KR20140102989A - Registration system and method for virtual desktop service of client that has multiple user accounts - Google Patents

Abstract

The present invention relates to a subscription system and a subscription processing method used in a virtual desktop service providing a separate virtual desktop environment for multiple companies and organization clients from a data center. The present invention calculates the number of physical servers to be allocated to the clients based on information included in the clients′ virtual desktop service subscription request, allocates the physical servers to the clients, and distributes a virtual system machine to the allocated physical servers to reflect the requested conditions regarding the clients′ virtual desktop environment on the virtual desktop service.

Description

Technical Field [0001] The present invention relates to a subscription system and method for a virtual desktop service for a client having a plurality of user accounts,

The present invention relates to a subscription system and a subscription processing method for a virtual desktop service for a client having a plurality of user accounts, and more particularly, to a virtual desktop service To a subscription system for processing a subscription of a client and an subscription processing method.

Desktop virtualization can be divided into Server-Based Computing (SBC) and Virtual Desktop Infrastructure (VDI). While SBC provides users with a virtual desktop environment through terminal services provided by the server operating system, VDI creates a virtual machine for the desktop environment on the server and installs the operating system and applications on the created virtual machine to the user There is a difference in that it implements a virtual desktop environment. Among them, the virtual desktop service is more popular in that it can have a desktop environment similar to a user's local desktop environment.

In the case of providing a virtual desktop service to a client having a plurality of user accounts, that is, a company or an organization unit, conventionally, one physical hardware and virtualization software have been provided for each client.

However, as the number of clients in an enterprise or organizational unit that desire a virtual desktop service increases, it is required to provide virtual desktop services to a large number of enterprise or organizational unit clients within a single data center.

In particular, such a virtual desktop service must provide a virtual environment that is physically or logically separated on a client-by-client basis, and a plurality of user accounts may be assigned to the client, so that the client's subscription step reads the requirements for the virtual environment, It is necessary to reflect the allocation of physical system resources to the service or the allocation of virtual machines.

However, since the virtual desktop service is not yet active yet, at the client's subscription stage, the requirements for the client's virtual environment are read, and the virtual desktop service is allocated physical system resources or virtual machines The technology that can be reflected is not specifically disclosed.

Korean Patent Laid-Open Publication No. 2012-0064574

SUMMARY OF THE INVENTION The present invention provides a virtual desktop service providing a virtual desktop environment separated from a plurality of companies or organizational clients in a data center, And to provide subscription systems and subscription processing methods of virtual desktop services that can be reflected in allocating physical system resources to virtual desktop services or allocating virtual machines.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory and are not intended to limit the invention to the particular embodiments that are described. It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory and are not restrictive of the invention, There will be.

According to an aspect of the present invention, there is provided a virtual desktop service subscription system including a virtual desktop service subscription service including a quantity of a user virtual machine to provide a virtual desktop environment using virtual computing resources that virtualize physical computing resources of a data center, A subscription receiving unit for receiving an application; A physical server quantity calculation unit for calculating a quantity of physical servers to be allocated to the client based on information included in the virtual desktop service subscription request; A physical server allocation unit allocating at least one physical server among the available physical servers of the data center to the client based on the calculated physical server quantity; And a system virtual machine distributing unit for distributing the system virtual machine constituting the infrastructure of the virtual desktop environment to the allocated physical server.

According to another aspect of the present invention, there is provided a subscription processing method for a virtual desktop service, the method comprising: providing a virtual desktop service including a quantity of a user virtual machine to provide a virtual desktop environment using virtual computing resources, Receiving a subscription application; Calculating a number of physical servers to be allocated to the client based on information included in the virtual desktop service subscription request; A physical server allocation step of allocating at least one physical server among available physical servers in the data center to the client based on the calculated physical server quantity; And a system virtual machine distribution step of distributing a system virtual machine constituting an infrastructure of the virtual desktop environment to the allocated physical server.

According to the present invention, in providing a virtual desktop service that provides a virtual desktop environment based on physical system resources physically separated from each other on a client basis to a corporation or organizational clients having a plurality of user accounts in a data center, It will be able to better reflect the requirements of the client in allocating physical system resources or assigning virtual machines to the virtual desktop service.

