JP7796471B2 - computer program - Google Patents

Description

The present invention relates to a computer program.

In recent years, as internet connection environments have become more readily available, an increasing number of companies, particularly in the IT industry, have begun promoting teleworking. The recent COVID-19 pandemic has added to this trend, and teleworking has quickly spread to all industries and occupations. Going forward, teleworking is expected to become even more widespread, not only during pandemics like the COVID-19 pandemic, but also in times of disasters like earthquakes, in order to continue operations.

VDI (Virtual Desktop Infrastructure) is a known technology that allows users to use their own PC at work from outside the workplace (see, for example, Patent Document 1).

Japanese Patent Application Laid-Open No. 2019-053345

The VDI described in Patent Document 1 uses a laptop computer as a thin client. Using a virtual desktop on such a laptop computer in a cafe, on a train, or other location where third parties can see it presents security challenges.

The present invention was made in light of these issues, and its purpose is to provide technology that can improve security when using virtual desktops.

One aspect of the present invention relates to a computer program that causes a computer to implement the following functions: repeatedly acquiring images at a first frequency from an imaging unit provided in a glasses-type device so that an iris of a user can be captured when the user is wearing the glasses-type device, and performing iris authentication based on the image each time an image is acquired; receiving data transmitted from another device via a network if iris authentication based on the acquired image is successful; and making the received data visible through the glasses-type device; repeatedly acquiring images at the first frequency and periodically or periodically acquiring detection results at a second frequency higher than the first frequency from a detection unit provided in the glasses-type device that detects whether the user is wearing the glasses-type device; and causing the glasses-type device to stop making the data visible if the acquired detection results indicate that the user is not wearing the glasses-type device.

In addition, any combination of the above components, or mutual substitution of the components or expressions of the present invention between devices, methods, systems, recording media storing computer programs, etc., are also valid aspects of the present invention.

This invention can improve security when using virtual desktops.

FIG. 1 is a schematic diagram illustrating a configuration of a secure VDI system according to an embodiment. FIG. 2 is a schematic diagram illustrating an example of the glasses-type device of FIG. 1 . FIG. 2 is a hardware configuration diagram of the sorting server of FIG. 1. FIG. 2 is a block diagram showing the functions and configuration of the glasses-type device of FIG. 1 . FIG. 2 is a block diagram showing the functions and configuration of the mobile terminal of FIG. 1 . 2 is a block diagram showing the functions and configuration of the sorting server of FIG. 1; FIG. 7 is a data structure diagram showing an example of a user information storage unit in FIG. 6. 7 is a data structure diagram showing an example of a device information storage unit in FIG. 6. 2 is a flowchart showing a series of processing steps in the secure VDI system of FIG. 1 .

Hereinafter, identical or equivalent components, parts, processes, and signals shown in each drawing will be assigned the same reference numerals, and duplicate explanations will be omitted where appropriate. Furthermore, some components that are not important for the explanation will be omitted from each drawing.

FIG. 1 is a schematic diagram showing the configuration of a secure VDI system 2 according to an embodiment. The secure VDI system 2 includes an eyeglasses-type device 200, a mobile terminal 8, and a wireless keyboard 10 at a user 6 site, an administrator terminal (not shown) of the company 16 to which the user 6 belongs, and a sorting server 100, a private cloud 12, and a public cloud 14 at a data center 4. The mobile terminal 8 and sorting server 100 are connected to each other via a network such as the Internet, enabling data communication. The company 16 is also connected to the sorting server 100 via a network. The mobile terminal 8 is connected to the eyeglasses-type device 200 and the wireless keyboard 10 via short-range wireless communication such as Bluetooth (registered trademark), infrared communication, Wi-Fi communication, or NFC (Near Field Communication).

The secure VDI system 2 provides a virtual desktop (VD) service to a user 6. The sorting server 100 acquires screen information from the private cloud 12 or public cloud 14 and transfers it to the mobile terminal 8. The mobile terminal 8 transfers the acquired screen information to the eyeglasses-type device 200. The eyeglasses-type device 200 displays a desktop screen based on the received screen information, making the desktop screen visible through the eyeglasses-type device 200. The user 6 performs operations such as character input, clicking, and dragging using an input device such as a wireless keyboard 10 or a wireless mouse (not shown). The operation details are transmitted to the mobile terminal 8 via short-range wireless communication and then transmitted from the mobile terminal 8 to the sorting server 100 via the network. The sorting server 100 transfers the received operation details to the private cloud 12 or public cloud 14. In this way, a VD service is provided. In this VD service, the eyeglasses-type device 200 functions as a thin client in the VDI.

