Abstract: In an information processing terminal, a second screen activation monitoring unit that has received a focus OFF notification sends a domain switch request notification to a domain control unit, and the domain control unit that has received the notification sends a domain switch notification to a first OS. Then, the first OS sends a focus ON notification to a first screen activation monitoring unit and further sends the focus OFF notification to a first application. A resource is thereby released by the first application that is implemented to release an acquired resource upon receiving the focus OFF notification.

Abstract: A data control device includes: an execution unit that executes, as an active runtime environment, one of a plurality of runtime environments each provided with an individual clipboard used for data reading and writing; a switching unit that switches the active runtime environment; a decision unit that, when the active runtime environment is switched by the switching unit, decides whether an item of data written to a clipboard of a runtime environment that is active before the switching should be copied to a clipboard of a runtime environment that will become active after the switching, by referring to an attribute of at least one of the runtime environment that is active before the switching and the runtime environment that will become active after the switching; and a management unit that manages copying of the item of data between the clipboards based on the decision made by the decision unit.

Abstract: A state notification apparatus comprises: a holding unit that, when one or more secure runtime environments and one or more non-secure runtime environments are selectively executed in a foreground, holds an identifier of a runtime environment that is being executed in the foreground; a determination unit that determines a state of the runtime environment executed in the foreground based on the identifier held by the holding unit; and a notification unit that causes a hardware device that cannot be accessed from the one or more non-secure runtime environments to notify the state determined by the determination unit.

Abstract: In an information processing terminal, a second screen activation monitoring unit that has received a focus OFF notification sends a domain switch request notification to a domain control unit, and the domain control unit that has received the notification sends a domain switch notification to a first OS. Then, the first OS sends a focus ON notification to a first screen activation monitoring unit and further sends the focus OFF notification to a first application. A resource is thereby released by the first application that is implemented to release an acquired resource upon receiving the focus OFF notification.

Abstract: The communication contention management device of the present invention includes a connection request receiving unit to receive a connection request to the access point form the auxiliary communication contention management device, an access restriction unit to hold an identifier of the execution environment and an access restriction policy containing a designation of the access point to which the execution environment is allowed or not allowed to be connected and determine whether or not to permit the connection request according to the access restriction policy, and a contention determination unit to determine whether or not to permit the connection request based on an active state and an allocation state held in a connection manager.

Abstract: An API checking device 300 includes an API check request reception unit 301 to receive a determination request to request determination of whether to permit the API call, a state information acquiring unit 303 to acquire state information showing a state of the device 100, a check mode setting unit 305 to set a check mode for the API call on the basis of the state information acquired, a determining unit 307 to determine whether to permit the API call on the basis of the check mode, and a check result outputting unit 309 to output the check result generated by the determining unit 307.

Abstract: A terminal device according to the present invention includes: a first domain configured to execute multiple software programs; and a second domain configured to operate independently of the first domain and to check whether or not the software programs are safe. The second domain includes: an execution sequence storage unit configured to store execution priority of the multiple software programs to be executed by the first domain; a software program checking unit configured to check whether or not the multiple software programs are safe, according to the execution sequence storage unit; and an execution restricting unit configured to restrict the first domain from executing a software program included in the multiple software programs and having a check result indicating that the software program is unsafe, before checking of all the multiple, software programs is completed.

Abstract: Disclosed is an operating system monitoring setting information generator apparatus including: a monitoring setting information management unit configured to store monitoring setting information used for monitoring of an operating system monitoring apparatus; a monitoring setting information output unit configured to generate a monitoring setting information file including the monitoring setting information stored by the monitoring setting information management unit, version information and binding information indicating a correspondence with a monitoring target software program, and to output the generated monitoring setting information file; and a digital signature unit configured to generate a digital signature of the monitoring setting information file, and to add the generated digital signature to the monitoring setting information file.

Abstract: A mobile terminal (200) comprises an application execution unit (240) configured to execute an application program; an access control rule management unit (270) configured to retain an access control rule defining whether the application program has an access authorization to a confidential resource in the mobile terminal and a determining unit; an access control rule query unit (220) configured to acquire, from an external device, the access control rule by designating at least one of an identifier of a user identity module installed in the mobile terminal and an identifier of the mobile terminal, and to retain the acquired access control rule in the access control management unit; a query requirement determination unit (260) configured to determine whether to update the access control rule when the application program makes an access to the confidential resource, and to update the access control rule; an authorization management unit (230) configured to determine whether the application program has the acce

Abstract: In a computer system according to the present invention, a switch-source OS controller unit includes: a OS switch request receiver unit configured to receive an OS switch request for requesting that the switch-destination OS in a suspend status becomes the OS in the active status; a switch event notifying unit configured to notify event information to the switch-destination OS or an application on the switch-destination OS, the event information being included in the received OS switch request, and requesting the switch-destination OS or the application on the switch-destination OS to perform a process; and a switch controller unit configured to call the OS switching function, by using the event information as an argument, so that the switch-destination OS becomes the OS in the active status.

