Web service system, web service method, and program

摘要

To eliminate necessity of transmitting user data containing confidential information to an external network and necessity of preparing a proper environment for a user to execute an application. A web service system includes a virtualization platform on a local site side and a virtualization platform on a remote site side. The virtualization platform on the local site side includes: a network processor which separately establishes communication lines connected, respectively, to the client machine and to a network processor of the virtualization platform on the remote site side; a confidential data control section which judges whether the user data contains confidential information, and determines the destination; and a virtual machine service section which, upon receiving the judgment result indicating that the user data contains the confidential information, executes migration of the virtual machine of the virtualization platform on the remote site side to the virtualization platform on the local site side.

主权项

1. A web service system which processes user data provided from a client machine by using a virtual machine on a remote site side, the system comprising
a virtualization platform on a local site side and a virtualization platform on the remote site side linked via a communication net, wherein the virtualization platform on the local site side comprises: a network processor which separately establishes a communication line connected to the client machine and a communication line connected to a network processor of the virtualization platform on the remote site side; a confidential data control section which judges whether or not the user data transmitted to the network processor on the local site side contains confidential information, and determines, based on a result of the judgment, the remote site side as a destination and a processor of the user data when the user data does not contain the confidential data, and determines the local site side as the destination and the processor of the user data when the user data contains the confidential information; and a virtual machine service section which, upon receiving the result of judgment made by the confidential data control section indicating that the user data contains the confidential information, executes migration of the virtual machine of the virtualization platform on the remote site side to the virtualization platform on the local site side based on information regarding an operation state of the virtual machine of the virtualization platform on the remote site side, wherein: the user data contains attribute information showing presence of the confidential information; and the confidential data control section judges whether or not the user data contains the confidential information based on the attribute information of the user data.