The VD service according to this embodiment uses a glasses-type device 200 as an interface with the user 6, which makes it easier to carry than conventional laptop computers and allows for the provision of a VD service that is more suited to new work styles. Taking advantage of the glasses-type device 200's ability to make it difficult to peek at, it is possible to provide a more secure VD service. Furthermore, since the glasses-type device 200 allows users to work in a relatively free posture, the use of the glasses-type device 200 can also solve the problems of poor posture and reduced eyesight that accompany the use of smartphones and laptop computers. By employing a VD service that uses such glasses-type device 200, the user 6 can obtain an environment in which they can work safely, anytime, anywhere.

The glasses-type device 200 of the secure VDI system 2 is configured as a specialized terminal that operates only on the desktop screen. The glasses-type device 200 has no functions other than those required as a thin client for the VDI service, and in particular, the downloading and installation of applications is restricted or prohibited. Furthermore, the glasses-type device 200 does not have a camera for capturing images of the surrounding environment or the faces of other people. This eliminates concerns about privacy violations.

In other embodiments with looser security requirements, the thin client functionality of the VD service according to this embodiment may be achieved by installing a dedicated application on a general-purpose glasses-type device.

Below, we will explain the issues that arise when using a DVD on a laptop computer and how these issues can be resolved by using the glasses-type device 200.

Scene 1: Use while traveling Issue 1: When using a laptop on the train, there is a risk that the person sitting next to you may be able to see what you are doing.
Problem 2: When you want to use a laptop while sitting on a train, it can be cramped if there is little space between you and the person next to you.
Issue 3: When you need to use a laptop computer, you cannot do so when there is no space to sit, such as when traveling on a train (while standing).
Problem 4: Bringing a laptop home makes my bag bulky and heavy.
Reasons why the glasses-type device 200 solves the problem: Because the glasses-type device 200 is glasses-type, it is nearly impossible to secretly view the device. Therefore, problem 1 is solved. The glasses-type device 200 is more portable than a laptop computer, and it is also possible to use a simple keyboard that can be operated with one hand. Therefore, problems 2, 3, and 4 are solved.

Scene 2: Use on the go, such as in a cafe Issue 1: When using a laptop in a cafe, there is a risk that people around you may be able to see what you are doing.
Issue 2: When using it in a cafe, it can be inconvenient when you need to use the restroom (it's difficult to take a laptop to the restroom).
Issue 3: There is a risk of theft when you take your eyes off the item, such as when you get up from your seat.
Reasons why the glasses-type device 200 solves the problem: Because the glasses-type device 200 is glasses-shaped, it is nearly impossible to spy on it. Therefore, problem 1 is solved. The glasses-type device 200 is more portable than a laptop computer, so it is easy to take with you when you go to the restroom or get up from your seat. Therefore, problem 2 is solved. Regarding problem 3, the glasses-type device 200 is equipped with repeated iris authentication and connection destination control (connection destinations are fixed at the time of shipment from the factory), which will be described later, so even if it is stolen, it can be disabled except for legitimate use.

Scenario 3: Offshore partner using a laptop from home (for example, during a pandemic such as the COVID-19 pandemic in early 2020, when employees were prohibited from coming to the office)
Issue: There is a risk that malicious partners may take out important data and documents (screenshots and recordings may be taken).
Reasons why the eyeglasses-type device 200 solves the problem: The eyeglasses-type device 200 is equipped with a repeat iris authentication and wearing detection function (described later), so the display turns off when the eyeglasses-type device 200 is removed. Therefore, it is not possible to take an image of the display content when the eyeglasses-type device 200 is removed. It is not possible to record the display content while the eyeglasses-type device 200 is being worn. Therefore, the risk of data leakage via partners is reduced or eliminated.

Scenario 4: If the password is stolen Problem: If the password is stolen, there is a possibility that someone may connect to the VDI illegally.
Reasons why the glasses-type device 200 solves the problem: The glasses-type device 200 is equipped with a connection status control function (described later) that allows the sorting server 100 to block unauthorized access. The glasses-type device 200 also has repeated iris authentication implemented. Therefore, the risk of data leakage due to theft of the glasses-type device 200 is reduced or eliminated.

