.

On the other hand, according to another embodiment of the present invention, in the virtual machine providing method of the server comprising a plurality of virtual machines connected to the user terminal and the hypervisor for selectively activating the plurality of virtual machines, the plurality of Providing at least one of the virtual machines to the user terminal; Determining a location of the user terminal; And when the location of the user terminal changes, determining an operating state of the at least one virtual machine based on the changed location. And activating the at least one virtual machine with the determined operating state. A method of providing a virtual machine is provided based on location information of a server.

The determining may include identifying the at least one virtual machine to which the user terminal is connected using identification information of the user terminal; And determining, as the state of the virtual machine, the identified at least one virtual machine and an operation state assigned to the changed position.

The determining may further include determining an operation state set as a default, as a state of the virtual machine, when the operation state is not specified in the changed position.

The operation state may include a first deactivation state in which power is turned off, a second deactivation state in which resource usage rights are recovered, a third deactivation state in which usage rights of the resources are maintained and the input / output control authority is recovered, and the necessary resources are allocated. It may include an activation state that operates.

Requesting connection of the at least one virtual machine from the user terminal; And if the user terminal is located at a location where the connection of the at least one virtual machine is permitted, granting access to the at least one virtual machine.

In the permitting step, when the user of the user terminal has a right to access the at least one virtual machine, the access may be granted.

According to an embodiment of the present invention, by providing a security policy according to a location, it is possible to selectively control the state of the virtual machine according to the location of the user.

In addition, according to the present invention, the server may set a security policy in consideration of the logical location in advance, whereby the user terminal may access the virtual machine only at the authorized location.

In addition, according to the present invention, if the user leaves the current location after connecting to the virtual machine, the server can automatically switch the state of the virtual machine. This allows users to access and use the virtual machine only in locations where physical security is guaranteed.

1 is a functional block diagram of a system for controlling a virtual machine based on location information according to an embodiment of the present invention.
2 is a flowchart illustrating a position determining method of a position determining unit according to an exemplary embodiment.
3 is a flowchart illustrating a VM access control method of a VM control unit according to an embodiment of the present invention.
4 is a flowchart illustrating a method of changing a VM state of a VM controller according to an embodiment of the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The above and other objects, features, and advantages of the present invention will become more readily apparent from the following description of preferred embodiments with reference to the accompanying drawings. However, the present invention is not limited to the embodiments described herein and may be embodied in other forms. Rather, the embodiments introduced herein are provided so that the disclosure may be made thorough and complete, and to fully convey the spirit of the present invention to those skilled in the art. In this specification, when an element is referred to as being on another element, it may be directly formed on another element, or a third element may be interposed therebetween. Also in the figures, the thickness of the components is exaggerated for an effective description of the technical content.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. In the present specification, the singular form includes plural forms unless otherwise specified in the specification. As used herein, the words 'comprises' and / or 'comprising' do not exclude the presence or addition of one or more other components.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings. In describing the following specific embodiments, various specific details are set forth in order to explain and understand the invention in more detail. However, one of ordinary skill in the art can understand that the present invention can be used without these various specific details. In some cases, it is mentioned in advance that parts of the invention which are commonly known in the description of the invention and which are not highly related to the invention are not described in order to prevent confusion in explaining the invention without cause.

1 is a functional block diagram of a system for providing a virtual machine based on location information according to an embodiment of the present invention. The system includes user terminals 10 and 20 and server 100.

The user terminals 10 and 20 illustrated in FIG. 1 may access a server 100 through a communication network 30 to use a virtual machine. The user terminals 10 and 20 may be any electronic device capable of communication, such as a desktop, a notebook, a smartphone, a dedicated terminal for accessing a virtual machine.

The server 100 may perform wired or wireless communication with the user terminals 10 and 20, load at least one virtual machine, and use the application running in the loaded virtual machine by the user terminals 10 and 20. Make sure In detail, the server 100 may determine the location of the user terminal and load a virtual machine previously specified at the determined location. Alternatively, the server 100 may load the virtual machine in a preset state in consideration of the current location and the user of the user terminals 10 and 20.

