WO2022001755A1 - 一种用户云桌面数据漫游和共享的方法及装置 - Google Patents
一种用户云桌面数据漫游和共享的方法及装置 Download PDFInfo
- Publication number
- WO2022001755A1 WO2022001755A1 PCT/CN2021/101566 CN2021101566W WO2022001755A1 WO 2022001755 A1 WO2022001755 A1 WO 2022001755A1 CN 2021101566 W CN2021101566 W CN 2021101566W WO 2022001755 A1 WO2022001755 A1 WO 2022001755A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- user
- dfs
- desktop
- personalized
- cloud desktop
- Prior art date
Links
- 238000000034 method Methods 0.000 title claims abstract description 40
- 230000008569 process Effects 0.000 claims abstract description 12
- 238000013500 data storage Methods 0.000 claims description 15
- 230000001360 synchronised effect Effects 0.000 description 5
- 241001362551 Samba Species 0.000 description 4
- 238000000926 separation method Methods 0.000 description 4
- 238000012795 verification Methods 0.000 description 4
- 230000000694 effects Effects 0.000 description 3
- 238000010586 diagram Methods 0.000 description 2
- 230000003993 interaction Effects 0.000 description 2
- 238000007726 management method Methods 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
- G06F9/45533—Hypervisors; Virtual machine monitors
- G06F9/45558—Hypervisor-specific management and integration aspects
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/451—Execution arrangements for user interfaces
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/451—Execution arrangements for user interfaces
- G06F9/452—Remote windowing, e.g. X-Window System, desktop virtualisation
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
Definitions
- the present application relates to the technical field of cloud desktops, and in particular, to a method and device for roaming and sharing user cloud desktop data.
- cloud desktops are equivalent to virtual machines or virtual machines below
- cloud desktops are widely used in various key technical fields.
- the convenience, reliability and stability of cloud desktops are also highly recognized by users.
- This patent mainly implements a roaming and sharing of user data based on non-AD (Active Directory, Active Directory).
- Cloud desktop data roaming is a new key technology field. Although cloud desktops are now widely used, it is a meaningful topic that data can be separated from the operating system to achieve application data separation. In some cases, relying on network technology to realize remote login of cloud desktop, but the separation of application data and personality data is not realized, so that the operating system cannot be dynamically allocated, and the resource utilization rate is not high; Data can be migrated in different places, so that users can use personalized roaming data in the cloud desktop.
- the present application provides a method and device for user cloud desktop data roaming and sharing.
- a method for roaming and sharing data on a user cloud desktop including: during the process of the user logging in to the cloud desktop, the cloud desktop uses user information to establish a connection with the distributed data storage system DFS; In the connection of the above-mentioned DFS, the cloud desktop loads the user personalized configuration obtained from the DFS, so as to establish a user personalized desktop environment; after the user personalized configuration obtained from the DFS is loaded successfully, the cloud desktop obtains the user personalized data saved in the DFS, for users to use.
- a device for roaming and sharing data on a user cloud desktop including: a virtual desktop component for acquiring user information during the process of the user logging in to the cloud desktop; loading the virtual desktop roaming component obtained from DFS User personalized configuration, to establish user personalized desktop environment; virtual desktop roaming component, for using user information to establish a connection with the distributed data storage system DFS; through the connection with the DFS, the user personalized configuration obtained from DFS, And after the user's personalized configuration is loaded successfully, the user's personalized data saved in the DFS is obtained for the user to use.
- 1A is a schematic diagram of a method for user cloud desktop data roaming and sharing according to an embodiment of the present application
- FIG. 1B is an overall structural diagram of a non-AD data roaming system according to an embodiment of the present application.
- Fig. 2 is the overall flow chart of the non-AD data roaming of the embodiment of the present application
- Fig. 3 is the non-AD data roaming authentication flow chart of the present application.
- Fig. 4 is the user's non-first time login virtual machine flow chart of the present application.
- FIG. 5 is a flowchart of the user logging in to the virtual machine for the first time in the present application.
- FIG. 1A shows a method for roaming and sharing data on a user cloud desktop according to an embodiment of the present application.
- the method includes: when a user logs in to the cloud desktop, the cloud desktop uses user information to establish and distribute data storage The connection of the system DFS (Distributed File System); through the connection with the DFS, the cloud desktop loads the user personalized configuration obtained from the DFS, so as to establish a user personalized desktop environment; after loading the user personalized configuration obtained from the DFS successfully , the cloud desktop obtains the user's personalized data saved in the DFS for the user to use.
- DFS Distributed File System
- the user can roam to any cloud desktop to load the user's personalized configuration, and establish the user's personalized desktop environment, thereby realizing the user's cloud desktop data roaming and sharing.
- the above-mentioned method of the embodiment of the present application further includes: in the process of using the cloud desktop by the user, synchronizing the user personalized data generated and updated in the process of using the cloud desktop to the DFS, so that when the user roams to another cloud desktop, the same User personalized data can be obtained from DFS, thereby realizing user personalized data sharing.
- the above method of the embodiment of the present application further includes: after the loading of the user personalized configuration obtained from the DFS fails, the cloud desktop temporarily establishes a configuration file for starting the operating system locally; the cloud desktop uses the established configuration file to start the operation system. After starting the operating system, the cloud desktop can be used, and the user personalized data generated by the user using the cloud desktop is synchronized to the DFS; when the user logs out of the cloud desktop, the user personalized configuration created by the user on the cloud desktop is configured. Upload to DFS.