Figure 2 is a schematic diagram showing an example of the eyeglass-type device 200 of Figure 1. The eyeglass-type device 200 is a binocular see-through type device, and includes a left lens with a display function 202, a right lens with a display function 204, a bridge 206, a left eye iris imaging camera 208, a right eye iris imaging camera 210, a left temple 212, a left wearing sensor 214, a right temple 216, and a right wearing sensor 218.

The left eye iris imaging camera 208 and the right eye iris imaging camera 210 are both attached to the bridge 206, and their mounting positions and angles of view are set so that they can capture images of the irises of the left and right eyes of the user 6 when the user 6 wears the eyeglass-type device 200. In this example, the left eye iris imaging camera 208 and the right eye iris imaging camera 210 are attached to the bridge 206, but they may be attached in any position as long as they can capture images of the user's irises; for example, they may be attached around each lens or at the base of the temples.

The left wearing sensor 214 and the right wearing sensor 218 are attached to the left temple 212 and the right temple 216, respectively, and are both configured to detect whether or not the user 6 is wearing the eyeglass-type device 200. The left wearing sensor 214 and the right wearing sensor 218 may be object detection sensors such as capacitance sensors.

A battery, circuitry, antenna, etc. (not shown) are incorporated into the left temple 212 and/or right temple 216. The configuration of the eyeglass-type device 200, excluding the left eye iris imaging camera 208, right eye iris imaging camera 210, left wearing sensor 214, and right wearing sensor 218, may be the same as that of a known see-through type eyeglass-type device.

In the example of Figure 2, a binocular see-through type eyeglass-type device 200 is described, but in other examples, for example, a projector-type eyeglass-type device may be used. A projector-type eyeglass-type device is, for example, a head-mounted display that projects an image directly onto the retina using a micro-projector, so that what you want to see is "reflected" in your eyes, rather than "seen" with your eyes (for example, the retinal scanning display "RETISSA Display II" manufactured by QD Laser).

As such, the glasses-type device 200 in the secure VDI system 2 according to this embodiment includes at least a device that displays an image and a device that projects an image onto the retina of the eye, but other configurations are also possible. In this embodiment, it is sufficient that the image can be viewed through the glasses-type device 200, and any means for achieving this is acceptable.

Figure 3 is a hardware configuration diagram of the sorting server 100 in Figure 1. The sorting server 100 includes a memory 104, a processor 106, a communication interface 108, a display 102, and an input interface 110. Each of these elements is connected to a bus 112 and communicates with each other via the bus 112.

Memory 104 is a storage area for storing data and programs. The data and programs may be stored in memory 104 permanently or temporarily. Processor 106 executes the programs stored in memory 104 to realize various functions of sorting server 100. Communication interface 108 is an interface for sending and receiving data to and from the outside of sorting server 100. For example, communication interface 106 includes an interface for accessing the Internet and an interface for accessing a LAN (Local Area Network) within data center 4. Communication interface 108 may also include an interface for a wired network. Display 102 is a device for displaying various information, such as a liquid crystal display or an organic EL (Electroluminescence) display. Input interface 110 is a device for receiving input.

Figure 4 is a block diagram showing the functions and configuration of the glasses-type device 200 of Figure 1. Each block shown here can be realized in hardware terms by elements or mechanical devices such as a computer CPU, and in software terms by computer programs, etc., but the functional blocks shown here are realized by the cooperation of these elements. Therefore, those skilled in the art who have read this specification will understand that these functional blocks can be realized in various ways by combining hardware and software.

The glasses-type device 200 includes an imaging unit 220, a wearing detection unit 222, a display control unit 224, and a short-range communication unit 226.

The imaging unit 220 includes a left eye iris imaging camera 208, a right eye iris imaging camera 210, and peripheral circuits (IC chips, not shown) that process data representing images captured by these cameras (hereinafter referred to as image data). The imaging unit 220 is configured to repeatedly, for example, periodically or periodically acquire image data and send the acquired image data to the mobile terminal 8. Alternatively, the imaging unit 220 is configured to acquire image data and send it to the mobile terminal 8 each time an imaging instruction is received from the mobile terminal 8.

The wearing detection unit 222 includes the left wearing sensor 214, the right wearing sensor 218, and a peripheral circuit (IC chip, not shown) that processes data indicating the detection results of these sensors (hereinafter referred to as detection data). The wearing detection unit 222 is configured to repeatedly, for example, periodically or periodically acquire the detection data and send the acquired detection data to the mobile terminal 8. Alternatively, the imaging unit 220 is configured to acquire the detection data each time a detection instruction is received from the mobile terminal 8 and send it to the mobile terminal 8.

