Virtual desktop method and virtual desktop infrastructure of multidimensional intelligent service point

p0001Multidimensional intelligent service point virtual desktop TECHNICAL FIELD Infrastructure

p0002The present invention relates to computer virtualization technology and applications, and more particularly, relates to a multi-dimensional intelligence service point of the virtual desktop infrastructure. Background technique

p0003With the personal computer the popularity of the user hardware and software purchase, expenditure upgrades and maintenance and other aspects of the increasingly high, management and maintenance of increasingly complex security issues become increasingly prominent, to businesses, organizations and individuals to bring a lot of trouble. On the other hand, the development of network technology advances, strong virtualization technology development momentum appeared desktop virtualization trend that uses a client - server (c- S) model personal computer desktop environment and physical hardware separation, in the local computer to display and operate a remote computer desktop, and the remote computer to execute programs and store information. Desktop virtualization into a conventional personal computer problems brought presents an effective solution.

p0004Virtual desktop infrastructure (Virtual Desktop Infrastructure, referred VDI) special ordered desktop virtualization possible server computing model, by the required hardware and software systems together to support virtualized environments. Desktop operating systems and applications running on the server data center virtual machine (later referred to as a virtual machine), users can access virtual desktops and applications from a PC, netbooks, thin clients and other terminal devices via a network, and be able to a complete PC experience. Core VDI management software through a series of policies to the virtual machine pool data center a lot of virtual machines formed centralized management, and using the transfer protocol desktop delivery to end users. Wei Rui (VMWare) company ESXi, Citrix (Citrix) companies Xen, Microsoft (Microsoft) of Hyper-V are available to do the VDI based virtualization technology. These companies have also launched their own VDI products, namely Wei Rui VMWare View, Citrix XenDesktop, Microsoft VDI suite.

p0005VDI enter the market for years, but the implementation has been very difficult, for two main reasons. One is a performance problem, especially network performance problems. ESG (Enterprise Solutions Group) full name of Han Si Group Ltd. The study found that many concerns of users are around network performance to start, thousands of desktop images migrate from the terminal (ie, desktop, terminal, etc.) to the data center, including after subsequent task processing applications and data requests, which impact on network performance is self-evident. The second is the price, VDI and traditional Terminal Services (TS) in function have a certain similarity, although VDI there can be provided an influence independent virtual machine, not other users or systems for each end-user benefits ; but comparatively speaking, expensive. How to use an effective technical solution to improve the economies of scale VDI so that when the number of users to a certain extent, VDI performance than the TS better price advantage, the problem is a user of great concern. Nevertheless, there's VDI solution, there is not a effective solution for these two problems. Thus, the paper proposes a multi-dimensional intelligent managed services point the virtual desktop, which effectively solve the above problems, has become the art development of the key. SUMMARY

p0006The present invention discloses a multi-dimensional intelligent service point of the virtual desktop infrastructure, more specifically, is a combination of a variety of hardware, software and network resources to support virtualized environments, the background service point for virtual machines, real machines and virtual applications program resources for centralized management (compared to virtual machines is concerned, where the real machine refers to the physical computer), virtual desktops on-demand delivery to end users, providing permeability services and intelligent session (session), and with the use of the growing number of service costs decreased significantly, resulting in economies of scale virtual desktop infrastructure.

p0007To achieve the above invention object, the present invention is used in design are:

p0008Service management and network management for telecommunications concept to the virtual desktop infrastructure. System consists of two-dimensional construction, the transverse one-dimensional by the client devices, access points, the service switching point, back-office services dots, constitutes a virtual desktop transmission path; longitudinal one-dimensional by the company Caozuojitong, corporate applications, user applications , user data and settings composition, the virtual machine is divided into several manageable level. By accessing the access point, service switching point, the background service point for the entire infrastructure management, where the background service point generating virtual machines and virtual applications and virtual machine / solid machine / application for centralized management, access points, and switching the main point is responsible for providing virtual desktops transport network management and service, service permeable, and provide a unified programming interface can be used with third-party integration.