- the reason for the failure to load the user personalized configuration obtained from DFS is that there is no user personalized configuration available in DFS. For example, when a user logs in to the cloud desktop for the first time, a temporary configuration file needs to be created to start the operating system.
- the above-mentioned method of the embodiment of the present application further includes: after the user performs a logout operation of the cloud desktop, the cloud desktop uploads the incremental user personalized configuration information to the DFS.
- the cloud desktop can upload the current user personalized configuration information to DFS, and update the original user personalized configuration in DFS.
- the above-mentioned method of the embodiment of the present application further includes: after the user performs a logout operation of the cloud desktop, the cloud desktop uploads the incremental user personalized configuration information to the DFS.
- the DFS is provided with a user personalized data mount point and a user personalized configuration mount point.
- the virtual desktop roaming component of the cloud desktop obtains the path information of the mount point of the user personalized configuration of the DFS obtained from the user login information;
- the user personalized configuration mount point pulls the user personalized configuration and loads the pulled user personalized configuration.
- the virtual desktop roaming component of the cloud desktop obtains the path information of the user personalized data mount point of DFS obtained from the user login information; the virtual desktop roaming component according to the path information of the user personalized data
- the personalized configuration mount point obtains user personalized data.
- the virtual desktop component of the cloud desktop obtains the user information from the user login process, and the user information includes the path information of the user personalized configuration mount point of DFS and the user personalized data mount point path information.
- the virtual desktop roaming component of the cloud desktop pulls the user personalized configuration from the user personalized configuration mount point of the DFS according to the path information of the user personalized configuration mount point transmitted by the virtual desktop component, and loads the pulled user personality configuration.
- the virtual desktop roaming component of the cloud desktop obtains the user personalized data from the user personalized configuration mount point of the DFS according to the path information of the user personalized data mount point of the DFS transmitted by the virtual desktop component.
- the foregoing method in the embodiment of the present application belongs to a method for roaming a user's personalized configuration file in a non-AD situation.
- the administrator opens an account on the cloud desktop platform for the user, allocates desktops, allocates mount points on the distributed data system DFS, and sets attributes such as storage quotas.
- the cloud desktop client, server and virtual machine need to update the corresponding components; then, the user logs in to the cloud desktop access module, and performs authentication to obtain system parameters and desktop information; then, the user logs in to the virtual desktop, and the virtual machine logs in according to the incoming Then, the virtual desktop roaming component loads the desktop environment according to the user's configuration stored in the DFS; finally, the user logs out of the virtual machine, and the virtual desktop roaming component uploads the user configuration personalized information data to the DFS, and updates the data stored in the DFS. Remote configuration file.
- Figure 1B shows the overall system structure of non-AD data roaming, including the client, cloud desktop access controller, several cloud desktop servers, such as cloud desktop servers 1, 2...n, corresponding to the cloud desktop of each cloud desktop server, For example, cloud desktops 1, 2...n, and distributed data storage system DFS; each cloud desktop includes virtual desktop components and virtual desktop roaming components.
- Cloud desktop access module user login component, obtain user name, user password and other information.
- the cloud desktop client running on the cloud terminal device, establishes a connection with the cloud desktop through the obtained connection parameters, and the user can interact with the cloud desktop through the client.
- the client informs the virtual desktop component of the user's personal configuration and personal data mount points.
- Cloud desktop server cloud desktop virtualization platform server.
- the virtual desktop component which runs in the cloud desktop as a cloud desktop agent, is responsible for information interaction with the cloud desktop client. At the same time, it is responsible for updating the mount point of the user's personalized configuration, and writing the user's personalized data to the mount point.
- the virtual desktop roaming component runs in the cloud desktop, updates the user's personalized data mount point, and loads the user's desktop environment.
- Separation of application data generally refers to the separation of user data and desktop operating systems.
- a distributed data storage system DFS is used as a remote storage system for user data.
- User data is divided into two parts: user personalized configuration and user personalized data.
- the user personalized configuration refers to the configuration file loaded in the user's desktop environment, and the user personalized data is the data file generated and updated during the user's use of the desktop. Therefore, it is necessary to allocate two mount points for the user in the distributed data storage system, which are the user's personalized configuration point and the user's personalized data mount point.
- the virtual desktop roaming component is responsible for obtaining the mount address in the virtual machine from the virtual desktop component, and updating the corresponding network path to the virtual machine policy.
- the virtual desktop roaming component establishes a samba connection to port 445 of the distributed storage server host, and pulls the remote desktop configuration file NTUSER.DAT to load the desktop environment; when the user logs out, uploads NTUSER.DAT to DFS.
- the access module When a user logs in to the access module of the cloud desktop client, the access module interacts with the cloud desktop access controller to obtain a series of connection parameters of the cloud desktop, including the host address, port number, and the network address of the mount point.
- the cloud desktop access controller adopts the non-AD authentication method; the cloud desktop client desktop component connects to the cloud desktop host server through the parameters provided by the access module; the cloud desktop host server attaches the user's mount point address (referring to the address assigned by DFS to the user) Storage address, set share, users can access this network resource with the shared name.
- the cloud desktop server can find the mount point of the corresponding user with the user name) and transfer it to the corresponding virtual machine, and the virtual desktop component handles the corresponding roaming configuration information, update information such as the corresponding policy of the virtual desktop (referring to the configuration of opening roaming, if the address of the file server changes, it will be updated).
