TWI506470B - The IP Routing Level Control System and Its Method on Multi - virtual Desktop Service - Google Patents

Description

IP routing hierarchical management system and method thereof across multiple virtual desktop services

The present invention provides a centralized network service management mechanism applied to a virtual desktop environment. The administrator can establish multiple virtual desktop environments according to the region, and provide users with different localities to log in to different desktop environments. The present invention can provide hierarchical network service access rights management functions according to the login information.

In recent years, enterprises have begun to integrate cloud services to provide a centralized information system and database working environment; and in order to meet the purposes of information security and remote office, employees have begun to interface with the enterprise central server through virtual desktop connection. The system's information system for personal work. In the existing architecture, the remote virtual desktop technology mainly provides a static routing control method, and cannot achieve hierarchical management and control according to the user identity. The Republic of China Patent Application No. 101116795 "Management Method for Network Service Level and Function of Cloud Virtual Desktop Application" proposes a service access mechanism to control the user's network storage according to the identity of the user when logging in. Take the service. However, this method is only limited to the environment of a single virtual desktop. When the user is in a cross-desktop cloud environment, the virtual desktop of the cloud needs to be independently controlled, and the network environment of the user can not be shared and controlled. cloud service. Furthermore, when the user moves to work in a different office, the service room of the desktop environment may also change; in this case, if it is set directly in each computer room Static control or implementation by the above patented method is likely to cause the overall network management and control performance to be ineffective. This method is also likely to cause the burden on the network management personnel and the construction cost of the overall equipment room.

It can be seen that there are still many shortcomings in the above-mentioned methods of use, which is not a good design, but needs to be improved.

In order to solve the above problems, the present invention can realize that according to different users, when the virtual desktop server system is used, the central control platform automatically generates the user's network management rules according to the user desktop environment allocation situation; The network management rules lead to the network management equipment of the user's desktop environment computer room to achieve the function of automatic management. The management system of the present invention can automatically generate a corresponding network service management function for each desktop environment obtained by each user, restricting each user to belong to a specific service group, and targeting the service group Set up accessible network services to provide a simple, managed, efficient, scalable, and secure network management approach to desktop services.

In order to achieve the above-mentioned invention, the function of the multi-virtual desktop work service environment can be divided into four parts: a service access device, a desktop service configuration agent, a central service management server, and a network service control device.

The service picker is pre-installed under each virtual desktop environment and provides the following features:

1. When the user logs in to the desktop session server, the agent assists the agent to obtain the user virtual desktop service IP address configuration from the DHCP server.

2. The desktop session server can communicate with the desktop service configuration agent when the user completes After logging in and obtaining IP distribution, the IP distribution information can be provided to the desktop service configuration agent to complete the back-end network management function.

The Desktop Services Configuration Agent provides the following features:

1. When the user client requests a connection login from the desktop service configuration agent, the desktop service configuration agent will assist the user to determine the configuration information of the back-end connection desktop environment according to the user client IP address.

2. After the user completes the desktop login request, the desktop service configuration agent will obtain the user IP address allocation information through the method of communication with the service access device, and join the user identity, the client connection operation system, and the far Desktop desktop system configuration information. At this time, the user must use the desktop service configuration agent to request the user's service authorization from the network service control device to provide the external network access function of the user desktop.

The central service management server provides the interface function for the administrator to set the user access service. The administrator can set the desktop network service functions of different levels of the user according to the connection information of the client. After the user logs into the desktop environment, the proxy service agent actively registers the login information with the central service management server, and the central service management server calculates the most suitable network management service list according to the registration information, and Actively send its service list information to the network service management device settings that the user logs into the desktop. After receiving the backend service management server user service list information, the network service control device sets its user network connection service for its information to achieve the user desktop network access control service.

According to an embodiment of the invention, the combination of the virtual desktop network service environment function comprises the following steps:

1. The client device uses the desktop service configuration agent to obtain the desktop working session server connection bit. Address, and began to provide a login working environment to the desktop workflow server request, and identity authentication.

2. The desktop session server sends the user authentication information to the authentication server to verify that the authentication information is correct.

3. After the authentication server confirms the user authentication information, the authentication server authentication returns the authentication message to the desktop workflow server.