p0009Background service point by a real machine / virtual machine into a unified system so that the user can flexibly choose to use real or virtual machines as needed. Generally, for high-definition transmission of some high-density media, choose to use a real machine. Management real machine real machine management center to complete management of virtual machines through the virtual machine management center to complete, manage virtual applications through Virtual Application Manager to complete. By SOD (Service on Demand) client is installed on a virtual machine up to achieve virtual machines and virtual application integration, SOD's server is usually installed in a real machine. Through virtual workspace for layered application management. And the method of release tree to upgrade to update the virtual machine template. Service switching point mainly to provide call continuity and business exchange services, virtual machine / real machine switching functions, while providing load balancing, rules and policy engine, service monitoring, SIP proxy service and unified programming interface. Access points primarily to provide remote access management, and connection services, using the extended connection broker real machine and the virtual machine connected together and having registered authentication and single sign-on capabilities, while providing load balancing, rules and policy engine, service monitoring , SIP proxy service and unified programming interface.

p0010Transfer desktop using SIP protocol and remote transmission protocol (may Spice protocol, it can be RDP and ICA protocols, respectively, to be described below). Session Initiation Protocol (SIP) is an IETF proposed in 1999 based on application layer signaling text control protocol for creating, modifying and releasing one or more participants in the session. Independent Computing Environment simple protocol (SPICE) is a virtual technology after Red Hat (Red Hat) acquired Qumranet obtained is a specially designed for virtual environments adaptive remote transmission protocol designed for today's bandwidth-intensive applications ( such as multimedia, VoIP) to provide a seamless user experience, allowing users to use virtual desktop feel the same experience with the use of a physical desktop. Red Hat has opened its SPICE hosted virtual desktop protocol source code SIP protocol for creating, changing and ending the session (Session), Spice protocol used to send virtual desktops. Remote Desktop Transfer Protocol (RDP) is developed by Microsoft for connecting a local client to a terminal server to maintain session between the two protocols. SIP protocol control signaling, so that a user can obtain multiple sessions so you can use more than one virtual machine, its inherent time mechanism can achieve more than one person uses a virtual machine, intelligent conversation. SIP can establish end-to-overlay (Overlay), intelligent scheduling resources to cover the Core (Core Network), Edge (Edge network) to the user equipment consisting of overlay network, making virtual desktops transport safely and quickly. In a preferred embodiment, For securities companies, a conversation across multiple screens. In a preferred embodiment, used in factories, multiple sessions are displayed on a large screen.

p0011In the virtual machine pool management section introduces spare pools, and an elastic pool of methods. In order to solve the education and training institutions ten minutes between classes to change the course of the problem through the use of l inked-clone technology to generate the primary virtual machine pool corresponding spare pool, and spare pool is set to suspend (pause) state, when the recess need to quickly when changing course, you can use the spare pool to complete the binding course. Use spare pool includes spare pool generates, uses, optimization and exit. Flexible pool by setting the initial value, the maximum threshold value and reserve value, set the size of the relationship between these values ​​and use some algorithm to determine certain rules in order to take full advantage of the virtual machine resources, the establishment of users and virtual machine between flexible access relationships.

p0012Specifically, the present invention provides the following technical solutions:

p0013According to one embodiment of the present invention proposes a multi-dimensional intelligence service point of the virtual desktop infrastructure, comprising: a background service point, service switching point, access points and client devices. Background service points generated in the background virtual machines and virtual applications, the background service point for the virtual machine, the virtual application, real machine centralized control and assigned to the user; the service switching point to connect to the back-end service point, service switching point to provide call continuity and business exchange services to an exchange after the real machine / virtual machine requests to the backend service points, while controlling traffic exchange services; access point connected to the service switching point, access points provide remote access management and connectivity services, control access to access services; client devices connect to the backend service point, service switching point and the access point, the client device is selected from one of the following: personal computers, laptops, netbooks, mobile phones, handheld devices.