Throughout this specification, the server 100 'provides a virtual machine' to user terminals means that an operating system (OS) operating on the loaded virtual machine and operating on the loaded virtual machine The application may be used to mean that the user terminals 10 and 20 use the application.

To this end, the server 100 may include a communication unit (not shown), a hardware unit 110, a hypervisor unit 120, first to third service modules 130, 140, and 150, and a first database (DB). 160), the location determiner 170, the second DB 180, and a virtual machine (VM) controller 190 may be included.

In FIG. 1, two user terminals 10 and 20 and three service modules 120, 140, and 150 are illustrated for convenience of description.

The hardware unit 110 provides system resources to the first to third VMs 131, 141, and 151. The hardware unit 110 may include a central processing unit (CPU), a hard disk drive (HDD), a graphics card, a ROM, a RAM, an input / output device, a battery, or a plurality of other devices. The input / output device performs a function of inputting information or outputting information to the server 100, and for example, various types of monitors, keyboards, network interface cards, external storage, and the like.

The hypervisor unit 120 grants the right to use the hardware unit 110 to at least one of the first to third service modules 130, 140, and 150. At least a portion of 110 may be used. Meanwhile, in the present specification, the expression that the hypervisor 120 assigns a use right of the hardware unit 110 to the first to third service modules 130, 140, and 150 is referred to as the first to third service. The terms 'operating (or executing, driving, or activating) the modules 130, 140, and 150' will be used interchangeably.

According to an embodiment of the present disclosure, the server 100 further includes a communication unit (not shown) for communicating with the user terminals 10 and 20. Here, the communication unit (not shown) receives the information transmitted from the user terminals (10, 20) and transfers to the appropriate components of the server 100, on the contrary, the user terminals (10, 20) on the server 200 side Information to be transmitted may be transmitted to the user terminals 10 and 20. For example, the communication unit (not shown) receives location information from the user terminal 10, and the location information may be transmitted to the location determining unit 170.

The hypervisor 120 may start operation at the same time as the server 100 is turned on, and selectively provide the first to third VMs 131, 141, and 151 after the operation is started. According to an embodiment of the present disclosure, the hypervisor unit 120 may control the states of the first to third VMs 131, 141, and 151 according to a request message from the VM controller 190. In addition, when the power of the server 100 is turned on, the hypervisor 120 may drive a virtual machine necessary for the operation of the server 100. Thereafter, the hypervisor unit 120 may change the operation state of the virtual machine assigned thereto based on the location or user ID of the user terminal 10. The user ID is identification information of a user who uses the user terminal 10.

When the hypervisor unit 120 drives the first to third VMs 131, 141, and 151, the hypervisor unit 120 may include at least one of a usage right and an input / output control right of the system resource of the hardware unit 110. (131, 141, 151). I / O control authority is one of system resource usage authority.

In addition, when the hypervisor unit 120 deactivates the first to third VMs 131, 141, and 151, that is, stops the operation, the hypervisor unit 120 writes to the first to third VMs 131, 141, and 151. At least one of the use authority and the input / output control authority of the system resource can be recovered.

Each of the first to third service modules 130, 140, and 150 includes a virtual machine, an operating system operating on the virtual machine, and at least one application operating on the operating system, and stores the system resources of the hardware unit 110 in the hypervisor. It can be allocated from the unit 120 and used individually.

The first service module 130 may include a first VM 131, a first operating system (OS) unit 133, and a first application unit (AP) 135.

A case where the first VM 131 is provided to the user terminal 10 based on the position of the user terminal 10 will be exemplified. In this case, the user terminal 10 may use the first application program running on the first VM 131. Specifically, the user terminal 10 may receive the execution result of the first application program operating on the first VM 131 and the first OS unit 133 through a communication unit (not shown).

The first VM 131 may be granted a use right or an input / output control right of the system resource from the hypervisor 120.

The first OS unit 133 operates on the first VM 131 and may be effectively executed when the first VM 131 operates. The first OS unit 133 may be an OS such as Windows, Mac, or Linux, and controls the hardware unit 110 allocated from the hypervisor unit 110 and manages an application program operating on the first OS unit 133. can do.