- the virtual desktop roaming component When a user logs in to a virtual machine, the virtual desktop roaming component first checks the necessary conditions such as the login user and the network environment. If the conditions are met, the user password is used as the credential to establish a connection with the distributed data storage system DFS, and the distributed data storage system DFS is pulled. Stores the user's personalized configuration on the system and loads the user's personalized desktop environment. If the loading is successful, the user data saved in the distributed file system will be synchronized to the local at the same time. If the loading fails, a configuration file will be temporarily started from the local to start the operating system; while the user is using the desktop, the updated data will be incremented in real time. data is synchronized to the distributed storage system. After the user performs the logout operation, the virtual desktop roaming component will incrementally upload the user's personalized configuration and other information to the distributed storage system.
- the necessary conditions such as the login user and the network environment. If the conditions are met, the user password is used as the credential to establish a connection with the
- An apparatus for user cloud desktop data roaming and sharing is an apparatus for implementing the above method, and involves the virtual desktop component, the virtual desktop roaming component, and the distributed data storage system DFS in the system shown in FIG. 1B , and the specific description is as follows :
- the virtual desktop component is used to obtain user information when the user logs in to the cloud desktop; load the user personalized configuration obtained from the DFS by the virtual desktop roaming component, and establish a user personalized desktop environment;
- the virtual desktop roaming component is used to establish a connection with the distributed data storage system DFS by using user information; through the connection with the DFS, the user's personalized configuration obtained from the DFS is obtained and saved after the user's personalized configuration is successfully loaded.
- the distributed data storage system DFS is used to store user personalized configuration (data) and user personalized data.
- the user information obtained by the virtual desktop component when the user logs in to the cloud desktop includes the path information of the mount point of the user-specific configuration of DFS.
- the virtual desktop roaming component pulls the user personalized configuration from the user personalized configuration mount point of the DFS according to the path information of the user personalized configuration mount point transmitted by the virtual desktop component, and loads the pulled user personalized configuration.
- the user information obtained by the virtual desktop component when the user logs in to the cloud desktop also includes path information of the mounting point of the user's personalized data of the DFS.
- the virtual desktop roaming component obtains the user personalized data from the user personalized configuration mount point of the DFS according to the path information of the user personalized data mount point transmitted by the virtual desktop component.
- Figure 2 shows the overall flow of non-AD data roaming, including:
- Step S201 the user inputs the cloud desktop user password in the cloud desktop login component, and the cloud desktop client uses the password entered by the user to authenticate to the cloud desktop server;
- Step S202 the cloud desktop server returns the user's virtual machine connection parameters, including server ip, port number, virtual machine id, connection method, etc., and the connection parameters are generated according to the virtual machine configuration, user permissions, etc. set by the administrator for the user on the management platform ;
- Step S203 the cloud desktop client invokes the display window, receives the desktop stream data, and establishes a connection with the virtual machine;
- Step S204 the user inputs the virtual machine user password on the virtual machine lock screen interface, and the virtual machine roaming component takes the current user and the password name to go to DFS authentication, and the authentication successfully downloads the user configuration file, loads the user configuration file, and logs into the desktop;
- step S205 the user logs out of the cloud desktop (ie, the user logs out of the cloud desktop), and the virtual machine desktop component uploads the user configuration file to the DFS.
- Figure 3 shows the non-AD data roaming authentication process, including:
- Step S301 the user enters the cloud desktop user password in the cloud desktop login component, and goes to the authentication module for authentication;
- Step S302 the authentication is successful, and the login password token is returned;
- Step S303 the client login component uses the token to go to the cloud desktop access controller to obtain the virtual machine list of the current user;
- Step S304 the desktop access controller returns to the desktop list, the user selects the cloud desktop in the list, and clicks to log in;
- Step S305 the cloud desktop client requests the desktop access controller for connection parameters (ie, user roaming paths) of the selected desktop;
- Step S306 the desktop access controller returns the desktop connection parameters, including the user roaming path;
- Step S307 the client desktop component is activated to receive the desktop stream. Pass the user's roaming path to the virtual desktop component through a message, and write the roaming path into the configuration file;
- Step S308 the virtual machine roaming component reads the roaming path, initiates a Samba request to the DFS, and obtains the user configuration file;
- step S309 the DFS compares the user name and password, the verification is passed, the Samba request is accepted, the virtual machine roaming component downloads the user configuration file, loads the operating system, and the user logs in to the cloud desktop.
- Figure 4 shows the process of a user logging in to a virtual machine for the first time, which includes:
- Step S401 the user does not log in to the cloud desktop for the first time, the user enters the virtual machine password, and logs in to the virtual machine (cloud desktop); the virtual machine performs local verification, and after the verification is successful, the following operations are performed: the user logs in to create a user, inquires about the new user identification ID, and converts the user Identify the ID to DFS, download the roaming configuration file; log in to the operating system.
- Step S402 the virtual machine reports the user password to the DFS, and after the DFS authentication is passed, the virtual machine side downloads the user configuration file and loads the operating system;
- the virtual machine synchronizes the user name and the current login user ID to the distributed storage system; after the distributed storage system is successfully authenticated, the user is allowed to log in locally, and at the same time, the remote storage is pulled from the distributed storage.
- Personalized configuration loads the user's personalized desktop environment.
- Step S403 the virtual machine maps the shared path of the DFS to the local disk, and the user data newly created and updated by the user is synchronized to the DFS in real time;
- step S404 the user logs out of the cloud desktop, and the virtual machine roaming component uploads the user's personality data to the DFS.