p0014Wherein the background service point includes a real machine management center, virtual machine management center, virtual application management, virtual workspace management and virtualization infrastructure platform. Real machine management center management background of the real machine to the user assigned real machine; virtual machine management center management background virtual machine to the user assign a virtual machine; Virtual Application Manager generates and management background virtual applications and to create virtual applications and virtual machine combination; virtual workspace manager virtual application layer management; virtualization infrastructure platform comprises a plurality of hosts, wherein each host using a kernel-based virtual machine (KVM) hardware platform virtualization.

p0015Wherein the real machine management center includes a real machine connection manager, real machine state manager, agent controller, a solid client list, the real machine application list and usage reports. Real machine connection manager accepts the status of the user with real machine request, check the real machine, the user will be used by application (application) messages through a proxy controller sends to the agent, and returned to the service switching point; the actual machine state manager responsible for monitoring the status of the computer and state transitions; agent controller is responsible for receiving agent sends a message, send the operation application instructions to the proxy, and check the agent to send heart beat messages to decide whether to close a real machine judgments; real machine list is a user You can register with their account binding solid-to-solid client list; a real machine application list is a list of user-specified use applications; usage reports for statistics users with real machine and application.

p0016Wherein the virtualization infrastructure platform includes terminal-based protocol Spice server, Session Initiation Protocol (SIP) server, the Spice server and Session Initiation Protocol (SIP) server for client devices to interact.

p0017Wherein the service switching point includes the virtual machine swap and real machine switches and switching services controller. Virtual machine swap and real machine switch according to the user's request, the request to connect to the response of the virtual machine management center or a real machine management center; business exchange service controller provides include call connection services, business exchange service, load balancing, rules and policies engine, Overlay management, service monitoring, SIP services, and service interfaces.

p0018Wherein the virtual machine swap includes a seat and classroom management database. Wherein the access point includes a RAS server and connection broker. RAS server to manage remote access and when users outside the firewall for the user to establish a VPN connection; the connection broker provides clients access channel to the client to transfer the desktop screen and the application screen, using the extended system, as well as the background of the virtual machine and the real machines provide connectivity.

p0019Wherein the access point further comprises accessing access controller, access to the access provider network services, and provide a unified programming interface with third-party integration.

p0020Wherein accessing access controller includes a load balancer, Service Monitor, SIP proxy server, Overlay Manager and management console. Load balancing provides load balancing service; Service Monitor service request monitoring and statistics; SIP proxy server receives virtual desktops request, decided to send these requests to go, and transmits them to the next server; Overlay Manager provides SIP overlay management; management console provides management control interface.

p0021Wherein the connection broker provides clients access channel further includes the user's login information in the authentication center generates credentials, and credentials are encrypted to complete the unified authentication authorization and single sign-on (sso).

p0022According to one embodiment of the present invention proposes a multi-dimensional intelligence service point virtual desktops, the method comprising: using the access point, service switching point, the background service point control virtual desktops generation dispatch and transmission. Wherein the background service points generated in the background virtual machines and virtual applications, the background service point for the virtual machine, the virtual application, real machine centralized control and assigned to the user; the service switching point to connect to the back-end service point, service switching point to provide call continuity and business exchange services to the exchange after the real machine / virtual machine requests to the backend service points, while controlling traffic exchange services; access point connected to the service switching point, access points provide remote access management and connectivity services, while controlling access to access services.

p0023Wherein the method further comprises based on the client device and the user's SIP authentication registration, certification registration for machine capability negotiation in which the client device is connected to the back-end service point, service switching point and the access point, client device selected from the following one: Personal computers, laptops, netbooks, mobile phones, handheld devices.

p0024Wherein the method further comprises using the SIP protocol to create a session and connect customer equipment and back-office services between points; background service points client device capabilities; launch Spice protocol virtual desktop screen transmitted from a background service point to the client device; after the screen transfer is complete, using the SIP protocol to end the session.

p0025Wherein the method further comprises the SIP proxy server time mechanisms multiple sessions brought together to enable multiple users to use a virtual machine; through the SIP proxy server makes a user Keyihuode multiple sessions, so that a user can use multiple a virtual machine.