FIG. 1 is a block diagram illustrating an overall configuration of a virtual desktop service system for a client according to an exemplary embodiment of the present invention. Referring to FIG.
2A is a block diagram showing a schematic configuration of a subscription system of a virtual desktop service according to a preferred embodiment of the present invention.
FIG. 2B illustrates a method of subscribing to a virtual desktop service according to an exemplary embodiment of the present invention.
3 is a schematic diagram for explaining the entire structure of a data center providing a virtual desktop service according to a preferred embodiment of the present invention.
4 is a diagram illustrating a process of processing a subscription application for a virtual desktop service in a subscription system of a virtual desktop service according to a preferred embodiment of the present invention.
FIG. 5 is a diagram illustrating a specific process of assigning a physical server to a client who has made a subscription request according to a preferred embodiment of the present invention.
6 is a diagram illustrating a specific process of distributing a router virtual machine according to a preferred embodiment of the present invention.

The following merely illustrates the principles of the invention. Thus, those skilled in the art will be able to devise various apparatuses which, although not explicitly described or shown herein, embody the principles of the invention and are included in the concept and scope of the invention. Furthermore, all of the conditional terms and embodiments listed herein are, in principle, intended only for the purpose of enabling understanding of the concepts of the present invention, and are not intended to be limiting in any way to the specifically listed embodiments and conditions . It is also to be understood that the detailed description, as well as the principles, aspects and embodiments of the invention, as well as specific embodiments thereof, are intended to cover structural and functional equivalents thereof. It is also to be understood that such equivalents include all elements contemplated to perform the same function irrespective of currently known equivalents as well as equivalents to be developed in the future.

Thus, the functions of the various elements shown in the drawings, including the functional blocks shown in the figures or similar concepts, may be provided by use of dedicated hardware as well as hardware capable of executing software in connection with appropriate software. When provided by a processor, the functions may be provided by a single dedicated processor, a single shared processor, or a plurality of individual processors, some of which may be shared. Also, the use of terms such as processor, control, or similar concepts should not be construed as exclusive reference to hardware capable of executing software, but may include, without limitation, digital signal processor (DSP) hardware, (ROM), random access memory (RAM), and non-volatile memory. Other hardware may also be included.

The above objects, features and advantages will become more apparent from the following detailed description in conjunction with the accompanying drawings. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

On the other hand, when an element is referred to as "including " an element, it does not exclude other elements unless specifically stated to the contrary.

Hereinafter, the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a diagram illustrating a general configuration of a virtual desktop service system 100 for a client according to a preferred embodiment of the present invention.

Referring to FIG. 1, the virtual desktop service system 100 according to the present embodiment manages a client-specific virtual desktop system 110, which is a set of virtual machines allocated to each client, and the virtual desktop systems 110, And a centralized management system 120 of the service provider that controls. It is apparent that other components other than the above-described components can be included in the virtual desktop service system 100 according to the present embodiment.

The virtual desktop system 110 and the central management system 120, which are components of the virtual desktop service system 100 according to the present embodiment, include at least a program module for communicating with an external terminal device or an external server, These program modules may be included in the virtual desktop service system 100 as an operating system, an application program module, and other program modules, and may be physically stored in various kinds of known storage devices. In addition, these program modules may be stored in a remote storage device capable of communicating with the virtual desktop service system 100. These program modules, on the other hand, encompass routines, subroutines, programs, objects, components, data structures, etc., that perform particular tasks or perform particular abstract data types as described below in accordance with the present invention, Do not.

The virtual desktop system 110 for each client according to the present embodiment includes user virtual machines 116 allocated to a plurality of user accounts, a system virtual machine 116 allocated for each client and supporting virtual desktop services of individual user virtual machines (111 to 115).

The user virtual machines 116 directly provide a virtual desktop environment for each user account using virtual computing resources that virtualize the physical computing resources of the data center, using local physical computing resources in the local desktop environment To provide a good level of virtual desktop environment, the same operating systems and applications as the local desktop environment can be installed and operated.

The system virtual machines include a router virtual machine (RVM) 111 to 112, an active directory virtual machine (AD) 113, a desktop delivery control virtual machine (DDC) 114 and a communication encryption virtual machine (VPX) have.

In other words, according to the present embodiment, a client virtual machine (RVM) 111 to 112, an active directory virtual machine (AD) 113, and a desktop delivery virtual machine (DDC) And may additionally include a communication encryption virtual machine (VPX) 115 according to the selection of the client.