- Figure 5 shows the process of a user logging in to a virtual machine for the first time, which includes:
- Step S501 the user logs in to the cloud desktop for the first time, and loads the operating system according to the virtual machine template;
- Step S502 the cloud desktop system reports the user name and password to the distributed storage system DFS, and after receiving the user name and password, the DFS opens an account for the user and allocates a mount point.
- the user opens an account locally through the cloud desktop management platform, configures cloud storage space, assigns mount points to users on the distributed storage server, and sets permissions and quota limits for shared files.
- Step S503 the virtual machine maps the shared path of the DFS to the local disk, and the user data newly created and updated by the user is synchronized to the DFS in real time; the distributed storage server will update the file system synchronously after receiving the data, update the password and the user ID ID; the verification is successful
- the desktop environment is initialized, and the operating system is started.
- the user's desktop environment depends on the settings of the desktop template.
- the virtual desktop roaming component sets the mounting path of the user's personalized data according to the connection parameters; at the same time, the data file generated by the user using the virtual machine is mapped to the corresponding network path.
- Step S504 the user logs out of the cloud desktop, and the virtual machine roaming component uploads the user's personality data to the DFS.
- this application has made progress in that cloud desktop application data relies on the short board of AD, achieved the effect of separating cloud desktop operating system and application personality data, saved users AD and the configuration of AD, and improved the experience of cloud desktop and use effects.
- the beneficial technical effects of the present application are: 1) the unbinding of user data and cloud desktop is realized, the user accesses different cloud desktop environments and uses the same user data, realizes the dynamic allocation of cloud desktop, and reflects the advantages of cloud desktop; 2) Overcoming the problem and defect of relying on AD for data roaming in some cases, saving the overhead of the AD server and the link of AD server authentication. 3) The pressure on the business network and the core network is relieved, and the user's data is stored in the data center, which is located in the user's home environment. Users can access nearby, and consume less network resources to achieve roaming.
Landscapes
- Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Human Computer Interaction (AREA)
- Information Transfer Between Computers (AREA)
Abstract
一种用户云桌面数据漫游和共享的方法及装置。该用户云桌面数据漫游和共享的方法包括：在用户登录云桌面过程中，云桌面利用用户信息建立与分布式数据存储系统DFS的连接；通过与所述DFS的连接，云桌面加载从DFS获取的用户个性化配置，以便建立用户个性化桌面环境；在加载从DFS获取的用户个性化配置成功后，云桌面获取保存在DFS的用户个性化数据，以供用户使用。
Description
相关申请的交叉引用
本申请基于申请号为202010601297.2、申请日为2020年06月29日的中国专利申请提出，并要求该中国专利申请的优先权，该中国专利申请的全部内容在此引入本申请作为参考。
