KR102314221B1 - Virtual desktop system providing an environment at specific time and method thereof - Google Patents

Abstract

Disclosed herein is a virtualization system and a data processing method thereof. A virtualization system according to an embodiment of the present invention includes a virtualization server, wherein the virtualization server creates and stores a snapshot image for the OS area through a golden image, and when a request to terminate the use of a virtual desktop is received, the user It is characterized by creating and saving a snapshot image for the data area, and terminating the execution of the virtual desktop.

Description

A virtual desktop system capable of providing an environment at a specific point in time and a data processing method thereof

The present invention relates to a virtual desktop system and a data processing method thereof, and more particularly, to a virtual desktop system providing a virtual desktop using a snapshot image for an arbitrary user and a data processing method thereof is about

Research and development of a virtualization system that provides a virtual desktop in place of the conventional desktop has been continuously conducted.

Recently, virtualization systems are also used in systems for cryptocurrencies, etc. For various reasons such as ease of management and space efficiency, and in response to the rapidly changing market, virtualization systems will be widely distributed in the future.

An object of the present invention is to provide a virtual desktop system and a data processing method therefor for the convenience of using a virtual desktop for any user.

Another object of the present invention is to provide a fast virtual machine (VM) and efficiently utilize system resources by using a snapshot function in a virtualization system.

A data processing method in a virtualization system according to an embodiment of the present invention includes the steps of: creating and storing a snapshot image of an OS area through a golden image; generating and storing a snapshot image of a user data area when a request to terminate the use of the virtual desktop is received; and terminating the execution of the virtual desktop.

According to an embodiment of the present invention, a virtual desktop execution request receiving step; determining whether a request to return to a previous virtual desktop use point is requested; verifying the user's data area through AD (Active Directory) authentication if the return request is made; providing a virtual machine (VM) by combining the snapshot images of the OS area and the user data area; and providing a virtual desktop by running it; It is characterized in that it further comprises at least one or more of.

According to an embodiment of the present invention, the snapshot image for the OS area and the snapshot image for the user data area through the generated golden image are stored in different storages, respectively.

According to an embodiment of the present invention, the snapshot image for the OS region through the generated golden image is stored in a database and managed by the image storage of instances.

According to an embodiment of the present invention, the generated snapshot image for the user data area is stored in the NAS.

According to an embodiment of the present invention, the step of determining whether to request a return to the previous virtual desktop use point state may include: providing a pop-up message or UI/UX related to the return request; and receiving a selection input through the provided pop-up message or UI/UX.

According to an embodiment of the present invention, the OS area is an instance created by the golden image and is a common area provided to all users, and the user data area is created according to the user's virtual desktop usage status on the underlying OS area. It is characterized in that it is an image in a virtual machine image format.

A virtualization system according to an embodiment of the present invention includes a virtualization server, wherein the virtualization server creates and stores a snapshot image for the OS area through a golden image, and when a request to terminate the use of a virtual desktop is received, the user It is characterized by creating and saving a snapshot image for the data area, and terminating the execution of the virtual desktop.

According to an embodiment of the present invention, when a virtual desktop execution request is received, the virtualization server determines whether a request to return to a previous virtual desktop use point is requested, and if there is a return request, the user passes through Active Directory (AD) authentication It is characterized in that at least one or more of the operations provided by verifying the data area of the OS area and the user data area by combining the snapshot image of the OS area and the user data area and providing it to a virtual machine (VM) is further performed.

According to an embodiment of the present invention, the virtualization server is characterized in that it stores the snapshot image for the OS area and the snapshot image for the user data area through the generated golden image in different storages, respectively.

According to an embodiment of the present invention, the virtualization server stores a snapshot image of the OS area through the generated golden image in a database and is managed by the image storage of instances.

According to an embodiment of the present invention, the virtualization server is characterized in that the snapshot image for the generated user data area is stored in the NAS.

According to an embodiment of the present invention, the virtualization server provides a pop-up message or UI/UX related to the return request, and receives a selection input through the provided pop-up message or UI/UX, It is characterized in that it is determined whether a request to return to the state at the time of using the virtual desktop is requested.

According to an embodiment of the present invention, the OS area is an instance created by the golden image and is a common area provided to all users, and the user data area is created according to the user's virtual desktop usage status on the underlying OS area. It is characterized in that it is an image in a virtual machine image format.

As described above,

According to an embodiment of the present invention, it is possible to provide a virtualization system and a data processing method thereof for the convenience of using a virtual desktop of any user.

According to an embodiment of the present invention, there is an effect of providing a fast virtual machine (VM) and efficiently utilizing system resources by using the snapshot function in the virtualization system.