The router virtual machine (RVM, 111 to 112) allocates a service IP to each of the user virtual machines 116 to mediate communication between the user virtual machines 116 and the external network, And performs a router function of a virtual private network for each client that routes communication in the private network of the client. For example, in order to access the Internet in the virtual desktop environment provided through the user virtual machines 116, the user accesses through the router virtual machine. At this time, the router virtual machine (RVM, 111 to 112) can perform a function as a client external Internet aggregation switch.

 In addition, the router virtual machine (RVM, 111 to 112) may include a DHCP server that allocates a dynamic IP to the user virtual machines 116.

It is preferable that the router virtual machine (RVM, 111 to 112) has a structure that can be dynamically added or scaled out according to the number of user virtual machines.

A desktop delivery control virtual machine (DDC) 114 connects a session between a user virtual machine and a user account accessing the user virtual machine, and manages the virtual desktop service provided by the user virtual machine.

The Active Directory Virtual Machine (AD) 113 manages the information of the user accounts of the user virtual machines and the desktop delivery control virtual machine, and authenticates the user account that accesses them. In other words, the Active Directory virtual machine (AD) 113 provides an Active directory service for managing user account information in a virtual private network for each client having virtual machines provided for each client as its components. To this end, both the user virtual machines and the desktop delivery control virtual machine must be joined to the active directory of the Active Directory virtual machine (AD 113).

The communication encryption virtual machine (VPX) 115 is a system virtual machine that can be included by selection of a client, and is a virtual machine that performs a function of encrypting a communication protocol between a user account of a client and a user virtual machine. And can function as an access gateway in a communication process between the machines.

The communication protocol between the client and the user virtual machine can use the ICA communication protocol of Citrix, and the communication encryption virtual machine can encrypt this ICA.

In a case where a communication encryption virtual machine is included in the system virtual machine, the client terminal and the user virtual machine do not directly communicate (for example, desktop screen transmission) in the virtual desktop service, The machine will make SSL communication, and at this time, the communication encryption virtual machine will function as a proxy server of the virtual desktop service of the client.

The service provider's central management system 120 according to the present embodiment may include a VMS 121, a Portal 122, a VSV 123 and a VMS-UI 124.

The VMS 121 is a component for performing a core management function and a VDI extension function of the entire data center, wherein the core management function is a function for managing physical computing resources belonging to a data center in units of Zone / Pod / Cluster / Storage / Host Manage the entire storage and network resources in the data center, manage packages or templates to be installed in user virtual machines and system virtual machines, manage pools of virtual machines to be used in creating or adding virtual machines, The VDI extension function is a function of the virtual desktop service which is independently provided for each client through control of the desktop delivery control virtual machine 113 and the active directory virtual machine 114, You can adjust things.

The Portal 122, the VSV 123, and the VMS-UI 124 are all components that provide a user interface. The Portal 122 receives a subscription application for a virtual desktop service from a client, The VSV 123 provides a user interface for a portion for billing the virtual desktop service provided to the client, and the VSV 123 provides the VDI extension function portion of the management function of the VMS 121 And the VMS-UI 124 provides a user interface related to the core management function portion of the management functions of the VMS 121. [

The service APIs are called in the RESTful manner in the portal 122, the VSV 123 and the VMS-UI 124 to activate the program modules belonging to the API layer mounted on the VMS 121, Function calls to perform core management functions for managing infrastructure or virtual machines, VDI functions for managing AD or DDC, monitoring functions, and scheduling functions.

Here, the service API refers to an API that can be called from outside the VMS 121 (for example, the portal 122, the VSV 123, and the VMS-UI 124) And can provide request and response points for the individual functions that constitute it.

Through the virtual desktop service system 100 according to the present embodiment. In order to provide the virtual desktop service to the client, a subscription request of the virtual desktop service from the client is requested through the portal 122, and the infrastructure environment of the client's virtual desktop service must be established before the user virtual machines are created.

The infrastructure environment of the virtual desktop service for the client should allocate physical system resources for each client and generate and distribute the system virtual machine set on the allocated physical system resources. The process of installing the software package for providing the software package must first be performed.

In the portal 122 according to the present embodiment, the requirements of the client's virtual environment are read from the client's subscription and reflected in the establishment process of the infrastructure environment of the virtual desktop service.

FIG. 2A is a block diagram illustrating a schematic configuration of a subscription system 200 of a virtual desktop service according to a preferred embodiment of the present invention, and FIG. 2B is a block diagram of a subscription system 200 A method of subscribing to a virtual desktop service. The subscription system 200 of the virtual desktop service according to the present embodiment may correspond to a configuration in which the portal 122 or the VMS 121 and the portal 122 of the virtual desktop service system shown in Fig. 1 are combined with each other. Accordingly, the same items as those in the description of the virtual desktop service system shown in Fig. 1 can be referred to.

