# US 2014/0157436 A1 · Information processing apparatus and method of controlling same > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0157436 A1 - Document ID: US20140157436A1 - Status: Published application - Kind: A1 - Application number: 14/065,534 - Filed: 2013-10-29 - Published: 2014-06-05 - Earliest claimed: 2012-12-04 - Assignees: Fujitsu Limited - Applicants: Fujitsu Limited - Inventors: Naoya FUJISAKI; Kazuaki Nimura - Web page: https://patentgrep.com/patent/US20140157436A1 ## CPC - G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules - G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine - G06F 21/60: Protecting data - G06F 21/629: {to features or functions of an application} - G06F 21/50: Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F 21/606: {by securing the transmission between two devices or processes} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract An information processing apparatus includes a memory and a processor coupled to the memory and configured to receive an instruction to transfer a first application to an execution environment, detect a second application that shares a resource with the first application, the resource being information used upon executing the first application and the second application, provide information for causing a user to determine whether to prohibit transferring the second application to the execution environment when the second application is detected, and invalidate a state in which the second application shares the resource with the first application when instruction to prohibit transferring the second application to the execution environment is received. ## Claims ### Claim 1 An information processing apparatus comprising: a memory; and a processor coupled to the memory and configured to: receive an instruction to transfer a first application to an execution environment, detect a second application that shares a resource with the first application, the resource being information used upon executing the first application and the second application, provide information for causing a user to determine whether to prohibit transferring the second application to the execution environment when the second application is detected, and invalidate a state in which the second application shares the resource with the first application when instruction to prohibit transferring the second application to the execution environment is received. ### Claim 2 (depends on 1) The information processing apparatus according to claim 1, wherein the processor is configured to determine that the second application shares the resource with the first application when identification information assigned to the second application is identical to identification information assigned to the first application. ### Claim 3 (depends on 2) The information processing apparatus according to claim 2, wherein the processor is configured to cause the identification information assigned to the first application to be different from the identification information assigned to the second application to invalidate the state in which the second application shares the resource with the first application. ### Claim 4 (depends on 1) The information processing apparatus according to claim 1, wherein the processor is configured to: display a list including information for identifying the second application; and determine whether the instruction to prohibit transferring the second application to the execution environment is received based on whether the information for identifying the second application is selected. ### Claim 5 (depends on 1) The information processing apparatus according to claim 1, wherein the processor is configured to: add information corresponding to the execution environment to a name of a folder to which the first application is stored, and block calling the first application transferred to the execution environment from an application of which information for identifying the application does not include the information corresponding to the execution environment. ### Claim 6 (depends on 5) The information processing apparatus according to claim 5, wherein the processor is configured to: permit calling the first application transferred to the execution environment from an application of which information for identifying the application includes the information corresponding to the execution environment. ### Claim 7 (depends on 1) The information processing apparatus according to claim 1, wherein the processor is configured to: collect evaluation information for evaluating whether each of the first application or the second application is reliable; and permit transferring each of the first application or the second application to the execution environment when each of the first application or the second application is determined to be reliable based on the evaluation information. ### Claim 8 A method of controlling an information processing apparatus, the method comprising: receiving an instruction to transfer a first application to an execution environment; detecting a second application that shares a resource with the first application, the resource being information used upon executing the first application and the second application; providing information for causing a user to determine whether to prohibit transferring the second application to the execution environment when the second application is detected; and invalidating a state in which the second application shares the resource with the first application when instruction to prohibit transferring the second application to the execution environment is received. ### Claim 9 (depends on 8) The method according to claim 8, the method further comprising: determining that the second application shares the resource with the first application when identification information assigned to the second application is identical to identification information assigned to the first application. ### Claim 10 (depends on 9) The method according to claim 9, the method further comprising: causing the identification information assigned to the first application to be different from the identification information assigned to the second application to invalidate the state in which the second application shares the resource with the first application. ### Claim 11 (depends on 8) The method according to claim 8, the method further comprising: displaying a list including information for identifying the second application; and determining whether the instruction to prohibit transferring the second application to the execution environment is received based on whether the information for identifying the second application is selected. ### Claim 12 (depends on 8) The method according to claim 8, the method further comprising: adding information corresponding to the execution environment to a name of a folder to which the first application is stored, and blocking calling the first application transferred to the execution environment from an application of which information for identifying the application does not include the information corresponding to the execution environment. ### Claim 13 (depends on 12) The method according to claim 12, the method further comprising: permitting calling the first application transferred to the execution environment from an application of which information for identifying the application includes the information corresponding to the execution environment. ### Claim 14 (depends on 8) The method according to claim 8, the method further comprising: collecting evaluation information for evaluating whether each of the first application or the second application is reliable; and permitting transferring each of the first application or the second application to the execution environment when each of the first application or the second application is determined to be reliable based on the evaluation information. ### Claim 15 A medium for storing a program that causes a processor to execute a process comprising: receiving an instruction to transfer a first application to an execution environment; detecting a second application that shares a resource with the first application, the resource being information used upon executing the first application and the second application; providing information for causing a user to determine whether to prohibit transferring the second application to the execution environment when the second application is detected; and invalidating a state in which the second application shares the resource with the first application when instruction to prohibit transferring the second application to the execution environment is received. ### Claim 16 (depends on 15) The medium according to claim 15, wherein the process further comprising: determining that the second application shares the resource with the first application when identification information assigned to the second application is identical to identification information assigned to the first application. ### Claim 17 (depends on 16) The medium according to claim 16, wherein the process further comprising: displaying a list including information for identifying the second application; and determining whether the instruction to prohibit transferring the second application to the execution environment is received based on whether the information for identifying the second application is selected. ### Claim 18 (depends on 15) The medium according to claim 15, wherein the process further comprising: adding information corresponding to the execution environment to a name of a folder to which the first application is stored, and blocking calling the first application transferred to the execution environment from an application of which information for identifying the application does not include the information corresponding to the execution environment. ### Claim 19 (depends on 15) The medium according to claim 15, wherein the process further comprising: adding information corresponding to the execution environment to a name of a folder to which the first application is stored, and blocking calling the first application transferred to the execution environment from an application of which information for identifying the application does not include the information corresponding to the execution environment. ### Claim 20 (depends on 19) The medium according to claim 19, wherein the process further comprising: permitting calling the first application transferred to the execution environment from an application of which information for identifying the application includes the information corresponding to the execution environment. ### Claim 21 (depends on 15) The medium according to claim 15, the process further comprising collecting evaluation information for evaluating whether each of the first application or the second application is reliable; and permitting transferring each of the first application or the second application to the execution environment when each of the first application or the second application is determined to be reliable based on the evaluation information.