本申请涉及云桌面技术领域，特别涉及一种用户云桌面数据漫游和共享的方法及装置。
随着云计算技术的发展，云桌面(云桌面等同于下文中的虚机或虚拟机)被广泛应用于各个关键技术领域，云桌面的方便，可靠、稳定也得到广大使用者的高度认可。然而如何做到异地安全访问用户配置和共享数据成为云桌面用户首要关心的问题。本专利主要实现一种基于非AD(Active Directory，活动目录)情况下的用户数据的漫游和共享。
云桌面数据漫游是一个全新的关键的技术领域。虽然云桌面现在已经被广泛的使用，但是数据能够与操作系统分开实现应用数据分离是很有意义的一个课题。在一些情况下依托网络技术实现了云桌面异地登陆，但是没有实现应用数据个性数据的分离，使得操作系统不能动态分配，资源利用率不高；在一些情况下，通过人工申请漫游的方式，将数据实现异地迁移，达到用户能够在云桌面里使用个性化等漫游数据。
发明内容
本申请提供一种用户云桌面数据漫游和共享的方法及装置。
根据本申请第一方面，提供了一种用户云桌面数据漫游和共享的方法，包括：在用户登录云桌面过程中，云桌面利用用户信息建立与分布式数据存储系统DFS的连接；通过与所述DFS的连接，云桌面加载从DFS获取的用户个性化配置，以便建立用户个性化桌面环境；在加载从DFS获取的用户个性化配置成功后，云桌面获取保存在DFS的用户个性化数据，以供用户使用。
根据本申请第二方面，提供了一种用户云桌面数据漫游和共享的装置，包括：虚拟桌面组件，用于在用户登录云桌面过程中，获取用户信息；加载虚拟桌面漫游组件从DFS获取的用户个性化配置，建立用户个性化桌面环境；虚拟桌面漫游组件，用于利用用户信息建立与分布式数据存储系统DFS的连接；通过与所述DFS的连接，从DFS获取的用户个性化配置，并在用户个性化配置加载成功后，获取保存在DFS的用户个性化数据，以供用户使用。
下面结合附图对本申请进行详细说明。
图1A是本申请实施例的一种用户云桌面数据漫游和共享的方法的示意图；
图1B是本申请实施例的非AD数据漫游系统的整体结构图；
图2是本申请实施例的非AD数据漫游整体流程图；
图3是本申请的非AD数据漫游鉴权流程图；
图4是本申请的用户非首次登陆虚拟机流程图；
图5是本申请的用户首次登陆虚拟机流程图。
图1A显示了本申请实施例的一种用户云桌面数据漫游和共享的方法，如图1所示，该方法包括：在用户登录云桌面过程中，云桌面利用用户信息建立与分布式数据存储系统DFS(Distributed File System)的连接；通过与所述DFS的连接，云桌面加载从DFS获取的用户个性化配置，以便建立用户个性化桌面环境；在加载从DFS获取的用户个性化配置成功后，云桌面获取保存在DFS的用户个性化数据，以供用户使用。
用户通过使用本申请实施例的上述方法，可以漫游到任何一个云桌面加载用户个性化配置，建立用户个性化桌面环境，从而实现了用户云桌面数据漫游和共享。
本申请实施例的上述方法还包括：在用户使用云桌面过程中，将用户使用云桌面过程中产生和更新的用户个性化数据同步到所述DFS，这样用户漫游到另一个云桌面时，同样可以从DFS获得用户个性化数据，从而实现了用户个性化数据共享。
本申请实施例的上述方法还包括：在加载从DFS获取的用户个性化配置失败后，云桌面在本地临时建立一个用于启动操作系统的配置文件；云桌面利用所建立的配置文件，启动操作系统。在启动操作系统后，就可以使用该云桌面，并把用户使用云桌面产生的用户个性化数据同步到所述DFS；在用户登出云桌面时，把用户在云桌面创建的用户个性化配置上传到 DFS。
一般来说，加载从DFS获取的用户个性化配置失败的原因是DFS中没有可用的用户个性化配置，比如用户首次登陆云桌面，因此需要建立一个临时配置文件启动操作系统。
本申请实施例的上述方法还包括：用户执行云桌面登出操作后，云桌面将包括增量的用户个性化配置信息上传至DFS。在一个实例中，云桌面可以将当前的用户个性化配置信息上传至DFS，更新DFS中的原用户个性化配置。
本申请实施例的上述方法还包括：用户执行云桌面登出操作后，云桌面将包括增量的用户个性化配置信息上传至DFS。
本申请的特点之一是，DFS上设有用户个性化数据挂载点和用户个性配置挂载点。云桌面的虚拟桌面漫游组件获取从用户登录信息得到的DFS的用户个性化配置挂载点的路径信息；虚拟桌面漫游组件根据所述用户个性化配置挂载点的路径信息，从所述DFS的用户个性化配置挂载点拉取用户个性化配置，加载所拉取的用户个性化配置。以及云桌面的虚拟桌面漫游组件获取从用户登录信息得到的DFS的用户个性化数据挂载点的路径信息；虚拟桌面漫游组件根据所述用户个性化数据挂载点的路径信息，从DFS的用户个性化配置挂载点获取用户个性化数据。
在本申请一个具体实例中，云桌面的虚拟桌面组件从用户登录过程中得到所述用户信息，所述用户信息包括DFS的用户个性化配置挂载点的路径信息和用户个性化数据挂载点的路径信息。云桌面的虚拟桌面漫游组件根据虚拟桌面组件传送的用户个性化配置挂载点的路径信息，从所述DFS的用户个性化配置挂载点拉取用户个性化配置，加载所拉取的用户个性化 配置。云桌面的虚拟桌面漫游组件根据所述虚拟桌面组件传送的DFS的用户个性化数据挂载点的路径信息，从DFS的用户个性化配置挂载点获取用户个性化数据。
本申请实施例的上述方法属于非AD情况下用户个性化配置文件漫游的方法。首先，管理员为用户在云桌面平台开户，分配桌面，同时在分布式数据系统DFS上分配挂载点，设置存储配额等属性。接着，云桌面客户端、服务端以及虚机需要更新相应的组件；接着，用户登录云桌面接入模块，进行鉴权获取系统参数以及桌面信息；接着，用户登陆虚拟桌面，虚拟机根据传入的用户参数更新相关的策略；然后，虚拟桌面漫游组件根据用户存储在DFS的配置加载桌面环境；最后，用户登出虚拟机，虚拟桌面漫游组件上传用户配置个性化信息数据至DFS，更新存储在远端的配置文件。
图1B显示了非AD数据漫游整体系统结构，包括客户端，云桌面接入控制器，若干个云桌面服务器，比如云桌面服务器1,2……n，对应每个云桌面服务器的云桌面，比如云桌面1,2……n，及分布式数据存储系统DFS；其中每个云桌面包括虚拟桌面组件和虚拟桌面漫游组件。
在上述图1B所示的系统中，除虚拟桌面漫游组件和分布式数据存储系统DFS外，其他部件均存在于现有的云桌面数据漫游系统中。本申请的特点在于，利用虚拟桌面漫游组件和DFS实现上述方法。
图1B所示的本申请实施例的所述非AD数据漫游系统的各组件的功能如下：
云桌面接入模块，用户登录组件，获取用户名、用户密码等信息。
云桌面客户端，运行在云终端设备上，通过获取到的连接参数与云桌 面建立连接，用户通过客户端可以与云桌面进行交互。客户端将用户个性化配置和个性化数据挂载点告知虚拟桌面组件。
云桌面服务器，云桌面虚拟化平台服务器。
虚拟桌面组件，其作为云桌面代理程序运行在云桌面内，负责与云桌面客户端进行信息交互。同时负责更新用户个性化配置挂载点，将用户个性化数据写入挂载点。
虚拟桌面漫游组件，运行在云桌面内，更新用户个性化数据挂载点，加载用户桌面环境。
分布式数据存储系统，保存用户数据。通过samba协议与云桌面进行数据交互。
