KR100988111B1 - Apparatus and method for virtualization of resource in server based computing system of terminal environment - Google Patents

Abstract

The present invention relates to a terminal server device for virtualizing and managing a common resource accessed by a user when executing a program in a server-based computing system in a terminal environment for each user, and a resource virtualization method in the terminal server device. A terminal server device according to the present invention comprises: a resource virtualization agent for monitoring a terminal session in a user mode of an operating system; A virtualization information storage unit which stores virtualization information including information of a virtualization target resource and a virtualization path; And generating a virtual resource by combining the virtualization path and the type information of the virtualization target resource stored in the virtualization information storage unit according to the terminal session start notification of the resource virtualization agent, and accessing resources of an application executed in the terminal session in real time. And a resource monitoring module configured to monitor and change access of the application target virtualization target resource to the virtual resource. Even if multiple users use the same application program, it is possible to provide an independent service environment for each user by creating and using an independent virtualization resource for each user.

Terminal Services, Thin Clients, Resources, Virtualization

Description

If a user cannot run an application with a single resource share in a server-based computing system in a terminal environment, a device and a method for executing it through resource virtualization

The present invention relates to a server-based computing system in a terminal environment, and more particularly, to a terminal server device for virtualizing a common resource dependent on an application program, and a resource virtualization method in the terminal server device.

A server-based computing system in a terminal environment is a system that remotely connects to a server using a terminal client so that server resources are available to the client. That is, all the client applications are installed on the server instead of being installed on the client terminal, and only the application execution result screen of the server is transmitted to the client terminal and executed by utilizing the resources of the server. It's a system that makes it appear to be running on.

When the client connects to the server remotely, the server divides the connected user environment into sessions and profiles to maintain an independent environment without interfering between sessions, and the client can use the server's resources without restriction. For this reason, Terminal Services was initially used for remote server management, but recently it has evolved to service applications by applying it.

The actual data is not transmitted and received between the server and the client. All the work is done on the server, and only the result of the server's work is sent to the client in divided bitmap format. Because all the work is done on the server, the CPU, memory, etc. used by the application use the server's resources, and the client's resources use only the minimum resources necessary for running the client.

Application service in the server-based computing system in such a terminal environment has a high security because the work data can not be leaked to the outside by performing work on the 100% server.

However, as described above, the terminal service is a type of service in which a plurality of clients access a single server and receive only a result screen of an application program executed on the server. When a plurality of clients access the same server and use the same program, There is a problem that resources (files, folders, registry, etc.) that depend on the program cannot be personalized. In other words, when a multi-user accesses and uses an application developed on the terminal server without considering multi-users, the application does not operate normally because resources overlap by user.

For example, there is no problem if a specific program that records login information and stores personal settings in a fixed path file is installed and operated on a personal PC. However, when the specific program is installed and operated on a server in a terminal service environment, Since users log in at different times and can access programs simultaneously, only the information of the most recently accessed user in a fixed path file, registry, or folder is stored. Therefore, the information stored in the previously accessed file, folder or registry is deleted and the information of the recently accessed user is recorded.

As a result, if a server that provides a terminal service is executed by a program that shares resources with the server, the program cannot be used.

The present invention has been made to solve the above problems, the terminal server device for virtualizing and managing the common resources dependent on the program in the server-based computing system of the terminal environment and the resource virtualization method in the terminal server device The purpose is to provide.

According to an aspect of the present invention for achieving the above object, a terminal server device for providing a terminal service to a remotely connected client, by monitoring the terminal session in the user mode of the operating system to deliver session information, virtualization information in kernel mode A resource virtualization agent; A virtualization information storage unit which stores virtualization information including information of a virtualization target resource and a virtualization path; And generating a virtual resource by combining the virtualization path and the type information of the virtualization target resource stored in the virtualization information storage unit according to the terminal session start notification of the resource virtualization agent, and accessing the resource of the application executed in the terminal session. And a resource monitoring module for changing the access to the virtualization target resource of the application program to the virtual resource by monitoring in real time in a mode.

When the type of the virtualization target resource is a folder, the resource monitoring module of the terminal server device creates a parent folder according to the virtualization path, and creates a lower folder having the same name as the access path name of the virtualization target resource in the parent folder. Create a virtual resource by creating it.

When the type of the virtualization target resource is a file, the resource monitoring module of the terminal server device creates a parent folder according to the virtualization path, and creates a lower folder having the same name as the access path name of the virtualization target resource in the parent folder. The virtual resource is generated by copying the virtualization target resource in the subfolder.