4. The desktop working stage server submits a virtual desktop service IP address allocation application action to the DHCP server through the service access device, and sends the distributed dynamic IP address information back to the service access device.

5. After the service picker obtains the user's desktop IP distribution, it relays its information back to the desktop service configuration agent. After the desktop service configuration agent organizes the received IP information and the user desktop environment configuration information into a certain communication format, the management service request is sent to the central service management server to query the user's group service list.

6. After receiving the desktop service configuration proxy control request and related user login information, the central service management server first calculates the most appropriate network service access list, and records it in the database system, and then controls the information. Transfer to the network service control device corresponding to the user's desktop.

7. When the network service control device receives the control information sent by the central service management server, it will set its user network connection in sequence to complete the network service management and control of the user desktop login.

8. After the user proposes to end the working environment connection, the service picker will send the end message to the desktop service configuration agent; after the desktop service configuration agent transmits the user connection information to the central service management server, the central service The management server will remove the current use from the database. Log in to the information and propose to the user's corresponding network service control device to cancel the system management and control functions related to the desktop service IP address. Finally, the service picker proposes to the DHCP server to reclaim the virtual desktop service IP address allocation work.

The invention provides an IP routing hierarchical management system across multiple virtual desktop services, comprising: a desktop service configuration agent, which is an intermediary device, provides a communication agreement with the client system and the backend service system, and assists the client system. After the login, the service is opened. The desktop service configuration agent identifies the source IP address of the client system, provides the service transduction function of the user desktop request of the client system, collects the relevant connection information of the user login desktop, and the network. The service control device provides service control; a service access device is provided on a desktop work server to transmit information of the user login information of the client system, and the service access device assists the client system. The user desktop distribution information is transmitted to the desktop service configuration agent and the user of the client system requests the virtual desktop service IP address allocation of the working environment; a central service management server provides the enterprise manager to set related customers. User service information setting of the end system, wherein the central service management server only accepts the The service provisioning service of the agent service agent; and a network service management device, which provides network service management and control of the user's desktop of the client system, wherein the network service control device only accepts the central service management server for The function of the user network service setting of the client system.

The service picker is installed to include a remote desktop, a virtual desktop, and any networked session server. The service access device provides a standard DHCP distribution protocol to assist the user of the client system to request the virtual desktop service IP address allocation function. The desktop service configuration agent accepts the user desktop service request of the client system and provides automatic user desktop forwarding. The desktop service configuration agent is through the network. The protocol requests and deactivates the service control from the network service control device. When requesting service management, the network service control device controls the virtual desktop service IP address and its service list accessed by the user of the client system. When the management is released, the network service management device provides the virtual desktop service IP of the user who manages the client system. The network service management device further includes a network service management module, which accepts the service control request of the network service control device. The central service management server further includes a management interface, which is provided by the enterprise administrator to set a user service control list of the client system under the management interface.

The invention provides an IP routing hierarchical management and control method across multiple virtual desktop services, and the steps are as follows: A. The client system uses a desktop service configuration agent to obtain a desktop working session server connection address, and starts to serve to the desktop working stage. Request to provide a login working environment and perform identity authentication; B. The desktop workflow server sends the user authentication information of the client system to the authentication server to verify whether the authentication information is correct; C. The authentication server confirms the client After the user authentication information of the system is passed, the authentication server authenticates the message passing the authentication to allow the login to the desktop workflow server; D. The desktop workflow server submits the virtual desktop service IP address to the DHCP server through a service access device. Address allocating the application, and transmitting the dynamic IP address message back to the service picker; E. The service picker returns the information to the user desktop IP address of the client system The desktop service configuration agent, the desktop service configuration agent will receive the IP information and the client system of the client system After you configure the IT environment, organized into some form of communication, Sending a control request to a central service management server and querying a list of users of the client system; F. the central service management server accepts the desktop service configuration agent control request and user login of the client system After the information, first calculate the most appropriate network service access list, and record it in the database system, and then transfer its management information to one of the user service desktops of the client system; G. After receiving the control information sent by the central service management server, the network service control device sequentially sets the user network connection of the client system to complete the network service management and control of the user desktop login of the client system; H. After the user of the client system proposes to end the working environment connection, the service picker sends an end message to the desktop service configuration agent, and the desktop service configuration agent transmits the user connection of the client system. After the information is sent to the central service management server, the central service management server will remove the current client system from the database. Log in to the information and propose to the network service control device corresponding to the user of the client system to cancel the system management of the desktop service IP address; and I. the service picker proposes to recycle the virtual desktop service IP address to the DHCP server. Distribute work.