1 is a diagram illustrating the structure of a VDI system 100 from a virtualization point of view according to an embodiment of the present invention.
2 is a diagram illustrating a container according to an embodiment of the present invention.
3 is a diagram illustrating a video compression format according to an embodiment of the present invention.
4 is a diagram illustrating a session gateway according to an embodiment of the present invention.
5 is a diagram illustrating data visualization according to an embodiment of the present invention.
6 is a diagram illustrating the VDI system 100 using a snapshot function according to an embodiment of the present invention.
7 is a flowchart illustrating a process of using a snapshot function in a VDI system according to an embodiment of the present invention.
8 is a flowchart illustrating a process of using a snapshot function in a VDI system according to another embodiment of the present invention.

Since the present invention can have various changes and can have various embodiments, specific embodiments are illustrated in the drawings and described in detail. However, this is not intended to limit the present invention to a specific embodiment, it should be understood to include all modifications, equivalents and substitutes included in the spirit and scope of the present invention. In describing each figure, like reference numerals have been used for like elements.

Terms such as first, second, A, and B may be used to describe various elements, but the elements should not be limited by the terms. The above terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, a first component may be referred to as a second component, and similarly, a second component may also be referred to as a first component. ??and/or?? The term includes a combination of a plurality of related listed items or any of a plurality of related listed items.

When a component is referred to as being “connected” or “connected” to another component, it is understood that the other component may be directly connected or connected to the other component, but other components may exist in between. it should be On the other hand, when it is said that a certain element is "directly connected" or "directly connected" to another element, it should be understood that no other element is present in the middle.

The terms used in the present application are only used to describe specific embodiments, and are not intended to limit the present invention. The singular expression includes the plural expression unless the context clearly dictates otherwise. It should be understood that terms such as “comprise” or “have” in the present application do not preclude the possibility of addition or existence of features, numbers, steps, operations, components, parts, or combinations thereof described in the specification in advance. .

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs.

Terms such as those defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning in the context of the related art, and should not be interpreted in an ideal or excessively formal meaning unless explicitly defined in the present application. does not

Disclosed herein is a virtualization system and a data processing method thereof according to the present invention. In particular, in this specification, in relation to the provision of a virtualization system and a data processing method thereof for the convenience of using a virtual desktop of any user, a fast virtual machine (VM: Virtual Machine) using a snapshot function in the virtualization system Machine) provision and embodiment(s) for efficiently utilizing system resources will be described.

A virtualization system is also called a Virtual Desktop Infrastructure (VDI) system.

1 is a diagram illustrating the structure of a VDI system 100 from a virtualization point of view according to an embodiment of the present invention.

Referring to FIG. 1 , the VDI system 100 may be largely divided into a virtual desktop 110 , a virtualization server 120 , and a client 130 . However, the present invention is not limited thereto, and may be implemented differently from the structure of the VDI system 100 shown in FIG. 1 according to a system or an implementation method.

In the virtualization server 120 , a host OS 124 is installed and a hypervisor 121 for virtualization may be installed. According to an embodiment, Linux and a QEMU/KVM hypervisor may be installed as the host OS 124 in the virtualization server 120 .

The hypervisor 121 may allocate resources of the virtualization server 120 to the virtual desktop 110 generated by virtualization. Here, the resources of the virtualization server 120 may include CPU, GPU, NIC, HDD, and the like. Although one virtual desktop 110 is exemplified in FIG. 1 for better understanding and convenience of explanation, the present invention is not limited thereto, and a plurality of virtual desktops 110 may be included. can

A virtual desktop remote transfer protocol may be used for remote access to the hypervisor client 130 and the virtual desktop 110 .

The client 130 receives data such as display information, audio, image, and video of the virtual desktop 110 from the virtual desktop remote transfer module 123 of the virtualization server 120 according to the virtual desktop remote transfer protocol as well as a mouse ( Cursor information according to a mouse) or a touch input may be received.

The OS (Operating System) of the client 130 may be Linux, Windows, etc., and an application for authentication and connection with the clipboard and a viewer app showing the display of the virtual desktop 110 are installed. has been The client 130 may also include a virtual desktop remote transfer-GTK library that helps access to the virtual desktop remote transfer module 123 of the virtualization server 120 and processes display graphics. The OS of the client 130 may be driven in the form of Windows, IOS, Linux, Android, etc., and may be in the form of a thin client using only a minimum resource for display output.

A hypervisor driven in the form of a Linux kernel module is installed in the virtualization server 120 to be compatible with the hypervisor in the user space. The hypervisor of the user space functions to virtualize devices to be used by the virtual desktop 110 and allocate them to each virtual desktop 110 .

