Ntt Docomo, Inc.

Nec Corporation

Fujitsu Corporation

Ken Ohta

Hiroshi Inamura

Atsushi Takeshita

Tomohiro Nakagawa

Takashi Suzuki

Yu Inamura

Hiroshi Fujimoto

Takehiro Nakayama

Hisashi Oguma

Hisatoshi Eguchi

Kazuhisa Sekine

Maki Ohata

Akira Kinno

Katsuaki Akama

Takashi Yoshikawa

Takahiro Ito

Chie Noda

Toru Egashira

Masahiro Fukuyori

Tetsuya Shioda

In an information processing terminal, a second screen activation monitoring unit that has received a focus OFF notification sends a domain switch request notification to a domain control unit, and the domain control unit that has received the notification sends a domain switch notification to a first OS. Then, the first OS sends a focus ON notification to a first screen activation monitoring unit and further sends the focus OFF notification to a first application. A resource is thereby released by the first application that is implemented to release an acquired resource upon receiving the focus OFF notification.

Information processing terminal and resource release method

A data control device includes: an execution unit that executes, as an active runtime environment, one of a plurality of runtime environments each provided with an individual clipboard used for data reading and writing; a switching unit that switches the active runtime environment; a decision unit that, when the active runtime environment is switched by the switching unit, decides whether an item of data written to a clipboard of a runtime environment that is active before the switching should be copied to a clipboard of a runtime environment that will become active after the switching, by referring to an attribute of at least one of the runtime environment that is active before the switching and the runtime environment that will become active after the switching; and a management unit that manages copying of the item of data between the clipboards based on the decision made by the decision unit.

Data control device, data control method, and computer-readable medium

A state notification apparatus comprises: a holding unit that, when one or more secure runtime environments and one or more non-secure runtime environments are selectively executed in a foreground, holds an identifier of a runtime environment that is being executed in the foreground; a determination unit that determines a state of the runtime environment executed in the foreground based on the identifier held by the holding unit; and a notification unit that causes a hardware device that cannot be accessed from the one or more non-secure runtime environments to notify the state determined by the determination unit.

State notification apparatus, state notification method, and computer-readable storage medium

The communication contention management device of the present invention includes a connection request receiving unit to receive a connection request to the access point form the auxiliary communication contention management device, an access restriction unit to hold an identifier of the execution environment and an access restriction policy containing a designation of the access point to which the execution environment is allowed or not allowed to be connected and determine whether or not to permit the connection request according to the access restriction policy, and a contention determination unit to determine whether or not to permit the connection request based on an active state and an allocation state held in a connection manager.

Communication contention management device, auxiliary communication contention management device, communication contention management system, and communication contention management method

An API checking deviceincludes an API check request reception unitto receive a determination request to request determination of whether to permit the API call, a state information acquiring unitto acquire state information showing a state of the device, a check mode setting unitto set a check mode for the API call on the basis of the state information acquired, a determining unitto determine whether to permit the API call on the basis of the check mode, and a check result outputting unitto output the check result generated by the determining unit

API checking device and state monitor

A terminal device according to the present invention includes: a first domain configured to execute multiple software programs; and a second domain configured to operate independently of the first domain and to check whether or not the software programs are safe. The second domain includes: an execution sequence storage unit configured to store execution priority of the multiple software programs to be executed by the first domain; a software program checking unit configured to check whether or not the multiple software programs are safe, according to the execution sequence storage unit; and an execution restricting unit configured to restrict the first domain from executing a software program included in the multiple software programs and having a check result indicating that the software program is unsafe, before checking of all the multiple, software programs is completed.

Terminal device and method for checking a software program

Disclosed is an operating system monitoring setting information generator apparatus including: a monitoring setting information management unit configured to store monitoring setting information used for monitoring of an operating system monitoring apparatus; a monitoring setting information output unit configured to generate a monitoring setting information file including the monitoring setting information stored by the monitoring setting information management unit, version information and binding information indicating a correspondence with a monitoring target software program, and to output the generated monitoring setting information file; and a digital signature unit configured to generate a digital signature of the monitoring setting information file, and to add the generated digital signature to the monitoring setting information file.

