Information processor and method for controlling the same

An information processing device comprising:

• a virtual machine operable to cause an application, which accesses a predetermined device, to operate in a work area;
• a detection unit operable to detect, from the virtual machine, an access request to access the predetermined device via the application;
• and
• a virtual machine monitor operable to manage the virtual machine and the detection unit and to switch between managing the application in one of a writeable state and a non-writable state, wherein
• upon detecting the access request, the detection unit notifies the virtual machine monitor of the detection, and
• upon receiving notification from the detection unit, the virtual machine monitor (i) switches to managing the application in the non-writable state and notifies an external device provided with a verification unit of the switch and (ii) causes the verification unit in the external device to verify authorization of the application.

An information processing device comprising:

• a virtual machine operable to cause an application, which accesses a predetermined device, to operate in a work area;
• a detection unit operable to detect, from the virtual machine, an access request to access the predetermined device via the application;
• a virtual machine monitor operable to manage the virtual machine and the detection unit and to switch between managing the application in one of a writeable state and a non-writable state;
• and
• a transmission unit operable to transmit to an external device that is provided with an execution unit and that provides services, wherein
• upon detecting the access request, the detection unit notifies the virtual machine monitor of the detection,
• upon receiving notification from the detection unit, the virtual machine monitor switches to managing the application in the non-writable state, and
• when the application is determined to be authorized after being switched to management in the non-writable state, the transmission unit receives the services provided by the execution unit in the external device.

A control method for controlling an information processing device that comprises:

• a virtual machine operable to cause an application, which accesses a predetermined device, to operate in a work area;
• a detection unit operable to detect, from the virtual machine, an access request to access the predetermined device via the application;
• a verification unit operable to verify authorization of the application;
• and
• a virtual machine monitor operable to manage the virtual machine, the verification unit, and the detection unit, wherein
• upon detecting the access request, the detection unit notifies the virtual machine monitor of the detection,
• upon receiving notification from the detection unit, the virtual machine monitor switches to managing the application in a non-writable state and notifies the verification unit of the switch, and
• upon receiving notification from the virtual machine monitor, the verification unit verifies authorization of the application.

A control program for controlling an information processing device that comprises:

• a virtual machine operable to cause an application, which accesses a predetermined device, to operate in a work area;
• a detection unit operable to detect, from the virtual machine, an access request to access the predetermined device via the application;
• a verification unit operable to verify authorization of the application;
• and
• a virtual machine monitor operable to manage the virtual machine, the verification unit, and the detection unit,
• the control program comprising the steps of:
• notifying the virtual machine monitor when the detection unit detects an access request;
• causing the virtual machine monitor to switch to managing the application in a non-writable state and causing the virtual machine monitor to notify the verification unit of the switch;
• and
• causing the verification unit, which receives notification from the virtual machine monitor, to verify authorization of the application.

An integrated circuit used in an information processing device, the integrated circuit comprising:

• a virtual machine operable to cause an application, which accesses a predetermined device, to operate in a work area;
• a detection unit operable to detect, from the virtual machine, an access request to access the predetermined device via the application;
• a verification unit operable to verify authorization of the application;
• and
• a virtual machine monitor operable to manage the virtual machine, the verification unit, and the detection unit, wherein
• upon detecting the access request, the detection unit notifies the virtual machine monitor of the detection,
• upon receiving notification from the detection unit, the virtual machine monitor switches to managing the application in a non-writable state and notifies the verification unit of the switch, and
• upon receiving notification from the virtual machine monitor, the verification unit verifies authorization of the application.