If the frequency at which the imaging unit 220 acquires image data is A and the frequency at which the wearing detection unit 222 acquires detection data is B, then B is set to be greater than A. For example, if the imaging unit 220 acquires and transmits image data once per second, the wearing detection unit 222 is set to acquire and transmit detection data 10 times per second.

The display control unit 224 displays the desktop screen on the left lens with display function 202 and the right lens with display function 204 based on the screen information received from the mobile terminal 8. Display control by the display control unit 224 may be achieved using display control technology for well-known see-through eyeglass-type devices.

The short-range communication unit 226 functions as an interface for short-range wireless communication with the mobile terminal 8. The short-range communication unit 226 transmits image data and detection data to the mobile terminal 8 via short-range wireless communication, and receives screen information from the mobile terminal 8. Short-range wireless communication between the glasses-type device 200 and the mobile terminal 8 may be achieved using known technology.

Figure 5 is a block diagram showing the functions and configuration of the mobile terminal 8 in Figure 1. Each block shown here can be realized in hardware terms using elements or mechanical devices, such as a computer CPU, and in software terms using computer programs, etc., but the functional blocks shown here are realized by the cooperation of these elements. Therefore, those skilled in the art who have read this specification will understand that these functional blocks can be realized in various ways by combining hardware and software.

The mobile terminal 8 is, for example, a smartphone or tablet terminal, and has a means for displaying information, such as a display, and a means for accepting input from the user, such as a touch panel.

A user 6 of a mobile terminal 8 downloads and installs a VDI application program (hereinafter referred to as a VDI app) according to an embodiment onto the mobile terminal 8 from a download site via a network such as the Internet. Alternatively, the VDI app may be pre-installed on the mobile terminal 8. When the VDI app is executed by the mobile terminal 8, the mobile terminal 8 realizes various functions. Below, functions realized by the mobile terminal 8 (its processing unit, such as a CPU (Central Processing Unit)) executing the VDI app will be described as functions of the mobile terminal 8. These functions are actually functions realized by the VDI app on the mobile terminal 8.

In another embodiment, a browser is used instead of installing a VDI app. The computer program in this embodiment is a computer program written in a programming language such as HTML (Hypertext markup language), which is transmitted from a server to a web browser on the mobile terminal 8 via a network and executed by the web browser. This computer program has functionality equivalent to the VDI app described in this specification.

The mobile terminal 8 includes a short-range communication unit 302, an image acquisition unit 304, a detection result acquisition unit 306, a network communication unit 308, a screen transfer unit 310, an input information acquisition unit 312, and a position acquisition unit 314.

The short-range communication unit 302 functions as an interface for short-range wireless communication with the glasses-type device 200 and other peripheral devices such as the wireless keyboard 10. The wireless keyboard 10 may be a one-handed keyboard that can be operated while standing, or a foldable keyboard. The short-range communication unit 302 transmits screen information to the glasses-type device 200 via short-range wireless communication, receives image data and detection data from the glasses-type device 200, and receives input operation information from the wireless keyboard 10.

The image acquisition unit 304 repeatedly acquires image data from the imaging unit 220 of the glasses-type device 200. The image acquisition unit 304 may acquire image data repeatedly transmitted from the imaging unit 220 at a frequency A, or may send an imaging instruction to the imaging unit 220 at a frequency A and acquire image data returned in response to the imaging instruction. Each time the image acquisition unit 304 acquires image data, it transmits the acquired image data to the sorting server 100.

The detection result acquisition unit 306 repeatedly acquires detection data from the wearing detection unit 222 of the glasses-type device 200. The detection result acquisition unit 306 may acquire detection data repeatedly transmitted from the wearing detection unit 222 at frequency B, or may transmit a detection instruction to the wearing detection unit 222 at frequency B and acquire the detection data returned in response to the detection instruction.

If the acquired detection data indicates that the device is not being worn, the detection result acquisition unit 306 causes the glasses-type device 200 to stop displaying the desktop screen. If the detection data indicates that the device is not being worn, the detection result acquisition unit 306 causes the screen transfer unit 310, described below, to stop transferring screen information to the glasses-type device 200. In addition, the detection result acquisition unit 306 sends an instruction to the display control unit 224 of the glasses-type device 200 to stop or erase the display.

