WO2024046157A1

WO2024046157A1 - Cloud desktop access method, electronic device, and computer readable medium

Info

Publication number: WO2024046157A1
Application number: PCT/CN2023/114000
Authority: WO
Inventors: 艾超
Original assignee: 中兴通讯股份有限公司
Priority date: 2022-08-29
Filing date: 2023-08-21
Publication date: 2024-03-07
Also published as: CN117676772A

Abstract

Provided in the present disclosure are a cloud desktop access method, an electronic device, and a computer readable medium. The cloud desktop access method comprises: upon detecting there is no connection to a network, performing wireless fidelity (WIFI) hotspot scanning to obtain a WIFI list; displaying a two-dimensional code as a scannable state; on the basis of identity information and cipher information of a first terminal corresponding to the two-dimensional code, interacting with an access control device, so as to be connected to a WIFI hotspot in the WIFI list; and after being connected to the WIFI hotspot in the WIFI list, interacting with a user account control device to acquire user information corresponding to a second terminal scanning the two-dimensional code; on the basis of the user information corresponding to the second terminal, interacting with an auxiliary platform server so as to obtain a connection parameter of a virtual desktop corresponding to the user information; and, on the basis of the connection parameter of the virtual desktop, interacting with a virtual machine corresponding to the virtual desktop so as to be connected to a virtual machine corresponding to the virtual desktop. FIG. 1

Description

Cloud desktop access method, electronic equipment, computer-readable media

Relevant public cross-references

This disclosure requires the priority of a Chinese patent application submitted to the State Intellectual Property Office on August 29, 2022, with the publication number CN202211047336.4 and the invention name "Cloud desktop access method, electronic device, computer readable medium". The entire contents of the application are incorporated by reference into this disclosure.

Technical field

Embodiments of the present disclosure relate to, but are not limited to, the fields of Internet technology and virtual machine technology, and particularly relate to cloud desktop access methods, electronic devices, and computer-readable media.

Background technique

The terminal connects to Wireless Fidelity (WIFI) and then scans the QR code to log in to the cloud desktop through another terminal. This technology requires users to connect to WIFI with a password in advance, and then scan the code to complete unified authentication. The operation is intermittent, not smooth, and the user experience is low.

Contents of the invention

Embodiments of the present disclosure provide a cloud desktop access method, electronic equipment, and computer-readable media.

In a first aspect, embodiments of the present disclosure provide a cloud desktop access method, which is applied to a first terminal. The method includes: detecting that there is no connection to the network, performing a wireless fidelity WIFI hotspot scan to obtain a WIFI list; displaying the QR code as Scannable state; based on the identity information and password information of the first terminal corresponding to the QR code, interact with the access control device to connect to the WIFI hotspot in the WIFI list; after connecting to the WIFI hotspot in the WIFI list , interact with the user account control device to obtain the user information corresponding to the second terminal that scans the QR code; based on the user information corresponding to the second terminal, interact with the auxiliary platform server to obtain the user information corresponding to the user information Connection parameters of the virtual desktop; based on the connection parameters of the virtual desktop, interact with the virtual machine corresponding to the virtual desktop to connect to the virtual machine corresponding to the virtual desktop.

In a second aspect, embodiments of the present disclosure provide an electronic device, including: at least one processor; storage The memory stores at least one program. When the at least one program is executed by the at least one processor, any one of the above cloud desktop access methods is implemented.

In a third aspect, embodiments of the present disclosure provide a computer-readable medium. A computer program is stored on the computer-readable medium. When the computer program is executed by a processor, any one of the above cloud desktop access methods is implemented.

Description of drawings

Figure 1 is a flow chart of a cloud desktop access method applied to a first terminal according to an embodiment of the present disclosure;

Figure 2 is a flow chart of a cloud desktop access method applied to an access control device according to an embodiment of the present disclosure;

Figure 3 is a flow chart of a cloud desktop access method applied to a user account control device according to an embodiment of the present disclosure;

Figure 4 is an interactive schematic diagram of a cloud desktop access method according to an example of an embodiment of the present disclosure;

Figure 5 is a block diagram of a cloud desktop access device according to an embodiment of the present disclosure;

Figure 6 is a block diagram of a cloud desktop access system according to an embodiment of the present disclosure.

Detailed ways

In order to enable those skilled in the art to better understand the technical solutions of the present disclosure, the cloud desktop access method, electronic equipment, and computer-readable media provided by the present disclosure are described in detail below with reference to the accompanying drawings.

Example embodiments will be described more fully below with reference to the accompanying drawings, which may, however, be embodied in different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully understand the scope of the disclosure to those skilled in the art.

The embodiments of the present disclosure and the features in the embodiments may be combined with each other without conflict.

As used herein, the term "and/or" includes any and all combinations of at least one associated listed item.

The terminology used herein is used to describe particular embodiments only and is not intended to limit the disclosure. As used herein, the singular forms "a", "an" and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. pointed out. It will also be understood that when the terms "comprising" and/or "made of" are used in this specification, the presence of stated features, integers, steps, operations, elements and/or components is specified but does not exclude the presence or Add at least one other feature, integer, step, operation, element, component and/or group thereof.

Unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art. It will also be understood that terms such as those defined in commonly used dictionaries should be construed to have meanings consistent with their meanings in the context of the relevant art and the present disclosure, and will not be construed as having idealized or excessive formal meanings, Unless expressly so limited herein.

Figure 1 is a flow chart of a cloud desktop access method applied to a first terminal according to an embodiment of the present disclosure.

In the first aspect, referring to Figure 1, an embodiment of the present disclosure provides a cloud desktop access method, which is applied to a first terminal. The method includes:

Step 100: It is detected that there is no connection to the network, and a wireless fidelity (Wireless Fidelity) hotspot scan is performed to obtain the WIFI list.

In some exemplary embodiments, the WIFI list includes at least one WIFI hotspot name.

In some exemplary embodiments, the WIFI hotspot name in the WIFI list may be a common WIFI hotspot name, or may also be an enterprise WIFI hotspot name.

In some exemplary embodiments, there may be one, two or more common WIFI hotspot names included in the WIFI list.

In some exemplary embodiments, there may be one, two or more enterprise WIFI hotspot names included in the WIFI list.

In some exemplary embodiments, WIFI hotspot scanning can be re-scanned at certain intervals to obtain a new WIFI list.

The method includes: step 101, displaying the QR code in a scannable state.

In the embodiment of the present disclosure, the QR code is displayed in a scannable state when there is no network connection, so that WIFI connection and cloud desktop access can be performed simultaneously when there is no network connection, achieving a scan-and-use effect.

The method includes: step 102, interacting with an Access Control (AC) device based on the identity information and password information of the first terminal corresponding to the QR code to connect to the WIFI hotspot in the WIFI list.

In some exemplary embodiments, after performing WIFI hotspot scanning to obtain the WIFI list, the method further includes: if the WIFI list includes the WIFI hotspot of the target enterprise, continue to perform the step of displaying the QR code in a scannable state; Correspondingly, the WIFI hotspots in the WIFI list are the WIFI hotspots of the target enterprise in the WIFI list.

In some exemplary embodiments, the identity information and password information of the first terminal corresponding to the QR code are a pair of key values, which are used to connect to the WIFI hotspot.

In some exemplary embodiments, for ordinary WIFI hotspots, the identity information and password information of different terminals may be the same. For the target enterprise WIFI hotspot, the identity information and password information of different terminals are different.

In some exemplary embodiments, interacting with the AC device based on the identity information and password information of the first terminal corresponding to the QR code to connect to the WIFI hotspot in the WIFI list includes: based on the identity of the first terminal corresponding to the QR code information and password information to interact with the AC device to connect to the WIFI hotspot with the strongest signal in the WIFI list.

In some exemplary embodiments, interacting with the AC device based on the identity information and password information of the first terminal corresponding to the QR code to connect to the WIFI hotspot in the WIFI list includes: based on the identity of the first terminal corresponding to the QR code information and password information to interact with the AC device to connect to the target enterprise WIFI hotspot in the WIFI list.

In some exemplary embodiments, interacting with the AC device based on the identity information and password information of the first terminal corresponding to the QR code to connect to the WIFI hotspot in the WIFI list includes: based on the identity of the first terminal corresponding to the QR code information and password information, interact with the AC device to connect to the WIFI hotspot with the strongest signal among the target enterprise WIFI hotspots in the WIFI list.

In some exemplary embodiments, interacting with the AC device based on the identity information and password information of the first terminal corresponding to the QR code to connect to the WIFI hotspot in the WIFI list includes: regularly based on the QR code within the validity period of the QR code The corresponding identity information and password information of the first terminal interact with the AC device to connect to the WIFI hotspot in the WIFI list. For example, within the validity period of the QR code, regularly interact with the AC device based on the identity information and password information of the first terminal corresponding to the QR code to connect to the WIFI hotspot with the strongest signal in the WIFI list, or to connect to the WIFI hotspot in the WIFI list. Target enterprise WIFI hotspot, or connect to the WIFI hotspot with the strongest signal among the target enterprise WIFI hotspots in the WIFI list.

In some exemplary embodiments, the validity period of the QR code can be set according to actual conditions, for example, it can be set to 60 seconds.

In some exemplary embodiments, an attempt may be made to communicate with the AC device every 2 seconds within the validity period of the QR code. each other to connect to the WIFI hotspots in the WIFI list.

In some exemplary embodiments, interacting with the AC device based on the identity information and password information corresponding to the QR code to connect to the WIFI hotspot in the WIFI list includes: sending a first authentication request to the AC device; wherein, the first authentication request including the identity information and password information of the first terminal corresponding to the QR code; receiving the first authentication success message returned by the AC device; sending an association request to the AC device; and receiving the association success message returned by the AC device.

In some exemplary embodiments, the association request includes the identity information and password information of the first terminal corresponding to the QR code.

In some exemplary embodiments, the association request is used to request to associate the first terminal with a WIFI hotspot in the WIFI list. For example, the association request is used to request that the first terminal be associated with the WIFI hotspot with the strongest signal in the WIFI list. Alternatively, the association request is used to request to associate the first terminal with the target enterprise WIFI hotspot in the WIFI list. Alternatively, the association request is used to request that the first terminal be associated with the WIFI hotspot with the strongest signal among the WIFI hotspots of the target enterprise in the WIFI list.