2A, the subscription system 200 of the virtual desktop service according to the present embodiment includes a subscription application reception unit 210, a physical server quantity calculation unit 220, a physical server subscription unit 230, (240).

The subscription application receiving unit 210 receives a virtual desktop service subscription application including the number of user virtual machines of the virtual desktop service from the client (S201).

In addition to the number of user virtual machines, the virtual desktop service subscription application may additionally include the physical resources of the virtual desktop environment provided by the virtual desktop service (total CPU capacity allocated to the client, total memory capacity, total storage capacity, etc.) .

In addition, the virtual desktop service subscription application may additionally include a client's choice as to whether to apply more security-enhanced encryption to the communication protocol between the client's user account for the virtual desktop service and the user virtual machine.

The physical server quantity calculation unit 220 calculates the physical server quantity to be allocated to the virtual desktop service of the client based on the information included in the virtual desktop service subscription request received in the subscription application reception unit 210 (S202).

The physical server quantity calculation unit 220 may calculate the physical server quantity based on the number of user virtual machines included in the virtual desktop service subscription application. Depending on the implementation, information such as the total CPU capacity, the total memory capacity, and the total storage capacity, as well as the number of user virtual machines in the calculation of the number of physical servers, as well as other information included in the virtual desktop service subscription application, You can refer to it as a reference.

 The physical server allocation unit 230 allocates at least one physical server among the available physical servers to the client based on the physical server quantity calculated by the physical server quantity calculation unit 220 (S203). For example, among the available physical servers, it is preferable to allocate the same number of physical servers to the clients as the number of physical servers calculated by the physical server quantity calculation unit 220.

When there are available physical servers that are equal to or larger than the number of physical servers calculated by the physical server quantity calculation unit 220, considering the physical distance between the physical servers, clusters to which the physical servers belong, Servers can be assigned preferentially.

The system virtual machine distributor 240 creates and distributes a system virtual machine that implements the infrastructure of the virtual desktop service to at least one physical server allocated in the physical server assignment unit 230 (S204).

In distributing the system virtual machine to the physical server in the system virtual machine distributor 240, more security-enhanced encryption is applied to the number of user virtual machines included in the virtual desktop service subscription application and the communication protocol of the virtual desktop service And the client's choice as to whether or not to do so.

For example, the number of router virtual machines in the system virtual machine can be determined based on the number information of the user virtual machines, and the selection information of the client about whether to apply more security-enhanced encryption to the communication protocol of the virtual desktop service , It is possible to determine whether or not the communication encryption virtual machine is distributed.

FIG. 3 is a schematic diagram for explaining the overall structure of a data center 300 providing a virtual desktop service according to a preferred embodiment of the present invention. The user virtual machines 315 to 316, 325, The RVMs 311 to 312 and 321 and 331 and the ADs 313 to 323 and 333 and the DDCs 314 to 324 and 334 and the VPX 335 of the virtual desktop service system shown in FIG. The router virtual machines 111 to 112, the active directory virtual machine 113, the desktop delivery control virtual machine 114, and the communication encryption virtual machine 115, respectively. Therefore, the same items as those in the description of the virtual desktop service system shown in Fig. 1 are referred to.

The virtual desktop service according to the present embodiment can allow a plurality of independent clients to receive virtual desktop services of the same type in a single data center 300. [

The data center 300 according to the present embodiment is a concept including a set of physical servers and storages for providing virtual desktop services and a virtual desktop service management system for managing the virtual desktop services, Refers to a combination of hardware consisting of a CPU, a memory, a disk, and a network card, and a set of physical servers sharing the same storage among them may be referred to as a cluster.

 In the virtual desktop service according to the present embodiment, the virtual desktop service for a specific client should or should not be affected by the virtual desktop service for other clients. To this end, the data center 300 according to the present embodiment It is also possible to provide a client-specific virtual desktop system including independent hardware resources and independent network resources for each client.

Referring to FIG. 3, the data center according to the present embodiment includes client-specific virtual desktop systems 310, 320, and 330. The client-specific virtual desktop system is a collection of user and system virtual machines, including user virtual machines, RVM, AC, and DDC, and optionally, further VPX, operating independently of each other, It is presupposed that the security between them is maintained.