The first AP unit 135 operates on the first OS unit 133 and may include at least one application program. At least one application program included in the first AP unit 135 may be a program compatible with the first OS unit 133.

The second service module 140 includes a second VM 141, a second OS unit 143, and a second AP unit 145, and the third service module 150 includes a third VM 151 and a third OS unit 153. ) And the third AP unit 155. Operations or functions of the second and third service modules 140 and 150 are substantially the same as those of the first service module 130, and thus detailed description thereof will be omitted.

The first DB 160 may store a logical location allocated to a physical location. For example, the first DB 160 may store information in which physical locations and logical locations are mapped to each other (hereinafter, referred to as "physical location-logical location mapping information"). Here, the physical location is coordinate information measuring the location of the user terminal 10, and the logical location may be a logical space divided according to the purpose or purpose of the place.

The location determiner 170 may receive location information of the user terminal 10 and determine a logical location of the user terminal 20 with reference to 'physical location-logical location mapping information' stored in the first DB 160. have. The logical location may be a location arbitrarily partitioned by a user or an administrator of the server 100 side such as an office, a conference room, a lounge, a lobby, a home, and the like.

On the other hand, the location information of the user terminal 10 can be obtained through various paths. For example, when an IP is assigned to the user terminal 10, location information may be obtained using a network management tool capable of identifying a location through the IP. In addition, location information on the physical location of the user terminal 10 may be obtained by using a method used for location tracking such as GPS, such as Wi-Fi or Zigbee. When using GPS, the user terminal 10 is configured to include a GPS receiver. Since the technologies capable of acquiring the location information of the mobile user terminal 10 are techniques known in the related art, the location determination unit 170 may acquire the location information of the user terminal 10 by using such techniques. . If there are components necessary for the location determining unit 170 to obtain the location information of the user terminal 10, such components may be installed in the server 100 or may be installed as a separate device from the server 100. . However, these components are well-known techniques and do not have a direct relationship with the present invention, which will not be described in detail.

The location determiner 170 may determine a logical location of the user terminal 10 and provide the determined logical location to the VM controller 190. For example, the location determiner 170 may determine the logical location of the user terminal 10, and provide the changed logical location to the VM controller 190 when the logical location of the user terminal 10 is changed. have.

Specifically, the location determiner 170 receives the physical location information of the user terminal 10 periodically or aperiodically. The location determiner 170 may determine a logical location corresponding to the physical location of the received user terminal 10 with reference to 'physical location-logical location mapping information' stored in the first DB 160. As a result of the determination, when it is determined that the logical position of the user terminal 10 is changed, the position determiner 170 may notify the VM controller 190 of the changed logical position information.

In addition, the location determiner 170 may manage the changed logical location (that is, the most recent logical location of the user terminal 10) whenever the logical location of the user terminal 10 is changed. Can be stored in internal memory or on internal disk. Thus, the location determiner 170 determines the logical location corresponding to the current physical location with reference to the first DB 160, and compares the determined logical location with the logical location stored in the internal memory or the internal disk to determine the logical location. The change can be determined immediately. The position determiner 170 transmits information on the logical position to the VM controller 190 only when there is a change in the logical position.

The second DB 180 may store information related to the first to third VMs 131, 141, and 151 provided by the server 100. The information stored in the second DB 180 is largely divided into four types. For this purpose, the second DB 180 may be physically or logically divided into first to seventh areas.

The first area may store a list of virtual machines that can be accessed for each user. That is, the ID list of virtual machines allowed to access the user ID and the user ID may be mapped and stored in the first area as shown in [Table 1].

User ID VM IDs allowed to connect 001 VM1, VM2 002 VM1 003 VM3

Referring to [Table 1], the user ID is an ID of a user who can use the user terminals 10 and 20. The VM ID is an ID of virtual machines installed in the server 100. A user whose ID is '001' can use two virtual machines whose IDs are 'VM1' and 'VM2' among a plurality of virtual machines. 'VM1, VM2, and VM3' may be first to third VMs 131, 141, and 151, respectively.