In some exemplary embodiments, after the first terminal receives the association success message returned by the access control device, it interacts with the AC device based on the identity information and password information of the first terminal corresponding to the QR code to connect to the WIFI list. The WIFI hotspot also includes: sending a second authentication request to the AC device; wherein the second authentication request includes the identity information and password information of the first terminal corresponding to the QR code; receiving a second authentication success message returned by the AC device; wherein , the second authentication success message includes: the user information of the second terminal and the security token corresponding to the user information.

In some exemplary embodiments, the second authentication may be Extensible Authentication Protocol (EAP, Extensible Authentication Protocol)_90 authentication.

The method also includes: step 103, after connecting to a WIFI hotspot in the WIFI list, interacting with a User Account Control (UAC) device to obtain user information corresponding to the second terminal that scans the QR code.

In some exemplary embodiments, the first terminal may be any terminal, for example, it may be a mobile terminal installed with the W100D or W600D application.

In some exemplary embodiments, the second terminal may be any terminal, for example, it may be a mobile terminal installed with a predetermined application, and the predetermined application may be, for example, an ICenter application.

In some exemplary embodiments, interacting with the UAC device to obtain user information corresponding to the second terminal that scans the QR code includes: sending a first acquisition request to the UAC device; wherein the first acquisition request packet Including: identity information and password information corresponding to the QR code; receiving user information corresponding to the second terminal returned by the UAC device.

In some exemplary embodiments, after sending the first acquisition request to the UAC device, the method further includes: receiving a security token corresponding to the user information returned by the UAC device.

In some exemplary embodiments, the security token has a validity period. After the validity period expires, the first acquisition request can be re-sent to the UAC device to obtain a new security token.

The method also includes: step 104, interacting with the client and server assistant plant (CSAP) server based on the user information corresponding to the second terminal to obtain the connection parameters of the virtual desktop corresponding to the user information.

In some exemplary embodiments, interacting with the CSAP server based on the user information corresponding to the second terminal to obtain the connection parameters of the virtual desktop corresponding to the user information includes: sending a second acquisition request to the CSAP server; wherein the second acquisition request includes : User information corresponding to the second terminal; receiving a virtual desktop list corresponding to the user information returned by the CSAP server; wherein the virtual desktop list includes virtual desktop information corresponding to at least one virtual desktop; displaying the virtual desktop list; receiving the user's selection instruction, Send a third acquisition request to the CSAP server corresponding to the virtual desktop information corresponding to the selection instruction; receive the connection parameters of the virtual desktop corresponding to the virtual desktop information corresponding to the selection instruction returned by the CSAP server.

In some exemplary embodiments, the second acquisition request further includes: a security token corresponding to the user information.

After receiving the second acquisition request, the CASP server authenticates the first terminal according to the security token, and after passing the authentication, returns a virtual desktop list corresponding to the user information to the first terminal.

In some exemplary embodiments, when there are two or more CASP servers, a second acquisition request can be sent to all CSAP servers, the virtual desktop list corresponding to the user information returned by all CSAP servers is received, and all CASP servers are The virtual desktop lists returned by the server are merged, and the merged virtual desktop list is displayed.

In some exemplary embodiments, the virtual desktop information includes, for example, the virtual desktop type, the name of the virtual desktop, the location of the server where the virtual desktop is located, the Internet Protocol (IP, Internet Protocol) address of the virtual desktop, etc.

In some exemplary embodiments, sending the second acquisition request to the CSAP server includes: regularly sending the second acquisition request to the CSAP server within the validity period of the QR code.

The method also includes: step 105, interacting with the virtual machine corresponding to the virtual desktop based on the connection parameter of the virtual desktop to connect to the virtual machine corresponding to the virtual desktop.

In some exemplary embodiments, the security token corresponding to the connection parameters of the virtual desktop and the user information interacts with the virtual machine corresponding to the virtual desktop to connect to the virtual machine corresponding to the virtual desktop.

In some exemplary embodiments, interacting with the virtual machine corresponding to the virtual desktop based on the security token corresponding to the connection parameters of the virtual desktop and the user information to connect to the virtual machine corresponding to the virtual desktop includes: sending a request to the CASP server based on the connection parameters of the desktop. Send a connection request; where the connection request includes: a security token corresponding to the user information; receive a connection response sent by the CASP server.

In some exemplary embodiments, the CASP server receives the connection request, authenticates the first terminal based on the security token, and returns a connection response to the first terminal after passing the authentication.

The cloud desktop access method provided by the embodiments of the present disclosure enables simultaneous connection to WIFI hotspots and access to virtual desktops by scanning QR codes without being connected to the network, achieving a "scan and go" effect and improving user experience.

Figure 2 is a flow chart of a cloud desktop access method applied to an access control device according to an embodiment of the present disclosure.

In the second aspect, referring to Figure 2, one embodiment of the present disclosure provides a cloud desktop access method, which is applied to AC equipment. The method includes:

Step 200: Receive a first authentication request sent by the first terminal; wherein the first authentication request includes the identity information and password information of the first terminal corresponding to the QR code.

The method also includes: step 201, performing first authentication on the first terminal according to the identity information and password information of the first terminal corresponding to the QR code.