The network communication unit 308 functions as an interface for communication with the sorting server 100 via the network. The network communication unit 308 transmits image data and input operation information to the sorting server 100 via the network, and receives screen information from the sorting server 100. Screen information representing the desktop screen is transmitted from the sorting server 100 when iris authentication based on the image data in the sorting server 100 is successful. When iris authentication fails, the sorting server 100 either does not transmit screen information or transmits screen information representing a screen indicating that authentication has failed. This iris authentication is performed based on the image data each time the image data is acquired.

The screen transfer unit 310 transfers the screen information received from the sorting server 100 to the glasses-type device 200, thereby causing the glasses-type device 200 to display the desktop screen represented by the screen information. As described above, the screen transfer unit 310 stops the transfer if it detects that the glasses-type device 200 is not being worn.

The input information acquisition unit 312 acquires input operation information corresponding to user input operations from peripheral devices such as the wireless keyboard 10 and wireless mouse. The input information acquisition unit 312 transmits the acquired input operation information to the sorting server 100.

The location acquisition unit 314 acquires the location of the mobile terminal 8, i.e., the location corresponding to the glasses-type device 200, from a positioning means such as a GPS (Global Positioning System) provided in the mobile terminal 8. The location acquisition unit 314 transmits the acquired location to the sorting server 100.

Figure 6 is a block diagram showing the functions and configuration of the sorting server 100 in Figure 1. Each block shown here can be realized in hardware terms by elements or mechanical devices such as a computer CPU, and in software terms by computer programs, etc., but the functional blocks shown here are realized by the cooperation of these elements. Therefore, those skilled in the art who have read this specification will understand that these functional blocks can be realized in various ways by combining hardware and software.

The sorting server 100 includes a network communication unit 120, a VDI control unit 122, an iris authentication unit 124, a position authentication unit 126, a user information storage unit 128, and a device information storage unit 130.

Figure 7 is a data structure diagram showing an example of the user information storage unit 128 of Figure 6. The user information storage unit 128 stores, in association with one another, a user ID that identifies the user, a password set by the user, iris information pre-registered by the user or administrator, a device ID that identifies the eyeglass-type device used by the user, and a connection permission location that indicates a location where the user is permitted to use the VD service.

Figure 8 is a data structure diagram showing an example of the device information storage unit 130 in Figure 6. The device information storage unit 130 stores, in association with each other, a device ID that identifies the glasses-type device, connection destination information that identifies the fixed connection destination set for the glasses-type device at the time of shipment from the factory, and whether or not a connection cutoff instruction has been issued for the glasses-type device.

Returning to Figure 6, the network communication unit 120 functions as an interface for communication over a network with the mobile terminal 8 and the administrator terminal of the company 16. The network communication unit 120 receives image data and input operation information from the mobile terminal 8 over the network, and transmits screen information to the mobile terminal 8. The network communication unit 120 also functions as an interface for communication over a network with the private cloud 12 and the public cloud 14.

The VDI control unit 122 realizes a virtual desktop service using the glasses-type device 200 as a thin client. The main functions of the VDI control unit 122 are as follows:

(1) The VDI control unit 122 communicates with the administrator terminal of the company 16, enabling the company administrator to register and manage glasses-type devices. The VDI control unit 122 acquires a pair of user ID and password to be registered in the user information storage unit 128 from the administrator terminal and registers them in the user information storage unit 128. The VDI control unit 122 acquires the user's iris information from the administrator terminal and registers it in the user information storage unit 128. Alternatively, the iris information may be sent to the sorting server 100 by the user himself/herself via the mobile terminal 8 and registered in the user information storage unit 128.

(2) The VDI control unit 122 enables the administrator of company 16 to disable the use of glasses-type devices. The VDI control unit 122 acquires the device ID of the glasses-type device to be disconnected from the administrator terminal and registers the connection disconnection instruction for that device ID as "Yes" in the device information storage unit 130. When the VDI control unit 122 receives a VD start or continuation request from a glasses-type device for which the connection disconnection instruction is "Yes," it rejects or ignores such a request. When an administrator reports that a glasses-type device under their management has been stolen, the administrator can disable VD by that glasses-type device by sending the device ID of the stolen glasses-type device to the VDI control unit 122 as a connection disconnection target. This further improves the security of the VD service.

