WO2008115012A1 - Movable virtual machine image - Google Patents
Movable virtual machine image Download PDFInfo
- Publication number
- WO2008115012A1 WO2008115012A1 PCT/KR2008/001567 KR2008001567W WO2008115012A1 WO 2008115012 A1 WO2008115012 A1 WO 2008115012A1 KR 2008001567 W KR2008001567 W KR 2008001567W WO 2008115012 A1 WO2008115012 A1 WO 2008115012A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- virtual machine
- virtual
- image
- mapping
- machine image
- Prior art date
Links
- 238000000034 method Methods 0.000 claims abstract description 99
- 238000013507 mapping Methods 0.000 claims description 24
- 230000026676 system process Effects 0.000 claims description 14
- 238000003860 storage Methods 0.000 claims description 13
- 230000007613 environmental effect Effects 0.000 claims description 5
- 230000004044 response Effects 0.000 claims description 4
- 230000008569 process Effects 0.000 description 48
- 230000006870 function Effects 0.000 description 7
- 238000009826 distribution Methods 0.000 description 6
- 230000015654 memory Effects 0.000 description 6
- 238000012545 processing Methods 0.000 description 5
- 241000700605 Viruses Species 0.000 description 4
- 230000008901 benefit Effects 0.000 description 4
- 238000005516 engineering process Methods 0.000 description 4
- 238000009434 installation Methods 0.000 description 4
- 230000003111 delayed effect Effects 0.000 description 3
- 238000012986 modification Methods 0.000 description 3
- 230000004048 modification Effects 0.000 description 3
- 238000012360 testing method Methods 0.000 description 3
- 230000001419 dependent effect Effects 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 230000008676 import Effects 0.000 description 2
- 230000010354 integration Effects 0.000 description 2
- 238000012423 maintenance Methods 0.000 description 2
- 230000003211 malignant effect Effects 0.000 description 2
- 238000005192 partition Methods 0.000 description 2
- 206010033799 Paralysis Diseases 0.000 description 1
- 230000002159 abnormal effect Effects 0.000 description 1
- 230000002155 anti-virotic effect Effects 0.000 description 1
- 230000005540 biological transmission Effects 0.000 description 1
- 230000015572 biosynthetic process Effects 0.000 description 1
- 230000015556 catabolic process Effects 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 230000003247 decreasing effect Effects 0.000 description 1
- 238000006731 degradation reaction Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 230000003203 everyday effect Effects 0.000 description 1
- 230000007257 malfunction Effects 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 230000002093 peripheral effect Effects 0.000 description 1
- 230000002250 progressing effect Effects 0.000 description 1
- 230000002787 reinforcement Effects 0.000 description 1
- 230000007480 spreading Effects 0.000 description 1
- 238000003892 spreading Methods 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/14—Error detection or correction of the data by redundancy in operation
- G06F11/1479—Generic software techniques for error detection or fault masking
- G06F11/1482—Generic software techniques for error detection or fault masking by means of middleware or OS functionality
- G06F11/1484—Generic software techniques for error detection or fault masking by means of middleware or OS functionality involving virtual machines
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F15/00—Digital computers in general; Data processing equipment in general
- G06F15/16—Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F15/00—Digital computers in general; Data processing equipment in general
- G06F15/16—Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs
- G06F15/161—Computing infrastructure, e.g. computer clusters, blade chassis or hardware partitioning
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
- G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
- G06F3/0601—Interfaces specially adapted for storage systems
- G06F3/0602—Interfaces specially adapted for storage systems specifically adapted to achieve a particular effect
- G06F3/062—Securing storage systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
- G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
- G06F3/0601—Interfaces specially adapted for storage systems
- G06F3/0628—Interfaces specially adapted for storage systems making use of a particular technique
- G06F3/0662—Virtualisation aspects
- G06F3/0667—Virtualisation aspects at data level, e.g. file, record or object virtualisation
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
- G06F3/12—Digital output to print unit, e.g. line printer, chain printer
- G06F3/1201—Dedicated interfaces to print systems
- G06F3/1223—Dedicated interfaces to print systems specifically adapted to use a particular technique
- G06F3/1224—Client or server resources management
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/60—Software deployment
- G06F8/61—Installation
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/22—Microcontrol or microprogram arrangements
- G06F9/24—Loading of the microprogram
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/4401—Bootstrapping
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/448—Execution paradigms, e.g. implementations of programming paradigms
- G06F9/4494—Execution paradigms, e.g. implementations of programming paradigms data driven
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/451—Execution arrangements for user interfaces
- G06F9/453—Help systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45541—Bare-metal, i.e. hypervisor runs directly on hardware
Definitions
- the present invention relates to the virtual machine and more specifically, relates to movable personal computer environments created by the operating system level virtu- alization.
- GUI Graphic User Interface
- PC environments should be moved easily and quickly, that software should be distributed easily, that a PC should be able to be shared through a new scheme while guaranteeing independent user environments, and that a PC should be able to be restored back to the initial status that the user had defined whenever the user wishes to do this.
- the first issue is concerning the mobility of a PC environment.
- a PC has its own environment for each user; this is different from other home appliances.
- the desktop environment and the application programs can be diverse. This can result in the following problems.
- PC at the office have different PC environments. Therefore, in order to make things easier, the user should make his PC environment at home the same as that at the office. He must install all required software and arrange all options for the best surroundings to aid in his work. In case the user has to use a computer on business trips, he has to adjust the PC environment at the destination of the business trip. In order to save the trouble, lap top computers are available. However, lap top computers are relatively expensive and heavy and this may be a large burden.
- PC environments are generally grouped together. A group can be made to use the same software. Teams or positions may be the organizing factor for groups.
- a PC manager takes the responsibility of setting up the PC environment including all the required software for each group. However, dealing with the needs of each staff member one by one is very inefficient and takes a lot of time. If the PC environments are prepared in a storage device in advance and can be set up quickly, this will be advantageous whenever positions are rearranged, whenever a new employee enters the company or whenever the list of software required for business changes. Ultimately, everyone should be able to set up their own PC environment easily without the need of a PC manager.
- the virtual machine of the present invention is used to provide mobility, distribution, sharing and initializing of PC environments with ease.
- the goal is not to emulate a command, similar to the command set level virtualization method, but to modify the source code or the binary code of OS to execute multiple OSes in a machine.
- a CPU that allows multiple OSes to be executed in a single machine, without modifying the OSes, is being developed.
- processing speed is improved.
- the hardware level virtualization provides a standard hardware set and the generated virtual machine image is the PC environment itself. Copying this image accompanies the copying of the installed OS together so that independence and mobility are guaranteed.
- the hardware performance is equalized at a low level.
- an old-fashioned 2D graphic card operates the virtual PC, if the virtual machine provides a virtual graphic card by emulating the old-fashioned 2D graphic card.
- a device that is not yet emulated such as IEEE 1394, cannot be used.
- IEEE 1394 it is actually impossible to emulate all hardware devices launched up to now.
- the virtual machine image has a comparatively large size, because all hardware elements need to be emulated.
- the size of the virtual machine images generated by hardware level virtualization solutions up until today is in units of Giga bytes. This is very inefficient because such generated OS images require a size range from hundreds of mega bytes to tens of Giga bytes even in the case of the distribution of a small application such as notepad.exe.
- hardware level virtualization is suitable for server virtualization but not for desktop virtualization for commerce.
- the application level virtualization method is a method that creates an application in the form of Bytecode.
- An example of this is the Java Virtual Machine developed by SunMicro Systems, which allows an application to be executed in a variety of heterogeneous hardware and software environments.
- a windows environment includes executable files (.exe) and a shared library (.dll )
- the shared libraries are often manufactured by various companies and shared in various software.
- the shared library, c: ⁇ windows ⁇ system32 ⁇ msvcrt.dll is used in A' program manufactured by A company and also used in B' program manufactured by B company.
- the library, msvcrt.dll can have various versions for the same file name. While the A' program uses msvcrt.dll Ver.
- the advanced techniques of today store the application data in a USB drive.
- the user can also utilize the application without installation by connecting the USB drive to PC.
- This technique provides limited mobility of PC environment by enabling an application to be executed in any PC.
- application level virtualization stores application data separately. This can resolve the problem of collision in the installation stage but not in the execution stage. For example, when two different anti-virus programs are used at the same time, they will clash with each other and cause abnormal errors. Such collisions in the execution stage cannot be resolved by application level virtualization.
- the operating system level virtualization method is a method of virtualizing each constitutional element of an operating system (a processor, file system, network resource, system call interface, name space, and the like).
- Conventional operating system level virtualization methods have been developed mainly for the purpose of server virtualization, such as a Virtual Private Server (VPS).
- An operating system kernel in a server computer is partitioned and an independent OS environment is provided for each partition.
- the OS level virtualization makes it possible to create multiple independent virtual
- OS in a single real OS.
- a user is able to independently utilize needed environments in an OS.
- it is inexpensive since the user does not need to purchase another physical server.
- the OS level virtualization method has been used as a method for efficiently providing an independent OS space to a user who needs a multiple OS environment for the purpose of software development and testing. Disclosure of Invention Technical Problem
- the present invention provides a new virtualization technique which makes it possible to move PC environments easily and quickly, to distribute software products, to share a physical PC with independency guaranteed, to initialize PC environments easily and conveniently and the like.
- the new virtualization should provide a computing environment, while not asking PC users to acquire additional knowledge about OS, installing and setting for a program and the like. It will allow the users to utilize the PC with the ease that they utilize other ordinary appliances.
- the present invention provides a movable virtual machine image which is independent of the hardware, utilizes most of the OS environment of the PC, is easy to attach or detach from the OS, and presents easy and quick moving, distributing, sharing and initializing.
- the term "movable" is used to describe the above-explained features.
- OS level virtualization creates multiple virtual machines in a single computer, because each virtual machine does not require resources to operate its own OS. Therefore, compared with hardware level virtualization, OS level virtualization can operate multiple virtual machines with few resources.
- the hardware level virtualization can guarantee the mobility of the virtual machine image, since it creates a virtual image as an independent system including an independent OS.
- OS level virtualization up to now merely splits the OS of the real machine and uses the split OS virtually. It is not able to detach the created virtual machine from the real machine and attach it to another real machine in the form of an image.
- An OS includes Kernel, Device Driver, System Process, Service Process and the like.
- the kernel is the core of the OS. It is the part of the OS that provides multiple basic services to other parts of the OS.
- the Kernel manages the hardware or resources of the system and abstractizes them.
- a kernel includes Kernel Execution Part and HAL (Hardware Abstraction
- Kernel Execution Part takes charge of process and thread management, memory management, object management, security management, inter-process communication management and the like.
- HAL abstractizes the hardware to make it possible to use it without direct access to the hardware by other applications or elements of kernel.
- the Device Driver is used to control physical devices, or to execute commands in the kernel level.
- the System Process is a core process of the OS to be executed under the user mode and takes charge of device driver requests, user login/logoff, security and the like.
- the Service (daemon) Process is a process that is executed in the background under the user mode and takes charge of all sorts of services such as file sharing service, telnet service, web service, printer service and the like.
- the application process is software, such as the word processor or the windows media player, to provide the user with the functions actually needed and executed in the OS.
- OS the word processor or the windows media player
- software operating system + application
- FIG. 1 shows a preferred embodiment according to the virtualization of the present invention.