In some example embodiments, the first authentication may be an 802.11 authentication.

The method also includes: step 202, if the first authentication of the first terminal is successful, returning a first authentication success message to the first terminal.

In some exemplary embodiments, if the first authentication fails on the first terminal, a first authentication failure message is returned to the first terminal.

The method also includes: step 203, receiving an association request sent by the first terminal, and associating the first terminal with the WIFI hotspot in the WIFI list.

In some exemplary embodiments, the association request is used to request that the first terminal and the WIFI list WIFI hotspot to associate. For example, the association request is used to request that the first terminal be associated with the WIFI hotspot with the strongest signal in the WIFI list. Alternatively, the association request is used to request to associate the first terminal with the target enterprise WIFI hotspot in the WIFI list. Alternatively, the association request is used to request that the first terminal be associated with the WIFI hotspot with the strongest signal among the WIFI hotspots of the target enterprise in the WIFI list.

In some exemplary embodiments, the association here may be an 802.11 association.

The method also includes: step 204, if the association is successful, returning an association success message to the first terminal.

In some exemplary embodiments, in the case of association failure, an association failure message is returned to the first terminal.

In some exemplary embodiments, after returning a successful association message to the first terminal, the method further includes: receiving a second authentication request sent by the first terminal; wherein the second authentication request includes the first terminal corresponding to the QR code. identity information and password information; forward the second authentication request to the UAC device; receive the second authentication success message returned by the UAC device, and forward the second authentication success message to the first terminal; wherein, the second authentication success message Including: the user information of the second terminal and the security token corresponding to the user information.

In some exemplary embodiments, in the case of receiving a second authentication failure message returned by the UAC device, the method further includes: forwarding the second authentication failure message to the first terminal.

Figure 3 is a flow chart of a cloud desktop access method applied to a user account control device according to an embodiment of the present disclosure.

In the third aspect, referring to Figure 3, one embodiment of the present disclosure provides a cloud desktop access method, which is applied to UAC devices. The method includes:

Step 300: Receive the user information sent by the second terminal that scans the QR code after scanning the QR code, and the identity information and password information of the first terminal corresponding to the QR code.

In some exemplary embodiments, the identity information and password information of the first terminal corresponding to the QR code is information obtained by the second terminal using a predetermined application to scan the QR code.

In some exemplary embodiments, the user information is user information displayed in the predetermined application after the second terminal logs in to the predetermined application, such as user name, etc.

In some exemplary embodiments, the predetermined application may be an ICenter application, for example.

The method also includes: step 301, receiving a second authentication request forwarded by the AC device; wherein the second authentication request includes the identity information and password information of the first terminal corresponding to the QR code.

The method also includes: step 302, comparing the identity information sent by the second terminal with the identity information in the second authentication request, and comparing the password information sent by the second terminal with the password information in the second authentication request.

The method also includes: step 303, when the identity information sent by the second terminal is the same as the identity information in the second authentication request, and the password information sent by the second terminal is the same as the password information in the second authentication request, generate The security token corresponding to the user information returns a second authentication success message to the AC device; wherein the second authentication success message includes: the user information sent by the second terminal and the security token corresponding to the user information.

In some exemplary embodiments, when the identity information sent by the second terminal is different from the identity information in the second authentication request, or the password information sent by the second terminal is different from the password information in the second authentication request. , returning a second authentication failure message to the AC device.

In some exemplary embodiments, generating a security token corresponding to user information includes: generating a security token based on identity information, password information, and user information. For example, combining identity information, password information, and user information to form a string.

In some exemplary embodiments, the security token is a string.

In some exemplary embodiments, the security token can also be generated based on the identity information, password information and dynamic password input by the user.

In some exemplary embodiments, the identity information and password information of the first terminal corresponding to the QR code change dynamically, so that security tokens generated at different times are different, thereby improving security.

In some exemplary embodiments, the security token has a validity period, and after the validity period expires, the security token can be regenerated.

In some exemplary embodiments, after returning the second authentication success message to the AC device, the method further includes: receiving a first acquisition request sent by the first terminal; wherein the first acquisition request includes: the first acquisition request corresponding to the QR code. The identity information and password information of a terminal; generate a security token, and return the user information corresponding to the second terminal and the security token corresponding to the user information to the first terminal.

In order to better present the interaction process between different devices in the cloud desktop access method of the embodiment of the present disclosure, an example is listed below to describe the interaction process between different devices in detail. The example listed is not used to limit the scope of the embodiment of the present disclosure. protected range.

Example

This example describes the cloud desktop access process. In order to better reflect the information interaction process, this example describes the interaction process between the application module and the WIFI Network Security Access (WPA, WIFI Protected Access) module in the first terminal. , as shown in Figure 4, the cloud desktop access method includes the following operations:

Step 400: The application module of the first terminal detects whether there is a connection to the network. If there is no connection to the network, the application module calls the WIFI network security access (WPA, WIFI Protected Access) module of the first terminal to perform WIFI hotspot scanning to obtain the WIFI list. .

Step 401: The application module of the first terminal determines whether the WIFI list includes the WIFI hotspot of the target enterprise. If the WIFI list includes the WIFI hotspot of the target enterprise, the QR code is displayed in a scannable state.