应用数据分离通常指用户数据和桌面操作系统的分离，本申请实施例使用分布式数据存储系统DFS作为用户数据的远端存储系统。用户数据分为用户个性化配置和用户个性化数据两个部分。用户个性化配置指加载用户桌面环境的配置文件，用户个性化数据为用户使用桌面过程中产生和更新的数据文件。因此需要在分布式数据存储系统为用户分配两个挂载点，分别为用户个性化配置点和用户个性化数据挂载点。
虚拟桌面漫游组件负责从虚拟桌面组件获取虚机内的挂载地址，将相应的网络路径更新到虚机策略中。在用户登录虚机期间，虚拟桌面漫游组件向分布式存储服务器主机的445端口建立samba连接，拉取远端的桌面配置文件NTUSER.DAT加载桌面环境；在用户注销时上传NTUSER.DAT至DFS。
用户登录云桌面客户端的接入模块的过程中，接入模块通过和云桌面接入控制器交互，获取云桌面的一系列连接参数，包括主机地址、端口号、挂载点网络地址等。云桌面接入控制器采用非AD认证方式；云桌面客户端 桌面组件通过接入模块提供的参数，连接云桌面主机服务器；云桌面主机服务器将用户挂载点地址(是指DFS为用户分配的存储地址，设置共享，用户能以共享名访问这一网络资源。云桌面服务器能以用户名查到对应的用户的挂载点)传到对应的虚拟机中，虚拟桌面组件处理相应的漫游配置信息，更新虚拟桌面相应策略等信息(是指打开漫游的配置，若文件服务器的地址有变化，则更新)。
用户登录虚拟机的过程中，虚拟桌面漫游组件首先会检查登录用户、网络环境等必备条件，在条件满足的情况下以用户密码作为凭据和分布式数据存储系统DFS建立连接，拉取分布式存储系统上的用户个性化配置，加载用户的个性化桌面环境。如果加载成功，同时同步用户保存在分布式文件系统的用户数据到本地，若加载失败则从本地临时起一个配置文件启动操作系统；在用户使用桌面的过程中，会将用户更新的数据实时增量同步到分布式存储系统。用户执行登出操作后，虚拟桌面漫游组件会将用户的个性化配置等信息增量上传至分布式存储系统。
本申请实施例的一种用户云桌面数据漫游和共享的装置是实现上述方法的装置，涉及图1B所示系统中的虚拟桌面组件、虚拟桌面漫游组件以及分布式数据存储系统DFS，具体描述如下：
虚拟桌面组件，用于在用户登录云桌面过程中，获取用户信息；加载虚拟桌面漫游组件从DFS获取的用户个性化配置，建立用户个性化桌面环境；
虚拟桌面漫游组件，用于利用用户信息建立与分布式数据存储系统DFS的连接；通过与所述DFS的连接，从DFS获取的用户个性化配置，并在用户个性化配置加载成功后，获取保存在DFS的用户个性化数据，以供 用户使用；
分布式数据存储系统DFS，用于存储用户个性化配置(数据)和用户个性化数据。
如图1B所示，DFS上设有用户个性化数据挂载点和用户个性配置挂载点。
虚拟桌面组件在用户登录云桌面过程中获取的用户信息包括DFS的用户个性化配置挂载点的路径信息。虚拟桌面漫游组件根据虚拟桌面组件传送的用户个性化配置挂载点的路径信息，从所述DFS的用户个性化配置挂载点拉取用户个性化配置，加载所拉取的用户个性化配置。
另一方面，虚拟桌面组件在用户登录云桌面过程中获取的用户信息还包括DFS的用户个性化数据挂载点的路径信息。虚拟桌面漫游组件根据虚拟桌面组件传送的用户个性化数据挂载点的路径信息，从DFS的用户个性化配置挂载点获取用户个性化数据。
图2显示了非AD数据漫游整体流程，包括：
步骤S201，用户在云桌面登陆组件输入云桌面用户密码，云桌面客户端利用用户输的密码，去云桌面服务器鉴权；
步骤S202，云桌面服务器返回用户的虚机连接参数，包括服务器ip、端口号、虚机id、连接方式等等，连接参数根据管理员在管理平台为用户设置的虚机配置、用户权限等生成；
步骤S203，云桌面客户端调起显示窗口，接收桌面流数据，与虚机建立连接；
步骤S204，用户在虚机锁屏界面输入虚机用户密码，虚机漫游组件拿当前用户和密码名去DFS鉴权，鉴权成功下载用户配置文件，加载用户配置文 件，登入桌面；
步骤S205，用户登出云桌面(即用户注销云桌面)，虚机桌面组件上传用户配置文件至DFS。
图3显示了非AD数据漫游鉴权流程，包括：
步骤S301，用户在云桌面登陆组件输入云桌面用户密码，去鉴权模块鉴权；
步骤S302，鉴权成功，返回登陆的口令token；
步骤S303，客户端登陆组件利用token去云桌面接入控制器获取当前用户的虚机列表；
步骤S304，桌面接入控制器返回桌面列表，用户选中列表中的云桌面，点击登陆；
步骤S305，云桌面客户端向桌面接入控制器请求选中桌面的连接参数(即，用户漫游路径)；
步骤S306，桌面接入控制器返回桌面连接参数，包含用户漫游路径；
步骤S307，客户端桌面组件被调起，接收桌面流。将用户漫游路径通过消息传递给虚拟桌面组件，将漫游路径写入到配置文件中；
步骤S308，虚机漫游组件读取漫游路径，向DFS发起Samba请求，获取用户配置文件；
步骤S309，DFS比对用户名和密码，验证通过，接受Samba请求，虚机漫游组件下载用户配置文件，加载操作系统，用户登入云桌面。
图4显示了用户非首次登陆虚拟机的流程，其包括：
步骤S401，用户非首次登陆云桌面，用户输入虚机密码，登录虚机(云桌面)；虚机进行本地验证，验证成功后进行以下操作：用户登陆创建用户， 查询新用户标识ID，将用户标识ID给DFS，下载漫游配置文件；登陆操作系统。
步骤S402，虚机上报用户密码至DFS，DFS鉴权通过后，虚机侧下载用户配置文件，加载操作系统；
具体地说，虚机同步用户名以及本次的登陆用户标识I D到分布式存储系统；分布式存储系统验证成功后允许用户进行本地登陆，同时从分布式存储上拉取存储在远端的个性化配置，加载用户的个性化桌面环境。
步骤S403，虚机将DFS的共享路径映射到本地磁盘，用户新建、更新的用户数据实时同步至DFS；
步骤S404，用户登出云桌面，虚机漫游组件将用户个性数据上传至DFS。
图5显示了用户首次登陆虚拟机的流程，其包括：
步骤S501，用户首次登陆云桌面，根据虚机模板加载操作系统；
步骤S502，云桌面系统上报用户名、密码至分布式存储系统DFS，DFS收到用户名密码后，为用户开户，并分配挂载点。
具体地说，用户通过云桌面管理平台对用户进行本地开户，配置云存储空间，并在分布式存储服务器为用户分配分配挂载点，设置共享文件的权限和配额限制。
步骤S503，虚机将DFS的共享路径映射到本地磁盘，用户新建、更新的用户数据实时同步至DFS；分布式存储服务器接到数据后将同步更新文件系统，更新密码以及用户标识ID；验证成功后用户首次登陆，初始化桌面环境，启动操作系统，此时用户的桌面环境取决于桌面模板的设置。在启动过程中，虚拟桌面漫游组件根据连接参数设置用户个性化数据的挂载路径；同时，把用户使用虚拟机产生的数据文件将映射到对应的网络路径。
步骤S504，用户登出云桌面，虚机漫游组件将用户个性数据上传至DFS。
综上所述，本申请取得了云桌面应用数据依赖于AD短板的进步，达到了云桌面操作系统和应用个性数据分离效果，节省了用户AD以及对AD的配置，提高了云桌面的体验以及使用效果。
本申请的有益技术效果是，1)实现了用户数据和云桌面的解绑，用户接入不同的云桌面环境使用同一份用户数据，实现了云桌面的动态分配，体现了云桌面的优势；2)克服了一些情况中数据漫游依托AD问题和缺陷，节省了AD服务器的开销和AD服务器鉴权的环节。3)缓解了业务网和核心网的压力，用户的数据保存在数据中心，位于用户主场环境。用户可以就近接入，消耗更少的网络资源达到漫游。