The RVMs 311, 321 and 331 must allocate service IPs to the user virtual machines 315, 325 and 335, respectively, and the number of assignable service IPs is limited. Therefore, When the number of service IPs is exceeded, an additional RVM 312 is generated and configured in the form of a multi-RVM. In this case, in order to prevent IP conflict, the network between the user virtual machines 315 connected to the existing RVM 311 and the existing RVM 311 and the user virtual machines 316 connected to the newly created RVM 312 and the additional The networks between the RVMs must be logically separated from each other.

FIG. 4 is a diagram illustrating a process of processing a subscription request for a virtual desktop service in a subscription system of a virtual desktop service according to a preferred embodiment of the present invention. The subscription system of the virtual desktop service according to the present embodiment is shown in FIG. 1 The VMS 121 of the virtual desktop service system and the portal 122 are combined with each other. Accordingly, the same items as those in the description of the virtual desktop service system shown in Fig. 1 can be referred to.

Referring to FIG. 4, the portal 122 receives a subscription application of a virtual desktop service from a client (S401) and delivers it to the VMS 121. FIG. The subscription request of the virtual desktop service according to the present embodiment includes the number of user virtual machines to provide the virtual desktop service, the client's requirements for the virtualized computing resources to be included in the virtual desktop service, such as CPU, memory, and storage capacity, And may include the client's choice of whether or not the desktop service is in secure mode.

The VMS 121 calculates the number of physical servers to be provided to the virtual desktop service of the client corresponding to the subscription application based on the information included in the subscription application received from the portal 122, At least one physical server among available physical servers is allocated to the client as a basis (S402).

In step S403, at least one or more router virtual machines corresponding to the number of user virtual machines required for the virtual desktop service of the client are allocated to at least one physical server allocated in step S402.

At this time, the number of user virtual machines, which is a criterion for determining the number of distributions of the router virtual machines, may be determined according to the number information of the user virtual machines included in the subscription application of the virtual desktop service received in step S401.

In this embodiment, the router virtual machine is allocated with the DHCP IP for the management interface of the router virtual machine, and is generated based on the DHCP IP. The router virtual machine generates the DHCP setting information of the service virtual network including the system virtual machines and the user virtual machine And port forwarding information, and performs an initial setup process necessary for initial operation of the router virtual machine. All the settings necessary for the initial operation of the router virtual machine are completed and the router virtual machine is run on the selected physical server, thereby completing the series of router virtual machine distribution processes (S403).

If the number of physical servers allocated to a client is two or more, a router virtual machine may be distributed to a physical server selected by a predetermined allocation rule among two or more physical servers. If the number of distributed virtual machines is two or more More than one router virtual machines may be deployed in one physical server, and one router virtual machine may be deployed in each of two or more physical servers. These are merely examples for convenience of description of the present invention, and the present invention is not limited thereto.

In step S402, one active directory virtual machine is distributed to at least one physical server allocated in step S402. When the number of physical servers allocated to the client is two or more, the active directory virtual machine may be distributed to the physical server selected by the predetermined allocation rule among the two or more physical servers.

In the present embodiment, the Active Directory virtual machine is allocated based on the DHCP IP for the management interface of the Active Directory virtual machine, and is created through the router virtual machine distributed in step S403, (IP), and performs other setting operations. In addition, by finishing all the settings necessary for the initial activation of the Active Directory virtual machine, the process of distributing a series of Active Directory virtual machines (S404) can be completed by running the Active Directory virtual machine on the selected physical server.

In step S402, one desktop delivery control virtual machine is distributed to at least one physical server allocated in step S402. If the number of physical servers allocated to the client is two or more, the desktop delivery control virtual machine may be distributed to the physical server selected by the predetermined allocation rule among the two or more physical servers.

In the present embodiment, the desktop delivery control virtual machine is allocated based on the DHCP IP for the management interface of the desktop delivery control virtual machine, and is generated through the router virtual machine distributed in the step S403, IP (Service IP) in the service network is allocated, and other setting operations are performed. Then, the distribution process (S405) of the series of desktop delivery control virtual machines can be completed by finishing all the settings required for the initial operation of the desktop delivery control virtual machine and running the desktop delivery control virtual machine on the selected physical server.

If the virtual desktop service of the client is a secure mode (S406), the communication encrypted virtual machine, which is a system virtual machine required for the security mode, is distributed to at least one physical server allocated in operation S402 (S407). When the number of physical servers allocated to the client is two or more, the communication encryption virtual machine may be distributed to the physical server selected by the predetermined allocation rule among the two or more physical servers.