p0026Wherein the method further comprises the session and services as common expenses, consider each by virtualized SIP server has the same performance, the same session transaction assigned to the same SIP server load distribution method.

p0027Wherein the method further comprises using a SIP server and its connection to create a virtual SIP Overlay method in Overlay node Overlay manage, SIP port accepts signaling, Spice port accepts the virtual machine screen and provide a unified API interface.

p0028Wherein the method further includes a method for virtual desktop end to end transmission is realized by SIP clients and SIP server protocol stack.

p0029According to the present invention, an embodiment proposes a virtual machine pool management method comprising: setting an initial value, the maximum value of the threshold value and reserve value; set the initial value, the maximum value of the threshold value and reserve value logical relationship between the initial value, the maximum threshold value and reserve value and a logical relationship between them to achieve access to the virtual desktop pool Rules virtual machine.

p0030Wherein the method further comprises the use of linked-clone technology to generate the primary virtual machine pool corresponding spare pool, and spare pool is set to suspend state, the standby pool of virtual machine and the host virtual desktop pool virtual machine used in conjunction.

p0031Wherein the method further comprises spare pool time for dynamic specified search idle pool of spare pool optimization strategy.

p0032According to one embodiment of the present invention proposes a virtual application and virtual machine combination, comprising: in the server installation monitoring program; monitoring program collects file information and registry information, and packaged packaged into tsap files; according to customer end application requests will tsap file stream to the client for users.

p0033Wherein the method further includes creating a template based on an existing user machine information and virtual application information, and SOD client installed on the virtual machine.

p0034Wherein the method further comprises the virtual machine and application virtual machine is divided into four layers: companies operating systems, corporate applications, user applications, user data and settings, and virtual workspaces to the four layers to manage.

p0035According to the present invention, an embodiment proposes a virtual desktop infrastructure beyond the scope of screen display method, comprising: providing a real service point, the background service points in the background to generate virtual machines and virtual applications, back-office services point to the virtual machine, virtual application, real machine centralized control and distributed to users; setting application proxy in the background service points, application proxy consists of two parts: the high-end part of the application Builder, the bottom part of the virtual interface; launch applications, virtual interface detection write application data on the display of memory, if it exceeds the screen area to calculate the number of screens exceeded and informs the application generator generates a process for each excess screen; the original screen application screens and generated by the process is sent to clients.

p0036According to the present invention, an embodiment proposes a virtual desktop infrastructure of the screens display method, comprising: a client as a big screen for each partition set the same IP address and different TCP port numbers; according to issue virtual Desktop requested partition the IP address and TCP port number, the virtual desktop back to the partition.

p0037The beneficial effects of the present invention are as follows:

p0038(1) originated a multi-dimensional virtual desktop method, horizontal one-dimensional representation of virtual desktops transmission path, the longitudinal one-dimensional representation of a virtual machine on the application level, such a system design makes the whole system more rigorous logic and a high degree of controllability.

p0039(2) multiple service points can provide self-service, on-demand propagation, and policy-based automatic retractable enhance the penetration capability and quality assurance services.

p0040(3) to provide a unified programming interface, highly flexible and powerful customization features.

p0041(4) The SIP protocol is introduced VDI, the mating Spice agreement to replace traditional remote desktop access protocols, can enhance visibility and control sessions, intelligent conversation, and can transmit video, multimedia high-density data accelerated.

p0042(5) the use of an advanced overlay technology to achieve end to end transmission in the effective reduction of the transmission path to improve transport efficiency, improving transmission reliability and security.

p0043(6) the introduction of distributed load method, the load is distributed to all service points, reducing the server load, the VDI load balancing proposes an effective solution. (7) the virtual machine and real machine management into a unified system, interoperable between information and complement each other, and using the extended connection broker, providing flexibility and choice for users in different locations of the request;

p0044(8) A new elastic pool policy, you can optimize the management of virtual desktop pool;

p0045(9) has developed a new application virtualization streaming technology, greatly accelerated the acquisition rate of the virtual application;

p0046(10) by the application of virtual desktops and on and data is divided into several independent layers, and distributed to the client, realized a new hierarchical virtual desktop methods.