In the second area, IDs and user IDs of the user terminals 10 and 20 currently connected to the first to third VMs 131, 141, and 151 are stored. Table 2 shows an example of an ID and a user ID list of a user terminal connected to a virtual machine stored in a second area.

VM ID Connected terminal ID Connected User ID VM1 T1, T2 001, 002 VM2 T2 002 VM3 none none

Referring to [Table 2], only users with ID '001, 002' can use the virtual machine with ID 'VM1'.

Information on the current location of each of the user terminals 10 and 20 may be stored in the third area as shown in [Table 3].

Terminal ID Current location T1 office T2 lobby

Referring to [Table 3], the terminal ID may be an ID of the user terminals 10 and 20 and the current location may be a logical location. The user terminal 10 with ID 'T1' is currently located in an office, and the user terminal 20 with 'T2' is currently located in a lobby.

In the fourth region, a list of logical locations accessible by the first to third VMs 131, 141, and 151 may be stored as shown in [Table 4].

VM ID Current location VM1 Office, meeting room VM2 lobby VM3 library

Referring to Table 4, the first VM 131 having an ID of 'VM1' may be loaded only in an office and a conference room.

Information on an operation state of a virtual machine designated for each ID and location of the first to third VMs 131, 141, and 151 may be stored in the fifth area as shown in [Table 5]. The operating state indicates an active state or an inactive state of the virtual machine, and the hypervisor 120 may activate or deactivate the virtual machine in a manner corresponding to the designated operating state.

VM ID Logical location office meeting room lobby VM1 Activation status First inactivity state Third inactive state VM2 Activation status Second inactivity state First inactivity state VM3 Activation status Third inactive state NONE

In Table 5, the operational state of the designated VM includes an active state or an inactive state of the virtual machine. The hypervisor 120 may activate or deactivate the virtual machine in a manner corresponding to a specified operating state. 'NONE' means that no operating state is specified.

The type of operation state of the VM may be defined as an activation state and first to third inactive states as shown in Table 7 below.

Kind of operation state Activation method or deactivation method Disabled
condition First inactivity state No resources have been allocated at all, and all previously allocated resources have been recovered. For example, the OS does not reside in memory at all, and must start again when the OS is loaded into memory when it is activated in the future. Second inactivity state Maintains the current state and cannot add new operations or actions. No more resources are allocated, and only the minimum amount of resources that the OS is loaded and resides in the existing allocated resources are kept, and all remaining resources are reclaimed. Third inactive state All resources are allocated and operated except the I / O permission. For example, in the background Activation status All the necessary resources are allocated to operate without restrictions

Referring to [Table 6], the deactivation method is a first deactivation method of powering off a virtual machine (retrieving all previously allocated resources), and having only enough resources for the virtual machine to reside in memory. A second deactivation method for retrieving all the resources and a third deactivation method for reclaiming input / output control authority while maintaining the use authority of the resource (that is, operating in the background) may be included. These deactivation schemes are exemplary and the present invention is not limited thereto, and other deactivation schemes may be used.

 A default state of each of the first VM 131 and the second VM 151 may be stored in the seventh area of the second DB 180 as shown in [Table 6].

VM ID Default operating state VM1 Activation status VM2 First inactivity state

Referring to [Table 7], when the user terminal 10 moves to an arbitrary position, when the operating state is not specified for the first VM 131 being connected, the virtual machine is returned to the default state of [Table 6]. Is changed.

Meanwhile, the VM controller 190 may enable at least one of the first to third VMs 131, 141, and 151 only at a location where the user is allowed. When the VM controller 190 is requested to access at least one virtual machine (eg, the first VM 131) from the user terminal 10, the VM controller 190 is located at a location where the connection of the at least one virtual machine is permitted. 10), it may allow access to at least one virtual machine. In addition, when the user of the user terminal 10 has a right to access at least one virtual machine, the VM controller 190 may permit access to at least one virtual machine. For example, when the user requests access to the first VM 131 through the user terminal 10, the VM controller 190 has a right to access the first VM 131 at a logical location of the user terminal 10. If so, the hypervisor 120 may be requested to grant the connection.

