Computer system, information processing apparatus, and security protection method

An information processing apparatus connected to a server via a network, comprising:

• a processor;
• a disk device;
• a first virtual machine environment where a first operating system (OS) and a takeout management utility operate, the first OS comprising a front end driver and the takeout management utility operating under the first OS;
• a second virtual machine environment where a second OS operates, the second OS managing the first OS and comprising a back-end driver and a security protector;
• and
• a takeout request transmitter configured to transmit a takeout request generated by the takeout management utility operating under the first OS to a takeout management module of the server, the takeout request requesting using of data acquired from a storage server to the disk device via the network under a condition of being disconnected from the network,
• wherein the takeout management module of the server is configured to permit the information processing apparatus to store data acquired from the storage server in the disk device of the information processing apparatus, and
• wherein the security protector is configured to create a virtual disk image file on the disk device and to connect a virtual bus for communication between the front-end driver and the back-end driver to access the virtual disk image file and store data acquired from the storage server via the network to the virtual disk image file by using the virtual bus, when a permit is received from the server.

A security protection method of an information processing apparatus which comprises a disk device and is connected to a server via a network, the method comprising:

• transmitting a takeout request to a takeout management module of the server, the takeout request, generated by a takeout management utility operating under a first operating system (OS) of the information processing apparatus, requesting using of data acquired from a storage server to the disk device via the network under a condition of being disconnected from the network;
• receiving, by the information processing apparatus, a permit from the takeout management module of the server in response to the takeout request, the permit allowing the information processing apparatus to store data acquired from the storage server to the disk device of the information processing apparatus, wherein the information processing apparatus comprises a first virtual machine environment and a second virtual machine environment, the first virtual machine environment where the first OS and the takeout management utility operates and the first OS comprising a front end driver and the takeout management utility operating under the first OS, and the second virtual machine environment where a second OS operates, the second OS managing the first OS and comprising a back-end driver and a security protector;
• and
• creating a virtual disk image file on the disk device by the security protector and connecting a virtual bus for communication between the front-end driver and the back-end driver to access the virtual disk image file and storing data acquired from the storage server via the network to the virtual disk image file by using the virtual bus, when the permit is received from the server.