- An environment with an independent quest OS has virtual kernel, execution space and virtual machine data.
- Table 1 shows the general structure of a PC including the OS.
- Virtualization can be attained by controlling the processing of the lower layer element upon the request from the upper layer element. For example, when the device driver requests the creation of an object from the kernel execution part, the corresponding object is created in a virtual space and the result is returned. When an application requests creation of c: ⁇ myfile.txt file, the kernel execution part creates it not in the real disk but in the virtual disk and then the result is returned.
- the upper layer element processes all functions in response to the lower layer element. Consequently, the upper layer element can be operated in the virtual machine without any modification, provided that the lower layer element is virtualized.
- the lowest layer elements of the OS, HAL and Kernel execution part are virtualized. Consequently, the upper layers, such as the device driver, the system process, the service process or applications, can be executed in virtual space without any modification.
- the kernel execution part layer can virtualize the kernel by dispatching the requests from the upper layer into the real space or one or more virtual spaces.
- a request for a thread or process that belongs to the real machine is dispatched to the real space and the request for a thread or process that belongs to the virtual machine is dispatched to the virtual space.
- Executing in the virtual machine means that a request to the kernel execution part is dispatched.
- Fig. 3 shows that requests from an upper layer are dispatched to virtual space or real space through the kernel execution part.
- the kernel execution part can be virtualized by means of the virtualization of the name spaces such as files, registries or objects, the virtualization of processes and threads, and the virtualization of memories.
- the file, registry, kernel object and so on are the kernel elements that have names.
- a file has a name such as ⁇ Device ⁇ HarddiskVolumel ⁇ myfile.txt
- a registry has a name such as ⁇ Registry ⁇ Machine ⁇ Software ⁇ mykey
- a kernel object has a name such as ⁇ BaseNamedObjects ⁇ myobject.
- the request for said registry is dispatched to ⁇ Registry ⁇ VMl ⁇ Machine ⁇ Software ⁇ mykey.
- the request for the object, ⁇ BaseNamedObjects ⁇ my object is dispatched to ⁇ VMl ⁇ BaseNamedObjects ⁇ myobject.
- the name to be dispatched may conform to an optional rule.
- the virtualization for the name space is realized by bestowing an independent name space for each virtual machine.
- a thread is the minimal unit for execution and a process is a set of threads that shares a memory address.
- a request for generating a process or a thread is transferred to the kernel execution part. If a mother process that requests to generate a son process is within a particular virtual machine, the kernel execution part generates the son process within that particular virtual machine. If a process that requests the generation of a thread is within a particular virtual machine, the kernel execution part generates the thread within that particular virtual machine. Generally, these are enough for the virtualization of the process and the thread, because a process is the basic unit of OS level virtualization.
- the minimal unit of virtualization is the thread, not process. This is because the virtual machine does not generate some OS processes but shares the processes of the real machine to embody an efficient OS level virtualization.
- the specified thread should be executed in the real machine and the specified thread should also be executed in the specified virtual machine. If the kernel execution part is asked to generate a thread, and if the mother thread that asked for the generated thread is within the virtual machine, the generated thread is also executed in the virtual space.
- mapping includes the mapping of authority, the mapping of environmental variables and their settings, resources shared between the virtual machine and the real machine and the like. There are two ways to achieve these mappings, one is converting the virtual machine image to conform to the real machine and the other is registering the setting of the specific image to the kernel execution part. Each or both of these two methods can be used.
- a multi-user OS provides an access control function for each user to give them the authority to use for each file, registry and device.
- a virtual machine image does not have authority information or the authority of the user at the time the image is generated. In case that such authority is not available to other OS, booting may be discontinued. Therefore, the authority mapping is indispensable for importing images.
- the authority settings for files, directories, registries and devices in the image are adapted to the values of the OS environment of the real machine or default values of the OS.
- the authority mapping can be omitted in the case of files, directories, registries and devices that do not need the access control for use or do not cause problems even though the access control is not established.
- the environmental variable and configuration for the real machine is recorded on the basis of the drive path of the real machine.
- the virtual disk drive name in which a virtual machine OS is installed may be different from the drive name of the physical disk in which a real OS is installed. Therefore, part of the environmental variable and configuration that need mapping should be newly mapped.
- Some elements of the OS such as system process and service process, are shared between the real machine and the virtual machine.
- the resources used in those processes are also shared. While the resources allocated per thread are dealt with by thread level virtualization, the resources allocated per process need appropriate treatment depending on the current circumstances.
- the k ernel32.dll and the user32.dll files of Windows of the real machine and the virtual machine should be synchronized.
- the virtual machine image includes OS data files. Generally, the OS data take up hundreds of mega bytes.
- the present invention use OS level virtualization so that OS files are not distributed as contained in a virtual machine image, but created directly using the OS of the real machine.
- the virtual machine image to be distributed contains the minimum data required for creating an OS image such as a file list, registry list and values for setting. File and registry data can be copied from the OS of the real machine.
- the data contained in the virtual machine image to be distributed such as a file list, a registry list and values for OS configuration, include all or part of the list existing in a variety of versions of the same OS.
- OS includes a variety of versions such as window 2000, window XP and the window 2003.
- the virtual machine image may include files and registry lists used in all or some versions of windows.
- the size of a virtual machine image file is generally very large.
- a full image file may be downloaded or copied for use. However, if an image is transmitted through streaming, the virtual machine can be used immediately without waiting for the completion of the full image to be downloaded.
- image files are stored in streaming storage and only the required parts are downloaded or copied to the virtual machine for use.
- the streaming storage device may be in the form of a server such as a file server, a web server or a FTP server, or in a form of a movable storage device such as a USB drive or a CD/DVD ROM.
- a fixed storage device such as an ordinary hard disk is also available.
- the disk image can be streamed as set forth below. If a process, a thread or an in- struction within a device driver requests access to a particular file or directory, the virtual kernel execution part dispatches the request to a virtual disk. The virtual disk then calculates the position of the requested file or directory on the virtual disk and, using the result thereof, finds an offset in the disk image file. In response to the request for the offset and the length, the streaming image storage device transmits data equal to the length at the offset on the image file. The virtual disk continues executing using the transmitted data.
- the streaming of the registry image can be achieved by the following procedure.
- a process a thread or an instruction in a device driver requests access to a registry key or a registry value
- the virtual kernel execution part accesses the registry image file to respond to the request.
- the offset and length for accessing the registry image file are calculated and the request is transmitted to the streaming storage.
- the streaming storage processes data at the offset and the length indicated in the registry image file and returns results thereof.
- the virtual kernel execution part continues executions using the transmitted data.
- a virtual disk is a virtual device for emulating a real hard disk with software.
- One virtual machine is connected to one or more virtual image file and a specific sector of the virtual disk is connected to a specific position of an image file. Therefore, requests for reading and writing data for a specific sector of the virtual machine are emulated to reading and writing corresponding data at a specific position of the image file. Requests for controlling partitions and disks are treated in the same manner.
- Using a virtual disk improves the mobility of an image, because multiple files and directories in a virtual machine exist in the real machine in a form of one disk image file. Encryption of an image file improves security because other users need to know the password to use the virtual machine.
- Each disk is given a drive name according to OS.
- disks of window OS are given drive names such as C: or D:.
- a virtual disk also has its own drive name. Though they have the same C: drive, the C: drive of the virtual machine indicates the virtual disk and the C: drive of the real machine indicates the physical disk.
- the virtual machine disk image presents a light option for low capacity.
- OS requires storage space over a hundred mega bytes.
- a disk image may include all files.
- a vacant image or an image containing only a file list can be distributed and the contents of the files can be supplied from the OS of the real machine.
- the OS can be set as drive O: and the application program can be set as drive P: to manufacture and distribute virtual disk images.
- the virtual machine image comprises an OS image layer, an application template image layer, a user data image layer and a temporary data image layer.
- the temporary data stored in the temporary data image layer are generated in the virtual machine execution and may be deleted when a problem has occurred in the virtual machine.
- the user data comprises all sorts of document files, user- signified files, software files and registries installed and generated by the user and stored in the user data image layer.
- the application template image is created through exporting the virtual machine image. This image is not changed during the execution of the virtual machine.
- the virtual OS template image includes files and registries of the virtual OS and is not changed during the execution of the virtual machine
- the virtual OS, application template, user data and temporary data are layered.
- a file system stacks virtual OS files, application template files, user data files and temporary data files.
- an application requests c: ⁇ myfile.txt
- the file is looked up in the temporary data. If it does not exist in the temporary data, it is looked up in the user data. If it does not exist there, it is looked up in the application data. If it does not exist there, it is looked up in the virtual OS files. Looking up a registry is conducted in the same manner.
- a user has to boot OS in order to use it.
- the OS booting proceeds steps of initializing all devices, delayed updating, and executing system process, service process and OS applications.
- the virtual machine also boots the OS in the virtual machine in the same manner.
- each virtual machine steps the booting procedure.
- Booting can start by calling the booting start point of the corresponding OS from the virtual kernel.
- the booting start point is recalled within the virtual kernel proceeds to boot in the same manner as the booting process of OS.
- initializing physical devices is omitted but initializing virtual devices is additionally required.
- the delayed updating means that a resource, such as a file or the like, cannot be deleted or updated if the resource is in use, and the resource is generally deleted or updated in the next booting process after the system is turned off.
- the virtual machine booting should also deal with the delayed updating within the virtual machine.
- the system process is an essential for providing the OS environment, which is in charge of management of user account, logon processing, session management, service management.
- the window OS of Microsoft, Inc. has system processes such as lsass.exe, winlogon.exe, smss.exe and the like.
- the service process such as DCOM/RPC service, printer spooler service and the like is executed in background to support functions of other applications.
- the system process or the service process may execute all the processes within the virtual machine, or share the processes that are already being executed in the host OS or other virtual machines in order to utilize the overall system resources efficiently.
- the account management system process if it is executed for each virtual machine, independent accounts are generated for each virtual machine.
- each guest OS can share account information such as the ID and password of the host OS.
- the access for all the global objects existing in the process should be mapped into the objects of the shared process.
- the user needs to shutdown OS for closing.
- the OS shutdown is generally split into application close, device driver close, service process close, system process close and the like.
- the virtual machine should also close the OS in the virtual machine. The shutdown of the virtual OS follows the shutdown of the real OS but does not turn off the real devices.
- a user can use the virtual machine just as he would use a real OS.
- the virtual machine supports a switch mode display and a seamless mode display.
- On the switch mode each virtual machine has an independent display.
- the switch mode requires him to switch the screen using a shortened key or a command in the menu.
- the seamless mode a program of the real machine and a program of the virtual machine can be displayed on a screen at the same time.
- a file operation performed in the virtual machine is stored in the virtual disk image and a registry operation performed in the virtual machine is stored in the virtual registry image.
- the mobility, distribution and sharing of the virtual machine image are attained by exporting image files.
- the simplest way of exporting is to simply copy the image file.
- the preferable way of exporting is reducing the size of the image file by decreasing any redundancy in the image file. The redundancy is unnecessary in- formation that may include temporary files, authority information, unshared files and registries of OS elements.
- An even more preferable way is to package a virtual machine image for further efficient sharing. This is achieved by setting up authority regarding each file, directory, device and registry in an image file, adding license information for OS or installed applications, and adding information for available OS version and required libraries.