Step 402: After the second terminal logs in to the ICenter application, it scans the QR code displayed on the first terminal to obtain the identity information and password information of the first terminal corresponding to the QR code, and adds the user information logged in to ICenter and the first terminal corresponding to the QR code. The terminal's identity information and password information are sent to the UAC device.

Step 403: The application module of the first terminal regularly calls the interface of the WPA module of the first terminal within the validity period of the QR code to send the first authentication to the router corresponding to the WIFI hotspot with the strongest signal among the WIFI hotspots of the target enterprise included in the WIFI list. request; wherein, the first authentication request includes the identity information and password information corresponding to the QR code.

Step 404: The router forwards the first authentication request to the AC device.

Step 405: The AC device performs first authentication on the first terminal based on the identity information and password information corresponding to the QR code. If the first authentication on the first terminal is successful, the AC device returns a first authentication success message to the router.

Step 406: The router forwards the first authentication success message to the WPA module of the first terminal.

Step 407: The WPA module of the first terminal broadcasts the first authentication success message to the application module of the first terminal.

Step 408: The application module of the first terminal calls the interface of the WPA module of the first terminal to send an association request to the router.

Step 409: The router forwards the association request to the AC device.

Step 410: The AC device associates the first terminal with the WIFI hotspot with the strongest signal among the WIFI hotspots of the target enterprise included in the WIFI list, and if the association is successful, returns an association success message to the router.

Step 411: The router forwards the association success message to the WPA module of the first terminal.

Step 412: The WPA module of the first terminal broadcasts the association success message to the application module of the first terminal.

Step 413: The application module of the first terminal calls the interface of the WPA module of the first terminal to send a second authentication request to the router; where the second authentication request includes the identity information and password information corresponding to the QR code.

Step 414: The router forwards the second authentication request to the AC device.

Step 415: The AC device forwards the second authentication request to the UAC device.

Step 416: The UAC device compares the identity information sent by the second terminal with the identity information in the second authentication request, compares the password information sent by the second terminal with the password information in the second authentication request, and in the second When the identity information sent by the terminal is the same as the identity information in the second authentication request, and the password information sent by the second terminal is the same as the password information in the second authentication request, a security token corresponding to the user information is generated and sent to the AC device. Return a message that the second authentication is successful; wherein the message that the second authentication is successful includes: the user information sent by the second terminal and the security token corresponding to the user information.

Step 417: The AC device forwards the second authentication success message to the router.

Step 418: The router forwards the second authentication success message to the WPA module of the first terminal.

Step 419: The WPA module of the first terminal broadcasts the second authentication success message to the application module of the first terminal.

Step 420: The WPA module of the first terminal broadcasts a successful WIFI connection message to the application module of the first terminal.

Step 421: The application module of the first terminal periodically sends a first acquisition request to the UAC device within the validity period of the QR code; wherein the first acquisition request includes: the identity information and password information of the first terminal corresponding to the QR code.

Step 422: The UAC device returns the user information of the second terminal to log in to the ICenter application and the security token corresponding to the user information to the application module of the first terminal.

Step 423: The application module of the first terminal sends a second acquisition request to the CSAP server; wherein the second acquisition request includes: user information corresponding to the second terminal.

Step 424: The CSAP server returns a virtual desktop list corresponding to the user information to the application module of the first terminal; wherein the virtual desktop list includes virtual desktop information corresponding to at least one virtual desktop.

Step 425: The application module of the first terminal displays the received virtual desktop list.

Step 426: The application module of the first terminal receives the user's selection instruction and sends it to the virtual object corresponding to the selection instruction. The CSAP server corresponding to the virtual desktop information sends a third acquisition request.

Step 427: The CSAP server returns the connection parameters of the virtual desktop to the application module of the first terminal.

Step 428: The application module of the first terminal interacts with the virtual machine corresponding to the virtual desktop based on the connection parameters of the virtual desktop and the security token corresponding to the user information to connect to the virtual machine corresponding to the virtual desktop. Specifically, the application module of the first terminal sends a connection request to the virtual machine corresponding to the virtual machine based on the connection parameters of the virtual machine; wherein the connection request includes a security token corresponding to the user information.

In a fourth aspect, an embodiment of the present disclosure provides an electronic device, including: at least one processor; and a memory. At least one program is stored on the memory. When at least one program is executed by at least one processor, any one of the above is implemented. Cloud desktop access method.

Among them, the processor is a device with data processing capabilities, including but not limited to a central processing unit (CPU), etc.; the memory is a device with data storage capabilities, including but not limited to random access memory (RAM, more specifically such as SDRAM). , DDR, etc.), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory (FLASH).

In some embodiments, the processor and memory are connected to each other through a bus, and then to other components of the computing device.

In the fifth aspect, an embodiment of the present disclosure provides a computer-readable medium. A computer program is stored on the computer-readable medium. When the computer program is executed by a processor, any one of the above cloud desktop access methods is implemented.

Figure 5 is a block diagram of a cloud desktop access device according to an embodiment of the present disclosure.