(3) The VDI control unit 122 performs user authentication and start processing for the VD between the mobile terminal 8 and the VDI control unit 122. When the VDI control unit 122 receives a VD start request from the mobile terminal 8, which includes a user ID, password, and location and destination information corresponding to the glasses-type device, the VDI control unit 122 performs user authentication by comparing the user ID and password pair included in the received VD start request with the user information stored in the user information storage unit 128. If user authentication is successful, the VDI control unit 122 accesses a resource (e.g., a desktop terminal) in the private cloud 12 or public cloud 14 corresponding to the destination information included in the VD start request, and acquires screen information corresponding to the desktop screen on that resource.

If further authentication is required to access a resource, the VDI control unit 122 performs authentication using authentication information for that resource that has been pre-registered in association with the user ID in the user information storage unit 128. The user ID and password registered in the user information storage unit 128 may themselves constitute the authentication information for the resource to be accessed.

The connection destination information may be written to the glasses-type device 200 in a non-rewritable form. In this case, the mobile terminal 8 reads the connection destination information from the glasses-type device 200 when generating a VD start request. Alternatively, the connection destination information may be specified by an administrator of the company 16 when the administrator registers the glasses-type device.

If iris authentication in the iris authentication unit 124 is successful and position authentication in the position authentication unit 126 is successful, the VDI control unit 122 starts the VD by sending the acquired screen information to the mobile terminal 8. The VDI control unit 122 registers the device ID of the glasses-type device used in the started VD in the user information storage unit 128 in association with the user ID used in authenticating the VD. If either or both of the iris authentication in the iris authentication unit 124 and the position authentication in the position authentication unit 126 fail, the VDI control unit 122 refuses to start the VD.

(4) The VDI control unit 122 manages and controls the VD between the glasses-type device 200 and the mobile terminal 8 and the above-mentioned resources. The VDI control unit 122 transmits input operation information received from the mobile terminal 8 to the resources, and transmits updated screen information received from the resources to the mobile terminal 8.

(5) If iris authentication by the iris authentication unit 124 fails while the VD is in progress, the VDI control unit 122 cancels or stops the VD. In this case, the VDI control unit 122 does not send the screen information received from the resource to the mobile terminal 8, or sends screen information showing a screen indicating that authentication has failed to the mobile terminal 8.

The iris authentication unit 124 performs iris authentication by comparing the iris information received from the mobile terminal 8 with the iris information registered in the user information storage unit 128. The iris authentication unit 124 compares the iris information registered in the user information storage unit 128 in association with the user ID included in the VD start request with the iris information received from the mobile terminal 8, and determines that iris authentication was successful if they match, or that iris authentication failed if they do not match. As mentioned above, iris information is acquired and sent at a predetermined frequency, so the iris authentication unit 124 performs iris authentication each time it acquires such iris information.

The location authentication unit 126 performs location authentication based on whether the location included in the VD start request meets certain conditions. If the location included in the acquired VD start request is included in the permitted connection locations (range) registered in the user information storage unit 128, the location authentication unit 126 determines that the location authentication is successful; if it is not included, the location authentication is determined to be unsuccessful.

The operation of the secure VDI system 2 configured as above will now be described.
9 is a flowchart showing a series of processes in the secure VDI system 2 of FIG. 1 . The user 6, without wearing the glasses-type device 200, pairs the glasses-type device 200 with the mobile terminal 8 for Bluetooth communication (S902). The user 6 also pairs a peripheral device, such as a wireless keyboard 10, with the mobile terminal 8. The user 6 logs in to the VD service on the mobile terminal 8 (S904). This login is performed, for example, by the sorting server 100 transmitting a login information input screen to the mobile terminal 8, the mobile terminal 8 displaying the screen, the user 6 entering a user ID and password on the screen, and the mobile terminal 8 generating a VD start request including the entered user ID and password, the connection destination information of the glasses-type device 200, and the location, and transmitting the VD start request to the sorting server 100. Note that, although authentication regarding the VD start request is performed using the user ID and password on the mobile terminal 8, this authentication itself may be replaced by iris authentication.

The sorting server 100 performs location authentication based on the location included in the VD start request (S906). If location authentication fails (NO in S906), the VD does not start and processing ends. If location authentication is successful (YES in S906), processing continues.