The service picker is installed to include a remote desktop, a virtual desktop, and any networked session server. The service access device provides a standard DHCP distribution protocol to assist the user of the client system to request the virtual desktop service IP address allocation function. The desktop service configuration agent accepts the user desktop service request of the client system and provides automatic user desktop forwarding. The desktop service configuration agent requests and deactivates the service control device from the network service control device through a network communication protocol, and when requesting service management and control, Providing the network service management device to control the virtual desktop service IP address and the service list accessed by the user of the client system, and when the management is released, the network service control device is provided to release the user of the control client system Virtual desktop service IP. The network service management device further includes a network service management module, which accepts the service control request of the network service control device. The central service management server further includes a management interface, which is provided by the enterprise administrator to set a user service control list of the client system under the management interface.

The IP routing hierarchical management system and method thereof across multiple virtual desktop services provided by the present invention are network service management platforms that can span multiple virtual desktop working environments, and have the following advantages when compared with other conventional technologies:

1. The present invention can provide service management and control functions automatically and dynamically according to the user login environment, which can achieve resource sharing across the equipment room, reduce equipment costs, and improve management and use difficulties.

2. The present invention provides a quick and easy way to manage deployment services. The administrator only needs to set relevant user services on the service management platform to achieve the control function of the user service.

The detailed description of the preferred embodiments of the present invention is intended to be limited to the scope of the invention, and is not intended to limit the scope of the invention. The patent scope of this case.

In summary, this case is not only innovative in terms of space type, but also can enhance the above-mentioned multiple functions compared with the customary items. It should fully meet the statutory invention patent requirements of novelty and progressiveness, and apply for it according to law. This invention patent application, in order to invent invention, to the sense of virtue.

101‧‧‧Desktop Work Server

102‧‧‧Service picker

103‧‧‧Network service control device

104‧‧‧DHCP server

105‧‧‧Wired network

201‧‧‧Client equipment

202‧‧‧Intranet/External Internet

203‧‧‧Wired network/wireless network

204‧‧‧Authentication server

205‧‧‧Virtual Desktop Network Service Management Module

206‧‧‧Wired network

207‧‧‧Central Service Management Server

208‧‧‧Desktop Service Configuration Agent

301~310‧‧‧Step process

401~406‧‧‧Step process

The first picture shows the architecture of the virtual desktop network service management module.

FIG. 2 is a schematic diagram of a multi-virtual desktop network service management and control device according to the present invention.

FIG. 3 is a flow chart of a method for a user of the present invention to log in to a desktop environment in combination with the virtual desktop network service method of the present invention.

Figure 4 is a flow chart of the method for ending the working connection of the user of the present invention in combination with the virtual desktop network service method of the present invention.

The technical features, contents, and advantages of the present invention, as well as the advantages thereof, can be understood by the reviewing committee, and the present invention will be described in detail with reference to the accompanying drawings. The subject matter is only for the purpose of illustration and description. It is not intended to be a true proportion and precise configuration after the implementation of the present invention. Therefore, the scope and configuration relationship of the attached drawings should not be interpreted or limited. First described.

Please refer to Figure 1 for the schematic diagram of the virtual desktop network service management module architecture. In a virtual desktop network service management module 205 architecture, the desktop workflow server 101, the service accessor 102, the network service management device 103, the DHCP server 104, and the wired network 105 are constructed as a separate desktop. Log in to the environment module to provide front-end customers' personal desktop connection services. The desktop session server 101 is connected to the network service control device 103 via the wired network 105, and the router IP address of the network service management device 103 providing the routing service is set as a preset network gateway. The network service management device 103 communicates with the service accessor 102 using the wired network 105. The service picker 102 assists the client through the wired network 105. The desktop environment connection of the standby 201 obtains the virtual desktop service IP address allocation information from the DHCP server 104, and gives the virtual desktop service IP address allocation information to the desktop workflow server 101 to provide the user to connect the desktop. Environmental network services.