- the present invention allows a PC environment to escape from the limitations of the physical hardware. It removes the restriction that a PC environment established on a physical PC cannot transfer from the physical PC to another device. Additionally, the present invention overcomes the limitation that the software should be only be used together with the hardware as an organic whole. Users can create their own unique movable PC software environment by attaching it to and detaching it from PC hardware, thereby the mobility is attainable.
- Figure 1 is a view schematically showing the OS level virtualization according to a preferable embodiment of the present invention.
- Figure 2 is a view schematically showing the layered data according to a preferable embodiment of the present invention.
- Figure 3 is a view schematically showing the operation of the layered kernel according to a preferable embodiment of the present invention.
- Figure 4 is a view schematically showing the routine for executing the virtual machine image according to a preferable embodiment of the present invention. Best Mode for Carrying Out the Invention
- the virtual machine template image is the image of the virtual OS divided by OS level virtualization, which may have only the OS, or may be an image imported from other PC.
- the user can install programs and set required items to embody their own PC environment within the generated virtual machine.
- the booted virtual machine can be exported in the form of a virtual machine template image.
- the exported image is stored first and always usable.
- the image can be moved to any other PC using a movable disk or by online transmission.
- the moved image can be exported to the other PC by executing the basic routine and then used as a new virtual machine.
- the mobility of PC environment is realized.
- the present invention can provide a variety of conveniences for PC users.
- the individual PC environment can be moved to other PCs at home, school, and office or somewhere in a foreign country, using a portable disk or via network.
- Users who share a single PC may execute the basic routine to create and store a unique virtual machine image for each user. Whenever a user needs to use the PC, he executes the basic routine to access his virtual machine image. Thus sharing is realized.
- VMl is used for secure electronic commercial transactions or Internet banking.
- VM2 is used for secure dealing with secret information of a company.
- VM3 is used for web surfing without security while the PC is exposed to danger of viruses or hacking.
- the present invention provides a new method for the distribution of software.
- a distributor of software may execute the basic routine using a virtual machine template image in which an OS is installed without any application. Then the distributor may sell a virtual machine image which is generated by exporting the virtual machine in which a product to be distributed has been installed. A consumer would purchase the image and only execute the basic routine in his PC to use the software immediately.
- the consumer can order multiple software packages from the distributor by giving a written order that includes a list of software and configuration thereof.
- the distributor may create a virtual machine image according to the order and transmit it to the buyer.
- the distributor may prepare in advance various kinds of virtual machine images that are in the form of a package.
- the packages may include a bundle of frequently sold software.
- a server can be prepared to receive an order and create a virtual machine image in response to the order.
- the created image can be stored for reuse.
- PC environments can be provided to members quickly.
- the manager executes the basic routine in a PC and installs all required software in the virtual machine. Then, he exports the image and keeps it stored.
- the manager gives the image to the staff member and executes the basic routine in the staff member's PC.
- the business environment can be quickly prepared. An image may be created for each group according to their needs.
- the present invention is also applicable for managers who are in charge of a large number of PCs, such as in Internet cafes or IT educational centers.
- a customer may use a PC through a virtual machine created by executing the basic routine with respect to the pre-stored image. In the case of a problem occurring in a PC, the PC may be immediately initialized using the original image.
- executing the basic routine for the virtual machine image in which the specific software is already installed can satisfy the customer's request.
Landscapes
- Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computer Hardware Design (AREA)
- Human Computer Interaction (AREA)
- Computer Security & Cryptography (AREA)
- Mathematical Physics (AREA)
- Quality & Reliability (AREA)
- Stored Programmes (AREA)
- Computer And Data Communications (AREA)
- Storage Device Security (AREA)
Abstract
The present invention provides the movable virtual machine image using the OS level virtualization and the method for creating and utilizing the movable virtual machine image. The movable virtual machine image is independent of the hardware of PCs and easy to attach or detach from the OS, thereby presents easy and quick moving, distributing, sharing and initializing.
Description
Description MOVABLE VIRTUAL MACHINE IMAGE
Technical Field
[1] The present invention relates to the virtual machine and more specifically, relates to movable personal computer environments created by the operating system level virtu- alization. Background Art
[2] Recently, personal computer technology has been developing very rapidly. A large number of people spend most of their days with PCs(Personal Computers). Various application products, such as word processors and spreadsheets, have ensured that they will use at least one PC in their work environment. The development of multimedia technology has spawned entertainment industries based on the PC's growth. In particular, the growing popularity of the Internet has played an important role in increasing human dependence on PCs. There is a growing tendency for modern people to depend on PCs in their everyday life. Some cannot imagine life without them.
[3] The personal computing environment has been developing toward requiring less computer knowledge. In the 1980's, PCs required users to directly input commands defined by OS (operating systems) in order for the computer to work. Therefore a user who was not proficient in the command language could not utilize the computer. Furthermore, the user had to input specifications about each piece of hardware in order for the computer to recognize and operate the hardware.
[4] In the 90's, GUI(Graphic User Interface) technology progressed so that a users could transmit commands to computers intuitively and visually. The OS were developed with the ability to identify hardware by itself so that the user required less knowledge about computers.
[5] Today however, using PCs still requires a great deal of complicated knowledge.
Ordinary people who are not familiar with some aspects of PCs, including the knowledge of operating systems and the installation and setting of applications, find them incomprehensible. This insures that only experts are able to PCs for some functions. Even though various kinds of technology, such as GUI are spreading, ordinary people still have difficulty installing and setting up applications. Additionally, all sorts of viruses and malignant programs make it difficult for people to use PCs easily.
[6] If the PC is to be a more popular home appliance, in line with the television set or a refrigerator, computers need to be much easier to use than they currently are. In the case of a television set, all a user needs to master is the relatively simple remote
control. Computer operation needs to be simplified so that they can be used just as easily.
[7] PCs of today are faced with some new demands. Some of these demands include that
PC environments should be moved easily and quickly, that software should be distributed easily, that a PC should be able to be shared through a new scheme while guaranteeing independent user environments, and that a PC should be able to be restored back to the initial status that the user had defined whenever the user wishes to do this.
[8] The first issue is concerning the mobility of a PC environment. A PC has its own environment for each user; this is different from other home appliances. There is large a variety of hardware combinations. Furthermore, though the same hardware set and operating system are used, the desktop environment and the application programs can be diverse. This can result in the following problems.
[9] For example, a person uses PCs at home and at the office. The PC at home and the
PC at the office have different PC environments. Therefore, in order to make things easier, the user should make his PC environment at home the same as that at the office. He must install all required software and arrange all options for the best surroundings to aid in his work. In case the user has to use a computer on business trips, he has to adjust the PC environment at the destination of the business trip. In order to save the trouble, lap top computers are available. However, lap top computers are relatively expensive and heavy and this may be a large burden.
[10] The second issue, concerning the distribution of software, a person who bought new software through downloading or physical media must install the software to his PC. While the process of installation is relatively simple, many people still have difficulty. Occasionally, when an internal or external problem occurs, the user has the inconvenience of having to reinstall the software.
[11] In office surroundings, PC environments are generally grouped together. A group can be made to use the same software. Teams or positions may be the organizing factor for groups. A PC manager takes the responsibility of setting up the PC environment including all the required software for each group. However, dealing with the needs of each staff member one by one is very inefficient and takes a lot of time. If the PC environments are prepared in a storage device in advance and can be set up quickly, this will be advantageous whenever positions are rearranged, whenever a new employee enters the company or whenever the list of software required for business changes. Ultimately, everyone should be able to set up their own PC environment easily without the need of a PC manager.
[12] The third issue is concerning the sharing of PCs. Suppose that two users share a PC.
Each user wants their own PC environment so that it is optimal for their use.
Sometimes, one user makes a mistake and exposes the PC to a computer virus. This can cause all users to suffer damages. This can results in the need to purchase another PC.
[13] The final issue is in regard to the initializing of the PC environment. Modern PCs are constantly exposed to viruses and malignant codes. Consequently, a PC may be paralyzed as time goes by. Sometimes, the user happens to make a mistake himself and paralyzes his PC. In these cases, a professional PC analyzer must diagnose and treat the source of the trouble. Otherwise, the user has no choice but to format the hard disk and reinstall all required software and then set the desktop environment again. This is the chief obstacle to PC use. In order to utilize a PC easily and conveniently like other ordinary home appliances, users should be able to restore their PCs to the initial clean PC environment with only a couple of mouse-clicks and without professional support.
[14] The more our dependency on PCs deepens, the more we need to use our own PC environments anywhere and at anytime. However, the only solution we have is to use additional hardware like lap top computers.
[15] Currently, studies on virtual machines are in progress. The concept of the virtual machine was first introduced in 1960s to divide a mainframe multiple machines virtually in order for multiple users share the mainframe. However, as the price of microcomputers or PCs became lower, purchasing multiple PCs is more advantageous than sharing a mainframe. Therefore, the virtual machine technique was scarcely used in 1980s. However, in 1990s, using multiple small-capacity computers increased management and maintenance costs. Additionally, efficient use of computing resources has become an issue (for example, occasionally, server A uses the CPU 10%, whereas server B uses the CPU as much as 99%), and thus the virtualization technique attracts attention again. However, while a virtualization technique for efficiently managing resources of a large-scale server is in the mainstream, studies on a virtualization technique for a client system are insufficient as of yet.
[16] The virtual machine of the present invention is used to provide mobility, distribution, sharing and initializing of PC environments with ease.
[17] The methods of implementing virtual machines today are diverse. Some of the methods include hardware level virtualization, application level virtualization, operating system level virtualization, and the like. The following will explain some details and limitations of the current virtualization technique
[18] Hardware level virtualization
[19] There are two types of hardware level virtualization. One is full virtualization in which the CPU, memory, hard disk, Bios and the like are emulated in software. The other is the para- virtualization in which a device (CPU) supporting hardware level virtualization is utilized.
[20] In the command set level virtualization method, the central processing unit, memory, chipset, bus, and a variety of peripherals (a network card, hard disk, floppy disk, and CD-ROM) are emulated in software to create a virtual machine. In the command set level virtualization method, all commands created in the virtual machine are processed by the software. This can cause many problems in performance, such as the degradation of processing speed.
[21] In the para- virtualization method, the goal is not to emulate a command, similar to the command set level virtualization method, but to modify the source code or the binary code of OS to execute multiple OSes in a machine. In recent years, a CPU that allows multiple OSes to be executed in a single machine, without modifying the OSes, is being developed. In para- virtualization, since the command set is not reanalyzed in the software, processing speed is improved.
[22] The hardware level virtualization provides a standard hardware set and the generated virtual machine image is the PC environment itself. Copying this image accompanies the copying of the installed OS together so that independence and mobility are guaranteed.
[23] On the contrary, the hardware performance is equalized at a low level. For example, even if the real PC has an excellent 3D graphic card, an old-fashioned 2D graphic card operates the virtual PC, if the virtual machine provides a virtual graphic card by emulating the old-fashioned 2D graphic card. This means that a device that is not yet emulated, such as IEEE 1394, cannot be used. However it is actually impossible to emulate all hardware devices launched up to now.
[24] Furthermore, it is difficult to operate multiple virtual machines simultaneously, because the virtual machine created by hardware level virtualization needs all the resources required to operate an independent OS. For example, the window vista requires about IGB RAMs. In order to operate three virtual machines and one real machine normally, at least 4G rams are required.