At this time, whether or not the virtual desktop service is in the security mode can be determined based on extraction of the client's choice as to whether or not the security mode of the virtual desktop service is received from the subscription application of the virtual desktop service received in step S401.

In the present embodiment, the communication encryption virtual machine is created based on the DHCP IP assigned to the management interface of the communication encryption virtual machine, and is generated through the router virtual machine distributed in step S403, And performs an initialization process necessary for initial operation of the communication encryption virtual machine through an updating process such as port forwarding information and encryption algorithm setting information. The process of distributing a series of communication encryption virtual machines S407 can be completed by finishing all the settings necessary for the initial operation of the communication encryption virtual machine and driving the communication encryption virtual machine.

The process of distributing the system virtual machine in steps S403, S404, S405, and S407 in this embodiment may include a process of calling the following system API, DeploySVM ().

[Table 1]

Referring to the above table, the DeploySVM among the system APIs according to the present embodiment can be limitedly invoked only in a program module executed in an account having the A1 privilege. The request parameters include serviceprofile_id, description, cpus, mem_size, host_id, storage_id, serviceprofile_id, cpus, mem_size, host_id, storage_id, and org_id can be input as integer values. Of these, serviceprofile_id must be included as a request parameter in the method call. One can omit the rest or enter it selectively.

These DeploySVMs are able to use the results of performing the request as id, name, description, os_id, os_name, status, cpus, mem_size, vmtype_id, vmtype_name, system_type, org_id, org_name, host_id, host_name, cluster_id, cluster_name, pod_id, pod_name, zone_id, cpus, mem_size, vmtype_id, org_id, of which the corresponding method is called through the response values corresponding to zone_name, created, uptime, boot, iso_id, iso_name, ha, locked, nics and disks. response values corresponding to host_id, cluster_id, pod_id, zone_id, and iso_id have an integer type. Response values corresponding to created and uptime indicate a specific time. Response values corresponding to nics, disks, It is defined as having a list form.

For example, the distribution of the router virtual machine in step S403 may be implemented to include calling the DeploySVM () method with an input parameter value of "rvm " corresponding to the serviceprofile_id. The deployment of the Active Directory virtual machine in step S404 may be implemented to include calling the DeploySVM () method with an "ad" input parameter value corresponding to the serviceprofile_id. The distribution of the desktop delivery control virtual machine in step S405 may be implemented to include calling the DeploySVM () method with "ddc" as the input parameter value corresponding to the serviceprofile_id. The distribution of the communication encryption virtual machine in step S407 may be implemented to include a process of calling the DeploySVM () method with "vpx" as the power parameter value corresponding to the serviceprofile_id.

FIG. 5 is a diagram illustrating a specific process of assigning a physical server to a client who has made a subscription request according to a preferred embodiment of the present invention.

The virtual desktop service provides a separate physical server for each client to isolate the client's data from the other client's data. Therefore, prior to the process of distributing or creating a system virtual machine or a user virtual machine, it is checked whether there is an available physical server to accommodate the number of user virtual machines requested by the client, and an available physical It is necessary to secure the server first.

First, a subscription application including the number of user virtual machines requested for the virtual desktop service is input (S501).

The virtual desktop service provides a separate physical server for each client to isolate the client's data from the other client's data. Accordingly, in step S502, the number of physical servers required is calculated based on the number of user virtual machines input through step S501 prior to the process of distributing or creating the system virtual machine or the user virtual machine. The number of virtual machines that can be accommodated in one physical server is limited. Therefore, it is necessary to first calculate the number of required physical servers based on the number of user virtual machines requested by the client.

The available physical server lists are calculated for each cluster, and the available physical server lists for each cluster are arranged in the number of available physical servers at this time (S503).

A physical distance between the physical servers, a cluster to which the physical servers belong, and the like are selected as a criterion for selecting an available physical server to be allocated to the client among the plurality of available physical servers included in the available physical server list Physical servers belonging to the same cluster can be preferentially allocated.

In other words, it is preferable to allocate the physical servers disposed at physically adjacent distances as much as possible to the same client. Preferably, the physical servers allocated to the same client are preferably located in one cluster, It is preferable that a physical server is allocated so that the number of clusters in which the physical servers are arranged is minimized. For this purpose, it is preferable that the available physical servers are allocated to the available physical servers in a large number of clusters by arranging the clusters in the number of available physical servers.