In the sixth aspect, an embodiment of the present disclosure provides a cloud desktop access device, including: a detection module 501 configured to detect that there is no connection to the network, perform wireless fidelity WIFI hotspot scanning to obtain a WIFI list, and convert the QR code to Displayed in a scannable state; the interaction module 502 is configured to interact with the access control device based on the identity information and password information of the first terminal corresponding to the QR code to connect to the WIFI hotspot in the WIFI list and connect to After finding the WIFI hotspot in the WIFI list, interact with the user account control device to obtain the user information corresponding to the second terminal that scans the QR code, and interact with the auxiliary platform server based on the user information corresponding to the second terminal, To obtain the connection parameters of the virtual desktop corresponding to the user information, and interact with the virtual machine corresponding to the virtual desktop based on the connection parameters of the virtual desktop, so as to connect to the virtual machine corresponding to the virtual desktop.

In some exemplary embodiments, the detection module 501 is further configured to: if the WIFI list includes a WIFI hotspot of the target enterprise, continue to perform the step of displaying the QR code in a scannable state. Step; Correspondingly, the WIFI hotspot in the WIFI list is the target enterprise WIFI hotspot in the WIFI list.

In some exemplary embodiments, the interaction module 502 is configured to interact with the access control device based on the identity information and password information of the first terminal corresponding to the QR code in the following manner to connect to the WIFI list. WIFI hotspots in: regularly interact with the access control device based on the identity information and password information of the first terminal corresponding to the QR code within the validity period of the QR code to connect to the WIFI hotspots in the WIFI list.

In some exemplary embodiments, the interaction module 502 is configured to interact with the access control device based on the identity information and password information of the first terminal corresponding to the QR code in the following manner to connect to the WIFI list. WIFI hotspot in: Send a first authentication request to the access control device; wherein the first authentication request includes the identity information and password information of the first terminal corresponding to the QR code; receive the access control A first authentication successful message returned by the device; sending an association request to the access control device; and receiving a successful association message returned by the access control device.

In some exemplary embodiments, the interaction module 502 is further configured to: send a second authentication request to the access control device; wherein the second authentication request includes the identity of the first terminal corresponding to the QR code. information and password information; receiving a second authentication success message returned by the access control device; wherein the second authentication success message includes: user information of the second terminal and a security token corresponding to the user information.

In some exemplary embodiments, the interaction module 502 is specifically configured to implement the interaction with the user account control device in the following manner to obtain user information corresponding to the second terminal that scans the QR code: to the user account The control device sends a first acquisition request; wherein the first acquisition request includes: the identity information and password information of the first terminal corresponding to the QR code; and receives the corresponding information of the second terminal returned by the user account control device. user information.

In some exemplary embodiments, the interaction module 502 is specifically configured to implement the interaction with the auxiliary platform server based on the user information corresponding to the second terminal in the following manner to obtain the connection parameters of the virtual desktop corresponding to the user information. : Send a second acquisition request to the auxiliary platform server; wherein the second acquisition request includes: user information corresponding to the second terminal; receiving a virtual desktop list corresponding to the user information returned by the auxiliary platform server ; wherein the virtual desktop list includes at least one virtual desktop information corresponding to the virtual desktop; displays the virtual desktop list; receives the user's selection instruction, and sends the first auxiliary platform server corresponding to the virtual desktop information corresponding to the selection instruction; 3. Get the request; receive the virtual desktop information corresponding to the selection instruction returned by the auxiliary platform server. Connection parameters for the virtual desktop.

In some exemplary embodiments, the interaction module 502 is specifically configured to implement sending the second acquisition request to the auxiliary platform server in the following manner: regularly sending the second acquisition request to the auxiliary platform server within the validity period of the QR code. 2. Get request.

The specific implementation process of the above cloud desktop access device is the same as the specific implementation process of the cloud desktop access method in the previous embodiment, and will not be described again here.

In the seventh aspect, an embodiment of the present disclosure provides a cloud desktop access system, including: a first terminal 601, an AC device 602, a UAC device 603, and a CSAP server 604.

Among them, the first terminal 601 is configured to detect that there is no connection to the network, perform WIFI hotspot scanning to obtain the WIFI list; display the QR code in a scannable state; and based on the identity information and password information of the first terminal corresponding to the QR code and The access control device interacts to connect to the WIFI hotspot in the WIFI list; after connecting to the WIFI hotspot in the WIFI list, interacts with the user account control device to obtain the second terminal corresponding to the scanned QR code. user information; interact with the auxiliary platform server based on the user information corresponding to the second terminal to obtain the connection parameters of the virtual desktop corresponding to the user information; and based on the connection parameters of the virtual desktop and the virtual desktop corresponding to the virtual desktop. Interact with the computer to connect to the virtual machine corresponding to the virtual desktop.

Wherein, the AC device 602 is configured to interact with the first terminal to connect the first terminal to the WIFI hotspot in the WIFI list.

The UAC device 603 is configured to interact with the first terminal to send user information corresponding to the second terminal that scans the QR code to the first terminal.

The CSAP server 604 is configured to interact with the first terminal to send the connection parameters of the virtual desktop corresponding to the user information to the first terminal.

In some exemplary embodiments, the first terminal 601 is further configured to: if the WIFI list includes the target enterprise WIFI hotspot, continue to perform the step of displaying the QR code in a scannable state; correspondingly , the WIFI hotspot in the WIFI list is the target enterprise WIFI hotspot in the WIFI list.