[25] Furthermore the virtual machine image has a comparatively large size, because all hardware elements need to be emulated. The size of the virtual machine images generated by hardware level virtualization solutions up until today is in units of Giga bytes. This is very inefficient because such generated OS images require a size range from hundreds of mega bytes to tens of Giga bytes even in the case of the distribution of a small application such as notepad.exe.
[26] Also, an additional OS license is needed since the virtual machine needs a new OS.
This requires the user to purchase an additional OS.
[27] The OS environment and all applications installed in the real machine cannot be shared with the virtual machine, because the virtual machine is fully independent of the real machine. There are solutions, for example, the P2V, by which an application
within a real machine can be utilized in the virtual machine by duplication. However, it is still impossible to share an application program.
[28] It is an advantage of hardware level virtualization that an independent OS can be installed in each virtual machine so that it is suitable to Server virtualization such as VPS (Virtual Private Server) and Server integration. It is also suitable to the development and testing of new software.
[29] In conclusion, hardware level virtualization is suitable for server virtualization but not for desktop virtualization for commerce.
[30] Application level virtualization
[31] The application level virtualization method is a method that creates an application in the form of Bytecode. An example of this is the Java Virtual Machine developed by SunMicro Systems, which allows an application to be executed in a variety of heterogeneous hardware and software environments.
[32] In the beginning, application level virtualization products were developed for the purpose of avoiding software collisions. For example, a windows environment includes executable files (.exe) and a shared library (.dll ) The shared libraries are often manufactured by various companies and shared in various software. For example, the shared library, c:\windows\system32\msvcrt.dll is used in A' program manufactured by A company and also used in B' program manufactured by B company. The library, msvcrt.dll can have various versions for the same file name. While the A' program uses msvcrt.dll Ver. 2.0.0.0 in the directory, c:\windows\syste32, the B' program may be installed and msvcrt.dll Ver. 2.0.0.0 may be replaced by msvcrt.dll Ver. 1.0.0.0. This replacement causes a malfunction of the A' program.
[33] Such version collision problems can be avoided by application level virtualization.
This allocates a unique file system storage area for each application so that shared libraries of the same file name are stored in the separated storage areas for each application.
[34] Now, application level virtualization has been progressing to the application streaming technique. With this technique, application data for the application execution, like execution files, shared libraries, registries and the like, are stored in the server, not in the PC. When a user wants to execute the application, the needed data is recalled from the server dynamically. Therefore, the user can utilize the application without installing it in his PC
[35] The advanced techniques of today store the application data in a USB drive. The user can also utilize the application without installation by connecting the USB drive to PC. This technique provides limited mobility of PC environment by enabling an application to be executed in any PC.
[36] However, application level virtualization stores application data separately. This can
resolve the problem of collision in the installation stage but not in the execution stage. For example, when two different anti-virus programs are used at the same time, they will clash with each other and cause abnormal errors. Such collisions in the execution stage cannot be resolved by application level virtualization.
[37] In addition, there are many applications which cannot be virtualized by application level virtualization or which are required to be customized. For example, applications using windows service, kernel module or applications dependent on a particular element of OS. Such dependency of applications inevitably demands an application support list. Therefore, application level virtualization does not provide for the overall PC environment but merely allows a particular application to be used virtually.
[38] OS level virtualization
[39] Finally, the operating system level virtualization method is a method of virtualizing each constitutional element of an operating system (a processor, file system, network resource, system call interface, name space, and the like). Conventional operating system level virtualization methods have been developed mainly for the purpose of server virtualization, such as a Virtual Private Server (VPS). An operating system kernel in a server computer is partitioned and an independent OS environment is provided for each partition.
[40] Conventional server hosting services provide one physical server for each user. This scheme can provide the user with a complete OS space. However, purchasing many real servers requires an initial investment as well as maintenance expenses.
[41] The OS level virtualization makes it possible to create multiple independent virtual
OS in a single real OS. A user is able to independently utilize needed environments in an OS. In addition, it is inexpensive since the user does not need to purchase another physical server.
[42] Additionally, the OS level virtualization method has been used as a method for efficiently providing an independent OS space to a user who needs a multiple OS environment for the purpose of software development and testing. Disclosure of Invention Technical Problem
[43] The present invention provides a new virtualization technique which makes it possible to move PC environments easily and quickly, to distribute software products, to share a physical PC with independency guaranteed, to initialize PC environments easily and conveniently and the like. The new virtualization should provide a computing environment, while not asking PC users to acquire additional knowledge about OS, installing and setting for a program and the like. It will allow the users to utilize the PC with the ease that they utilize other ordinary appliances.
[44] For these purposes, the present invention provides a movable virtual machine image which is independent of the hardware, utilizes most of the OS environment of the PC, is easy to attach or detach from the OS, and presents easy and quick moving, distributing, sharing and initializing. In the present specifications, the term "movable" is used to describe the above-explained features.
[45] Virtualization techniques are currently often used in the fields of server integration, software development and testing, and hosting. However, movable virtual machine image pursued in the present invention has not yet progressed. In addition, as is described above, all current conventional virtualization techniques are not adequate for the objective of the present invention.
[46] In case of using hardware level virtualization, a single virtual machine requires the same memory and hard disk resources as the real machine. It is thus difficult to create multiple virtual machines in a single computer. However, OS level virtualization creates multiple virtual machines in a single computer, because each virtual machine does not require resources to operate its own OS. Therefore, compared with hardware level virtualization, OS level virtualization can operate multiple virtual machines with few resources.
[47] In spite of the advantages of OS level virtualization, it has not been applied to the PC environment. This is because the ability to move a virtual image has not been realized as of yet.
[48] The hardware level virtualization can guarantee the mobility of the virtual machine image, since it creates a virtual image as an independent system including an independent OS. However, OS level virtualization up to now merely splits the OS of the real machine and uses the split OS virtually. It is not able to detach the created virtual machine from the real machine and attach it to another real machine in the form of an image.
[49] This is because dependent functions and resources exist to be shared with the real OS in an OS environment. Each user uses the OS with his preferable system setting, drive name, home directory path and authority and path for file and registry which are different from those of other users. The created virtual machine cannot be executed normally for these various environments.
[50] If it is possible to create and utilize a virtual machine image that guarantees complete mobility while using the OS level virtualization, we will be able to receive all the benefits of the OS level virtualization. This makes it possible to move PC environments as quickly and efficiently as possible. The present invention provides a method for generating a movable virtual machine image using OS level virtualization. Technical Solution
[51] The following is an explanation of the basic concept for OS level virtualization of the present invention. [52] Elements of OS
[53] An OS includes Kernel, Device Driver, System Process, Service Process and the like.
[54] The kernel is the core of the OS. It is the part of the OS that provides multiple basic services to other parts of the OS. The Kernel manages the hardware or resources of the system and abstractizes them. [55] Generally, a kernel includes Kernel Execution Part and HAL (Hardware Abstraction
Layer). [56] Kernel Execution Part takes charge of process and thread management, memory management, object management, security management, inter-process communication management and the like. [57] HAL abstractizes the hardware to make it possible to use it without direct access to the hardware by other applications or elements of kernel. [58] The Device Driver is used to control physical devices, or to execute commands in the kernel level. [59] The System Process is a core process of the OS to be executed under the user mode and takes charge of device driver requests, user login/logoff, security and the like. [60] The Service (daemon) Process is a process that is executed in the background under the user mode and takes charge of all sorts of services such as file sharing service, telnet service, web service, printer service and the like. These kinds of services are executed in the background and supports applications or other elements of the OS in order for them to perform their part. [61] The application process is software, such as the word processor or the windows media player, to provide the user with the functions actually needed and executed in the OS. Generally, we call the OS and applications, software (software = operating system + application). [62] Layered kernel element
[63] Fig. 1 shows a preferred embodiment according to the virtualization of the present invention. [64] An environment with an independent quest OS has virtual kernel, execution space and virtual machine data.
[65] Table 1 shows the general structure of a PC including the OS.
[66] Table 1
[Table 1] [Table ]
[67] The elements of the OS, HAL, Kernl Execution Part, device driver, system process, service and the like are layered.
[68] When an upper layer element requests a specific process from a lower layer element, the lower layer completes the process and then returns the result.
[69] Virtualization, according to the present invention, can be attained by controlling the processing of the lower layer element upon the request from the upper layer element. For example, when the device driver requests the creation of an object from the kernel execution part, the corresponding object is created in a virtual space and the result is returned. When an application requests creation of c:\myfile.txt file, the kernel execution part creates it not in the real disk but in the virtual disk and then the result is returned.
[70] The upper layer element processes all functions in response to the lower layer element. Consequently, the upper layer element can be operated in the virtual machine without any modification, provided that the lower layer element is virtualized.
[71] Using the present invention, the lowest layer elements of the OS, HAL and Kernel execution part, are virtualized. Consequently, the upper layers, such as the device driver, the system process, the service process or applications, can be executed in virtual space without any modification.
[72] The following is as explanation of the movable OS of the present invention.
[73] Generation of Virtual Kernel
[74] The kernel execution part layer can virtualize the kernel by dispatching the requests from the upper layer into the real space or one or more virtual spaces. A request for a thread or process that belongs to the real machine is dispatched to the real space and the request for a thread or process that belongs to the virtual machine is dispatched to the virtual space. Executing in the virtual machine means that a request to the kernel execution part is dispatched.
[75] Fig. 3 shows that requests from an upper layer are dispatched to virtual space or real space through the kernel execution part.
[76] The kernel execution part can be virtualized by means of the virtualization of the name spaces such as files, registries or objects, the virtualization of processes and threads, and the virtualization of memories.
[77] The following will explain how to realize the virtualization for the name space.
[78] The file, registry, kernel object and so on are the kernel elements that have names.
For example, a file has a name such as \Device\HarddiskVolumel\myfile.txt, and a registry has a name such as \Registry\Machine\Software\mykey, a kernel object has a name such as \BaseNamedObjects\myobject.
[79] These names are managed in the name space. When a specific kernel object is opened, the kernel execution part checks whether the corresponding object exists in the name space. When a specific kernel object is created, the kernel execution part, checks whether there are duplicated objects in the name space. If the kernel object is created, the object name is recorded in the name space. Each virtual machine has a unique name space. For example, in case of the virtual machine, VMl, the request for said file, \Device\HarddiskVolumel\myfile.txt is dispatched to
WMl\Device\HarddiskVolumel\myfile.txt. The request for said registry, registry \Registry\Machine\Software\mykey, is dispatched to \Registry\VMl\Machine\Software \mykey. The request for the object, \BaseNamedObjects\my object, is dispatched to \VMl\BaseNamedObjects\myobject. As a matter of course, the name to be dispatched may conform to an optional rule. Thus, the virtualization for the name space is realized by bestowing an independent name space for each virtual machine.
[80] The following will explain how to realize the virtualization for the process and the thread.
[81] In regard to an OS, a thread is the minimal unit for execution and a process is a set of threads that shares a memory address. A request for generating a process or a thread is transferred to the kernel execution part. If a mother process that requests to generate a son process is within a particular virtual machine, the kernel execution part generates the son process within that particular virtual machine. If a process that requests the generation of a thread is within a particular virtual machine, the kernel execution part generates the thread within that particular virtual machine. Generally, these are enough for the virtualization of the process and the thread, because a process is the basic unit of OS level virtualization.