Abstract: An information-processing apparatus comprises: an environment storage unit that stores a set of instructions for implementing a plurality of runtime environments including a first runtime environment and a second runtime environment; an execution unit that executes the set of instructions stored in the environment storage unit; a status-holding unit that stores an item(s) of status information to be transmitted from the first runtime environment to the second runtime environment; a timing storage unit that stores a condition relating to a status of execution of one of the first runtime environment and the second runtime environment; and a transmission unit that transmits the item(s) of status information stored in the status-holding unit to the second runtime environment in a case where the condition stored in the timing storage unit is fulfilled.

Abstract: A state notification apparatus comprises: a holding unit that, when one or more secure runtime environments and one or more non-secure runtime environments are selectively executed in a foreground, holds an identifier of a runtime environment that is being executed in the foreground; a determination unit that determines a state of the runtime environment executed in the foreground based on the identifier held by the holding unit; and a notification unit that causes a hardware device that cannot be accessed from the one or more non-secure runtime environments to notify the state determined by the determination unit.

Abstract: A data control device includes: an execution unit that executes, as an active runtime environment, one of a plurality of runtime environments each provided with an individual clipboard used for data reading and writing; a switching unit that switches the active runtime environment; a decision unit that, when the active runtime environment is switched by the switching unit, decides whether an item of data written to a clipboard of a runtime environment that is active before the switching should be copied to a clipboard of a runtime environment that will become active after the switching, by referring to an attribute of at least one of the runtime environment that is active before the switching and the runtime environment that will become active after the switching; and a management unit that manages copying of the item of data between the clipboards based on the decision made by the decision unit.

Abstract: A device management apparatus includes a device configuration information holding unit, a subscriber information holding unit, a security policy holding unit, a module state holding unit, and a device diagnosis unit. The security policy holding unit holds a security policy set based on the configuration based on the configuration information or the subscriber information. The device diagnosis unit examines the security policy and the module state information to make a diagnosis of a configuration of the device.

Abstract: The communication contention management device of the present invention includes a connection request receiving unit to receive a connection request to the access point form the auxiliary communication contention management device, an access restriction unit to hold an identifier of the execution environment and an access restriction policy containing a designation of the access point to which the execution environment is allowed or not allowed to be connected and determine whether or not to permit the connection request according to the access restriction policy, and a contention determination unit to determine whether or not to permit the connection request based on an active state and an allocation state held in a connection manager.

Abstract: An update-startup apparatus includes: an OS startup processor unit configured to start a first OS and a second OS; an initial startup processor unit configured to start the OS startup processor unit; and an update information storage unit configured to store first OS update information for updating a first OS program constituting the first OS and second OS update information for updating a second OS program constituting the second OS. The OS startup processor unit starts the first OS after updating the first OS program by using the first OS update information, when the first OS update information is stored at a time of power-on or at a time of rebooting the first OS; the OS startup processor unit starts the first OS, when the first OS update information is not stored at a time of power-on; and the OS startup processor unit cancels a reboot of the second OS, when the second OS update information is not stored at a time of rebooting the first OS.

Abstract: A client apparatus to which data or a function is provided from a server apparatus, including: a monitoring unit configured to monitor monitoring target software, and detect an abnormal state or unauthorized state of the target software; a server management unit configured to manage an address of the server apparatus that is being accessed by the client apparatus; an abnormality information creation unit configured to create abnormality information from the abnormal state or the unauthorized state, which is detected by the monitoring unit; and an abnormality information notification unit configured to issue the abnormality information to the server apparatus managed by the server management unit.

Abstract: An input/output control apparatus includes: a request acceptance unit configured to accept a switch request for requesting to change an operating system occupying any one of the input device and the output device; a control information generator unit configured to generate control information including any one of input destination information and output enable information in response to the switch request; and a control information output unit configured to output any one of the input destination information and the output enable information. The input destination information includes at least information for specifying an input destination operating system to which information inputted from the input device is inputted; and the output enable information includes at least information for specifying whether or not each of the plurality of operating systems can output information to the output device.

Abstract: A terminal device according to the present invention includes: a first domain configured to execute multiple software programs; and a second domain configured to operate independently of the first domain and to check whether or not the software programs are safe. The second domain includes: an execution sequence storage unit configured to store execution priority of the multiple software programs to be executed by the first domain; a software program checking unit configured to check whether or not the multiple software programs are safe, according to the execution sequence storage unit; and an execution restricting unit configured to restrict the first domain from executing a software program included in the multiple software programs and having a check result indicating that the software program is unsafe, before checking of all the multiple, software programs is completed.

Abstract: An input/output control apparatus includes: a request acceptance unit configured to accept a switch request for requesting to change an operating system occupying any one of the input device and the output device; a control information generator unit configured to generate control information including any one of input destination information and output enable information in response to the switch request; and a control information output unit configured to output any one of the input destination information and the output enable information. The input destination information includes at least information for specifying an input destination operating system to which information inputted from the input device is inputted; and the output enable information includes at least information for specifying whether or not each of the plurality of operating systems can output information to the output device.