Virtualized devices include drivers 112, for example, a virtual NIC/Disk driver such as Virtio in charge of a virtual disk and a virtual desktop 110 by capturing the graphic output of the virtual server 120 ), a virtual graphics driver, such as QXL, that transmits to the virtual desktop remote transfer module 123 .

The virtual desktop remote transmission module 123 helps the client 130 to access a guest OS (OS of the virtual desktop 110 ) 111 .

The virtual desktop 110 is one virtual computer that a user can use in the VDI system, and a separate guest OS 111 may be installed in the virtual desktop 110 . In this case, the guest OS 111 may be of the same type as the host OS 124 or a different type. Meanwhile, the guest OS 111 may have built-in virtual drivers 112 that can use the virtualized devices 125 . For example, the built-in virtual drivers 112 may include a virtual disk driver supporting a storage space, a virtual network driver supporting a network, a virtual graphic driver supporting graphics, and the like.

The guest agent (Guest Agent) 113 is an element for improving the user's experience using the virtual desktop 110 and guest-centered management. For example, if the client uses mouse mode, information about the guest's mouse position is provided to the user on the screen, and information about policy settings such as URL/Printer Redirection, clipboard function, resolution, and limit on the number of multiple monitors. can be received from the management server 140 and the guest agent 113 can control it.

The user may view the screen of the virtual desktop 110 through the client 130 through the terminal. The terminal may be a PC or a mobile terminal. In order to access the virtual desktop 110 , a viewer may be viewed by accessing a user portal through a web browser. Here, the viewer means a program that displays the screen of the virtual desktop 110 . Meanwhile, the virtualization server 120 may install a delivery module to transmit the screen of the virtual desktop 110 , and the client may receive screen information through a delivery protocol designated by the module.

The management server 140 may have a built-in connection broker, a user portal, a management application, and the like. In the above, the connection broker identifies where the virtual desktop 110 to be used by the user is located so that the client can connect to the identified virtual desktop 110, and the client performs functions such as authentication for software approval, license check, etc. can do.

In addition, a user using a client through a browser-type user portal can control on/off the virtual desktop 110 , and this control signal is transmitted by a management protocol and installed in the virtualization server 120 . A host agent (Libvirt) may control the virtual desktop 110 .

The virtual desktop remote transmission module 123 supports a virtual graphics driver VDI interface. Virtual desktop transport libraries such as Libspice can be used in conjunction with a hypervisor in userspace to improve display performance using specific video devices.

The Virtual Desktop Remote Transport Protocol is an open remote computing solution or protocol that provides client 130 access to remote displays and devices. This is remote access to a virtual machine (VM), which provides a desktop-like user experience (UX: User eXperience) and can minimize the load on the user's computer.

Referring to FIG. 1 , the structure of the VDI system 100 will be described as follows.

First, the virtual desktop 110 is a virtual desktop directly used by a user. The virtual desktop 110 is created by the hypervisor 121 of the virtualization server 120 and screen information of the virtual desktop 110 is transferred to the client 130 by a virtual desktop remote transfer protocol.

Next, the virtualization server 120 plays a central role of the VDI system 100 . In order to drive the VDI system 100 , various programs for supporting various functions including the hypervisor 121 as well as the virtual desktop remote transmission module 123 are installed to drive the VDI system 100 .

Meanwhile, the client 130 is a client that allows a user to access the virtual desktop 110 . In the client 130 , the user can view the screen of the virtual desktop 110 with a virtual desktop remote transfer client (Viewer) that obtains screen information through the virtual desktop remote transfer protocol and displays it to the user. And the virtual desktop remote transfer module 123 in the virtualization server 120 to help access and to process the display graphics virtual desktop remote transfer-GTK library is also included. The OS of the client 130 may be driven in the form of Windows, IOS, Linux, Android, etc., and may be in the form of a thin client using only a minimum resource for display output.

The guest OS 111 is an OS of the virtual desktop 110 , that is, an OS to be used by a VDI user. This may be not only Windows, but also an OS such as Linux or Android. However, the present invention is not limited thereto.

The OS of the virtual desktop 110 to be used by the VDI user includes drivers 112 for using devices provided by the virtualization server 120 for the virtual desktop 110 . Among them, two representative drivers are the virtual graphics driver and the virtual NIC/Disk driver. The virtual graphic driver is a graphic driver for supporting display performance improvement, and the virtual graphic driver is used for smooth operation of the virtual graphic driver display device. The virtual NIC/Disk driver is used for the virtual NIC/Disk driver device to support the fast I/O provided by the hypervisor.