Please refer to FIG. 2 , which is a schematic diagram of a multi-virtual desktop network service management device according to the present invention. The system can install a plurality of virtual desktop network service management modules 205 to provide user desktop services. The user client device 201 requests the desktop service through the wired network/wireless network 203 and the desktop service configuration agent 208. The desktop service configuration agent 208 determines the source IP address and device information of the user client device 201. The user client device 201 connects to the virtual desktop network service management module 205 and transmits relevant information back to the user client device 201 to complete the desktop request. The user client device 201 starts to use the virtual desktop network service management module 205 information provided by the desktop service configuration agent 208 to start the desktop of the virtual desktop network service management module 205 through the wired network/wireless network 203. The session server 101 requests desktop login; the service adapter 102 of the virtual desktop network service management module 205 can connect to the wired network 206 through the wired network 105 of the virtual desktop network service management module 205 to log in the user. The information is provided to the desktop service configuration agent 208; after receiving the user login information, the desktop service configuration agent 208 can organize the information and transmit it to the central service management server 207 via the wired network 206 in a specific secure encryption format. . After receiving the login information, the central service management server 207 calculates an optimal user access right and generates a related network routing list, and communicates with the user in a secure encrypted format through the wired network 206. The network service management device 103 of the desktop network service management module 205 communicates to complete the network access management and control of the user's internal network/external Internet 202.

The client device 201 of the present invention may include: a desktop computer and a notebook type A device with an IP address networking function such as a brain, a PDA, a smart phone, or a thin client. The environment of the wired network 206 can be either the Internet or a private network within the enterprise. The working environment service provided by the desktop workflow server 101 may include a common working environment of a user such as a remote desktop service or a virtual desktop service. The authentication server 204 authentication method may be an LDAP/LDAPs server or a RADIUS server, and the desktop workflow server 101 of the virtual desktop network service management module 205 is completed by an appropriate communication protocol and authentication server 204. Certification work.

The operating process of the virtual desktop work service environment of the present invention, as shown in FIG. 2 and FIG. 3, the method for the client device 201 to request the connection to operate includes the following steps, requesting connection for the client device 201, such as the third The figure shows a flow chart of a method for logging in to a desktop environment and combining the virtual desktop network service method of the present invention, and the method includes the following steps:

Step 301: The client device 201 requests the desktop service configuration agent 208 to request the desktop connection service according to different office locations. The desktop service configuration agent 208 obtains information according to the IP address of the client device 201, and the connection is connected to a certain The desktop session server 101 of the particular virtual desktop network service management module 205 issues a desktop login service request.

Step 302: The desktop session server 101 of the virtual desktop network service management module 205 requests the client device 201 to perform the user identity authentication step.

Step 303: The client device 201 sends the use authentication data according to the system authentication mode.

Step 304: After receiving the user authentication data sent by the client device 201, the desktop workflow server 101 of the virtual desktop network service management module 205 forwards the data to the authentication server 204 for performing the authentication work.

Step 305: The authentication server 204 confirms receipt of the user's authentication data. If the authentication result is correct, the work of step 306 is continued; if the authentication is incorrect, the desktop workflow server 101 of the virtual desktop network service management module 205 is prompted to prompt the client device 201 to return to step 302 to re-propose the authentication information.

Step 306: After the desktop session server 101 of the virtual desktop network service management module 205 is authenticated and confirmed by the authentication server 204, the desktop session server 101 will pass through the same virtual desktop network service management module 205. The service picker 102 requests the corresponding DHCP server 104 for IP address allocation work, and obtains the virtual desktop service IP address information.

Step 307: The desktop session server 101 of the virtual desktop network service management module 205 will send the user to the desktop and its IP distribution information through the service accessor 102 of the same virtual desktop network service management module 205. It is sent to the desktop service configuration agent 208 for subsequent control of network routing.

Step 308: After receiving the user login data, the desktop service configuration agent 208 transmits the user desktop login information to the central service management server 207.