尽管上文对本申请进行了详细说明，但是本申请不限于此，本技术领域技术人员可以根据本申请的原理进行各种修改。因此，凡按照本申请原理所作的修改，都应当理解为落入本申请的保护范围。
Claims (11)
- 一种用户云桌面数据漫游和共享的方法，包括：在用户登录云桌面过程中，云桌面利用用户信息建立与分布式数据存储系统DFS的连接；通过与所述DFS的连接，云桌面加载从DFS获取的用户个性化配置，以便建立用户个性化桌面环境；在加载从DFS获取的用户个性化配置成功后，云桌面获取保存在DFS的用户个性化数据，以供用户使用。
- 根据权利要求1所述的方法，还包括：在用户使用云桌面过程中，将用户使用云桌面过程中产生和更新的用户个性化数据同步到所述DFS。
- 根据权利要求2所述的方法，其中，还包括：在加载从DFS获取的用户个性化配置失败后，云桌面在本地临时建立一个用于启动操作系统的配置文件；云桌面利用所建立的配置文件，启动操作系统。
- 根据权利要求2所述的方法，其中，还包括：用户执行云桌面登出操作后，云桌面将包括增量的用户个性化配置信息上传至DFS。
- 根据上述权利要求任一项所述的方法，其中，所述DFS上设有用户个性化数据挂载点和用户个性配置挂载点。
- 根据权利要求5所述的方法，其中，所述用户信息包括DFS的用户个性化配置挂载点的路径信息；所述云桌面加载从DFS获取的用户个性化配置包括：云桌面的虚拟桌面漫游组件根据DFS的用户个性化配置挂载点的路径信息，从所述DFS的用户个性化配置挂载点拉取用户个性化配置，加载所 拉取的用户个性化配置。
- 根据权利要求5所述的方法，其中，所述用户信息包括DFS的用户个性化数据挂载点的路径信息；所述云桌面获取保存在DFS的用户个性化数据包括：云桌面的虚拟桌面漫游组件根据DFS中的用户个性化数据挂载点的路径信息，从DFS的用户个性化配置挂载点获取用户个性化数据。
- 一种用户云桌面数据漫游和共享的装置，包括：虚拟桌面组件，用于在用户登录云桌面过程中，获取用户信息；加载虚拟桌面漫游组件从DFS获取的用户个性化配置，建立用户个性化桌面环境；虚拟桌面漫游组件，用于利用用户信息建立与分布式数据存储系统DFS的连接；通过与所述DFS的连接，从DFS获取的用户个性化配置，并在用户个性化配置加载成功后，获取保存在DFS的用户个性化数据，以供用户使用。
- 根据权利要求8所述的装置，其中，所述DFS上设有用户个性化数据挂载点和用户个性配置挂载点。
- 根据权利要求9所述的装置，其中，所述用户信息包括DFS的用户个性化配置挂载点的路径信息；所述虚拟桌面漫游组件根据所述用户个性化配置挂载点的路径信息，从所述DFS的用户个性化配置挂载点拉取用户个性化配置，加载所拉取的用户个性化配置。
- 根据权利要求9所述的装置，其中，所述用户信息包括DFS的用户个性化数据挂载点的路径信息；所述虚拟桌面漫游组件根据所述用户个性化数据挂载点的路径信息，从DFS的用户个性化配置挂载点获取用户个 性化数据。
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010601297.2 | 2020-06-29 | ||
| CN202010601297.2A CN113934503A (zh) | 2020-06-29 | 2020-06-29 | 一种用户云桌面数据漫游和共享的方法及装置 |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| WO2022001755A1 true WO2022001755A1 (zh) | 2022-01-06 |
Family
ID=79272610
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| PCT/CN2021/101566 WO2022001755A1 (zh) | 2020-06-29 | 2021-06-22 | 一种用户云桌面数据漫游和共享的方法及装置 |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN113934503A (zh) |
| WO (1) | WO2022001755A1 (zh) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117319384A (zh) * | 2022-06-22 | 2023-12-29 | 中兴通讯股份有限公司 | 基于个性化漫游数据的池化桌面启动方法和云桌面系统 |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20120151481A1 (en) * | 2010-12-09 | 2012-06-14 | Electronics And Telecommunications Research Institute | System for managing personalization information of virtual machine based on cloud computing and method thereof |
| US20130073703A1 (en) * | 2011-09-15 | 2013-03-21 | Microsoft Corporation | Managing User State of Cloud Desktops |
| CN106330996A (zh) * | 2015-06-19 | 2017-01-11 | 中兴通讯股份有限公司 | 一种云桌面漫游的方法、装置及系统 |
| CN109343907A (zh) * | 2018-10-19 | 2019-02-15 | 南京机敏软件科技有限公司 | 基于kvm桌面云设置的配置和恢复方法及虚拟机、系统 |
| US20190245929A1 (en) * | 2018-02-06 | 2019-08-08 | Citrix Systems, Inc. | Computing system providing cloud-based user profile management for virtual sessions and related methods |
-
2020
- 2020-06-29 CN CN202010601297.2A patent/CN113934503A/zh active Pending
-
2021
- 2021-06-22 WO PCT/CN2021/101566 patent/WO2022001755A1/zh active Application Filing