In some exemplary embodiments, the first terminal 601 is specifically configured to interact with the access control device based on the identity information and password information of the first terminal corresponding to the QR code in the following manner to connect to the WIFI list. WIFI hotspot: within the validity period of the QR code, the timing is based on the corresponding QR code. The identity information and password information of a terminal interact with the access control device to connect to the WIFI hotspot in the WIFI list.

In some exemplary embodiments, the first terminal 601 is specifically configured to interact with the access control device based on the identity information and password information of the first terminal corresponding to the QR code in the following manner to connect to the WIFI list. WIFI hotspot: Send a first authentication request to the access control device; wherein the first authentication request includes the identity information and password information of the first terminal corresponding to the QR code; receive the access control device Return a first authentication success message; send an association request to the access control device; receive an association success message returned by the access control device.

The AC device 602 is specifically configured to interact with the first terminal in the following manner to connect the first terminal to the WIFI hotspot in the WIFI list: receiving the first authentication request sent by the first terminal; according to the QR code corresponding Use the identity information and password information of the first terminal to perform first authentication on the first terminal; if the first authentication on the first terminal is successful, return a message indicating that the first authentication is successful to the first terminal; receive the message sent by the first terminal. The association request is to associate the first terminal with the WIFI hotspot in the WIFI list; if the association is successful, an association success message is returned to the first terminal.

In some exemplary embodiments, the first terminal 601 is further configured to: send a second authentication request to the access control device; wherein the second authentication request includes the first terminal corresponding to the QR code. Identity information and password information; receiving a second authentication success message returned by the access control device; wherein the second authentication success message includes: user information of the second terminal and a security token corresponding to the user information. .

The AC device 602 is also configured to: receive a second authentication request sent by the first terminal; wherein the second authentication request includes the identity information and password information of the first terminal corresponding to the QR code; and forward the second authentication request to the UAC device. ; Receive a second authentication success message returned by the UAC device; wherein the second authentication success message includes: user information of the second terminal and a security token corresponding to the user information.

The UAC device 603 is also configured to: receive the user information sent by the second terminal that scans the QR code after scanning the QR code, and the identity information and password information of the first terminal corresponding to the QR code; receive the second terminal forwarded by the AC device. Authentication request; compare the identity information sent by the second terminal with the identity information in the second authentication request, compare the password information sent by the second terminal with the password information in the second authentication request; send at the second terminal When the identity information of the user is the same as the identity information in the second authentication request, and the password information sent by the second terminal is the same as the password information in the second authentication request, generate a security token corresponding to the user information, and return the second authentication token to the AC device. A second authentication success message; wherein the second authentication success message includes: user information sent by the second terminal and a security token corresponding to the user information.

In some exemplary embodiments, the first terminal 601 is specifically configured to interact with the user account control device in the following manner to obtain user information corresponding to the second terminal that scans the QR code: to the user account control device. The device sends a first acquisition request; wherein the first acquisition request includes: the identity information and password information of the first terminal corresponding to the QR code; and receives the identity information and password information of the second terminal corresponding to the second terminal returned by the user account control device. User Info.

The UAC device 603 is specifically configured to interact with the first terminal in the following manner to send the user information corresponding to the second terminal that scans the QR code to the first terminal: receiving the first acquisition request sent by the first terminal; The first acquisition request includes: identity information and password information corresponding to the QR code; and user information corresponding to the second terminal is returned to the first terminal.

In some exemplary embodiments, the first terminal 601 is specifically configured to interact with the auxiliary platform server based on the user information corresponding to the second terminal in the following manner to obtain the connection parameters of the virtual desktop corresponding to the user information: Send a second acquisition request to the auxiliary platform server; wherein the second acquisition request includes: user information corresponding to the second terminal; receiving a virtual desktop list corresponding to the user information returned by the auxiliary platform server; Wherein, the virtual desktop list includes virtual desktop information corresponding to at least one virtual desktop; displays the virtual desktop list; receives the user's selection instruction and sends a third party to the auxiliary platform server corresponding to the virtual desktop information corresponding to the selection instruction. Obtain the request; receive the connection parameters of the virtual desktop corresponding to the virtual desktop information corresponding to the selection instruction returned by the auxiliary platform server.

The CSAP server 604 is specifically configured to interact with the first terminal in the following manner to send the connection parameters of the virtual desktop corresponding to the user information to the first terminal: receive the second acquisition request sent by the first terminal; return to the first terminal The virtual desktop list corresponding to the user information; receiving the second acquisition request sent by the first terminal; returning the virtual desktop list to the first terminal; receiving the third acquisition request sent by the first terminal; and returning the connection parameters of the virtual desktop to the first terminal.

The specific implementation process of the above cloud desktop access system is the same as the specific implementation process of the cloud desktop access method in the previous embodiment, and will not be described again here.