When the user 6 puts on the glasses-type device 200 (S908), the imaging unit 220 of the glasses-type device 200 captures an image of the user 6's iris. The portable terminal 8 acquires the image from the imaging unit 220 (S910). The portable terminal 8 transmits the acquired image to the sorting server 100 (S912). The sorting server 100 performs iris authentication based on the received image (S914). If the iris authentication fails (NO in S914), the start (or continuation) of the VD is denied (S920), and the process returns to step S910. If the iris authentication is successful (YES in S914), the sorting server 100 starts and continues the VD (S916). While the VD is continuing in step S916, the portable terminal 8 repeatedly acquires detection data from the wearing detection unit 222 of the glasses-type device 200, and turns off the display of the glasses-type device 200 when it detects that the glasses-type device 200 has been removed.

The portable terminal 8 determines whether a predetermined period of time has passed since the previous acquisition of image data (S918). When the predetermined period of time has passed (YES in S918), the portable terminal 8 returns the process to step S910 to repeat iris authentication. If iris authentication fails in step S914 while the VD is continuing, the sorting server 100 refuses to continue the VD (S920). After suspending the VD, the sorting server 100 returns the process to step S910 to repeat iris authentication. If iris authentication is then successful again, the VD is resumed. The sorting server 100 may end the VD if the refusal to continue the VD (step S920) occurs a predetermined number of times in succession.

In the above-described embodiments, examples of storage units are hard disks and semiconductor memory. Furthermore, based on the descriptions in this specification, those skilled in the art who have read this specification will understand that each unit can be realized by a CPU (not shown), an installed application program module, a system program module, or semiconductor memory that temporarily stores the contents of data read from a hard disk.

In the secure VDI system 2 according to this embodiment, the VD continues on the condition that repeated iris authentication is successful. Therefore, not only is it impossible for anyone other than the user to use it, but repeated successful authentication is required, which also prevents impersonation, such as a malicious third party using an eyeglass-type device that has once passed the user's iris authentication. As a result, the security of the secure VDI system 2 in which the eyeglass-type device 200 is used as a thin client is further strengthened.

Furthermore, in the secure VDI system 2 according to this embodiment, when the eyeglass-type device 200 is removed, iris authentication fails and the display turns off. This reduces or eliminates the risk of the desktop screen being secretly viewed. Furthermore, in this embodiment, in addition to repeated iris authentication, wearing detection is performed more frequently. Therefore, it is possible to reduce or eliminate the risk of the desktop screen being secretly viewed during the short time between when the eyeglass-type device 200 is removed and when the display of the eyeglass-type device 200 turns off due to iris authentication failure.

In addition, the secure VDI system 2 according to this embodiment allows you to specify the range of locations where the VD service can be used. This makes it possible to restrict the locations where participants can participate via VD when holding a conference that deals with sensitive content via VD. For example, you can prohibit participants from participating in such conferences in places where there is a high probability that the content of the conversation will be overheard, such as a cafe or while out and about, and limit participants to safe locations such as their own homes.

In addition, in the secure VDI system 2 according to this embodiment, security control is performed by the sorting server 100. This allows for smoother response to failures than when VDI is performed directly between the mobile terminal 8 and the resources of the private cloud 12 and public cloud 14, and makes response to failures on holidays and at night particularly smoother.

Furthermore, in the secure VDI system 2 according to this embodiment, the eyeglasses 200 can be shared among employees of the company 16. Therefore, for example, the company 16 can be equipped with a predetermined number of eyeglasses 200, and employees can take their favorite eyeglasses 200 with them when they go out. This allows the company 16 to provide a VD service that is less expensive than providing each employee with an eyeglasses device, yet still ensures security.

The above describes the configuration and operation of the secure VDI system 2 according to an embodiment. This embodiment is merely an example, and those skilled in the art will understand that various modifications are possible to the combination of each component and each process, and that such modifications are also within the scope of the present invention.

In the embodiment, a VD (Virtual Desktop) has been used as an example, but this is not limited to this. The technical concept of this embodiment can also be applied to other applications that require secure connections, such as connections via a VPN (Virtual Private Network) or web conferencing.