In addition, the VM controller 190 may be configured such that the user terminal 10 includes at least one virtual machine (eg, the first VM) among a plurality of virtual machines (eg, the first VM 131 and the second VM 151). If the location of the user terminal 10 is changed after being connected to (131)), the hypervisor unit 120 may be requested to change the state of the previously provided virtual machine to an operation state designated at the changed location. For example, after the VM controller 190 is connected to the first VM 131, the VM controller 190 continuously monitors the location of the user terminal 10 so that the user terminal 10 is based on the location of the user terminal 10. The state of the connected first VM 131 may be controlled.

First, the operation of allowing the VM control unit 190 to access the virtual machine of the user terminal 10 will be described.

The VM controller 190 receives a message requesting a connection to the first VM 131 from the user terminal 10 through a communication unit (not shown). The connection request message includes {user ID, user terminal ID, VM ID to which connection is desired}.

The VM controller 190 inquires of the first area of the second DB 180 and checks whether there is an ID of a virtual machine to be connected to the VM ID list mapped to the user ID. For example, when the user ID included in the message is '001' and the VM ID desired to be connected is 'VM1', the VM controller 190 stores 'VM1' in the list of VM IDs mapped to '001'. If so, it is determined that the user of the user terminal 10 has the authority to use the first VM 131.

If it is determined that the user has the authority to use the first VM 131 by the inquiry, the VM controller 190 inquires the third area of the second DB 180 to check the current position of the user terminal 10.

The VM controller 190 inquires the fourth area of the second DB 180 and checks whether the checked current location is included in the list of locations accessible to the first VM 131. If the checked current location is included in the list set for the first VM 131, the VM controller 190 determines that the current location is an area where the user can access the first VM 131. Therefore, the VM controller 190 updates the second area of the second DB 180. That is, the VM controller 190 updates the ID and the user ID of the user terminal 10 connected to the first VM 131, and permits the user terminal 10 to access the first VM 131.

On the other hand, if it is assumed that the user terminal 10 is currently connected to the first VM 131, it may be reported that the logical position of the user terminal 10 has been changed from the location determiner 170. In this case, the VM controller 190 may control the state of the first VM 131 using the changed logical location and the second DB 180.

In detail, the VM controller 190 inquires the second area of the second DB 180 by using the ID of the user terminal 10 and checks the virtual machine to which the user terminal 10 is connected. For example, if the ID of the user terminal 10 is 'T1', the VM controller 190 knows that the user terminal 10 is currently connected to the first VM 131, and the user terminal 10 is connected and used. The ID of the first VM 131 being obtained is obtained.

The VM controller 190 inquires the fifth area of the second DB 180 by using the acquired ID of the first VM 131 and information on the changed location notified by the location determiner 170. That is, the VM controller 190 checks the operation state of the first VM 131 assigned to the first VM 131 from the fifth area at the changed position.

If an operation state is specified for the first VM 131 and the changed position, the VM controller 190 generates a message including information on the designated operation state and the ID of the first VM 131 to the hypervisor unit 120. send. The transmitted message includes a content request for changing the first VM 131 to a specified operating state.

On the other hand, if the operating state is not specified for the first VM 131 and the changed location, that is, if 'NONE' is specified, the VM controller 190 inquires the seventh area of the second DB 180 to query the first VM. The operation state set by default for 131 is determined as the operation state of the first VM 131. The VM controller 190 generates a message including information on an operation state set as a default and an ID of the first VM 131 and transmits the message to the hypervisor 120.

The hypervisor 120 compares the operation state included in the message received from the VM control unit 190 with the current operation state of the first VM 131. As a result of the comparison, if the two operating states are different, the hypervisor 120 changes the first VM 131 to the received operating state, and if it is the same, maintains the state of the first VM 131. The current operating state of the first VM 131 may be stored in the hypervisor 120 or may be provided from the VM controller 190.