Those of ordinary skill in the art can understand that all or some steps, systems, and functional modules/units in the devices disclosed above can be implemented as software, firmware, hardware, and appropriate combinations thereof. In hardware implementations, the division between functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may consist of several physical components. Components execute cooperatively. Some or all of the physical components may be implemented as software executed by a processor, such as a central processing unit, digital signal processor, or microprocessor, or may be implemented as Hardware, or implemented as an integrated circuit, such as an application specific integrated circuit. Such software may be distributed on computer-readable media, which may include computer storage media (or non-transitory media) and communication media (or transitory media). As is known to those of ordinary skill in the art, the term computer storage media includes volatile and nonvolatile media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. removable, removable and non-removable media. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, Digital Versatile Disk (DVD) or other optical disk storage, magnetic cassettes, tapes, disk storage or other magnetic storage, or may be used Any other medium that stores the desired information and can be accessed by a computer. Additionally, it is known to those of ordinary skill in the art that communication media typically embodies computer readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media .

Example embodiments have been disclosed herein, and although specific terms are employed, they are used and should be interpreted in a general illustrative sense only and not for purpose of limitation. In some instances, it will be apparent to those skilled in the art that features, characteristics and/or elements described in connection with a particular embodiment may be used alone, or may be used in conjunction with other embodiments, unless expressly stated otherwise. Features and/or components used in combination. Accordingly, it will be understood by those skilled in the art that various changes in form and details may be made without departing from the scope of the present disclosure as set forth in the appended claims.

Claims

A cloud desktop access method, applied to the first terminal, the method includes:

It is detected that there is no connection to the network, and the wireless fidelity WIFI hotspot scan is performed to obtain the WIFI list;

Display the QR code as scannable;

Based on the identity information and password information of the first terminal corresponding to the QR code, interact with the access control device to connect to the WIFI hotspot in the WIFI list;

After connecting to the WIFI hotspot in the WIFI list, interact with the user account control device to obtain user information corresponding to the second terminal that scans the QR code;

Based on the user information corresponding to the second terminal, interact with the auxiliary platform server to obtain the connection parameters of the virtual desktop corresponding to the user information;

Based on the connection parameters of the virtual desktop, interact with the virtual machine corresponding to the virtual desktop to connect to the virtual machine corresponding to the virtual desktop.
The cloud desktop access method according to claim 1, wherein after the wireless fidelity WIFI hotspot scanning is performed to obtain the WIFI list, the method further includes:

When the WIFI list includes the WIFI hotspot of the target enterprise, continue to perform the step of displaying the QR code in a scannable state, wherein

The WIFI hotspots in the WIFI list are the target enterprise WIFI hotspots in the WIFI list.
The cloud desktop access method according to claim 1, wherein the identity information and password information of the first terminal based on the QR code interacts with the access control device to connect to the WIFI hotspot in the WIFI list. include:

During the validity period of the QR code, the system interacts with the access control device regularly based on the identity information and password information of the first terminal corresponding to the QR code to connect to the WIFI hotspot in the WIFI list.
The cloud desktop access method according to claim 1, wherein the identity information and password information of the first terminal based on the QR code interacts with the access control device to connect to the WIFI list WIFI hotspots include:

Send a first authentication request to the access control device; wherein the first authentication request includes the identity information and password information of the first terminal corresponding to the QR code;

Receive a first authentication success message returned by the access control device;

Send an association request to the access control device;

Receive an association success message returned by the access control device.
The cloud desktop access method according to claim 4, wherein after receiving the association success message returned by the access control device, the method further includes:

Send a second authentication request to the access control device; wherein the second authentication request includes the identity information and password information of the first terminal corresponding to the QR code;

Receive a second authentication success message returned by the access control device; wherein the second authentication success message includes: user information of the second terminal and a security token corresponding to the user information.
The cloud desktop access method according to claim 1, wherein the interaction with the user account control device to obtain user information corresponding to the second terminal that scans the QR code includes:

Send a first acquisition request to the user account control device; wherein the first acquisition request includes: the identity information and password information of the first terminal corresponding to the QR code;

Receive user information corresponding to the second terminal returned by the user account control device.
The cloud desktop access method according to claim 1, wherein the interaction with the auxiliary platform server based on the user information corresponding to the second terminal to obtain the connection parameters of the virtual desktop corresponding to the user information includes:

Send a second acquisition request to the auxiliary platform server; wherein the second acquisition request includes: user information corresponding to the second terminal;

Receive a virtual desktop list corresponding to the user information returned by the auxiliary platform server; wherein the virtual desktop list includes virtual desktop information corresponding to at least one virtual desktop;

Display the virtual desktop list;

Receive the user's selection instruction and send a third acquisition request to the auxiliary platform server corresponding to the virtual desktop information corresponding to the selection instruction;

Receive the connection parameters of the virtual desktop corresponding to the virtual desktop information corresponding to the selection instruction returned by the auxiliary platform server.
The cloud desktop access method according to claim 7, wherein sending the second acquisition request to the auxiliary platform server includes:

A second acquisition request is regularly sent to the auxiliary platform server within the validity period of the QR code.
An electronic device including:

at least one processor;

A memory, at least one program is stored on the memory, and when the at least one program is executed by the at least one processor, the cloud desktop access method described in any one of claims 1-8 is implemented.
A computer-readable medium. A computer program is stored on the computer-readable medium. When the computer program is executed by a processor, the cloud desktop access method described in any one of claims 1-8 is implemented.