The terminal server device may further include a session information storage unit that stores information of the terminal session, and the resource monitoring module may separately generate virtual resources for each user based on the information of the terminal session in the upper folder. .

The resource monitoring module of the terminal server device may redirect a request packet transmitted from the application program to the virtualization target resource to the virtualization resource.

According to another aspect of the present invention for achieving the above object, a method for virtualizing resources in a terminal server device that provides a terminal service to a remotely connected client, virtualization information including the information of the virtualization target resource and the virtualization path information Registering; Creating a terminal session for the client; Generating a virtual resource by combining the virtualization path and the type information of the virtualization target resource; Real-time monitoring of resource access of an application executed in the terminal session; And changing the access to the virtualization target resource of the application program to the virtual resource.

In the resource virtualization method, the virtual resource generating step may include: generating an upper folder according to the virtualization path; And generating a lower folder having the same name as an access path name of the virtualization target resource in the generated upper folder.

The generating of the resource in the resource virtualization method may further include copying the virtualization target resource into the subfolder.

The method may further include generating a user identification folder by using information of the terminal session in an upper folder before generating the lower folder in the resource virtualization method, wherein the lower folder may be created in the user identification folder. .

In the resource virtualization method, the resource access change step may include: receiving a request packet transmitted from the application program to the virtualization target resource; And redirecting the received request packet to the virtualization resource.

As described above, the present invention provides a separate service environment for each user by virtualizing a common resource that is dependent on a specific program in a server-based computing system of a terminal environment for each user, regardless of the operation principle of a program to be operated in a terminal service environment. The program will be able to run in the Terminal Services environment. In the related art, common resources could be managed by user only through modification and redevelopment of the program. However, according to the present invention, the common resources can be managed separately by users without having to modify the programs already commercialized, thereby driving more programs and multiplying. Enable user use.

The above objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, whereby those skilled in the art may easily implement the technical idea of the present invention. There will be. In the following description, well-known functions or constructions are not described in detail since they would obscure the invention in unnecessary detail. Hereinafter, a preferred embodiment of the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram showing the configuration of a terminal service system according to an embodiment of the present invention.

As shown in FIG. 1, the terminal service system according to the present embodiment includes a plurality of user terminals 110-1, 110-2,. It is configured to include a terminal server 150 connected through the user terminal 110 and the network 130.

The user accesses the terminal server 150 using the user terminal 110 to perform authentication, and the terminal server 150 performs terminal sessions 160-1, 160-2, .. , 160-N, hereinafter referred to as 160) is created in a user mode in the operating system to maintain an environment independent of other users and execute the application program 163. The terminal server 150 transmits only the application program execution result screen to the user terminal 110.

The user terminal 110 receives the application program received from the terminal server 150 to the execution result screen and returns a task to the terminal server 150 through a user input (for example, a keyboard input and a mouse click). The terminal server 150 processes the application 163 according to the user input returned from the user terminal 110 and transmits the execution result screen back to the user terminal 110.

Referring to FIG. 1, when the terminal client 120 of the user terminal 110 connects, the terminal server 150 creates an independent terminal session 160 and displays a basic screen (eg, a desktop of the Windows operating system). Send to terminal client 120. The user inputs execution of an application on a basic screen displayed through the terminal client 120, and the input signal is transmitted to the terminal server 150 through the network so that the application selected by the user in the terminal session 160 ( 163 is executed.

Specifically, referring to FIG. 1, the terminal server 150 may include a resource virtualization agent 161 operating in a user mode in an operating system and a resource monitoring module 170 operating in a kernel mode in an operating system. ). The resource monitoring module 170 operates in the form of a device driver in the kernel stage of the operating system.

The resource virtualization agent 161 is connected to an administrator tool and receives virtualization information about a resource (file, folder, registry, etc.) accessed by the application 163 through the administrator tool (specifically, a database) to monitor resources. Transfer to module 170. The virtualization information includes virtualization target resource (hereinafter referred to as source resource) information, virtualization path where user data is actually stored (hereinafter referred to as destination resource), and type information of the virtualization target resource. The type information indicates whether the source resource is a file, a folder, or a registry.

In addition, the resource virtualization agent 161 monitors the generation of the terminal session in real time. When the terminal session 160 of the user is generated according to the access of the terminal client 120, the resource virtualization agent 161 transmits the information of the terminal session 160 to the resource monitoring module 170. The information of the terminal session includes a user ID, SID, and session ID.

The resource monitoring module 170 stores the terminal session information received from the resource virtualization agent 161 in the session information DB 165, and further stores the virtualization information received from the resource virtualization agent 161 in the virtualization information DB ( 167). The resource monitoring module 170 starts driving according to the command of the resource virtualization agent 161.