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20120151481A1 (en) * | 2010-12-09 | 2012-06-14 | Electronics And Telecommunications Research Institute | System for managing personalization information of virtual machine based on cloud computing and method thereof |
| US20130073703A1 (en) * | 2011-09-15 | 2013-03-21 | Microsoft Corporation | Managing User State of Cloud Desktops |
| CN106330996A (zh) * | 2015-06-19 | 2017-01-11 | 中兴通讯股份有限公司 | 一种云桌面漫游的方法、装置及系统 |
| US20190245929A1 (en) * | 2018-02-06 | 2019-08-08 | Citrix Systems, Inc. | Computing system providing cloud-based user profile management for virtual sessions and related methods |
| CN109343907A (zh) * | 2018-10-19 | 2019-02-15 | 南京机敏软件科技有限公司 | 基于kvm桌面云设置的配置和恢复方法及虚拟机、系统 |
Also Published As
| Publication number | Publication date |
|---|---|
| CN113934503A (zh) | 2022-01-14 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11522701B2 (en) | Generating and managing a composite identity token for multi-service use | |
| US11501057B2 (en) | Enabling file attachments in calendar events | |
| AU2019277011B2 (en) | Domain pass-through authentication in a hybrid cloud environment | |
| US10331505B2 (en) | Application programming interface (API) hub | |
| US20080235361A1 (en) | Management layer method and apparatus for dynamic assignment of users to computer resources | |
| US20130125215A1 (en) | Remote application presentation over a public network connection | |
| US11102214B2 (en) | Directory access sharing across web services accounts | |
| US11356531B2 (en) | Data caching for cloud services | |
| AU2019229870A1 (en) | Instant virtual application launch | |
| AU2019356039B2 (en) | Local mapped accounts in virtual desktops | |
| US11057358B2 (en) | Concealment of customer sensitive data in virtual computing arrangements | |
| US11323477B1 (en) | Establishing secure connections to instances in private subnets of a cloud provider network | |
| CN113821170A (zh) | 一种分布式存储系统，一种访问方法及组件 | |
| WO2022001755A1 (zh) | 一种用户云桌面数据漫游和共享的方法及装置 | |
| US11783066B2 (en) | Securely sharing files with user devices based on location | |
| US11062049B2 (en) | Concealment of customer sensitive data in virtual computing arrangements | |
| US20220021532A1 (en) | Tracking Tainted Connection Agents | |
| US11546334B2 (en) | Client device configuration for remote digital workspace access | |
| WO2024045000A1 (en) | Application-based clipboard isolation and sharing | |
| US20230148314A1 (en) | Fast Launch Based on Hibernated Pre-launch Sessions | |
| CN117596285A (zh) | 一种云服务连接方法、装置、设备及存储介质 | |
| CN114443317A (zh) | 一种数据共享管控方法及其系统 |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| 121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 21831659 Country of ref document: EP Kind code of ref document: A1 |
|
| NENP | Non-entry into the national phase |
Ref country code: DE |
|
| 32PN | Ep: public notification in the ep bulletin as address of the adressee cannot be established |
Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205 DATED 19/05/2023) |
|
| 122 | Ep: pct application non-entry in european phase |
Ref document number: 21831659 Country of ref document: EP Kind code of ref document: A1 |