[82] In the present invention, however, the minimal unit of virtualization is the thread, not process. This is because the virtual machine does not generate some OS processes but shares the processes of the real machine to embody an efficient OS level virtualization.
In this case, regarding a single process, the specified thread should be executed in the real machine and the specified thread should also be executed in the specified virtual machine. If the kernel execution part is asked to generate a thread, and if the mother thread that asked for the generated thread is within the virtual machine, the generated thread is also executed in the virtual space.
[83] Mapping of virtual machine image
[84] Even if different machines have the same kind of OS, they will have different user authority and system settings for each system. Therefore, in order to move a virtual machine image used in one virtual machine to another virtual machine, it is required that the virtual machine image be mapped. The mapping includes the mapping of authority, the mapping of environmental variables and their settings, resources shared between the virtual machine and the real machine and the like. There are two ways to achieve these mappings, one is converting the virtual machine image to conform to the real machine and the other is registering the setting of the specific image to the kernel execution part. Each or both of these two methods can be used.
[85] Details of mapping of authority are explained below.
[86] A multi-user OS provides an access control function for each user to give them the authority to use for each file, registry and device. Usually, a virtual machine image does not have authority information or the authority of the user at the time the image is generated. In case that such authority is not available to other OS, booting may be discontinued. Therefore, the authority mapping is indispensable for importing images.
[87] When the virtual machine image is modified to the real machine, the authority settings for files, directories, registries and devices in the image are adapted to the values of the OS environment of the real machine or default values of the OS. As a matter of course, the authority mapping can be omitted in the case of files, directories, registries and devices that do not need the access control for use or do not cause problems even though the access control is not established.
[88] According to the method of registering to kernel execution part, the corresponding account itself is registered in the virtual kernel execution part.
[89] In regard to the mapping of environmental variables and configurations, the environmental variable and configuration for the real machine is recorded on the basis of the drive path of the real machine. The virtual disk drive name in which a virtual machine OS is installed may be different from the drive name of the physical disk in which a real OS is installed. Therefore, part of the environmental variable and configuration that need mapping should be newly mapped.
[90] The following explains the mapping of shared resources.
[91] Some elements of the OS, such as system process and service process, are shared between the real machine and the virtual machine. The resources used in those
processes are also shared. While the resources allocated per thread are dealt with by thread level virtualization, the resources allocated per process need appropriate treatment depending on the current circumstances. In the case of Windows, the k ernel32.dll and the user32.dll files of Windows of the real machine and the virtual machine should be synchronized.
[92] Generating virtual machine OS images by the Stand Alone method
[93] The virtual machine image includes OS data files. Generally, the OS data take up hundreds of mega bytes. The present invention use OS level virtualization so that OS files are not distributed as contained in a virtual machine image, but created directly using the OS of the real machine. The virtual machine image to be distributed contains the minimum data required for creating an OS image such as a file list, registry list and values for setting. File and registry data can be copied from the OS of the real machine.
[94] The data contained in the virtual machine image to be distributed, such as a file list, a registry list and values for OS configuration, include all or part of the list existing in a variety of versions of the same OS. For example, Windows includes a variety of versions such as window 2000, window XP and the window 2003. The virtual machine image may include files and registry lists used in all or some versions of windows.
[95] In the image mapping stage, only items in the OS of the real machine among the list are recorded for use. Thereafter, file and registry data are copied from the OS of the real machine to the virtual machine image. The copying may be performed in the image mapping stage or performed when the files and registries are actually used in the virtual machine execution stage.
[96] For compatibility with DOS, Windows supports both the short file name SFN and the long file name LFN. When a file is copied, the LFN is not changed. However, the SFN may be changed from the real OS to the generated virtual image. Therefore, the SFNs should be corrected by force to be equal after copying. The file name recorded at a registry should also be corrected.
[97] Image transmitting with streaming
[98] The size of a virtual machine image file is generally very large. A full image file may be downloaded or copied for use. However, if an image is transmitted through streaming, the virtual machine can be used immediately without waiting for the completion of the full image to be downloaded. Using the streaming method, image files are stored in streaming storage and only the required parts are downloaded or copied to the virtual machine for use. The streaming storage device may be in the form of a server such as a file server, a web server or a FTP server, or in a form of a movable storage device such as a USB drive or a CD/DVD ROM. A fixed storage device such as an ordinary hard disk is also available.
[99] The disk image can be streamed as set forth below. If a process, a thread or an in-
struction within a device driver requests access to a particular file or directory, the virtual kernel execution part dispatches the request to a virtual disk. The virtual disk then calculates the position of the requested file or directory on the virtual disk and, using the result thereof, finds an offset in the disk image file. In response to the request for the offset and the length, the streaming image storage device transmits data equal to the length at the offset on the image file. The virtual disk continues executing using the transmitted data.
[100] The streaming of the registry image can be achieved by the following procedure. When a process, a thread or an instruction in a device driver requests access to a registry key or a registry value, the virtual kernel execution part accesses the registry image file to respond to the request. At this time, the offset and length for accessing the registry image file are calculated and the request is transmitted to the streaming storage. The streaming storage processes data at the offset and the length indicated in the registry image file and returns results thereof. The virtual kernel execution part continues executions using the transmitted data.
[101] Image loading through virtual disk
[102] A virtual disk is a virtual device for emulating a real hard disk with software. One virtual machine is connected to one or more virtual image file and a specific sector of the virtual disk is connected to a specific position of an image file. Therefore, requests for reading and writing data for a specific sector of the virtual machine are emulated to reading and writing corresponding data at a specific position of the image file. Requests for controlling partitions and disks are treated in the same manner. Using a virtual disk improves the mobility of an image, because multiple files and directories in a virtual machine exist in the real machine in a form of one disk image file. Encryption of an image file improves security because other users need to know the password to use the virtual machine. Each disk is given a drive name according to OS. For example, disks of window OS are given drive names such as C: or D:. A virtual disk also has its own drive name. Though they have the same C: drive, the C: drive of the virtual machine indicates the virtual disk and the C: drive of the real machine indicates the physical disk.
[103] In the present invention, the virtual machine disk image presents a light option for low capacity. Generally, OS requires storage space over a hundred mega bytes. A disk image may include all files. In order to guarantee efficient mobility, a vacant image or an image containing only a file list can be distributed and the contents of the files can be supplied from the OS of the real machine. In order to minimize collision with the real machine, the OS can be set as drive O: and the application program can be set as drive P: to manufacture and distribute virtual disk images.
[104] Layered virtual machine image
[105] When the virtual machine image is provided with a layered structure, not with a single file, the required image file can be inserted during use of the virtual machine. If a problem occurs in the virtual machine, the image files with the problem only need to be replaced. This is the advantage of layered structure. The virtual machine image comprises an OS image layer, an application template image layer, a user data image layer and a temporary data image layer. The temporary data stored in the temporary data image layer are generated in the virtual machine execution and may be deleted when a problem has occurred in the virtual machine. The user data comprises all sorts of document files, user- signified files, software files and registries installed and generated by the user and stored in the user data image layer. The application template image is created through exporting the virtual machine image. This image is not changed during the execution of the virtual machine. The virtual OS template image includes files and registries of the virtual OS and is not changed during the execution of the virtual machine
[106] As shown in Fig. 2, the virtual OS, application template, user data and temporary data are layered. For example, a file system stacks virtual OS files, application template files, user data files and temporary data files. When an application requests c:\myfile.txt, the file is looked up in the temporary data. If it does not exist in the temporary data, it is looked up in the user data. If it does not exist there, it is looked up in the application data. If it does not exist there, it is looked up in the virtual OS files. Looking up a registry is conducted in the same manner.
[107] Booting of virtual OS
[108] A user has to boot OS in order to use it. The OS booting proceeds steps of initializing all devices, delayed updating, and executing system process, service process and OS applications. The virtual machine also boots the OS in the virtual machine in the same manner. In the case of OS level virtualization, each virtual machine steps the booting procedure. After the realization of reinforcement for the process, thread and name space in the kernel execution part layer, Booting can start by calling the booting start point of the corresponding OS from the virtual kernel. The booting start point is recalled within the virtual kernel proceeds to boot in the same manner as the booting process of OS. In booting of a virtual machine, initializing physical devices is omitted but initializing virtual devices is additionally required. The delayed updating means that a resource, such as a file or the like, cannot be deleted or updated if the resource is in use, and the resource is generally deleted or updated in the next booting process after the system is turned off. The virtual machine booting should also deal with the delayed updating within the virtual machine.
[109] The system process is an essential for providing the OS environment, which is in charge of management of user account, logon processing, session management, service
management. For example, the window OS of Microsoft, Inc. has system processes such as lsass.exe, winlogon.exe, smss.exe and the like. The service process such as DCOM/RPC service, printer spooler service and the like is executed in background to support functions of other applications.
[110] The system process or the service process may execute all the processes within the virtual machine, or share the processes that are already being executed in the host OS or other virtual machines in order to utilize the overall system resources efficiently. In the case of the account management system process, if it is executed for each virtual machine, independent accounts are generated for each virtual machine. However, sharing the process of the host OS, each guest OS can share account information such as the ID and password of the host OS. To share the system process or the service process, the access for all the global objects existing in the process should be mapped into the objects of the shared process. In case of the printer spooler service process, there is a naming pipe for controlling printers. When the notepad process in the guest OS requests to print a document, it is tried to access the naming pipe of the spooler service in the guest OS. However, the request needs to be mapped into the spooler service of the host OS because there is no spooler service in the guest OS and that of the host OS is shared.
[I l l] The user needs to shutdown OS for closing. The OS shutdown is generally split into application close, device driver close, service process close, system process close and the like. The virtual machine should also close the OS in the virtual machine. The shutdown of the virtual OS follows the shutdown of the real OS but does not turn off the real devices.
[112] Use of virtual OS
[113] After booting a virtual machine, a user can use the virtual machine just as he would use a real OS. The virtual machine supports a switch mode display and a seamless mode display. On the switch mode, each virtual machine has an independent display. When the user on one virtual machine wants to access another virtual machine or the real machine, the switch mode requires him to switch the screen using a shortened key or a command in the menu. In the seamless mode, a program of the real machine and a program of the virtual machine can be displayed on a screen at the same time.
[114] Exporting a virtual machine image
[115] A file operation performed in the virtual machine is stored in the virtual disk image and a registry operation performed in the virtual machine is stored in the virtual registry image. The mobility, distribution and sharing of the virtual machine image are attained by exporting image files. The simplest way of exporting is to simply copy the image file. The preferable way of exporting is reducing the size of the image file by decreasing any redundancy in the image file. The redundancy is unnecessary in-
formation that may include temporary files, authority information, unshared files and registries of OS elements. An even more preferable way is to package a virtual machine image for further efficient sharing. This is achieved by setting up authority regarding each file, directory, device and registry in an image file, adding license information for OS or installed applications, and adding information for available OS version and required libraries.
Advantageous Effects
[116] The present invention allows a PC environment to escape from the limitations of the physical hardware. It removes the restriction that a PC environment established on a physical PC cannot transfer from the physical PC to another device. Additionally, the present invention overcomes the limitation that the software should be only be used together with the hardware as an organic whole. Users can create their own unique movable PC software environment by attaching it to and detaching it from PC hardware, thereby the mobility is attainable.