The resource monitoring module 170 combines the destination resource stored in the virtualization information DB 167, the type information of the source resource, and the terminal session information of the user stored in the session DB 165. To produce

More specifically, the resource monitoring module 170 combines the destination resource stored in the virtualization information DB 167, the type information of the source resource, and the terminal session information of the user stored in the session DB 165. Create a virtual resource access path. If the type of the source resource is a folder, the virtual resource access path becomes the final virtual resource. If the source resource is a file or registry, the final virtual resource is created by copying the file or data from the source resource and placing it in the virtual resource access path. Serve

For example, a user with a source resource of "C: \ enc" folder, a destination resource of "D: \ userdata" path, and a user ID of "use01" runs an application 163, and the application 163 ) Accesses the source resource "C: \ enc" folder, the resource monitoring module 170 combines the destination resource (D: \ userdata), the user ID (use01) and the source resource (C: \ enc) Create a virtualization access path of "D: \ userdata \ user01 \ C \ enc". At this time, since the type of the source resource is a folder, the virtualization access path becomes the final virtual resource.

In the above example, if a user with a user ID of "use02" runs the same application 163, and the application 163 likewise accesses the source resource "C: \ enc" folder, according to the same principle Create a virtualization access path of "D: \ userdata \ user02 \ C \ enc".

The resource monitoring module 170 is loaded into a file manager in the operating system to filter the source resource access of the application 163 to bypass the virtual resource. The resource monitoring module 170 monitors the access of the application 163 only to the source resource stored in the virtualization DB 167 among the resources of the terminal server 150, and the application 153 accesses the source resource. If so, change the access to the virtual resource.

In detail, the resource monitoring module 170 monitors all IRPs (I / O Request Packes) transmitted from the application program 163 and redirects IRPs directed to the source resource to the virtual resource. When the destination address of the packet is read and directed to the source resource, the destination address is changed to a virtual resource.

According to the present invention as described above, even if a plurality of users using the same application 163, a common resource is virtualized independently for each user, thereby providing a separate application program environment for each user.

2 is a flowchart illustrating a common resource virtualization method in a terminal service according to an embodiment of the present invention.

2, an administrator who manages the terminal server 150 registers virtualization information through an administrator tool. The virtualization information registered through the administrator tool is transmitted to the resource virtualization agent 161 in the operating system (S201). The virtualization information includes virtualization target resource (source resource) information, virtualization path (destination resource) where user data is actually stored, and type information of the source resource. The type information indicates whether the source resource is a file, a folder, or a registry.

The resource virtualization agent 161 which has received the virtualization information transmits and drives a driving command to the resource monitoring module 170 located in the kernel mode in the operating system. The resource virtualization agent 161 transmits the virtualization information received from the manager tool to the resource monitoring module 170 (S203). The resource monitoring module 170 registers and stores the received virtualization information in the virtualization information DB 167 (S205).

The resource virtualization agent 161 monitors the creation of the terminal session in real time, and when the terminal client of the user terminal 110 accesses the terminal server 150 to generate a terminal session (S207), the terminal session information is monitored by the resource monitoring module. Request for registration by transferring to 170 (S209). The information of the terminal session includes a user ID, SID, and session ID.

The resource monitoring module 170 registers terminal session information received from the resource virtualization agent 161 in the session information DB 165 (S211).

After registering the virtualization information and the terminal session information as described above, the resource monitoring module 170 checks the destinations of all IRPs (I / O request packets) exiting from the application 163 with reference to the virtualization information DB 203 and virtualizes them. It is checked whether it is headed to a target resource (source resource) (S213 and S215).

When the IRPs are directed to a virtualization target resource (source resource), the resource monitoring module 170 may include a destination resource registered in the virtualization information DB 167, type information of the source resource, and a user stored in the session DB 165. The terminal session information is combined to create a virtual resource of the user (S217). More specifically, the resource monitoring module 170 combines the destination resource registered in the virtualization information DB 167, the type information of the source resource, and the terminal session information of the user stored in the session DB 165 for the virtual. Create a resource access path. If the type of the source resource is a folder, the virtual resource access path becomes the final virtual resource. If the source resource is a file or registry, the final virtual resource is created by copying the file or data from the source resource and placing it in the virtual resource access path. Serve

Then, the resource monitoring module 170 redirects the IRPs based on the virtual resource access path (S219). That is, the resource monitoring module 170 changes the destination of the IRPs to the virtual resource access path and bypasses it. The resource monitoring module 170 forwards the redirected IRPs (S221). IRPs are forwarded to the virtual resource access path, not forwarded to the source resource as the original destination. Since the virtual resource access path is independently generated for each user, data is generated and maintained independently for each user even if a plurality of users use the same application program 163.