2 is a flowchart illustrating a position determining method of the position determining unit 170 according to an embodiment of the present invention.

In operation 210, the location determiner 170 may periodically or aperiodically receive information on the location of the user terminal 10 from the user terminal 10 to determine the physical location of the user terminal 10.

In operation 220, the location determiner 170 may check the logical location mapped to the determined physical location from the first DB 160.

If it is determined in operation 230 that the logical position is changed, in operation 240, the position determiner 170 may notify the VM controller 190 of the changed logical position information. This is because the change in the logical position of the user terminal 10 is caused by the movement of the user terminal 10.

In operation 250, the location determiner 170 may store information on the changed logical location of the user terminal 10 in a separate storage (not shown). This is to determine whether the logical position is changed more quickly.

3 is a flowchart illustrating a VM access control method of a VM control unit according to an embodiment of the present invention.

The VM access control method illustrated in FIG. 3 may be operated by the server 100 described with reference to FIG. 1.

In operation S305, the user terminal 10 transmits a message requesting access to at least one virtual machine, for example, the first VM 131, to the VM controller 190. The connection request message includes {user ID, user terminal ID, VM ID to which connection is desired}.

In step S310, the VM controller 190 checks the user ID of the received connection request message, queries the list of VMs accessible by the user in the first area, and checks whether there is an ID of the first VM 131.

In step S315, if the VM ID requested by the user terminal 10 is present, that is, when it is determined that the user has the authority to use the first VM 131, in step S320, the VM controller 190 performs a third operation. Inquire the area to check the current position of the user terminal 10.

In operation S325, the VM controller 190 inquires of the fourth region and checks whether a connection to the first VM 131 is possible at the current position of the user terminal 10. If the current location of the user terminal 10 is included in the list of accessible locations stored in the fourth area, the first VM 131 can be accessed.

In operation S330, if the access result is confirmed in operation S325, the VM controller 190 updates the ID and the user ID of the user terminal 10 connected to the first VM 131.

In step S335, the VM controller 190 requests the hypervisor 120 to activate the first VM 131 to the user terminal 10.

In operation S340, the hypervisor 120 activates the first VM 131 to provide the first VM 131 to the user terminal 10.

In step S345, the hypervisor 120 reports that the activation of the first VM 131 is completed and provided to the first VM 131.

In operation S350, the VM controller 190 notifies the user terminal 10 that the access to the first VM 131 is allowed. Operation S350 may be operated after operation S330.

4 is a flowchart illustrating a method of changing a VM state of a VM controller according to an embodiment of the present invention.

The VM access control method illustrated in FIG. 4 may be operated by the server 100 described with reference to FIG. 1.

In step S405, the location determiner 170 checks the location of the user terminal 10 periodically or aperiodically, and if it is determined that the location has been changed, stores the information of the changed location.

In operation S410, the location determiner 170 reports the changed location information of the user terminal 10 to the VM controller 190.

In step S415, the VM controller 190 inquires the second area of the second DB 180 to identify the virtual machine to which the user terminal 10 is connected. The VM controller 190 may identify the virtual machine being accessed using the ID of the user terminal 10.

If there is a virtual machine to which the user terminal 10 is connected in step S420, and the virtual machine is the first VM 131, in step 425, the VM controller 190 inquires of the fifth area to search for the first VM 131. ) And check the operation status assigned to the changed position.

In step S430, if the specified operation state exists, the VM controller 190 generates a message including information on the specified operation state and the ID of the first VM 131 and transmits the generated information to the hypervisor unit 120 in step S435. . That is, in step S430, the VM controller 190 requests the hypervisor 120 to change the first VM 131 to a specified operating state.

On the other hand, if the operation state is not specified for the first VM 131 and the changed location in step S430, in step S440, the VM controller 190 inquires the seventh area of the second DB 180 to search for the first VM 131. For example, the operation state set as a default for the first VM 131 is determined as the operation state of the first VM 131.

In step S445, the VM controller 190 generates a message including information on an operation state set as a default and an ID of the first VM 131 and transmits the message to the hypervisor 120. That is, in step S445, the VM controller 190 requests the hypervisor 120 to change the first VM 131 to an operation state designated by default.