[117] With the present invention, a user who is not familiar with PCs needs no additional knowledge about how to install programs and how to set up configuration of programs. Once a program work environment is set optimally, it can be copied and utilized easily and quickly at all times. The present invention replaces the concepts of installing and uninstalling by the concepts of copying and deleting. Once the virtual machine image is created and stored, the image can be utilized easily and quickly using the image cache and movable drives or file storage server.
[118] Even a professional PC user will be able to utilize PCs more efficiently because he can quickly copy and delete programs. Brief Description of the Drawings
[119] Figure 1 is a view schematically showing the OS level virtualization according to a preferable embodiment of the present invention.
[120] Figure 2 is a view schematically showing the layered data according to a preferable embodiment of the present invention.
[121] Figure 3 is a view schematically showing the operation of the layered kernel according to a preferable embodiment of the present invention.
[122] Figure 4 is a view schematically showing the routine for executing the virtual machine image according to a preferable embodiment of the present invention. Best Mode for Carrying Out the Invention
[123] As shown in Fig. 4, the present invention performs the "basic routine" as set forth below.
[124] 1. To map a virtual machine template image including a first OS into a second OS of a real machine
[125] 2. To boot the virtual machine using the image.
[126] The virtual machine template image is the image of the virtual OS divided by OS level virtualization, which may have only the OS, or may be an image imported from other PC.
[127] In the booted virtual machine, the user can install programs and set required items to embody their own PC environment within the generated virtual machine. The booted virtual machine can be exported in the form of a virtual machine template image.
[128] The exported image is stored first and always usable. The image can be moved to any other PC using a movable disk or by online transmission. The moved image can be exported to the other PC by executing the basic routine and then used as a new virtual machine. Thus, the mobility of PC environment is realized. Mode for the Invention
[129] The present invention can provide a variety of conveniences for PC users.
[130] The individual PC environment can be moved to other PCs at home, school, and office or somewhere in a foreign country, using a portable disk or via network.
[131] Users who share a single PC may execute the basic routine to create and store a unique virtual machine image for each user. Whenever a user needs to use the PC, he executes the basic routine to access his virtual machine image. Thus sharing is realized.
[132] It is also possible for a user to create multiple virtual machine images and utilize them according to their own purposes. For example, VMl is used for secure electronic commercial transactions or Internet banking. VM2 is used for secure dealing with secret information of a company. VM3 is used for web surfing without security while the PC is exposed to danger of viruses or hacking.
[133] A user who initializes a PC frequently needs to execute the basic routine to make an image set for his own initial PC environment. They must then export the image for saving. After doing this the first time, whenever he wants to initialize, he can import the image to execute the basic routine and thus the initialization is easily achieved. Even an ordinary person with little knowledge of PCs can resolve problems in his PC after learning how to execute the basic routine and how to import and export a virtual machine image. Their actions are easily done by only a couple of clicks of a mouse.
[134] The present invention provides a new method for the distribution of software. A distributor of software may execute the basic routine using a virtual machine template image in which an OS is installed without any application. Then the distributor may sell a virtual machine image which is generated by exporting the virtual machine in which a product to be distributed has been installed. A consumer would purchase the image and only execute the basic routine in his PC to use the software immediately.
[135] The consumer can order multiple software packages from the distributor by giving a written order that includes a list of software and configuration thereof. The distributor may create a virtual machine image according to the order and transmit it to the buyer. The distributor may prepare in advance various kinds of virtual machine images that are in the form of a package. The packages may include a bundle of frequently sold software.
[136] Sales and distribution online is also possible. A server can be prepared to receive an order and create a virtual machine image in response to the order. The created image can be stored for reuse.
[137] In a private or public enterprise, PC environments can be provided to members quickly. The manager executes the basic routine in a PC and installs all required software in the virtual machine. Then, he exports the image and keeps it stored. When a staff member needs the corresponding PC environment, the manager gives the image to the staff member and executes the basic routine in the staff member's PC. The business environment can be quickly prepared. An image may be created for each group according to their needs.
[138] The present invention is also applicable for managers who are in charge of a large number of PCs, such as in Internet cafes or IT educational centers. A customer may use a PC through a virtual machine created by executing the basic routine with respect to the pre-stored image. In the case of a problem occurring in a PC, the PC may be immediately initialized using the original image. In addition, when a customer asks to use specific software, executing the basic routine for the virtual machine image in which the specific software is already installed can satisfy the customer's request.
[139] Although the present invention has been described with reference to several preferred functions, the description is illustrative of the invention and is not to be construed as the limitation of the invention's ability. Various modifications and variations may occur to those skilled in the art, without departing from the scope of the invention as defined by the appended claims.
Claims
[1] A method for executing a virtual machine image including an operating system, the method comprising the steps of: mapping a virtual machine template image to an operating system, and booting the virtual machine using the mapped image.
[2] The method according to claim 1, further comprising: creating a virtual disk, and loading the virtual disk with the adaptively converted image.
[3] The method according to claim 1, wherein the mapping comprising at least one of authority mapping, environmental variable mapping, operating system configuration mapping, drive mapping and shared resource mapping.
[4] The method according to claim 1, wherein the mapping comprising stand alone mapping, the stand alone mapping comprising the steps of: writing items only present on the operating system of the real machine among the list of all versions of the operating system file and registry provided in the virtual machine image, and copying the file and registry contents or recording to copy them from the operating system of the real machine to the virtual machine image.
[5] The method according to claim 1, further comprising exporting the executed virtual machine image.
[6] The method according to claim 1, further comprising importing a virtual machine image before the mapping.
[7] The method according to claim 1, the booting comprising: creating a virtual kernel in the kernel execution part, and loading at least some of virtual device drivers, virtual services and virtual system processes.
[8] The method according to claim 7, wherein at least some of virtual device drivers, virtual services and virtual system processes are shared with the real machine the remainder are not shared with the real machine.
[9] The method according to claim 7, wherein the creating a virtual kernel in the kernel execution part is performed at least by thread level virtualization.
[10] A method for distributing software, wherein at least a server is provided for distributing software, the server being able to communicate with at least one client through computer network, the method comprising: receiving a request from client to distribute a software, creating a virtual machine image wherein the requested software is installed thereto, and
transmitting the created virtual machine image.
[11] The method according to claim 10, wherein the request including predetermination for at least one or more programs to be installed, configuration of the programs and elements of each program.
[12] The method according to claim 10, further comprising storing the virtual machine image provided to the client on a server or an exterior storage area, whereby the virtual machine image being capable of re-transmitting to the client.
[13] A method for transmitting a virtual machine image, wherein at least a server is provided for distributing software, the server being able to communicate with at least one client through a computer network, the method comprising: receiving the configuration of the computer environment requested by the client, creating a virtual machine image according to the received configuration, and transmitting the created virtual machine image in response to the client, wherein the configuration includes a list of software and/or the configuration of an operating system.
Priority Applications (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2009554449A JP2010522370A (en) | 2007-03-20 | 2008-03-20 | Mobile virtual machine image |
EP08723604A EP2137629A4 (en) | 2007-03-20 | 2008-03-20 | Movable virtual machine image |
CN2008800088354A CN101636722B (en) | 2007-03-20 | 2008-03-20 | Movable virtual machine image |
US12/531,963 US20100107163A1 (en) | 2007-03-20 | 2008-03-20 | Movable virtual machine image |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
KR20070027161 | 2007-03-20 | ||
KR10-2007-0027161 | 2007-03-20 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2008115012A1 true WO2008115012A1 (en) | 2008-09-25 |
Family
ID=39766073
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/KR2008/001567 WO2008115012A1 (en) | 2007-03-20 | 2008-03-20 | Movable virtual machine image |
Country Status (6)
Country | Link |
---|---|
US (1) | US20100107163A1 (en) |
EP (1) | EP2137629A4 (en) |
JP (1) | JP2010522370A (en) |
KR (5) | KR20080085780A (en) |
CN (1) | CN101636722B (en) |
WO (1) | WO2008115012A1 (en) |
Cited By (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2010205267A (en) * | 2009-03-03 | 2010-09-16 | Symantec Corp | Method and system for unifying virtualized sublayers |
US8595511B2 (en) | 2011-06-29 | 2013-11-26 | International Business Machines Corporation | Securely managing the execution of screen rendering instructions in a host operating system and virtual machine |
US8996667B2 (en) | 2010-04-27 | 2015-03-31 | International Business Machines Corporation | Deploying an operating system |
US9052918B2 (en) | 2010-12-14 | 2015-06-09 | International Business Machines Corporation | Management of multiple software images with shared memory blocks |
US9058235B2 (en) | 2010-12-13 | 2015-06-16 | International Business Machines Corporation | Upgrade of software images based on streaming technique |
US9086892B2 (en) | 2010-11-23 | 2015-07-21 | International Business Machines Corporation | Direct migration of software images with streaming technique |