Then, when the terminal service of the user is terminated (S223), the resource virtualization agent 161 requests the session information deletion to the resource monitoring module 170 (S225), the resource monitoring module 170 to the session DB (165) The session information of the registered user is deleted (S227).

According to the present invention as described above, even if a plurality of users using the same application 163, a common resource is virtualized independently for each user, thereby providing a separate application program environment for each user.

The method of the present invention as described above may be embodied as a program and stored in a computer-readable recording medium (such as a CD-ROM, a RAM, a ROM, a floppy disk, a hard disk, or a magneto-optical disk).

While the specification contains many features, such features should not be construed as limiting the scope of the invention or the scope of the claims. Also, the features described in the individual embodiments herein can be implemented in combination in a single embodiment. Conversely, various features described herein in a single embodiment may be implemented in various embodiments individually or in a suitable subcombination.

Although the operations are described in a particular order in the drawings, they should not be understood as being performed in a particular order as shown, or in a sequence of successive orders, or in which all described actions are performed to obtain a desired result. . In some circumstances, multitasking and parallel processing may be advantageous. In addition, it should be understood that the division of various system components in the above-described embodiments does not require such division in all embodiments. The above-described program components and systems can generally be implemented as a single software product or as a package in multiple software products.

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention for those skilled in the art to which the present invention pertains. It is not limited by the drawings.

1 is a diagram showing the configuration of a terminal service system according to an embodiment of the present invention.

2 is a flowchart illustrating a common resource virtualization method in a terminal service according to an embodiment of the present invention.

Claims (10)

delete A terminal server device that provides terminal services to remotely connected clients. A resource virtualization agent that monitors the terminal session in user mode of the operating system; A virtualization information storage unit which stores virtualization information including information of a virtualization target resource and a virtualization path; And According to the terminal session start notification of the resource virtualization agent, a virtual resource is generated by combining the virtualization path and the type information of the virtualization target resource stored in the virtualization information storage unit, and monitors resource access of an application executed in the terminal session in real time. And a resource monitoring module configured to change the access to the virtualization target resource of the application to the virtual resource. The resource monitoring module, When the virtualization target resource type is a folder, a virtual resource is generated by creating an upper folder according to the virtualization path and creating a lower folder having the same name as an access path name of the virtualization target resource in the upper folder. Terminal Server Device. A terminal server device that provides terminal services to remotely connected clients. A resource virtualization agent that monitors the terminal session in user mode of the operating system; A virtualization information storage unit which stores virtualization information including information of a virtualization target resource and a virtualization path; And According to the terminal session start notification of the resource virtualization agent, a virtual resource is generated by combining the virtualization path and the type information of the virtualization target resource stored in the virtualization information storage unit, and monitors resource access of an application executed in the terminal session in real time. And a resource monitoring module configured to change the access to the virtualization target resource of the application to the virtual resource. The resource monitoring module, When the type of the virtualization target resource is a file, a parent folder is created according to the virtualization path, and a subfolder having the same name as an access path name of the virtualization target resource is created in the parent folder, and the virtualization resource in the subfolder. Terminal server device, characterized in that to create a virtual resource by copying. The method according to claim 2 or 3, And a session information storage unit for storing information of the terminal session. The resource monitoring module, And generating and generating a virtual resource for each user based on the terminal session information in the upper folder. The method according to claim 2 or 3, The resource monitoring module, And a request packet transmitted from the application program to the virtualization target resource to the virtualization resource. delete A method of virtualizing resources on a terminal server device that provides terminal services to remotely connected clients. (a) registering virtualization information including virtualization target resource information and virtualization path information; (b) creating a terminal session for the client; (c) generating a virtual resource by combining the virtualization path and the type information of the virtualization target resource; (d) real time monitoring of resource access of an application executed in the terminal session; And (e) changing access to the virtualization target resource of the application to the virtual resource; In step (c), Creating a parent folder according to the virtualization path; And And generating a lower folder having the same name as an access path name of the virtualization target resource in the created upper folder. The method of claim 7, wherein In step (c), Copying the virtualization target resource in the subfolder; resource virtualization method further comprising. 9. The method according to claim 7 or 8, Before the subfolder creation step, Generating a user identification folder using information of the terminal session in a higher folder; And wherein the subfolder is created in the user identification folder. The method of claim 7, wherein In step (e), Receiving a request packet transmitted from the application program to the virtualization target resource; And And redirecting the received request packet to the virtualized resource.

Images