In operation S450, the hypervisor 120 compares the operation state included in the message received from the VM controller 190 with the current operation state of the first VM 131.

As a result of the comparison, if the two operating states are different, in operation S455, the hypervisor 120 changes the first VM 131 to the operation state received in operation S435.

In operation S460, the hypervisor unit 120 reports to the VM controller 190 that the state of the first VM 131 has changed.

On the other hand, if the comparison result of step S450, the two operating state is the same, the hypervisor 120 maintains the state of the first VM (131).

Methods according to an embodiment of the present invention can be implemented in the form of program instructions that can be executed by various computer means and recorded in a computer readable medium. The computer readable medium may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on the media may be those specially designed and constructed for the purposes of the present invention, or they may be of the kind well-known and available to those having skill in the computer software arts.

As described above, although the present invention has been described by way of limited embodiments and drawings, the present invention is not limited to the above embodiments, and those skilled in the art to which the present invention pertains various modifications and variations from such descriptions. This is possible.

Therefore, the scope of the present invention should not be limited to the described embodiments, but should be determined not only by the claims below but also by the equivalents of the claims.

100: server 110: hardware unit
110: hypervisor unit 140, 150: first and second service module
160: first database 170: position determination unit
180: second database 190: virtual machine (VM) control unit

Claims (23)