p0047(11) The user can at any time anywhere on any device to access a remote data center resources, on-demand access, flexible.

p0048(12) low cost. A user can use multiple virtual machines, with the increase in the cost of the number of users decreased, with economies of scale. BRIEF DESCRIPTION

p0049Referring to the drawings, those familiar with the technical field of the personnel concerned, from the following detailed description of the method of the present invention, the above and other objects, features and advantages of the present invention will be apparent.

p0050FIG. 1A, the present invention multidimensional intelligence service point of the virtual desktop infrastructure system block diagram; Fig. 1B, the present invention multidimensional intelligence service point of the virtual desktop infrastructure access point portion Access access control block diagram;

p0051Fig. 1C, the present invention multidimensional intelligence service point of the virtual desktop infrastructure service switching point portion of the business exchange service controller block diagram;

p0052Fig. 1D, the present invention multidimensional intelligence service point of the virtual desktop infrastructure virtualization infrastructure platform layered structure diagram;

p0053Figure 2 is a real machine of the present invention registration process diagram;

p0054Figure 3 is next virtual desktop infrastructure systems (Fig. 1A Connection Broker 122) single sign-on implementation process diagram;

p0055Figure 4 is the invention (FIG. 1A Connection Broker 122) a process diagram;

p0056Figure 5 is a diagram 1B of the present invention, the management console process diagram 1237;

p0057Figure 6 is the present invention. FIG. 5 user SIP registration authentication process diagram;

p0058FIG. 7 is a user of the present invention requests the virtual machine / real machine to establish and end of the process map and background service point SIP session;

p00598A is a Session polymerization of the present invention (Figure 1B SIP server 1235) by the time the mechanism multiple sessions brought together in order to achieve multiple users simultaneously using a virtual machine process diagram;

p00608B is a session splitter of the present invention (FIG. 1B SIP server 1235) for a user to assign multiple sessions in order to achieve a person can use more than one virtual machine process diagram;

p0061FIG. 9 is a block diagram of the SIP Overlay node of the present invention;

p0062FIG. 10 is the present invention (FIG. 1B load balancer 1231 and 1C load balancer 1331) based on the process diagram SIP load distribution;

p0063FIG. 11 is the present invention (FIG. 1A virtual machine switch 131 and a solid machine switch 132) of the work process diagram; - Figure 12 is the present invention (FIG. 1A real machine connection manager 1411) a process diagram; FIG. 13 is the present invention (FIG. 1A Agent Controller 1416) a process diagram;

p0064FIG. 14 is the present invention (FIG. 1A usage reports 1412) a process diagram;

p0065FIG. 15 is a (Fig. 1A real machine state manager 1414) of the present invention is a process diagram;

p0066FIG. 16 is the present invention (Figure 1A Virtual Machine Pool Manager 1443) overnight swap pool policy process diagram (Example);

p006717 is the present invention (Figure 1A Virtual Machine Pool Manager 1443) process of FIG spare pools created; Fig. 18 is the present invention (Figure 1A Virtual Machine Pool Manager 1443) spare pool use policy request virtual machine the process diagram;

p0068FIG. 19 is the present invention (Figure 1A Virtual Machine Pool Manager 1443) Spare Pool optimization strategy process diagram; FIG. 20 is the present invention (FIG. 1A in the virtual machine pool manager 1443) Spare Pool optimization strategy to exit the virtual machine the process diagram;

p0069FIG. 21 is the present invention (Figure 1A Virtual Machine Pool Manager 1443) Flexible Pool Rules of procedure; Figure 22 is the present invention (Figure 1A Virtual Application Manager 143) pre-deployment course of action; Figure 23 is the present invention (Figure 1A virtual application Manager 143) pre-deployment action client sequence table process diagram;

p007024 is the present invention (Figure 1A Virtual Application Manager 143) SOD application streaming process; Figure 25 is a process of the present invention (FIG. 1A virtual application manager 143 and virtual machine management center 144) combined in Figure ;