In the embodiment, the glasses-type device 200, the mobile terminal 8, and the sorting server 100 have the functions exemplified in Figures 4, 5, and 6, respectively. However, this is not limiting, and for example, the glasses-type device 200 may realize some or all of the functions of the mobile terminal 8. If all of the functions of the mobile terminal 8 are realized by the glasses-type device 200, the mobile terminal 8 is not necessary and the glasses-type device 200 communicates directly with the sorting server 100 via a network. In this case, the glasses-type device 200 does not need the mobile terminal 8, and also does not need a short-range communication unit for communicating with the mobile terminal 8. Note that a configuration may be adopted in which only the mobile communication function is performed via the mobile terminal 8, and a tethering function of the mobile terminal 8 (using the mobile terminal 8 as an access point) can be used.
Alternatively, the iris authentication function and/or the position authentication function of the sorting server 100 may be realized by the mobile terminal 8 or the eyeglass-type device 200. In this way, which function is realized by which element may be determined as appropriate depending on the actual application. A specific operation of the eyeglass-type device 200 is to acquire an iris while wearing the device, compare it with iris information pre-registered in the device, and perform authentication based on whether the comparison is successful. "Pre-registered" is achieved by the user initially registering their own iris using the device when using it for the first time. In this embodiment, the operation is shown to be linked with the mobile terminal 8, but iris information may also be acquired by the device and transmitted to the mobile terminal 8, and the iris may be compared by the mobile terminal.

In the embodiment, we have described the use of a wireless keyboard 10 or a wireless mouse as input means, but this is not limited to this. For example, a system that projects a keyboard to enable operation similar to that of a PC, or a system that allows operation by hand gestures or eye contact may also be used. In this case, the inconvenience of smartphone operation can be resolved and operability can be improved.

In the embodiment, a case where the glasses-type device 200 is provided with a wearing detection unit 222 has been described, but if wearing detection is not required or if repeated iris authentication can also serve as wearing detection, the wearing detection unit 222 does not have to be provided.

In the embodiment, the connection destination of the glasses-type device 200 is fixed at the time of shipment from the factory and written into the glasses-type device 200, but this is not limited to this and it does not have to be fixed, and the user may be able to specify it when starting the VD, or the connection destination may be set or changed from an administrator terminal of the company 16.

In an embodiment, the VDI application may run in the foreground or in the background. Furthermore, the VDI application may use the iris image data acquired from the glasses-type device 200 for purposes other than iris authentication for VD continuation. For example, the iris image data may be used to achieve single sign-on when connecting to another service within the VD environment that requires further authentication.

In the embodiment, we have described a case where VD is monitored using position authentication, iris authentication, and wearing detection, but this is not limited to this. For example, the period and timing during which VD is possible may also be specified.

Furthermore, while the embodiment describes a configuration using position authentication, it may also be a configuration that does not include position authentication (i.e., a configuration that uses only iris authentication as authentication).

In the embodiment, as an example, iris authentication is used to determine whether to continue the VD. As a more specific implementation example, the VD continuation determination is performed based on iris authentication as one of the functions of a program installed on the sorting server 100, but it can also be implemented as a function of the eyeglasses-type device 200 or the mobile terminal 8. As an example of implementation as a function of the mobile terminal 8, it can be implemented as one function of a VD client installed on the mobile terminal 8, and as an example of implementation as a function of the eyeglasses-type device 200, it can be implemented as one function of a VD client installed on the eyeglasses-type device 200. The advantage of implementing it as a function of the VD client is that it is easy to stop providing the VD service when it is determined not to continue the VD. If it is implemented as a separate program rather than as a function of the VD client, when it is determined not to continue the VD, the display of the eyeglasses-type device 200 can be turned off or shut down, or the communication function of the mobile terminal 8 can be turned off or shut down. In either case, it is possible to ultimately prevent the VD service from being provided.

2 Secure VDI system, 4 Data center, 6 User, 8 Mobile terminal, 100 Distribution server.

Claims (3)

a function of repeatedly acquiring images at a first frequency from an imaging unit provided in the eyeglass-type device so that an iris of the user can be imaged when the user wears the eyeglass-type device, and performing iris authentication based on the image each time the image is acquired;
A function of receiving data transmitted from other devices via a network when iris authentication based on the acquired image is successful;
A function of making the received data visible through the glasses-type device;
a function of repeatedly acquiring images at the first frequency periodically or periodically , and repeatedly acquiring detection results at a second frequency higher than the first frequency from a detection unit provided in the glasses-type device that detects whether the user is wearing the glasses-type device;
a function of causing the glasses-type device to stop making data visible when the acquired detection result indicates that the glasses-type device is not being worn;
A computer program that enables a computer to achieve the above. The computer further implements a function of acquiring a position corresponding to the glasses-type device;
The computer program of claim 1 , wherein if the acquired location does not satisfy a predetermined condition, connection with the other device via the network is refused. The computer program according to claim 1 or 2, wherein the glasses-type device functions as a thin client in a VDI (Virtual Desktop Infrastructure).