The virtual desktop remote transfer agent (agent) 113 is used as an option for enhancing the tasks performed in the virtual desktop 110 and the client 130 . For example, when using the client 130 mouse mode, the agent injects the mouse position and state into the guest OS. In addition, the cursor can be moved freely between the guest and the client. In addition, there is a function to redirect clipboard sharing and access-restricted URLs.

The virtualization server 120 is provided with a hypervisor 121, for example, a hypervisor driven in the form of a Linux kernel module is installed, and is compatible with the hypervisor of the user space. That is, in order to support CPU virtualization, the hypervisor needs a hypervisor in the user space, and the slow speed caused by binary conversion is compensated by using the hypervisor's acceleration function. The hypervisor of the user space serves to virtualize devices to be used by the virtual desktop 110 and allocate them to each virtual desktop. The virtualized devices include a virtual NIC/Disk driver in charge of the virtual disk and a virtual graphics driver that captures graphic output of the virtual desktop 110 and sends it to the virtual desktop remote transmission module 123 .

The host agent 122 refers to a collection of application program interfaces (APIs) and management tools configured to support virtualization. The information may be transmitted to the hypervisor 121 by changing the compression setting of the display required by the virtual desktop 110 or the setting for USB support.

The hypervisor 121 provides remote access to the virtual desktop 110 using the virtual desktop remote transfer module 123 . On one side of virtualization server 120 , virtualization server 120 communicates with client 130 using a virtual desktop remote transport protocol and on the other side interacts with hypervisor 121 .

2 is a diagram illustrating a container according to an embodiment of the present invention.

A virtual machine (VM) literally virtualizes a computer environment and is implemented as software (SW). A hypervisor capable of virtualizing computing resources is essential, and it has the advantage of configuring multiple OSs on one server, and since it is a concept that logically divides the server's resources, the availability of resources can be further increased.

Compared to a virtual machine (VM), the container 204 is a concept designed for applications, unlike a computer environment. Like a virtual machine (VM), it does not require a separate OS or driver, and shares the kernel of the host OS 203 and provides a namespace for individual applications. Therefore, compared to a virtual machine (VM) that requires another OS kernel, it is possible to run an application lighter and more efficiently, and it is also easy to deploy.

A container operation management tool such as Kubernetes is an open source system for managing containerized applications, and is a platform ( It was created for the purpose of providing a platform).

Although the concept of creating an instance is different, the program used to create a virtual machine (VM) is a hypervisor, but the container 204 requires a separate container engine 201 and typically a container engine such as Docker. There is this. However, the present invention is not limited thereto.

The OS that drives the hypervisor is the host OS 203 , and the OS that runs in a virtual machine (VM) created by the hypervisor becomes the guest OS 202 . The two OSs may or may not be the same operating system. In other words, it has the advantage of providing a variety of OSs to a virtual machine (VM) and providing a completely isolated environment.

The container engine 201 creates a container image 204 by placing an application (program) to be containerized in an isolated space together with other binary files or libraries necessary for executing the application to containerize it. This image 204 may be distributed in such a way that it is stored in a container hub. And, the container does not have its own OS, and it is a structure in which the kernel of the OS where the container engine is installed is shared.

3 is a diagram illustrating a video compression format according to an embodiment of the present invention.

In FIG. 3 , the H.264 format is described as an example for convenience as a video compression format, but the present invention is not limited thereto. For example, the H.265 format may also be used with reference to the following description. However, hereinafter, the H.264 format will be described as an embodiment for better understanding of the present invention and for convenience of description.

The H.264 format is a block-based motion compensation-based video compression standard, and is the most common method for video recording, compression, and distribution.

In relation to the present invention, in the VDI system 100, encoding is performed with an H.264 encoder 302 for an area 301 to be processed as video streaming among the display areas in the virtual desktop remote transmission module 123, and forwarded to the client 103 .

The virtualization server 120 defines a supportable video codec list, and determines and uses a codec having the highest priority in the list among the codecs supported by the client 130 as a video codec.

In order to use the H.264 codec, it can be determined by the method of hardcoding the codec by default, the method of setting through API, the method of setting by receiving a message from the client, and the like.

It may be determined whether to process a video stream in consideration of a streaming video option for the area 301 satisfying a specific condition among the display areas.

The region 301 to be processed as a video stream is compressed with a video codec. When the compressed video stream is prepared, the video stream data is delivered to the client 130 using a message of a display channel (one of the virtual desktop remote transmission channels).

Referring to FIG. 3 , the virtual desktop remote transmission module 123 transmits screen information to the client 130 . Here, the encoder 302 related to image compression is built in the virtual desktop remote transmission module 123 .