p0071FIG. 26 is the present invention (FIG. 1A virtual machine management center 144) virtual machine template version of the process; Figure 27 is the present invention (FIG. 1A virtual workspace manager 142) for VDI on Caozuojitong divide layer management process diagram;

p0072FIG. 28 is the invention of a virtual desktop infrastructure securities companies preferred embodiment of FIG;

p0073FIG. 29 is a Virtual Desktop Infrastructure invention in the plant preferred embodiment of FIG; DETAILED DESCRIPTION

p0074Outline

p00751A is a general view, the desktop virtualization infrastructure including client device 11, the access point 12, the service switching point 13, the background service point 14. The white frame is present patent relates to the software part (modules); dashed box for applicants on December 10, 2008 filed No. "CN 200810204286.X", entitled "Mobile virtualization infrastructure and basic platform It has been described in detail over the function module "patent application. Therefore, dashed box will no more be described.

p0076Client device 11 refers to a variety of user terminal equipment, either traditional PC, notebook personal, it can be the Internet, mobile phones and other devices, which can be a variety of fat Shou terminal equipment. If the fat end, can be as ordinary PC- like to use, you can also post virtualization using its. FIG. 1A system, the client device 11 through the access point 12 and the service switching point 13 from behind the service point 14 Get the virtual machine and the application screen.

p0077Responsible for access point 12 to client device 11 to establish a connection to the background service point 14, connection management, and provide network services. Wherein the connection broker 122 is responsible for the back-end service point 14 is connected Access to work, and to make the virtual machine dispatcher 1441 to obtain virtual machine. Remote Access Server (RAS) 121 provides remote access support, namely external users to establish VPN link. A typical setup is this: access points installed in the Access network side or the core network edge (Edge) side, the underlying hardware can be a switch, router, or server clusters. Access point 12 while providing self-service, specifically to provide load balancing, policy and rules engine, service monitoring, SIP services, session (Session) conversion services as well as a unified programming interface API (including multiple interfaces), services permeable, and policy-based automatic gain reduction.

p0078The service switching point 13 is mainly responsible for the virtual machine and real machine business exchange, according to user-selected virtual machine or a real machine business to switch to the appropriate back-end management center. A typical setup is this: the service switching point 13 is installed in the core network or core network edge side (Edge), (the underlying hardware can be a switch, router, or server cluster). Service Switching Point 13 also has staff and community management database 1321, seat and classroom management database 1322, Application and package management database 1323, and a virtual machine server and template management database 1324. These databases are managed by the real service point 14 virtual machine management center 144 management console 1442. Service switching point 13 by connecting agent uniform authentication and authorization system 122 determines whether the user is entitled to subscribe application screen. Service switching point 13 and can determine whether the application is from a virtual machine management center 144 back up, or from the real machine management center 143 back up in order to take appropriate PC screen adaptation measures. Service switching point while providing self-service, specifically to provide virtual network management, load balancing, policy and rules engine, service monitoring and other services as well as a unified programming interface.

p0079Background service point 14 (typically a data center) is a virtual machine, real and virtual application background management system, the virtual machine management center 144, a real machine management center 141, the virtual application manager 143 and virtual workspace management 142 composition, usually installed in the core network. Virtual Machine Management Center Virtual Machine Pool Manager 144 1443 introduction of the Flexible Pool Rules and alternate pool rules. Reporting application real machine management center 141 is responsible for the management of the real machine and its application list, monitor the status of the real machine, generating a user with real machine and that accepts the user's request and open the appropriate application for users. Virtual Application Manager 143 by computer simulated application environment, application virtualization, and operate independently of Caozuoxitong and local desktops on other applications to achieve on a computer without installing the software, you can in a virtual environment running purpose software. Virtual Workspace Manager 144 is responsible for managing the application of hierarchical, according to the needs of enterprise management, the operating system and its application on the stratification, from bottom to top for the company operating systems, corporate applications, user applications, user data & settings (this can be achieved independence between the layers, the interconnectedness between the layers, in favor of administrators with different permissions management for different layers).

