IP Library › Granted Patent US 10,341,346
Granted Patent B2
US 10,341,346 · App. 14/954,000 · Granted Jul 2, 2019

Information processing method, information processing apparatus, and storage medium

Inventors: Koichi Yasaki (Kawasaki, JP); Hidenobu Ito (Kawasaki, JP); Takuya Sakamoto (Kawasaki, JP); Yosuke Nakamura (Kawasaki, JP); Kazuaki Nimura (Kawasaki, JP)
Assignee: FUJITSU LIMITED
H04L63/10G06F13/102
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,341,346
App. No.
14/954,000
Granted
Jul 2, 2019
Kind
B2
Abstract

An information processing method executed in a computer, the processing method including: starting a network application that belongs to a specified network domain, starting a security application that restricts accesses from the network application except for specified accesses including accesses within same network domain, detecting a peripheral device coupled to the computer, and generating an interface for accessing to the detected peripheral device so that the generated interface belongs to the same specified network domain as the network application.

Claims (43)

1. An information processing method executed by a computer, the processing method comprising:

starting one or more network applications;

starting a security application that prevents accesses from the one or more network applications to one or more destinations, wherein the one or more destinations do not belong to a first network domain and do not have an address to which an access is allowed for the network application;

performing a detecting operation of one or more peripheral devices to be accessed by the one or more network applications;

comparing, based on the detecting operation, the detected one or more peripheral devices as a first group with one or more other peripheral devices which are detected in a previous detecting operation as a second group;

closing, when there are one or more peripheral devices which belong to only the second group, one or more second interfaces corresponding to the one or more peripheral devices which belong to only the second group; and

generating, when there are one or more peripheral devices which belong to only the first group, one or more first interfaces corresponding to the one or more peripheral devices which belong to only the first group, the one or more network applications being configured to access the one or more peripheral devices via the one or more first interfaces.

2. The information processing method according to claim 1 , further comprising:

obtaining each association of each network application and each peripheral device to which each network application is permitted to access in the computer, wherein

the first interface is generated based on each obtained association.

3. The information processing method according to claim 1 , wherein

one of the detected one or more peripheral devices has an IP address belonging to a second network domain different from the first network domain.

4. The information processing method according to claim 1 , further comprising

starting a server application that belongs to the first network domain as one of the one or more network applications, wherein

one of the one or more first interfaces is provided on the server application so as to have a port number for accepting accesses from one of the one or more network applications to the detected peripheral device.

5. The information processing method according to claim 4 , further comprising:

starting a web browser application as another one of the one or more network applications, wherein

the one or more network applications are web applications,

a program code of the web application is provided by the server application, and

the web browser executes the program code of the web application obtained from the server application.

6. The information processing method according to claim 4 , wherein

an IP address of the server application associating with one of the one or more first interfaces is different from another IP address of another server application associating with another one of the one or more first interfaces.

7. The information processing method according to claim 1 , wherein

one of the one or more first interfaces for accessing to one of the one or more detected peripheral devices is different from another one of the one or more first interfaces for accessing to another one of the one or more detected peripheral devices.

8. The information processing method according to claim 1 , further comprising:

obtaining an access program code for accessing to one of the one or more detected peripheral devices, the access program code including a specified variable for designating one of the one or more first interfaces to the one of detected one or more peripheral devices, wherein

one of the one or more network applications is allowed to access to the one of the one or more detected peripheral devices by using the access program code in which an identifier of the generated interface is substituted for the specified variable.

9. A processing apparatus comprising:

a memory; and

a processor coupled to the memory and configured to:

start one or more network applications,

start a security application that prevents accesses from the one or more network applications to one or more destinations, wherein the one or more destinations do not belong to the first network domain and do not have an address to which an access is allowed for the one or more network applications,

perform a detecting operation of one or more peripheral devices to be accessed by the one or more network applications,

compare, based on the detecting operation, the detected one or more peripheral devices as a first group with one or more other peripheral devices which are detected in a previous detecting operation as a second group,

close, when there are one or more peripheral devices which belong to only the second group, one or more second interfaces corresponding to the one or more peripheral devices which belong to only the second group, and

generate, when there are one or more peripheral devices which belong to only the first group, one or more first interface corresponding to the one or more peripheral devices which belong to only the first group, the one or more network applications being configured to access the one or more peripheral devices via the one or more first interfaces.

10. A non-transitory computer-readable storage medium storing a program that causes a computer to execute a process, the information processing device including a memory, the process comprising:

starting one or more network applications;

starting a security application that prevents accesses from the one or more network applications to one or more destinations, wherein the one or more destinations do not belong to the first network domain and do not have an address to which an access is allowed for the one or more network applications;

performing a detecting operation of one or more peripheral devices to be accessed by the one or more network applications;

comparing, based on the detecting operation, the detected one or more peripheral devices as a first group with one or more other peripheral devices which are detected in a previous detecting operation as a second group;

closing, when there are one or more peripheral devices which belong to only the second group, one or more second interfaces corresponding to the one or more peripheral devices which belong to only the second group; and

generating, when there are one or more peripheral devices which belong to only the first group, one or more first interface, the one or more network applications being configured to access the one or more peripheral devices via the one or more first interfaces.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 3, 2015
From: YASAKI, KOICHI; ITO, HIDENOBU; SAKAMOTO, TAKUYA; NAKAMURA, YOSUKE; NIMURA, KAZUAKI
To: FUJITSU LIMITED
Reel/Frame 037200/0345 →
Priority Claims (1)
JP 2014-244160 · Dec 2, 2014 · national
Continuity (1)
Related Publication 20160156629A1 · Jun 2, 2016
Cited By (1)
US 12,641,085