It is a part of screen information to be sent to the client 130 on the display 301 of the virtual desktop 110 . In the present specification, for convenience of description, the video part processing will be described, but the present invention is not limited thereto. For example, audio processing may also be handled by an audio codec and thus an audio encoder.

An open source-based multimedia framework 303 such as Gstreamer is an encoder that performs H.264 encoding of a video. In order to use H.264 encoding in place of the virtual desktop remote transmission MJPEG 304 according to the MJPEG method with a lot of network usage, the default video codec can be set to H.264, and the open source-based multimedia framework 303 . can do this.

The compressed image information is transmitted to the client 130 through the display channel.

Although not shown, channels may be divided according to functions such as a cursor channel and an audio channel in addition to the display channel.

4 is a diagram illustrating a session gateway according to an embodiment of the present invention.

The session gateway 440 is operated by a session service and provides an external connection service of the client 130 . That is, a proxy is provided when the client 130 connects from the outside according to network separation.

A user may access the VDI system 100 using a public network through the client 130 . However, the VDI system 120 is separated from the internal network due to a security problem, and access to the public network itself may be limited. In such an environment, the session gateway 440 is a session gateway 440 that provides a service by interworking with the virtualization server (server node in which the hypervisor is built) 120 for the connection of the client 130 . Between the session gateway 440 and the client 130 , a connection broker operates in the form of a micro service to deliver access information of the virtual desktop 110 and externally to the client 130 . Conveys information about the connection.

The process will be described in more detail with reference to FIG. 4 as follows.

The viewer 410 is a client that receives screen information to use the virtual desktop 110 . The client 130 may request a connection to the virtual desktop 110 from the virtualization server 120 .

In the VDI system 100 , all tasks are processed by the micro service architecture 420 . Through this, we try to divide the application into small, mutually independent components to share similar processes, and to speed up deployment and increase reliability through lightweight process processing. Connection brokers are also implemented in the form of microservices. The connection broker may provide screen information to the user by providing an authentication token for accessing the virtual desktop 110 and store the access request history. In addition, it provides a function to manage session gateway authentication and session connection information requests to help efficient connection.

This section is responsible for various services and system control. It provides an interface to link microservices with functions such as standard cloud OS and container operation management tools installed in the infrastructure. Here, information about the external connection coming from the client through the session gateway is set.

It is the session gateway 440 operated by the session service in charge of the service manager at the platform level. It handles the setting of connection information from the session service and provides the server connection usage for the session. It also allows a third-party proxy in the session gateway to handle the connection between the client and the server.

It is the virtualization server 120 in charge of the virtual desktop 110 to be used by the user. As the session gateway 440 connects an internal ip port and authenticates an access token, the client 130 can access the virtual desktop 110 even from an external network.

5 is a diagram illustrating data visualization according to an embodiment of the present invention.

The portal includes a user portal for users and an admin portal for administrators. In the bare metal node for the admin portal, data visualization tools such as grafana and ELK stack (elasticsearch, logstach, kibana) that can visualize log data of the VDI system 100, and MariaDB, a DB engine , data distributed messaging system tools such as kafka, and monitoring system tools such as Prometheus may be built. By using these applications, the administrator can manage the VDI usage status using logs.

In the VDI system 100 , various information such as microservices and virtual machine states, storage and network usage to be driven may be stored as logs. Logs can usually contain key values, values for specific information, and time values as text. Therefore, it is difficult to identify information such as usage trends, and if an error occurs, it may take a lot of time to solve it. Therefore, it may be necessary to collect log data in batches and process and visualize them. By using statistical information that visualizes log data, the time of error can be checked and data trends can be grasped at a glance, so the administrator can efficiently perform consulting on system service as well as system management and improve the understanding of users’ system usage. can help Log data in the system may be defined as a topic for each item. The defined data can be integrated through distributed messaging system tools. In addition, service analysis statistics can be generated through the consumer client of the data distribution messaging system tool, and the generated statistical data can be configured in the form of graphs or charts through the data visualization tool.

Data visualization will be described with reference to FIG. 5 as follows.

The viewer 510 is a client capable of executing the virtual desktop 110 and viewing a screen. Log collection starts at this stage because you may also need logs related to the client's resource usage.

The log server 520 is a server for collecting logs of client applications. Here, logs are collected and processed at the same time. For log collection and processing, a program called Fluent bit can be used.

Logs may be collected not only from log servers but also from user portals, API gateways, virtualization servers, and the like, and the collected logs are integrated by a data distribution messaging system tool, which corresponds to the management server 530 . The data distributed messaging system tool is divided into producer and consumer, and it can be monitored using the monitoring system tool in the producer. And, by the consumer client, not only logs but also alarms or statistics related logs can be informational.