p0080Implementation of the invention desktop virtualization infrastructure required SIP client 111 and Spice client 112 through the SIP protocol and Spice agreement ends with the SIP server 1457 and the Spice server 1456 is in communication SIP client 111 is a client device software, SIP server 1457 is running in the virtualized infrastructure platform 145 Linux kernel Caozuoxitong on.

p0081SIP client 111 and the SPICE client 112 is installed on the client device 11, but note here depending on the performance of the client devices, there will be different options situations. When the client device performance is poor (very Shou terminal) that can not run SIP and Spice, select the client device installed on the RDP client, SIP client is installed on the access point from the access point to start using SIP protocol. When the client device is customized thin client, then the client device only install a SIP client, you also need a drive to accept the virtual machine screen, the client only for SIP communications use. Note also that the internal and external users of distinction. Access point 12 can automatically identify the client terminal is a fat terminal or thin client, if it is fat terminal, using SIP and Spice, otherwise use RDP can. Another is the e-book package (fat Terminal), simply downloaded from the server mirrored, you can own the client to run, just keep up the server synchronization. The user clicks on the desired application, the access point connection broker there are user specific information are provided for authentication (user SSO authentication information remains on the access point), the service switching point 13 is switched to the appropriate virtual or real machine applications. If the user requests a virtual machine, the background service points 14 through virtualization platform application interface to the virtual infrastructure platform Get the virtual machine, then use the agent to activate applications and virtual desktops first virtual machine spread to the client device 11 on; if the user request is a real machine, real service point 14 will check the status of the requested real machine, the command to apply the agent activating the application and the first virtual desktop real machine on the spread on the client device.

p0082FIG access access controller 1 B 123 is the access point in a service module that provides self-virtualized computing and resource services, service-demand propagation, and policy-based automatic gain reduction. Load Balancer 1233 for load balancing; policies and rules engine 1232 to provide policy and rules engine; Service Monitor 1235 is used to monitor service requests; Overlay Manager 1231 is used to manage SIP Overlay's, SIP port transport channel order, Spice port transfer of virtual desktops, and to establish Overlay connections for signaling and virtual desktops; SIP server 1234 session can be polymerized and split, so that multiple users can simultaneously use a virtual machine, a user can simultaneously use multiple virtual machine; service interface 1236 provides a unified programming interface can be used with third-party integration.

p0083Figure 1 C business exchange service controller 133 is a service switching point 13 a service module that provides call connection and switching can be implemented call, interrupt, or relay exchange. And said access point 12 to access the access controller 123 is similar, providing self-virtualized computing and Resource Service, service point-demand propagation, and policy-based automatic gain reduction. Business exchange service controller 133 includes Overlay Manager 1331, policies and rules engine 1332, load balancer 1333, SIP server 1334. The call 1335 service switching 1336, Service Monitor 1337, service interface 1338, the management console 1339. Specific can provide load balancing, rules and policy engine, service monitoring, Overlay management, SIP services and unified programming interface (which each module functions and access point 12 is similar in previously be described).

p0084FIG virtual infrastructure platform 1D 145 is the basis of technology VDI offers VDI basic support platform may include a plurality of hosts, in which kernel-based virtual machine (Kernel Based Virtual Machine, KVM) 1452 hardware platform on each host virtualized kernel KVM1452 communicate with QEMU1453 process virtual least having a guest operating system and memory of the virtual machine 1454 (bottom layer can be both KVM, it can be ESX, Xen or Hyper-V). Virtualization infrastructure execution performance platform monitoring, QEMU and kernel shared memory paging optimization, pretreatment function input-output device debugging.

p0085Implementation of the present invention, a virtual desktop infrastructure requires SIP client 111 and Spice client 112 through the SIP protocol to establish and virtualized infrastructure platform SIP service 1457 communications, so for this session to establish a connection. Connection is established after a good start Spice servers, virtual desktops from backstage passed off Client. Then after the SIP protocol to end the session. Figure 2 - Figure 4 shows the process of registration authentication and single sign-on.