US9230118B2 (en) | 2010-12-09 | 2016-01-05 | International Business Machines Corporation | Encrypting and decrypting a virtual disc |
US11461465B1 (en) * | 2019-05-24 | 2022-10-04 | Trend Micro Inc. | Protection of kernel extension in a computer |
Families Citing this family (99)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8726294B2 (en) | 2010-10-01 | 2014-05-13 | Z124 | Cross-environment communication using application space API |
US20130024778A1 (en) | 2011-07-13 | 2013-01-24 | Z124 | Dynamic cross-environment application configuration/orientation |
US9047102B2 (en) | 2010-10-01 | 2015-06-02 | Z124 | Instant remote rendering |
US8966379B2 (en) | 2010-10-01 | 2015-02-24 | Z124 | Dynamic cross-environment application configuration/orientation in an active user environment |
US8819705B2 (en) | 2010-10-01 | 2014-08-26 | Z124 | User interaction support across cross-environment applications |
US20130024812A1 (en) | 2011-07-13 | 2013-01-24 | Z124 | Foreground/background assortment of hidden windows |
US8933949B2 (en) | 2010-10-01 | 2015-01-13 | Z124 | User interaction across cross-environment applications through an extended graphics context |
US8527892B2 (en) | 2010-10-01 | 2013-09-03 | Z124 | Method and system for performing drag and drop operations on a device via user gestures |
US8266616B1 (en) * | 2006-05-11 | 2012-09-11 | Hewlett-Packard Development Company, L.P. | Computer system provisioning using templates |
US8776038B2 (en) * | 2008-08-07 | 2014-07-08 | Code Systems Corporation | Method and system for configuration of virtualized software applications |
US8434093B2 (en) | 2008-08-07 | 2013-04-30 | Code Systems Corporation | Method and system for virtualization of software applications |
US8930512B2 (en) * | 2008-08-21 | 2015-01-06 | Red Hat, Inc. | Providing remote software provisioning to machines |
US8255350B2 (en) * | 2008-12-31 | 2012-08-28 | Sap Ag | Instantiating a solution using preconfigured templates |
US8402458B1 (en) * | 2009-03-18 | 2013-03-19 | Symantec Corporation | Methods and systems for converting non-layered-software-application installations into layered installations |
US8972519B2 (en) * | 2009-11-16 | 2015-03-03 | International Business Machines Corporation | Optimization of multimedia service over an IMS network |
KR101115136B1 (en) * | 2009-12-02 | 2012-02-24 | 주식회사 반딧불소프트웨어 | Secure computing environment system and embodying method of the same |
US9122414B2 (en) | 2009-12-14 | 2015-09-01 | Citrix Systems, Inc. | Methods and systems for optimizing a process of archiving at least one block of a virtual disk image |
KR101316677B1 (en) * | 2009-12-17 | 2013-10-10 | 한국전자통신연구원 | Application service system based on user interface virtualization and method thereof |
US8954958B2 (en) * | 2010-01-11 | 2015-02-10 | Code Systems Corporation | Method of configuring a virtual application |
US9104517B2 (en) | 2010-01-27 | 2015-08-11 | Code Systems Corporation | System for downloading and executing a virtual application |
US8959183B2 (en) * | 2010-01-27 | 2015-02-17 | Code Systems Corporation | System for downloading and executing a virtual application |
US9229748B2 (en) | 2010-01-29 | 2016-01-05 | Code Systems Corporation | Method and system for improving startup performance and interoperability of a virtual application |
US8250638B2 (en) * | 2010-02-01 | 2012-08-21 | Vmware, Inc. | Maintaining the domain access of a virtual machine |
US8464003B2 (en) * | 2010-02-17 | 2013-06-11 | Hitachi, Ltd. | Method and apparatus to manage object based tier |
KR101089157B1 (en) * | 2010-03-05 | 2011-12-02 | 주식회사 안철수연구소 | System and method for logically separating servers from clients on network using virtualization of client |
US8763009B2 (en) | 2010-04-17 | 2014-06-24 | Code Systems Corporation | Method of hosting a first application in a second application |
US20110258624A1 (en) * | 2010-04-19 | 2011-10-20 | Fuat Bahadir | Virtual machine based secure operating system |
US9851984B2 (en) | 2010-05-12 | 2017-12-26 | Hewlett Packard Enterprise Development Lp | Methods, apparatus and articles of manufacture to update virtual machine templates |
US8352415B2 (en) * | 2010-06-15 | 2013-01-08 | International Business Machines Corporation | Converting images in virtual environments |
US8782106B2 (en) | 2010-07-02 | 2014-07-15 | Code Systems Corporation | Method and system for managing execution of virtual applications |
US8490088B2 (en) * | 2010-09-10 | 2013-07-16 | International Business Machines Corporation | On demand virtual machine image streaming |
KR101471366B1 (en) * | 2010-09-30 | 2014-12-10 | 에스케이플래닛 주식회사 | Device adaptive presentation virtualization method and its system |
CN107122168A (en) | 2010-10-01 | 2017-09-01 | Z124 | Multiple operating system |
US8842080B2 (en) | 2010-10-01 | 2014-09-23 | Z124 | User interface with screen spanning icon morphing |
US8898443B2 (en) | 2010-10-01 | 2014-11-25 | Z124 | Multi-operating system |
US8761831B2 (en) | 2010-10-15 | 2014-06-24 | Z124 | Mirrored remote peripheral interface |
US9021015B2 (en) | 2010-10-18 | 2015-04-28 | Code Systems Corporation | Method and system for publishing virtual applications to a web server |
US9209976B2 (en) | 2010-10-29 | 2015-12-08 | Code Systems Corporation | Method and system for restricting execution of virtual applications to a managed process environment |
US8707301B2 (en) | 2010-11-08 | 2014-04-22 | Microsoft Corporation | Insertion of management agents during machine deployment |
CN102025744A (en) * | 2010-12-20 | 2011-04-20 | 北京世纪互联工程技术服务有限公司 | Import and export system of virtual machine image in cloud computing |
US8839241B2 (en) * | 2010-12-31 | 2014-09-16 | Emc Corporation | Virtual appliance deployment |
JP5772127B2 (en) * | 2011-03-25 | 2015-09-02 | 富士通株式会社 | Virtual machine management method, information processing apparatus, and virtual machine management program |
US8713088B2 (en) * | 2011-03-27 | 2014-04-29 | Hewlett-Packard Development Company, L.P. | Identifying users of remote sessions |
TW201250482A (en) * | 2011-06-02 | 2012-12-16 | Hon Hai Prec Ind Co Ltd | System and method for updating virtual machine templates |
US20130007726A1 (en) * | 2011-06-30 | 2013-01-03 | Indrajit Poddar | Virtual machine disk image installation |
US8943564B2 (en) * | 2011-07-21 | 2015-01-27 | International Business Machines Corporation | Virtual computer and service |
CN102929884B (en) | 2011-08-10 | 2016-05-04 | 阿里巴巴集团控股有限公司 | A kind of method and device that shrinks virtual disk image file |
US9158561B2 (en) * | 2011-08-18 | 2015-10-13 | Vmware, Inc. | Systems and methods for modifying an operating system for a virtual machine |
US8924986B2 (en) * | 2011-09-01 | 2014-12-30 | American Megatrends, Inc. | Methods, devices and computer program products for confluence of multiple operating systems |
US20130076654A1 (en) | 2011-09-27 | 2013-03-28 | Imerj LLC | Handset states and state diagrams: open, closed transitional and easel |
US8924954B2 (en) * | 2011-11-22 | 2014-12-30 | Huawei Technologies Co., Ltd. | Application software installation method and application software installation apparatus |
KR101335326B1 (en) * | 2011-12-30 | 2013-12-02 | (주)네오위즈게임즈 | Client Apparatus, Watching Server, and Method for Preventing Falsification of Watching Area |
KR101320739B1 (en) * | 2012-02-22 | 2013-10-21 | 주식회사 팬택 | System for securing of memory of the portable terminal |
US10013269B2 (en) * | 2012-02-22 | 2018-07-03 | Vmware, Inc. | Component framework for deploying virtual machines using service provisioning information |
US9052940B2 (en) * | 2012-03-01 | 2015-06-09 | International Business Machines Corporation | System for customized virtual machine for a target hypervisor by copying image file from a library, and increase file and partition size prior to booting |
GB2502288A (en) | 2012-05-22 | 2013-11-27 | Ibm | Modifying the order of checking virtual machines for cached disc data |
KR101493828B1 (en) * | 2012-05-31 | 2015-02-16 | 주식회사 케이티 | Method for virtual machine auto-configuration and method for providing virtual machine auto-configuration service |
KR101302003B1 (en) * | 2012-07-19 | 2013-08-30 | (주)하이큐브시스템 | Virtual operating system |
US9977698B2 (en) * | 2012-07-31 | 2018-05-22 | V3 Systems Holdings, Inc. | Virtual machine migration into the cloud |
US9262212B2 (en) * | 2012-11-02 | 2016-02-16 | The Boeing Company | Systems and methods for migrating virtual machines |
CN103902347B (en) * | 2012-12-24 | 2017-09-29 | 中国电信股份有限公司 | The dispositions method and system of dummy machine system |
JP6064630B2 (en) * | 2013-02-01 | 2017-01-25 | コニカミノルタ株式会社 | Image forming apparatus and image forming apparatus control method |
US10002001B1 (en) * | 2013-02-19 | 2018-06-19 | Amazon Technologies, Inc. | Importing a virtual disk image into a compute service environment |
CN103118129A (en) * | 2013-02-22 | 2013-05-22 | 浪潮电子信息产业股份有限公司 | Cloud desktop system with function of household integrated digital television |
US9858097B2 (en) | 2013-06-07 | 2018-01-02 | American Megatrends, Inc. | Methods, devices and computer readable storage devices for emulating rotation events in a guest operating system from a host operating system |
US9378038B2 (en) | 2013-06-07 | 2016-06-28 | American Megatrends, Inc. | Methods, devices and computer readable storage devices for emulating a gyroscope in a guest operating system from a host operating system |
KR101479409B1 (en) * | 2013-07-05 | 2015-01-06 | 포항공과대학교 산학협력단 | Apparatus for ensuring integrity of offloaded workload and method thereof |
CN104572239A (en) * | 2013-10-18 | 2015-04-29 | 宇宙互联有限公司 | Cloud platform-based template making system and method |
CN104572274A (en) * | 2013-10-18 | 2015-04-29 | 宇宙互联有限公司 | Cross-cloud-node migration system and cross-cloud-node migration method |
KR102165601B1 (en) | 2013-10-24 | 2020-10-14 | 에스케이플래닛 주식회사 | Method for esecution application safely, and apparatus therefor |
KR102211850B1 (en) * | 2013-12-11 | 2021-02-02 | 주식회사 케이티 | Method and system for providing virtual machine image service based cloud |
KR102237566B1 (en) * | 2014-01-23 | 2021-04-07 | 한국전자통신연구원 | System and Method for Caching Disk Image File of Full-Cloned Virtual Machine |
US10599457B2 (en) * | 2014-02-25 | 2020-03-24 | Red Hat, Inc. | Importing and exporting virtual disk images |
US9158909B2 (en) * | 2014-03-04 | 2015-10-13 | Amazon Technologies, Inc. | Authentication of virtual machine images using digital certificates |
US9430182B2 (en) | 2014-03-06 | 2016-08-30 | American Megatrends, Inc. | Methods, systems and computer readable storage devices for presenting screen content |
US9652631B2 (en) | 2014-05-05 | 2017-05-16 | Microsoft Technology Licensing, Llc | Secure transport of encrypted virtual machines with continuous owner access |
US9639340B2 (en) * | 2014-07-24 | 2017-05-02 | Google Inc. | System and method of loading virtual machines |
US9519787B2 (en) * | 2014-11-14 | 2016-12-13 | Microsoft Technology Licensing, Llc | Secure creation of encrypted virtual machines from encrypted templates |
US9497187B2 (en) * | 2014-12-13 | 2016-11-15 | International Business Machines Corporation | Controlling a discovery component, within a virtual environment, that sends authenticated data to a discovery engine outside the virtual environment |
US9563454B2 (en) * | 2015-02-03 | 2017-02-07 | International Business Machines Corporation | Using a mobile device to transfer virtual machine between computers while preserving session |
KR102295960B1 (en) * | 2015-02-10 | 2021-09-01 | 한국전자통신연구원 | Apparatus and method for security service based virtualization |
CN104699570B (en) * | 2015-03-30 | 2017-11-17 | 福州大学 | A kind of virtual desktop shares the intelligent network stream desktop method of mirror image with physical desktop |
US9146769B1 (en) | 2015-04-02 | 2015-09-29 | Shiva Shankar | Systems and methods for copying a source machine to a target virtual machine |
