A virtual computer management method performed in a computer system including a plurality of computers,
- the plurality of computers each including:
- a processor;
- a memory coupled to the processor;
- and a network interface coupled to the processor;
- the computer system comprising:
- a virtual computer system including a computer resource allocated to at least one virtual computer of a plurality of virtual computers;
- and
- a verification system for verifying the at least one virtual computer,
- wherein the virtual computer system comprises:
- a plurality of servers for providing the computer resource to the at least one virtual computer;
- a management computer for managing the plurality of virtual computers that operates on each of the plurality of servers;
- and
- an image data storage part for storing image data for generating a virtual computer for executing an application of the plurality of virtual computers,
- wherein the verification system comprises:
- a verification server for verifying an integrity of the virtual computer for executing the application;
- and
- a data-for-verification storage part for storing information used to verify the integrity of the virtual computer for executing the application,
- wherein the virtual computer system further comprises:
- image data management information in which the image data and a first security strength required on a boot of the virtual computer for executing the application generated based on the image data is associated with the image data;
- and
- server management information in which a second security strength is set and associated with each of the plurality of servers,
- the virtual computer management method comprising:
- a first step of receiving, by the management computer, from a user using the virtual computer system, a deployment request including identification information for identifying a target image data, of the image data, for generating the virtual computer for executing the application;
- a second step of searching, by the management computer, for a server of the plurality of servers, for which the second security strength equal to or greater than the first security strength associated with the target image data is set, based on the image data management information and the server management information;
- a third step of instructing, by the management computer, a first retrieved server having the second security strength equal to or greater than the first security strength associated with the target image data to deploy the target image data;
- a fourth step of generating, by the server instructed to deploy the target image data, the virtual computer for executing the application by using the target image data, and transmitting a first integrity report, which is obtained on the boot of the virtual computer for executing the application and used to verify the integrity relating to the virtual computer for executing the application, to the verification server;
- a fifth step of receiving, by the first retrieved server instructed to deploy the target image data, a result of a verification process with respect to the first integrity report, wherein the result of the verification process is transmitted from the verification server;
- a sixth step of transmitting, by the first retrieved server instructed to deploy the target image data, the received result of the verification process with respect to the first integrity report to the management computer;
- and
- a seventh step of outputting, by the management computer, a deployment result for the target image data to the user based on the received result of the verification process with respect to the first integrity report,
- wherein the computer system further comprises an application providing system for distributing the image data stored in the image data storage part;
- wherein the application providing system comprises:
- an authentication server for verifying an integrity of an application executed on the virtual computer for executing the application generated based on the image data, and monitoring a usage status of the application;
- and
- a license data storage part for storing information indicating the usage status of the application, and
- wherein the fourth step includes:
- an eighth step of transmitting, by the first retrieved server instructed to deploy the target image data, the first integrity report to the authentication server;
- a ninth step of transferring, by the authentication server, the received first integrity report to the verification server;
- a tenth step of updating, by the authentication server, the information stored in the license data storage part based on the first integrity report received from the first retrieved server and the result of the verification process with respect to the first integrity report received from the verification server;
- and
- an eleventh step of transferring, by the authentication server, the result of the verification process with respect to the first integrity report received from the verification server to the first retrieved server instructed to deploy the target image data.