Operating system monitoring setting information generator apparatus and operating system monitoring apparatus

A mobile terminal () comprises an application execution unit () configured to execute an application program; an access control rule management unit () configured to retain an access control rule defining whether the application program has an access authorization to a confidential resource in the mobile terminal and a determining unit; an access control rule query unit () configured to acquire, from an external device, the access control rule by designating at least one of an identifier of a user identity module installed in the mobile terminal and an identifier of the mobile terminal, and to retain the acquired access control rule in the access control management unit; a query requirement determination unit () configured to determine whether to update the access control rule when the application program makes an access to the confidential resource, and to update the access control rule; an authorization management unit () configured to determine whether the application program has the access authorization based on the access control rule; and a confidential resource management unit () configured to determine whether to permit an access request to the confidential resource by the application program, based on a result of the determination of the authorization management unit ().

Mobile terminal, access control management device, and access control management method

In a computer system according to the present invention, a switch-source OS controller unit includes: a OS switch request receiver unit configured to receive an OS switch request for requesting that the switch-destination OS in a suspend status becomes the OS in the active status; a switch event notifying unit configured to notify event information to the switch-destination OS or an application on the switch-destination OS, the event information being included in the received OS switch request, and requesting the switch-destination OS or the application on the switch-destination OS to perform a process; and a switch controller unit configured to call the OS switching function, by using the event information as an argument, so that the switch-destination OS becomes the OS in the active status.

Operating system switching control device and computer system

A device management apparatus includes a device configuration information holding unit, a subscriber information holding unit, a security policy holding unit, a module state holding unit, and a device diagnosis unit. The security policy holding unit holds a security policy set based on the configuration based on the configuration information or the subscriber information. The device diagnosis unit examines the security policy and the module state information to make a diagnosis of a configuration of the device.

Device management apparatus, device, and device management method

An update-startup apparatus includes: an OS startup processor unit configured to start a first OS and a second OS; an initial startup processor unit configured to start the OS startup processor unit; and an update information storage unit configured to store first OS update information for updating a first OS program constituting the first OS and second OS update information for updating a second OS program constituting the second OS. The OS startup processor unit starts the first OS after updating the first OS program by using the first OS update information, when the first OS update information is stored at a time of power-on or at a time of rebooting the first OS; the OS startup processor unit starts the first OS, when the first OS update information is not stored at a time of power-on; and the OS startup processor unit cancels a reboot of the second OS, when the second OS update information is not stored at a time of rebooting the first OS.

Update-startup apparatus and update-startup control method

A client apparatus to which data or a function is provided from a server apparatus, including: a monitoring unit configured to monitor monitoring target software, and detect an abnormal state or unauthorized state of the target software; a server management unit configured to manage an address of the server apparatus that is being accessed by the client apparatus; an abnormality information creation unit configured to create abnormality information from the abnormal state or the unauthorized state, which is detected by the monitoring unit; and an abnormality information notification unit configured to issue the abnormality information to the server apparatus managed by the server management unit.

Client apparatus, server apparatus and authority control method

An input/output control apparatus includes: a request acceptance unit configured to accept a switch request for requesting to change an operating system occupying any one of the input device and the output device; a control information generator unit configured to generate control information including any one of input destination information and output enable information in response to the switch request; and a control information output unit configured to output any one of the input destination information and the output enable information. The input destination information includes at least information for specifying an input destination operating system to which information inputted from the input device is inputted; and the output enable information includes at least information for specifying whether or not each of the plurality of operating systems can output information to the output device.

Input/output control apparatus, input/output control system, and input/output control method

A client apparatus for utilizing services by executing service programs includes a policy holding unit, a verification unit, a verification result holding unit, and a verification result notification unit. The policy holding unit holds a service-specific verification policy pre-checked by a device verification apparatus. The verification unit verifies an operation and configuration of the client apparatus itself by using the verification policy when the service program is executed. The verification result notification unit notifies the verification result to the device verification apparatus, which requests the verification result.

Growing community of inventors

Yokohama, Japan

Ken Ohta