US11438278B2 (en) * | 2015-06-29 | 2022-09-06 | Vmware, Inc. | Container-aware application dependency identification |
KR101711409B1 (en) * | 2015-09-14 | 2017-03-03 | 주식회사 새올정보기술 | System and method for application virtualization based on multi operating system environment |
US20170123996A1 (en) * | 2015-11-02 | 2017-05-04 | Microsoft Technology Licensing, Llc | Direct Mapped Files in Virtual Address-Backed Virtual Machines |
US9928062B2 (en) * | 2016-03-04 | 2018-03-27 | International Business Machines Corporation | ISA-ported container images |
CN107919033A (en) * | 2016-10-10 | 2018-04-17 | 北京七展国际数字科技有限公司 | A kind of telegraphy official's Experience of Ecological system by merging multimedia, micro climate and bio-landscape |
KR102019799B1 (en) * | 2016-11-09 | 2019-09-09 | 건국대학교 산학협력단 | Method and apparatus for establishing virtual cluster by mounting of readable and writable virtual disks |
KR101974974B1 (en) * | 2017-05-23 | 2019-05-07 | 주식회사 엔젠소프트 | Apparatus and method for switching system based container technology |
WO2018216972A1 (en) * | 2017-05-23 | 2018-11-29 | 주식회사 엔젠소프트 | Container technology-based system switching apparatus and method |
US10761869B2 (en) * | 2017-06-26 | 2020-09-01 | Wangsu Science & Technology Co., Ltd. | Cloud platform construction method and cloud platform storing image files in storage backend cluster according to image file type |
KR101967300B1 (en) * | 2017-10-27 | 2019-04-09 | 아토리서치(주) | Method and apparatus for virtual machine image creation automation |
US10430227B2 (en) * | 2018-01-09 | 2019-10-01 | Microsoft Technology Licensing, Llc | Fast instantiation of virtual machines in distributed computing systems |
US10664323B2 (en) | 2018-03-07 | 2020-05-26 | Microsoft Technology Licensing, Llc | Live migration of virtual machines in distributed computing systems |
KR20200054040A (en) | 2018-11-09 | 2020-05-19 | 주식회사 엔젠소프트 | An apparatus for providing security based on mobile OS virtualization and a method thereof |
KR102223141B1 (en) * | 2019-02-12 | 2021-03-04 | 성균관대학교산학협력단 | Methods for operating storage driver in container environment and storage driver apparatuses |
CN112783525A (en) * | 2021-01-22 | 2021-05-11 | 新华三大数据技术有限公司 | Daemon process upgrading method and device |
KR102557385B1 (en) * | 2022-11-29 | 2023-07-20 | 쿤텍 주식회사 | virtual machine system and vitual machine provisioning method using the same |
Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5752005A (en) * | 1996-01-22 | 1998-05-12 | Microtest, Inc. | Foreign file system establishing method which uses a native file system virtual device driver |
US6356915B1 (en) * | 1999-02-22 | 2002-03-12 | Starbase Corp. | Installable file system having virtual file system drive, virtual device driver, and virtual disks |
US20050076326A1 (en) * | 2002-11-18 | 2005-04-07 | Mcmillan John | Virtual OS computing environment |
US6978439B2 (en) * | 2002-01-10 | 2005-12-20 | Microsoft Corporation | Cross-platform software development with a software development peripheral |
US20060155735A1 (en) | 2005-01-07 | 2006-07-13 | Microsoft Corporation | Image server |
US20060277542A1 (en) | 2005-05-19 | 2006-12-07 | Novell, Inc. | System and method for creating a customized installation on demand |
Family Cites Families (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7577722B1 (en) * | 2002-04-05 | 2009-08-18 | Vmware, Inc. | Provisioning of computer systems using virtual machines |
US20040044643A1 (en) * | 2002-04-11 | 2004-03-04 | Devries David A. | Managing multiple virtual machines |
US8209680B1 (en) * | 2003-04-11 | 2012-06-26 | Vmware, Inc. | System and method for disk imaging on diverse computers |
US20050198303A1 (en) * | 2004-01-02 | 2005-09-08 | Robert Knauerhase | Dynamic virtual machine service provider allocation |
JP4242819B2 (en) | 2004-10-06 | 2009-03-25 | 株式会社日立製作所 | Computer system having a terminal capable of working offline |
US7334076B2 (en) * | 2005-03-08 | 2008-02-19 | Microsoft Corporation | Method and system for a guest physical address virtualization in a virtual machine environment |
US20070074191A1 (en) * | 2005-08-30 | 2007-03-29 | Geisinger Nile J | Software executables having virtual hardware, operating systems, and networks |
US20070050770A1 (en) * | 2005-08-30 | 2007-03-01 | Geisinger Nile J | Method and apparatus for uniformly integrating operating system resources |
US9189291B2 (en) * | 2005-12-12 | 2015-11-17 | International Business Machines Corporation | Sharing a kernel of an operating system among logical partitions |
US7653794B2 (en) * | 2006-05-08 | 2010-01-26 | Microsoft Corporation | Converting physical machines to virtual machines |
JP2009537892A (en) * | 2006-05-18 | 2009-10-29 | サンギュ イ | How to protect clients and servers |
-
2008
- 2008-03-20 US US12/531,963 patent/US20100107163A1/en not_active Abandoned
- 2008-03-20 CN CN2008800088354A patent/CN101636722B/en not_active Expired - Fee Related
- 2008-03-20 EP EP08723604A patent/EP2137629A4/en not_active Withdrawn
- 2008-03-20 KR KR1020080025797A patent/KR20080085780A/en not_active Application Discontinuation
- 2008-03-20 WO PCT/KR2008/001567 patent/WO2008115012A1/en active Application Filing
- 2008-03-20 JP JP2009554449A patent/JP2010522370A/en active Pending
-
2009
- 2009-01-09 KR KR1020090001739A patent/KR101152227B1/en active IP Right Grant
-
2011
- 2011-08-19 KR KR1020110082503A patent/KR101179849B1/en active IP Right Grant
- 2011-08-19 KR KR1020110082502A patent/KR101179758B1/en active IP Right Grant
-
2012
- 2012-05-03 KR KR1020120046928A patent/KR20120050956A/en not_active Application Discontinuation
Patent Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5752005A (en) * | 1996-01-22 | 1998-05-12 | Microtest, Inc. | Foreign file system establishing method which uses a native file system virtual device driver |
US6356915B1 (en) * | 1999-02-22 | 2002-03-12 | Starbase Corp. | Installable file system having virtual file system drive, virtual device driver, and virtual disks |
US6978439B2 (en) * | 2002-01-10 | 2005-12-20 | Microsoft Corporation | Cross-platform software development with a software development peripheral |
US20050076326A1 (en) * | 2002-11-18 | 2005-04-07 | Mcmillan John | Virtual OS computing environment |
US20060155735A1 (en) | 2005-01-07 | 2006-07-13 | Microsoft Corporation | Image server |
US20060277542A1 (en) | 2005-05-19 | 2006-12-07 | Novell, Inc. | System and method for creating a customized installation on demand |
Non-Patent Citations (2)
Title |
---|
KOZUCH M. ET AL.: "Internet Suspend/Resume", PROCEEDINGS, WORKSHOP ON MOBILE COMPUTING SYSTEMS AND APPLICATIONS, 2002, pages 1 - 7 |
See also references of EP2137629A4 * |
Cited By (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2010205267A (en) * | 2009-03-03 | 2010-09-16 | Symantec Corp | Method and system for unifying virtualized sublayers |
US8996667B2 (en) | 2010-04-27 | 2015-03-31 | International Business Machines Corporation | Deploying an operating system |
US9086892B2 (en) | 2010-11-23 | 2015-07-21 | International Business Machines Corporation | Direct migration of software images with streaming technique |
US9230118B2 (en) | 2010-12-09 | 2016-01-05 | International Business Machines Corporation | Encrypting and decrypting a virtual disc |
US9230113B2 (en) | 2010-12-09 | 2016-01-05 | International Business Machines Corporation | Encrypting and decrypting a virtual disc |
US9626302B2 (en) | 2010-12-09 | 2017-04-18 | International Business Machines Corporation | Encrypting and decrypting a virtual disc |
US9058235B2 (en) | 2010-12-13 | 2015-06-16 | International Business Machines Corporation | Upgrade of software images based on streaming technique |
US9195452B2 (en) | 2010-12-13 | 2015-11-24 | International Business Machines Corporation | Upgrade of software images based on streaming technique |
US9052918B2 (en) | 2010-12-14 | 2015-06-09 | International Business Machines Corporation | Management of multiple software images with shared memory blocks |
US8595511B2 (en) | 2011-06-29 | 2013-11-26 | International Business Machines Corporation | Securely managing the execution of screen rendering instructions in a host operating system and virtual machine |
US11461465B1 (en) * | 2019-05-24 | 2022-10-04 | Trend Micro Inc. | Protection of kernel extension in a computer |
Also Published As
Publication number | Publication date |
---|---|
KR101152227B1 (en) | 2012-06-08 |
JP2010522370A (en) | 2010-07-01 |
KR20080085780A (en) | 2008-09-24 |
KR101179758B1 (en) | 2012-09-04 |
KR20090018992A (en) | 2009-02-24 |
KR20110099206A (en) | 2011-09-07 |
EP2137629A4 (en) | 2010-12-29 |
KR101179849B1 (en) | 2012-09-04 |
KR20120050956A (en) | 2012-05-21 |
CN101636722B (en) | 2013-01-30 |
KR20110098889A (en) | 2011-09-02 |
CN101636722A (en) | 2010-01-27 |
EP2137629A1 (en) | 2009-12-30 |
US20100107163A1 (en) | 2010-04-29 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US20100107163A1 (en) | Movable virtual machine image | |
US11573813B2 (en) | Dynamic device virtualization for use by guest user processes based on observed behaviors of native device drivers | |
US8151263B1 (en) | Real time cloning of a virtual machine | |
US8522235B2 (en) | Portable virtual machine | |
US8683466B2 (en) | System and method for generating a virtual desktop | |
US20090077551A1 (en) | Virtual machine image builder for automated installation of fully-virtualized operating system | |
Von Hagen | Professional xen virtualization | |
US20080127348A1 (en) | Network computer system and method using thin user client and virtual machine to provide immunity to hacking, viruses and spy ware | |
US20060004667A1 (en) | Systems and methods for collecting operating system license revenue using an emulated computing environment | |
US10574524B2 (en) | Increasing reusability of and reducing storage resources required for virtual machine images | |
US9952782B1 (en) | Method and system for accessing data between different virtual disk formats in a virtualization environment | |
TW201137751A (en) | Method and system for effective management of heterogeneous virtual environments in a desktop environment | |
JP2007510198A (en) | Paravirtualization of computer systems using hypervisors implemented in host system partitions | |
TW200818011A (en) | Method and apparatus for virtualization of appliances | |
WO2001026031A2 (en) | Snapshot restore of application chains and applications | |
Dash | Getting started with oracle vm virtualbox | |
US10620963B2 (en) | Providing fallback drivers for IO devices in a computing system | |
US8875132B2 (en) | Method and apparatus for implementing virtual proxy to support heterogeneous systems management | |
US20220053001A1 (en) | Methods and apparatus for automatic configuration of a containerized computing namespace | |
US10235195B2 (en) | Systems and methods for discovering private devices coupled to a hardware accelerator | |
US10776145B2 (en) | Systems and methods for traffic monitoring in a virtualized software defined storage architecture | |
Thiruvathukal et al. | Virtualization for computational scientists | |
US12032969B2 (en) | Management controller as bios | |
US10565355B2 (en) | Techniques of managing licenses of virtual desktops | |
US20240020176A1 (en) | Methods and apparatus for deployment of a virtual computing cluster |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
WWE | Wipo information: entry into national phase |
Ref document number: 200880008835.4 Country of ref document: CN |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 08723604 Country of ref document: EP Kind code of ref document: A1 |
|
DPE1 | Request for preliminary examination filed after expiration of 19th month from priority date (pct application filed from 20040101) | ||
WWE | Wipo information: entry into national phase |
Ref document number: 2009554449 Country of ref document: JP |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2008723604 Country of ref document: EP |