Step 309: The central service management server 207 obtains the user desktop login information, calculates the most appropriate network routing management service according to the information, and converts the service list into the virtual desktop network service management module 205. The management information format accepted by the network service management device 103 is transmitted to the same system module network service control device 103 of the desktop workflow server 101 of the virtual desktop network service management module 205 that the user logs in to propose Manage user-related network service management functions.

Step 310: The network service management device 103 of the virtual desktop network service management module 205 receives the medium When the central service management server 207 requests the management service, it will default to reject all network accesses of the user to the desktop, and set the received service list to the allowed network service.

The client device 201 of the present invention ends the operation process of the connected virtual desktop work service environment. Referring to FIG. 2 and FIG. 4, the user end of the work connection of the present invention is combined with the flow chart of the virtual desktop network service method of the present invention. The method of operation consists of the following steps:

Step 401: After the user of the client device 201 completes the desktop work requirement, the offline application is filed.

Step 402: The user logs in to the desktop session server 101 to provide the user login information to the desktop service configuration agent 208 through the service accessor 102 of the same virtual desktop network service management module 205, and requests to stop the network service control. jobs.

Step 403: After receiving the network stop request, the desktop service configuration agent 208 sends its information to the central service management server 207, and proposes to end the desktop connection management.

Step 404: After receiving the connection information of the desktop service configuration agent 208, the central service management server 207 logs in to the same network service on the desktop workflow server 101 of the virtual desktop network service management module 205. The control device 103 proposes to interrupt the desktop network management request of the client device 201.

Step 405: The desktop workflow server 101 of the virtual desktop network service management module 205 that the user logs in receives the interrupt request from the network service management device 103 of the same system module, and suspends the correspondence of the user desktop connection. The network service is opened and controlled, and the initial state of the user's desktop network access is prohibited.

Step 406: Complete the user's logout action, and the user logs in to the virtual desktop network service management mode. The desktop workflow server 101 of the group 205 requests the DHCP server 104 for IP recovery through the service accessor 102 of the same system module.

The IP routing hierarchical management system and method thereof across multiple virtual desktop services provided by the present invention are network service management platforms that can span multiple virtual desktop working environments, and have the following advantages when compared with other conventional technologies:

2. The present invention can provide service management and control functions automatically and dynamically according to the user login environment, which can achieve resource sharing across the equipment room, reduce equipment costs, and improve management and use difficulties.

3. The present invention provides a quick and easy way to manage deployment services. The administrator only needs to set relevant user services on the service management platform to achieve the control function of the user service.

The detailed description of the present invention is intended to be illustrative of a preferred embodiment of the invention, and is not intended to limit the scope of the invention. The patent scope of this case.

To sum up, this case is not only innovative in terms of technical thinking, but also has many of the above-mentioned functions that are not in the traditional methods of the past. It has fully complied with the statutory invention patent requirements of novelty and progressiveness, and applied for it according to law. Approved this invention patent application, in order to invent invention, to the sense of virtue.

201‧‧‧Client equipment

202‧‧‧Intranet/External Internet

203‧‧‧Wired network/wireless network

204‧‧‧Authentication server

205‧‧‧Virtual Desktop Network Service Management Module

206‧‧‧Wired network

207‧‧‧Central Service Management Server

208‧‧‧Desktop Service Configuration Agent

Claims (14)

