IP Library › Granted Patent US 7,516,323
Granted Patent B2
US 7,516,323 · App. 10/886,639 · Granted Apr 7, 2009

Security management system in parallel processing system by OS for single processors

Assignee: NEC Corporation
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,516,323
App. No.
10/886,639
Granted
Apr 7, 2009
Kind
B2
Abstract

On a parallel processing system which operates an OS and an existing application for single processors on a multiprocessor to realize parallel processing by the multiprocessor with respect to the application, an OS service unit which provides services of the OS for single processors to a unit of work which can be parallelized within the application controls security function with respect to a processing request from the unit of work in response to the processing request.

Claims (117)

1. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which operates an OS and an application for single processors on a multiprocessor,

said multiprocessor being logically divided into two groups of a first processor side and a second processor side, and

controls a unit of work that can be parallelized within said application operating on a processor on said first processor side as a new unit of work on a processor on said second processor side, thereby executing parallel processing by said multiprocessor with respect to said application,

an OS service unit which provides services of said OS for single processors to said unit of work controls security function with respect to a processing request from said unit of work in response to said processing request.

2. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which

operates an OS and an application for single processors on a multiprocessor, and

controls a unit of work that can be parallelized within said application operating on one processor as a new unit of work on other processor, thereby executing parallel processing by said multiprocessor with respect to said application,

an OS service unit which provides services of said OS for single processors to said unit of work controls security function with respect to a processing request from said unit of work in response to said processing request.

3. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which operates an OS for single processors and a unit of work as a task on a multiprocessor,

an OS service unit which provides services of said OS for single processors to said unit of work controls security function with respect to a processing request from said unit of work in response to said processing request.

4. The security management system as set forth in claim 1 , wherein

with a security contents for each said processor or each said unit of work incorporated into said OS service unit in advance, said OS service unit conducts security protection with respect to a processing request from said unit of work according to said security contents in response to said processing request.

5. The security management system as set forth in claim 1 , wherein

with a security contents for each said processor or each said unit of work set in a control file,

said OS service unit conducts security protection with respect to a processing request from said unit of work according to the security contents of said control file in response to said processing request.

6. The security management system as set forth in claim 5 , wherein

with said control file having the security contents whose level varies with each said processor set for each said processor stored in an external storage device on said parallel system,

said OS service unit of each said processor reads each corresponding said control file from said external storage device to control security function in response to a request from said unit of work.

7. The security management system as set forth in claim 6 , wherein

when said control file stored in said external storage device is changed, said OS service unit of corresponding said processor again reads said control file changed.

8. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which

operates an OS and an application for single processors on a multiprocessor,

said multiprocessor being logically divided into two groups of a first processor side and a second processor side, and

controls a unit of work that can be parallelized within said application operating on a processor on said first processor side as a new unit of work on a processor on said second processor side, thereby executing parallel processing by said multiprocessor with respect to said application,

a security expansion unit incorporated into said OS for single processors controls security function with respect to a processing request from said unit of work in response to said processing request.

9. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which

operates an OS and an application for single processors on a multiprocessor, and

controls a unit of work that can be parallelized within said application operating on one processor as a new unit of work on other processor, thereby executing parallel processing by said multiprocessor with respect to said application,

a security expansion unit incorporated into said OS for single processors controls security function with respect to a processing request from said unit of work in response to said processing request.

10. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which operates an OS for single processors and a unit of work as a task on a multiprocessor,

a security expansion unit incorporated into said OS for single processors controls security function with respect to a processing request from said unit of work in response to said processing request.

11. The security management system as set forth in claim 8 , wherein

said security expansion unit is incorporated into said OS for single processors as a module to controls security function with respect to a request from said unit of work for a system call to said OS for single processors in response to said processing request.

12. The security management system as set forth in claim 8 , wherein

with a security contents for each said processor or each said unit of work incorporated into said security expansion unit in advance, said security expansion unit conducts security protection with respect to a processing request from said unit of work according to said security contents in response to said processing request.

13. The security management system as set forth in claim 8 , wherein

with a security contents for each said processor or each said unit of work set in a control file,

said security expansion unit conducts security protection with respect to a processing request from said unit of work according to the security contents of said control file in response to said processing request.

14. The security management system as set forth in claim 13 , wherein

with said control file having security contents whose level varies with each said processor set stored in an external storage device on said parallel system,

said security expansion unit of each said processor reads each corresponding said control file from said external storage device to control security function in response to a request from said unit of work.

15. The security management system as set forth in claim 14 , wherein

when said control file stored in said external storage device is changed, said security expansion unit of corresponding said processor again reads said control file changed.

16. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which

operates an OS and an application for single processors on a multiprocessor,

said multiprocessor being logically divided into two groups of a first processor side and a second processor side, and

controls a unit of work that can be parallelized within said application operating on a processor on said first processor side as a new unit of work on a processor on said second processor side, thereby executing parallel processing by said multiprocessor with respect to said application,

an application control unit which provides execution environments for said unit of work controls security function with respect to a processing request from said unit of work in response to said processing request.

17. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which

operates an OS and an application for single processors on a multiprocessor, and

controls a unit of work that can be parallelized within said application operating on one processor as a new unit of work on other processor, thereby executing parallel processing by said multiprocessor with respect to said application,

an application control unit which provides execution environments for said unit of work controls security function with respect to a processing request from said unit of work in response to said processing request.

18. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which operates an OS for single processors and a unit of work as a task on a multiprocessor,

an application control unit which provides execution environments for said unit of work controls security function with respect to a processing request from said unit of work in response to said processing request.

19. The security management system as set forth in claim 16 , wherein

with a security contents for each said processor or each said unit of work incorporated into said application control unit in advance, said application control unit conducts security protection with respect to a processing request from said unit of work according to said security contents in response to said processing request.

20. The security management system as set forth in claim 16 , wherein

with a security contents for each said processor or each said unit of work set in a control file, said application control unit conducts security protection with respect to a processing request from said unit of work according to the security contents of said control file in response to said processing request.

21. The security management system as set forth in claim 20 , wherein

with said control file having security contents whose level varies with each said processor set stored in an external storage device on said parallel system,

said application control unit of each said processor reads each corresponding said control file from said external storage device to control security function in response to a request from said unit of work.

22. The security management system as set forth in claim 21 , wherein

when said control file stored in said external storage device is changed, said application control unit of corresponding said processor again reads said control file changed.

23. The security management system as set forth in claim 16 , wherein said unit of work is a Java® application.

24. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which

operates an OS and an application for single processors on a multiprocessor,

said multiprocessor being logically divided into two groups of a first processor side and a second processor side, and

controls a unit of work that can be parallelized within said application operating on a processor on said first processor side as a new unit of work on a processor on said second processor side, thereby executing parallel processing by said multiprocessor with respect to said application,

at least one of an OS service unit which provides services of said OS for single processors to said unit of work, a security expansion unit incorporated into said OS for single processors and an application control unit which controls security function with respect to said unit of work controls security function with respect to a processing request from said unit of work in response to said processing request.

25. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which

operates an OS and an application for single processors on a multiprocessor, and

controls a unit of work that can be parallelized within said application operating on one processor as a new unit of work on other processor, thereby executing parallel processing by said multiprocessor with respect to said application,

at least one of an OS service unit which provides services of said OS for single processors to said unit of work, a security expansion unit incorporated into said OS for single processors and an application control unit which controls security function with respect to said unit of work controls security function with respect to a processing request from said unit of work in response to said processing request.

26. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which

operates an OS and an application for single processors on a multiprocessor,

said multiprocessor being logically divided into two groups of a first processor side and a second processor side, and

controls a unit of work that can be parallelized within said application operating on a processor on said first processor side as a new unit of work on a processor on said second processor side, thereby executing parallel processing by said multiprocessor with respect to said application,

limitations are imposed, for each said processor, on the function of an OS service unit which provides services of said OS for single processors to said unit of work to limit a processing request from said unit of work operating on each said processor.

27. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which

operates an OS and an application for single processors on a multiprocessor, and

controls a unit of work that can be parallelized within said application operating on one processor as a new unit of work on other processor, thereby executing parallel processing by said multiprocessor with respect to said application,

limitations are imposed, for each said processor, on the function of an OS service unit which provides services of said OS for single processors to said unit of work to limit a processing request from said unit of work operating on each said processor.

28. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which

operates an OS and an application for single processors on a multiprocessor,

said multiprocessor being logically divided into two groups of a first processor side and a second processor side, and

controls a unit of work that can be parallelized within said application operating on a processor on said first processor side as a new unit of work on a processor on said second processor side, thereby executing parallel processing by said multiprocessor with respect to said application,

when executing a unit of work whose requested function is different, a processor which executes the unit of work in question is selected and allocated according to a function provided by an application control unit which provides execution environments to said unit of work.

29. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which

operates an OS and an application for single processors on a multiprocessor, and

controls a unit of work that can be parallelized within said application operating on one processor as a new unit of work on other processor, thereby executing parallel processing by said multiprocessor with respect to said application,

when executing a unit of work whose requested function is different, a processor which executes the unit of work in question is selected and allocated according to a function provided by an application control unit which provides execution environments to said unit of work.

30. A security management system in a parallel processing system by an OS for single processors, wherein

on a parallel processing system which operates an OS for single processors and a unit of work as a task on a multiprocessor,

when executing a unit of work whose requested function is different, a processor which executes the unit of work in question is selected and allocated according to a function provided by an application control unit which provides execution environments to said unit of work.

31. The security management system as set forth in claim 28 , wherein

said unit of work is a Java® application, and said Java® application whose requested function is different is executed by incorporating a profile which limits the function of said Java® application into each Java® virtual machine as the application control unit of each said processor or by limiting a loadable class file.

32. The security management system as set forth in claim 1 , wherein

said security function is a function of realizing security by access control, and access quantitative control for each task or for each processor is based on control file including security contents.

33. The security management system as set forth in claim 3 , wherein

said security function is a function of realizing security by access control, and access quantitative control for each task or for each processor is based on control file including security contents.

34. The security management system is set forth in claim 18 , wherein

said security function is a function of realizing security by access control, and access quantitative control for each task or for each processor is based on control file including security contents.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 9, 2004
From: INOUE, HIROAKI; ITO, YOSHIYUKI; SAKAI, JUNJI; EDAHIRO, MASATO
To: NEC CORPORATION
Reel/Frame 015560/0434 →
Priority Claims (1)
JP 2003-198889 · Jul 18, 2003 · national
Continuity (1)
Related Publication 20050015625A1 · Jan 20, 2005