The information integrated by the data distributed messaging system tool is converted into a database 540 and stored, and the collected information may be visualized by a tool such as kibana or grafana. The visualized graph or chart information may be provided to users and administrators who use the virtual desktop 110 through the client 130 .

6 is a diagram illustrating the VDI system 100 using a snapshot function according to an embodiment of the present invention.

The “snapshop function” described in this specification is a function that captures the state of the storage system at a specific point in time, that is, a function provided by the hypervisor. A function that allows you to go back to that point in time. In this sense, the snapshot function is different from the usual backup (back-up). Hereinafter, in the present specification, well-known techniques related to snapshots will be omitted, and parts related to the present invention will be mainly described.

In particular, the present invention intends to utilize such a snapshot function in the virtualization technology, that is, the VDI system 100 .

There are two main methods for providing virtual desktops to users: the pooled method and the dedicated method.

Here, in the pooled method, the same OS image is provided to all users and the profile and data are connected from network storage. On the other hand, the dedicated method is a method in which each user is assigned their own virtual desktop.

Unlike the dedicated method, the pooled method is a VDI system for temporary users. When a user logs off, all data in the virtual machine (VM) is initialized and resources are returned to the system. Therefore, according to the pooled method, it is easy to manage the VDI system, and when a specific user does not use the VDI system, the environment is configured so that other users can use it more leisurely, thereby increasing the efficiency of system resources.

However, this pooled method may cause inconvenience as existing data is initialized when the user intermittently uses the virtual desktop. Therefore, in this case, the Dedicated method may be more advantageous, but in this case, the resource is allocated to the corresponding user, so system resource waste may be severe depending on the frequency of use, ie, it may be difficult to use the flexible system resource.

In particular, in order to solve the disadvantages of the conventional pooled method, simply copying the golden image takes a long time and has problems due to low storage efficiency.

Therefore, in the present invention, a virtual desktop instance is created by using a snapshot function in a pooled method to clone a golden image. Such a snapshot image has a relatively small file size compared to a simple copy of a golden image, so storage efficiency can be improved, and a virtual machine (VM) can be provided faster than the conventional one. However, the present invention is not limited to the pooled method, and is applicable to the dedicated method in the same or similar manner.

That is, in the present invention, the last point in time when temporary users used the virtual desktop is stored using the snapshot function. Here, the data area of the temporary user is stored in a separate storage, and when the user uses the virtual desktop again, the data area is mapped so that the user can quickly access the existing data even in the case of intermittent use. In addition, as described above, when the user does not use the virtual desktop, the efficiency of the system resource can be increased by maintaining the state in which the resource is returned.

In relation to the present invention, the last time point at which the snapshot image is generated refers to the end point of use of the virtual desktop, but is not limited thereto and can be arbitrarily defined. For example, the last time point may be a time when a user makes a logoff request, a time when the execution of the actual virtual desktop is terminated after the logoff request, and the like.

The above describes a case in which the execution of the virtual desktop normally operates according to the user's login and logoff (or termination), but otherwise, there may be cases in which the virtual desktop operates abnormally. have. In this case, regardless of the normal case, the virtual desktop may be automatically performed according to a setting or by determining an arbitrary condition. For example, when the virtual desktop is running or no input is received from the user for a predetermined period of time, it is determined as if the logoff request has been made and whether the predetermined time has elapsed, and a snapshot image at the time point is randomly generated and temporarily can be saved

Meanwhile, as described above, even if the first snapshot image is randomly generated, the predetermined time may be counted again and the snapshot image may be further generated at least one time or more. The randomly generated and temporarily stored snapshot image may be randomly deleted after a user's normal logoff request is received, a new snapshot image is created after the snapshot image is created, or a predetermined time has elapsed. When the snapshot image is additionally generated, it may be stored together with the additionally created snapshot image without being arbitrarily deleted for comparison.

According to the embodiment, as described above, when a predetermined time elapses while creating a snapshot image because user input for the virtual desktop is not received, the VDI system may terminate the execution of the virtual desktop. In this case, immediately before the termination It is also possible to generate and store the last snapshot image regardless of whether the predetermined time has elapsed.

Alternatively, the virtual desktop may randomly generate and temporarily store a snapshot image repeatedly at a predetermined period of time according to an implementation example, in order to prepare for the case where the virtual desktop is terminated against the user's will due to other reasons. . Also in this case, when a new snapshot image is created, the previously created snapshot image may be deleted or stored and maintained, which may be determined according to an implementation example. For example, the user may arbitrarily set the period in which the snapshot image is generated.

