Kernel program including relational database, and method and apparatus for executing said program
View Patent ↗Provided is a kernel program and so on capable of enhancing the confidentiality of data memorized in a storage device without using a file system on an OS kernel level. The kernel program is mounted on a computer operable to input and output data between an application program and a storage device, and causes the computer to function as: a socket establisher establishing a socket for connecting with the application program; a relational database operable to input and output data from/to the storage device through a device driver; and an access controller inputting a command from the application program through a message structure of the socket then to output the command to the relational database and inputting an execution result from the relational database then to output the execution result through a message structure of the socket to the application program.
1. A non-transitory computer readable storage medium storing a kernel program operable to input and output data between an application program and a storage device, the kernel program causing a computer to function as:
a socket establisher establishing a socket connecting to the application program;
a relational database operable to input and output data from/to the storage device through a device driver; and
an access controller configured to: (i) input a command from the application program by using a message structure of the socket to output the command to the relational database, and (ii) input an execution result performed in response to the command in the relational database to output the execution result by using a message structure of the socket to the application program, wherein
the kernel program is configured without using a file system and a system call used for the file system, and
data managed by the relational database is stored only in the storage device.
2. The non-transitory computer readable storage medium as claimed in claim 1 , wherein the relational database is a light SQL database in which a client and a RDBMS (Relational DataBase Management System) server are integrated.
3. The non-transitory computer readable storage medium as claimed in claim 1 , the kernel program further causing the computer to function as:
an access authenticator configured to manage a first secret key and a first public key to send the first public key to the application program, and to receive, from the application program managing a second secret key and a second public key, the second public key, wherein
a message to be sent through the socket to the application program is encrypted by using the second public key, and a message received from the application program through the socket is encrypted with the first public key.
4. The non-transitory computer readable storage medium as claimed in claim 3 , wherein
the access authenticator generates a rights that is an access authority for the application program and encrypts the rights using the second public key then to send the encrypted rights to the application program,
the message received from the application program through the socket includes the rights as well as the command, and
the access controller decrypts the message received from the application program using the first secret key, performs an authentication process to the rights included in the message, and then outputs the command to the relational database only when succeeding in the authentication process.
5. The non-transitory computer readable storage medium as claimed in claim 4 , wherein
the access authenticator memorizes in advance a password for authentication, and
when receiving an encrypted password from the application program, the access authenticator decrypts the received password using the first secret key, performs an authentication process with judging whether the decrypted password coincides with the pre-memorized password or not, and then generates the rights only when succeeding in the authentication process.
6. An apparatus provided with a kernel program operable to input and output data between an application program and a storage device, the apparatus comprising:
a memory storing a relational database operable to input and output data from/to the storage device through a device driver; and
a processor operatively coupled to the memory, the processor being programmed to:
establish a socket connecting to the application program;
input a command from the application program by using a message structure of the socket to output the command to the relational database; and
input an execution result performed in response to the command in the relational database to output the execution result by using a message structure of the socket to the application program, wherein
the kernel program is configured without using a file system and a system call used for the file system, and
data managed by the relational database is stored only in the storage device.
7. A method of executing a kernel program operable to input and output data between an application program and a storage device, the kernel program including a relational database operable to input and output data from/to the storage device through a device driver, the method comprising:
establishing a socket connecting to the application program;
inputting, by an access controller, a command from the application program by using a message structure of the socket to output the command to the relational database; and
inputting, by the access controller, an execution result performed in response to the command in the relational database to output the execution result by using a message structure of the socket to the application program, wherein
the kernel program is configured without using a file system and a system call used for the file system, and
data managed by the relational database is stored only in the storage device.