An IP routing hierarchical management system across multiple virtual desktop services, comprising: a desktop service configuration agent, which is an intermediary device, provides a communication agreement with the client system and the backend service system, and assists the client system to log in after the service. Opened, the desktop service configuration agent identifies the source IP address of the client system, provides the service transduction function of the user desktop request of the client system, collects the user connection information related to the desktop login, and provides service control; The pick-up device is disposed on a desktop working stage server, and performs message transmission of the user login information of the client system, and the service pick-up device assists the user of the client system to distribute information to the desktop. The service configuration agent and the user assisting the client system request the virtual desktop service IP address allocation of the working environment; a central service management server provides the enterprise manager to set the user service information setting of the relevant client system, wherein The central service management server only accepts the service communication needs of the desktop service configuration agent. And a network service control device, which provides network service control after the user's desktop of the client system, wherein the network service control device only accepts the user service network of the central service management server for the client system; Set the function. The IP routing hierarchical management system on the multi-virtual desktop service as described in claim 1, wherein the service accessor is installed to include a remote desktop, a virtual desktop, and any networked workstation server. . The IP routing hierarchical management system on the multi-virtual desktop service as described in claim 1, wherein the service access provider provides a standard DHCP distribution agreement to assist the client system. The system user requests the virtual desktop service IP address allocation function. The IP routing hierarchical management system on the multi-virtual desktop service as described in claim 1, wherein the desktop service configuration agent accepts a user desktop service request of the client system and provides an automatic user desktop transfer. Guide function. The IP routing hierarchical management system on the multi-virtual desktop service as described in claim 1, wherein the desktop service configuration agent requests and deactivates the service control device from the network service control device through a network communication protocol. When requesting service management, the network service management device controls the virtual desktop service IP address and its service list accessed by the user of the client system, and when the management is released, the network service control device is released and controlled. The virtual desktop service IP of the user of the client system. The IP routing management system on the multi-virtual desktop service as described in claim 1, wherein the network service control device further comprises a network service management module, which is to receive the service of the network service control device. Control requests. The IP routing hierarchical management system on the multi-virtual desktop service as described in claim 1, wherein the central service management server further includes a management interface, and the enterprise administrator provides the management interface to set the client. User service control list for the end system. An IP routing hierarchy management method across multiple virtual desktop services, the steps are as follows: A. The client system uses a desktop service configuration agent to obtain a desktop workflow server connection address, and begins to request the desktop workflow server. Log in to the work environment and perform identity authentication; B. The desktop session server sends the user authentication information of the client system to the authentication server to verify whether the authentication information is correct; C. After the authentication server confirms the user authentication information of the client system, the authentication server authenticates the message passing the authentication to the desktop server, and the D. desktop server sends the message to the DHCP server through a service access device. The server proposes a virtual desktop service IP address allocation application action, and sends a dynamic IP address message back to the service access device; E. the service adapter obtains the user desktop IP address of the client system. After that, the information is sent back to the desktop service configuration agent, and the desktop service configuration agent sends the IP information received and the user desktop environment configuration information of the client system into a certain communication format, and then sends a control request. Giving a central service management server and querying the list of services of the users of the client system; F. after receiving the desktop service configuration agent control request and the user login information of the client system, the central service management server First calculate the most appropriate network service access list, and record it in the database system, and then transfer its management information to the client system. The user desktop corresponds to one of the network service management devices; G. when the network service control device receives the management information sent by the central service management server, the user network connection of the client system is sequentially set. The network service management of the user desktop login of the client system is completed; H. When the user of the client system proposes to end the working environment connection, the service picker sends an end message to the desktop service configuration agent. After the desktop service configuration agent transmits the user connection information of the client system to the central service management server, the central service management server removes the user login information of the current client system from the database, and The user of the client system corresponding to the network service control device proposes to cancel the desktop service IP address related system management and control; and I. Service picker to the DHCP server to reclaim the virtual desktop service IP address allocation work. The IP routing hierarchical management method on the multi-virtual desktop service as described in claim 8, wherein the service accessor is installed to include a remote desktop, a virtual desktop, and any networked workstation server. . For example, the IP routing layer management method on the multiple virtual desktop service described in claim 8 is provided, wherein the service access provider provides a standard DHCP distribution protocol to assist the user of the client system to request the virtual desktop service IP. Address allocation function. The IP routing hierarchical management method on the multi-virtual desktop service as described in claim 8, wherein the desktop service configuration agent accepts a user desktop service request of the client system and provides an automatic user desktop transfer. Guide function. The IP routing hierarchical management method on the multi-virtual desktop service as described in claim 8, wherein the desktop service configuration agent requests and deactivates the service control device from the network service control device through a network communication protocol, When requesting service management, the network service management device controls the virtual desktop service IP address and its service list accessed by the user of the client system, and when the management is released, the network service control device is released and controlled. The virtual desktop service IP of the user of the client system. The IP routing management and control method on the multi-virtual desktop service as described in claim 8, wherein the network service control device further comprises a network service management module, which is to receive the service of the network service control device. Control requests. IP routing level management party on multiple virtual desktop services as described in claim 8 The method, wherein the central service management server further comprises a management interface, wherein the enterprise administrator provides a user service management list of the client system under the management interface.