Meanwhile, although not shown, when information on a user's virtual desktop use state is stored or counted in the VDI system, the snapshot image generation period may be arbitrarily adjusted using the stored or counted information. For example, if a specific user typically uses the virtual desktop for 1 hour, the snapshot image may be created in 30-minute units or 50 minutes after the start of use.

In addition, when the virtual desktop usage time of the corresponding user increases compared to the previous data, the snapshot image creation cycle may be set shorter than before.

Although the snapshot image generation cycle has been described based on the usage time, the present invention is not limited thereto, and the input cycle (for example, if the user input cycle is short, the snapshot generation cycle is relatively long while the user uses the virtual desktop) definition, etc.), the number or properties of used applications, storage status, and the like, based on the reference, the creation cycle may be continuously adjusted in the process of using the virtual desktop.

In relation to the user's input to the virtual desktop, although not shown, not only cursor movement, but also touch input, audio input, gesture input, movement through a client built-in or external camera sensor, iris recognition, face recognition, and fingerprint recognition Various methods may be used. The content related to the user input may also be used in relation to the recognition of the user.

In addition, the snapshot function may be performed manually by a user or automatically in the VDI system regardless of system settings or it.

6, the present invention will be described in more detail as follows.

The processing related to the creation of the virtual desktop is performed by a virtual machine management module such as Nova, which is one of the compositions of the standard cloud OS (601). Here, when the command for generating the virtual desktop is scheduled in an API form and transmitted to the virtualization server 120 , the hypervisor (QEMU) creates an instance for the OS area using the golden image.

The golden image is managed by the image storage of instances managing an image that can be used in the hypervisor 121 of the standard cloud OS composition as the source of the instance for the OS area ( 602 ).

The OS area is an instance created by the golden image and refers to a common area provided to all users ( 603 ).

On the other hand, the user data area is an image of a virtual machine image format, such as qcow2, which is created according to the user's virtual desktop usage status on the underlying OS area. Accordingly, when the user ends the use of the virtual desktop, a snapshot image is created for an arbitrary point in time (eg, the last point in time) of the user data area, and the generated snapshot image is stored in the NAS (604).

The NAS stores a snapshot image of the user data area as a backend storage (605).

If the user wants to use the virtual desktop of the last time it was used again, the user data area stored in the NAS is mapped with the OS area after an authentication process so that it can be used ( 605 ).

When a virtual machine (VM) request is received through the virtual machine management module, a snapshot image of the OS area is created through the golden image ( 611 ).

When a user tries to use a virtual desktop again after stopping using the virtual desktop, it goes through AD (Active Directory) authentication information along with the OS realm created as a golden image to check whether the user's data realm is correct, is combined to provide a virtual desktop to the user again (613, 614).

7 is a flowchart illustrating a process of using a snapshot function in a VDI system according to an embodiment of the present invention, and FIG. 8 is a process of using a snapshot function in a VDI system according to another embodiment of the present invention. It is a flowchart shown to explain.

Here, FIG. 7 shows the process of creating and storing a snapshot image in the virtualization server 120, and FIG. 8 is the virtual desktop execution on the client 130 in the virtualization server 120 after the snapshot image is stored according to FIG. The process of providing the snapshot function in the city is described. 7 and 8 are both described from the point of view of the virtualization server 120, but the configuration for performing each step refers to FIG. 6 and will not be described in detail here.

First, referring to FIG. 7 , when a virtual desktop execution (or creation) request is received from the user in the server 120 (S701), a snapshot image of the OS area is created through the golden image and stored in the database, and the It is managed in the image storage (S702).

The server 120 determines whether a user's request to terminate the use of the virtual desktop is received (S703).

As a result of the determination in step S703, if the user's request to terminate the use of the virtual desktop is received, a snapshot image of the user data area is created and stored in the NAS (S704). Otherwise, it waits while continuously monitoring whether the termination request is received.

After the step S704, the server 120 ends the execution of the virtual desktop (S705).

Next, referring to FIG. 8 , when a virtual desktop execution (or creation) request is received from the user in the server 120 (S801), it is determined whether there is a request to return to the user's last use time (previous use time) (S802). ). Although not shown, this may be determined by receiving a user's selection input by providing a pop-up message or a separate UI/UX.

If it is determined in step S802, if the user does not want to return to the previous use point, the virtual desktop is executed as it is (S805). After the execution, the process of FIG. 7 described above may be performed.

On the other hand, as a result of the determination in step S802, if the user wants to return to the previous use point, the user's data area is verified through AD authentication (S803).

If there is no problem as a result of the verification, the server 120 detects a snapshot image of the OS area and the user data area, combines the detected data, and provides it to the virtual machine (VM) (S804).

The server 120 executes a virtual desktop (S805). As described above, the subsequent process may be the process of FIG. 7 described above.