The process of assigning the available physical servers in the cluster to the clients in the ordered order is repeated until the number of physical servers allocated by the client reaches the number of physical servers calculated in step S502 (S504 to S508).

If the number of physical servers allocated by the client does not reach the number of physical servers and there are no more physical servers to allocate, an error message including a message indicating that the available resources are insufficient is generated and the virtual desktop service can not be provided To the client.

In step S509, information on the physical servers allocated by the client is updated to a predetermined database through steps S504 to S508, and then the process goes to the distribution process of the router virtual machine.

6 is a diagram illustrating a specific process of distributing a router virtual machine according to a preferred embodiment of the present invention.

As described above, the router virtual machine provides a DHCP service for providing dynamic IPs to virtual machines belonging to a virtual desktop service of a client and a NAT service for communication with the external Internet. Since the virtual desktop service of all the clients is connected to the external Internet through such a router virtual machine, the router virtual machine needs to provide sufficient performance. To this end, the router virtual machine is a scalable type in which the number of user virtual machines of the virtual desktop service can be increased (Scale Out) structure.

First, the distribution request of the router virtual machine is received (S601). The distribution request of the router virtual machine includes the number of user virtual machines requested for subscription, the information of the physical servers allocated to the client, and whether the virtual desktop service is in security mode.

The router virtual machine can provide various functions such as routing and port forwarding as well as the above-described DHCP and NAT. In the routing virtual machine according to the present embodiment, DHCP, NAT, and routing functions are basically performed on the virtual desktop services of all clients, and when the client does not select the security mode, the port forwarding function is also performed.

However, if the client chooses secure mode, the Port Forwarding function is replaced by VPX. Accordingly, depending on whether the virtual desktop service is in the security mode, the type of the router virtual machine to be distributed may be changed.

In order to distribute the router virtual machine, the distribution quantity of the router virtual machine is calculated (S602).

In this embodiment, it is assumed that the maximum number of VMs (Capacity) information that can be accommodated in one router virtual machine is set in advance, since the number of DHCP and NAT services can be accommodated for each router virtual machine.

Therefore, it is possible to estimate the distribution quantity of the router virtual machine according to the number of user virtual machines requested for subscription.

In this embodiment, a value obtained by dividing the number of subscription-requested user virtual machines by the capacity information is rounded up to estimate the number of distributions of the router virtual machine. For example, if one router virtual machine can accommodate 100 user virtual machines (or user accounts) and the client submits 180 user virtual machines (user accounts), then two router virtual machines are provided to the client .

The router virtual machine is repeatedly executed (S603) by calling the DeploySVM () method with serviceprofile_id set to "rvm" for the number of deployed router virtual machines calculated in step S602 (S603).

However, if the virtual desktop service is in the secure mode (S604) before the step of calling the DeploySVM () method (S607), the Capabilities of the router virtual machine are set to be only DHCP, NAT and Routing (S605) DHCP, NAT, Routing, and Port Forwarding may be enabled (S606).

When distribution of the router virtual machine is completed by the distribution quantity of the router virtual machine calculated in step S602, the distribution of the active directory virtual machine and the distribution of the desktop delivery control virtual machine can be performed next (S608) Likewise, it can be implemented including calling the DeploySVM () method.

According to the present invention, in providing a virtual desktop service based on physical system resources physically separated from each other on a client basis to an enterprise or an organization client having a plurality of user accounts in a data center, The client's requirements can be more faithfully reflected in allocating system resources or allocating virtual machines.

The subscription processing method of the virtual desktop service according to the present invention can be implemented as a computer-readable code on a computer-readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored. Examples of the computer-readable recording medium include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage, and the like. In addition, the computer-readable recording medium may be distributed over network-connected computer systems so that computer readable codes can be stored and executed in a distributed manner. In addition, functional programs, codes, and code segments for implementing the present invention can be easily inferred by programmers of the technical field to which the present invention belongs.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is clearly understood that the same is by way of illustration and example only and is not to be taken by way of limitation, You will understand. Accordingly, the true scope of protection of the present invention should be determined only by the appended claims.