A plurality of virtual machines accessible by the user terminal;
A hypervisor unit selectively providing the plurality of virtual machines; And
After the user terminal is connected to at least one virtual machine of the plurality of virtual machines, if the location of the user terminal is changed, the hypervisor to change the state of the provided virtual machine to an operation state specified at the changed location. Virtual machine controller
Server providing a virtual machine based on location information, including. The method of claim 1,
The virtual machine control unit,
Identifying the at least one virtual machine to which the user terminal is connected by using the identification information of the user terminal, and determining the identified at least one virtual machine and an operating state assigned to the changed position as the state of the virtual machine; Server providing a virtual machine based on the location information, characterized in that. The method of claim 2,
The virtual machine control unit,
If the operation state is not specified in the changed position, the server for providing a virtual machine based on the location information, characterized in that for determining the default operating state as the state of the virtual machine. The method of claim 1,
A first deactivation state in which power is turned off, a second deactivation state in which resource usage rights are reclaimed, a third deactivation state in which the use authority of the resources is maintained and the input / output control authority is reclaimed, and an activation state operating by allocating necessary resources. Server for providing a virtual machine based on the location information, characterized in that it comprises a. The method of claim 1,
A database for mapping each of the plurality of virtual machines with identification information of user terminals connected to the plurality of virtual machines and an operation state designated at a specific location;
Server for providing a virtual machine based on the location information, characterized in that it further comprises. The method of claim 1,
The virtual machine control unit,
When the connection of the at least one virtual machine is requested from the user terminal, when the user terminal is located at a location where the connection of the at least one virtual machine is permitted, the connection to the at least one virtual machine is allowed. A server that provides a virtual machine based on location information. The method according to claim 1 or 6,
The virtual machine control unit,
When the connection of the at least one virtual machine is requested from the user terminal, when the user of the user terminal has the authority to access the at least one virtual machine, the connection to the at least one virtual machine is allowed. A server that provides a virtual machine based on location information. The method of claim 1,
The location of the user terminal is a server for providing a virtual machine based on the location information, characterized in that the logical location is divided according to the purpose or purpose of the place. A plurality of virtual machines to which the user terminal is connected;
A hypervisor unit selectively providing the plurality of virtual machines; And
A position determination unit to determine a current position of the user terminal; And
Providing the user terminal with at least one virtual machine to be executed at the determined current position among the plurality of virtual machines, and when the location of the user terminal is changed, the state of the provided virtual machine in an operation state specified at the changed location Requesting the hypervisor to change the virtual machine controller
Server providing a virtual machine based on the location information, characterized in that it comprises a. 10. The method of claim 9,
A database in which information about the plurality of virtual machines, accessible locations and operating states are mapped and stored;
More,
The virtual machine controller, the server for providing a virtual machine based on the location information, characterized in that for determining the at least one virtual machine and the operation state specified in the changed position as the state of the virtual machine. The method of claim 10,
The virtual machine control unit,
If the operation state is not specified in the changed position, the server for providing a virtual machine based on the location information, characterized in that for determining the default operating state as the state of the virtual machine. 10. The method of claim 9,
And a database in which accessible locations for each of the plurality of virtual machines are mapped and stored with each other.
The virtual machine control unit,
When the connection of the at least one virtual machine is requested from the user terminal, when the user terminal is located at a location where the connection of the at least one virtual machine is permitted by referring to the database, granting the requested connection. A server that provides a virtual machine based on location information. The method of claim 9 or 12,
And a database in which user identification information, to which access rights are granted, is stored for each of the plurality of virtual machines.
The virtual machine control unit,
When the connection of the at least one virtual machine is requested from the user terminal, when the user of the user terminal has the authority to access the at least one virtual machine by referring to the database, the requested connection is granted. A server that provides a virtual machine based on location information. A virtual machine loading system comprising a user terminal and a server loading at least one virtual machine provided to the user terminal,
The server,
The system for providing a virtual machine based on the location information, the operation state of the loaded virtual machine is changed based on the location of the user terminal. The method of claim 14,
The server,
A plurality of virtual machines to which the user terminal is connected;
A hypervisor unit selectively providing the plurality of virtual machines; And
A position determination unit to determine a current position of the user terminal; And
Providing the user terminal with at least one virtual machine to be executed at the determined current position among the plurality of virtual machines, and when the location of the user terminal is changed, the state of the provided virtual machine in an operation state specified at the changed location A virtual machine controller for requesting the hypervisor to change a value;
System for providing a virtual machine based on the location information comprising a. The method of claim 15, wherein
The virtual machine control unit,
When the connection of the at least one virtual machine is requested from the user terminal, when the user terminal is located at a location where the connection of the at least one virtual machine is permitted, the connection to the at least one virtual machine is allowed. A system that provides a virtual machine based on location information. A method of providing a virtual machine for a server, comprising: a plurality of virtual machines connected to and used by a user terminal and a hypervisor for selectively activating the plurality of virtual machines;
Providing at least one virtual machine of the plurality of virtual machines to the user terminal;
Determining a location of the user terminal; And
Determining an operating state of the at least one virtual machine based on the changed position when the position of the user terminal is changed; And
Activating the at least one virtual machine with the determined operating state;
Method for providing a virtual machine based on the location information of the server, including. The method of claim 17,
The determining step,
Identifying the at least one virtual machine to which the user terminal is connected using identification information of the user terminal; And
Determining the identified at least one virtual machine and an operating state assigned to the changed position as a state of the virtual machine;
Method for providing a virtual machine based on the location information of the server comprising a. The method of claim 18,
The determining step,
If the operating state is not specified in the changed position, determining a default operating state as a state of the virtual machine;
Method for providing a virtual machine based on the location information of the server, characterized in that it further comprises. The method of claim 17,
The operation state may include a first deactivation state in which power is turned off, a second deactivation state in which resource usage rights are recovered, a third deactivation state in which usage rights of the resources are maintained and the input / output control authority is recovered, and the necessary resources are allocated. Method for providing a virtual machine based on the location information of the server, characterized in that it comprises an active state in operation. The method of claim 17,
Requesting connection of the at least one virtual machine from the user terminal; And
Authorizing connection to the at least one virtual machine if the user terminal is located at a location where the connection of the at least one virtual machine is permitted;
Method for providing a virtual machine based on the location information of the server, characterized in that it further comprises. The method of claim 21,
The authorizing step,
And if the user of the user terminal has the right to access the at least one virtual machine, granting the access based on the location information of the server. The method of claim 17,
The location of the user terminal is a method for providing a virtual machine based on the location information of the server, characterized in that the logical location divided according to the purpose or purpose of the place.

Images