The present invention is not necessarily limited to the time-series sequence shown in FIGS. 7 and 8 . For example, certain steps or processes may be performed simultaneously or performed at different times according to embodiments.

Meanwhile, the steps shown in FIGS. 7 to 8 can be implemented as computer-readable codes on a computer-readable recording medium. The computer-readable recording medium includes all types of recording devices in which data readable by a computer system is stored. That is, the computer-readable recording medium includes a magnetic storage medium (eg, a ROM, a floppy disk, a hard disk, etc.), an optically readable medium (eg, a CD-ROM, a DVD, etc.) and a carrier wave (eg, the Internet). storage media such as transmission via In addition, the computer-readable recording medium is distributed in a network-connected computer system so that the computer-readable code can be stored and executed in a distributed manner.

The above description is merely illustrative of the technical idea of this embodiment, and various modifications and variations will be possible by those skilled in the art to which this embodiment belongs without departing from the essential characteristics of the present embodiment. Accordingly, the present embodiments are intended to explain rather than limit the technical spirit of the present embodiment, and the scope of the technical spirit of the present embodiment is not limited by these embodiments. The protection scope of the present embodiment should be interpreted by the following claims, and all technical ideas within the equivalent range should be construed as being included in the scope of the present embodiment.

Claims (14)

In the virtual desktop data processing method performed in the virtualization server,
generating and storing a first snapshot image of the OS area through the golden image;
generating and storing a plurality of second snapshot images for an arbitrary point in time in the user data area;
terminating execution of the virtual desktop when a request to terminate the use of the virtual desktop is received;
receiving the virtual desktop re-execution request;
determining whether the virtual desktop re-execution request is a return request to a virtual desktop use point-in-time state at an arbitrary point in time;
verifying the user's data area through Active Directory (AD) authentication when the request for re-execution of the virtual desktop is determined as a request to return to the state of the virtual desktop use point at an arbitrary point in time;
providing a virtual machine (VM) by combining a first snapshot image of the created OS area and a second snapshot image of a user data area at a specific point in time; and
Re-launching and providing a virtual desktop; including,
The step of determining whether a request to return to the state of the virtual desktop at any point in time is requested,
providing a pop-up message or UI/UX related to the return request; and receiving a selection input through the provided pop-up message or UI/UX,
The first snapshot image for the OS area and the second snapshot image for the user data area through the golden image are stored in different storage,
How to process virtualized desktop data. delete delete According to claim 1,
The first snapshot image for the OS area through the golden image is,
stored in a database and managed by an image repository of instances,
How to process virtualized desktop data. According to claim 1,
The second snapshot image for the user data area is,
stored on NAS,
How to process virtualized desktop data. delete According to claim 1,
The OS area is an instance created by the golden image and is a common area provided by all users, and the user data area is an image of a virtual machine image format generated according to the user's virtual desktop usage status on the OS area as a base,
How to process virtualized desktop data. In the virtualization system for processing virtual desktop data,
including a virtualization server;
The virtualization server,
Creates and stores a first snapshot image for the OS area through the golden image, creates and stores a plurality of second snapshot images for an arbitrary point in time in the user data area, and when a request to terminate the use of the virtual desktop is received, Terminate the virtual desktop,
When the virtual desktop re-execution request is received, it is determined whether the virtual desktop re-execution request is a request to return to the virtual desktop use point-in-time state at any point in time, and the virtual desktop re-execution request is returned to the virtual desktop use point-in-time state at any point in time. If it is determined as a return request, the user's data area is verified through Active Directory (AD) authentication, and a first snapshot image of the created OS area and a second snapshot image of the user data area at an arbitrary point in time are verified. by combining and providing it to a virtual machine (VM) to re-run the virtual desktop and provide the operation,
The virtualization server,
A pop-up message or UI/UX related to the return request is provided, and a selection input is received through the provided pop-up message or UI/UX to determine whether a return request is made to the virtual desktop use point-in-time state at the arbitrary point in time. judge,
The virtualization server,
Storing the first snapshot image for the OS area and the second snapshot image for the user data area through the golden image in different storage, respectively,
virtualization system. delete delete 9. The method of claim 8,
The virtualization server,
Storing the first snapshot image for the OS area through the generated golden image in a database and managing it by the image storage of instances,
virtualization system. 9. The method of claim 8,
The virtualization server,
To store a second snapshot image for the user data area on the NAS,
virtualization system. delete 9. The method of claim 8,
The OS area is an instance created by the golden image and is a common area provided by all users, and the user data area is an image of a virtual machine image format generated according to the user's virtual desktop usage status on the OS area as a base,
virtualization system.

Images