100: Virtual Desktop Services System
110: Client-Specific Virtual Desktop System
111, 112: Router virtual machine
113: Active Directory Virtual Machine
114: Desktop Delivery Control Virtual Machine
115: Communication Encryption Virtual Machine
116: User virtual machines
120: Central Management System
121: VMS
122: Portal
123: VSV
124: VMS-UI
200: subscription system
210: subscription application receiver
220: physical server quantity calculation unit
230: Physical server request part
240: System Virtual Machine Distribution Unit

Claims (14)

A subscription receiving unit for receiving a virtual desktop service subscription application including a quantity of a user virtual machine to provide a virtual desktop environment using virtual computing resources that virtualize virtualization resources of the data center;
A physical server quantity calculation unit for calculating a quantity of physical servers to be allocated to the client based on information included in the virtual desktop service subscription request;
A physical server allocation unit allocating at least one physical server among the available physical servers of the data center to the client based on the calculated physical server quantity;
And a system virtual machine distributing unit for distributing a system virtual machine constituting an infrastructure of the virtual desktop environment to the allocated physical server. The method according to claim 1,
The system virtual machine
At least one router virtual machine for assigning a service IP to the user virtual machine to mediate communication between the user virtual machine and the external network and to route communication in the private network of the user virtual machine;
A desktop delivery control virtual machine for connecting a session between the user virtual machine and a user account accessing the user virtual machine and managing a virtual desktop service provided by the user virtual machine; And
And an Active Directory virtual machine for authenticating a user account accessing at least one of the user virtual machine and the desktop delivery control virtual machine. The method according to claim 1,
Wherein the virtual desktop service subscription application further includes physical resource amount information including at least one of a CPU capacity, a memory capacity, and a storage capacity of the virtual desktop environment. The method according to claim 1,
Wherein the virtual desktop service subscription application further comprises a security mode whether to apply additional encryption for a communication protocol between the client and the user virtual machine. 5. The method of claim 4,
Wherein the system virtual machine distributing unit distributes a communication encryption virtual machine for encrypting and communicating a communication protocol between the client and the user virtual machines in the security mode. 5. The method of claim 4,
Wherein the system virtual machine distributing unit distributes a router virtual machine capable of port forwarding to the user virtual machine when the virtual virtual machine is not in the secure mode. The method according to claim 1,
Wherein the physical server allocation unit assigns the physical server of the calculated physical server quantity to the client based on the physical distance between the available physical servers and the cluster to which each of the available physical servers belongs. Receiving a virtual desktop service subscription request that includes a quantity of a user virtual machine to provide a virtual desktop environment using virtual computing resources that virtualize the physical computing resources of the data center to the client;
Calculating a number of physical servers to be allocated to the client based on information included in the virtual desktop service subscription request;
A physical server allocation step of allocating at least one physical server among available physical servers in the data center to the client based on the calculated physical server quantity;
And a system virtual machine distribution step of distributing a system virtual machine constituting an infrastructure of the virtual desktop environment to the allocated physical server. The method according to claim 1,
The system virtual machine
At least one router virtual machine for assigning a service IP to the user virtual machine to mediate communication between the user virtual machine and the external network and to route communication in the private network of the user virtual machine;
A desktop delivery control virtual machine for connecting a session between the user virtual machine and a user account accessing the user virtual machine and managing a virtual desktop service provided by the user virtual machine; And
And an Active Directory virtual machine for authenticating a user account accessing at least one of the user virtual machine and the desktop delivery control virtual machine. 9. The method of claim 8,
Wherein the virtual desktop service subscription request further includes physical resource amount information including at least one of a CPU capacity, a memory capacity, and a storage capacity of the virtual desktop environment. 9. The method of claim 8,
Wherein the virtual desktop service subscription request further includes a security mode whether or not to apply additional encryption to the communication protocol between the client and the user virtual machine. 12. The method of claim 11,
Wherein the step of distributing the system virtual machine further includes distributing a communication encryption virtual machine for encrypting and communicating with a communication protocol between the client and the user virtual machines in the security mode. Processing method. 12. The method of claim 11,
Wherein the system virtual machine distribution step includes the step of distributing a router virtual machine capable of port forwarding to the user virtual machine when the virtual virtual machine is not in the secure mode. 9. The method of claim 8,
The physical server allocation step
Calculating available physical server lists for each cluster linking available physical servers belonging to the same cluster by classifying available physical servers for each cluster to which each of the available physical servers belong;
Sorting the available physical server lists for each cluster based on the number of available physical servers belonging to each cluster available physical server lists;
A priority allocation step of allocating to the client an available physical server belonging to a cluster-specific available physical server list having the largest number of available physical servers among the ordered cluster-specific available physical server lists; And
And repeating the priority allocation step until the number of physical servers allocated to the client reaches the calculated number of physical servers.

Images