p0086Figure 2 registered real machine diagram

p0087Figure 2 depicts the real machines of the registration process, where the real machine is relatively virtual machine terms, referring without hardware virtualization computer, that is commonly referred to as real physical computer, a real machine in the background service points. Before using the real machine, the need for real machine register process is as follows:

p0088Step 201, the user's My Real Machine (my real machine) interface, adding a pc (personal computer, that is the real machine), enter the ip address / machine name and other information;

p0089Step 202, the Application List (application list) interface increases application (application) information input app (application) installation path and exe (executable file) name and other information;

p0090Step 203, after saving, display a download interface, allowing users to download agent (agent) and spice server, the user is prompted to install;

p0091Step 204, the user is prompted to test the current pc is available that can be used by sending and receiving some of the tests Message (information) to test agents and spice server (server) is installed correctly. 3 Single Sign

p0092Single sign-on (SSO) is mainly to solve the user rights management complex, user and rights management module duplication of development, there is a system security risks and other issues, so that the user logged in one application, they can use other operating system. Process single sign-on is as follows: the user enters a username / password login single sign-on authentication system. Certification Center (AC) based on the information submitted by the user to verify the user's identity. If you are a legitimate user, create credentials (Ticket) based on user information and permissions, or refuse to log on. To ensure the security credentials of data, each credential has a set based on an asymmetric encryption algorithm to generate a key (public key KA and private key KB), data credentials are used with the credentials corresponding to the public key encryption, and use digest algorithm (such as MD5 / SHA) to generate parity information. Certification Center legitimate user's credentials sent over the network to the user's computer to save. After the user to choose their own need to access applications VDI, send your virtue ¾ to the application server, and began to turn application certification program. Application system certification center to verify the validity of credentials, such as: whether issued by the certification center, has exceeded expiration date. Applications based on the user's computer credentials information from the digest algorithm generates a summary, by comparing the parity information and summaries verify the credentials of integrity. If verified, the credentials are legitimate and valid, obtain credentials from a certificate authority private key of the author's credentials data to decrypt and read user information contained therein. Application System VDI verifies that the user has access to this system legal status (to determine whether there is access, if approved and launched by the present level administrator), if the identity of legitimate, then configure the appropriate permissions based on having authority, or refuse to enter VDI system. After the user is finished using the system, the user logs off credentials, if the system timeout credentials automatically destroyed.

p0093Step 301, the user enters a user name and password;

p0094Step 302, the user requests to log on to a single sign-on authentication system;

p0095In step 303, the authentication center according to user-submitted information to verify the user's identity;

p0096Step 304, it is determined whether the user is a legitimate user. If so, turn to step 306, otherwise turn To Step 305;

p0097Step 305, prompts the user name or password, the user is denied logon;

p0098Step 306, based on the user information and permissions to create credentials;

p0099Step 307, in order to ensure the security credentials of data, each credential has a set of generated keys (public and private) based on asymmetric encryption algorithm, data credentials with the public key encryption;

p0100Step 308, with digest algorithm (such as MD5 / SHA) to generate parity information;

p0101Step 309, the authentication center of a legal user credentials;

p0102Step 310, sent through the network to the computer user's preservation;

p0103Step 311, dynamically generate the user interface;

p0104Step 312, the credentials reach the SSO client;

p0105Step 313, the credentials stored on the computer;

p0106Step 314, select VDI subsystem;

p0107Step 315, automatic login VDI subsystem

p0108Step 316 sends the credentials to the VDI system

p0109Step 317, the credentials reach VDI subsystem

p0110Step 318, the credentials are sent to the authentication center;

p0111Step 319, the credentials arrive Certification Center;

p0112Step 320, the authentication credentials TA effectiveness;

p0113Step 321, it is judged credentials are valid. If so, transfers to step 323, otherwise the processing shifts to step 322;

p0114Step 322, the user log in again;

p0115Step 323, it is judged credentials are complete. If so, transfers to step 325, otherwise the processing shifts to step

p0116324;

p0117Step 324, the user log in again;

p0118Step 325, using the private key to decrypt the credentials;

p0119Step 326, it is determined whether the user has access. If so, transfers to step 328, otherwise the processing shifts to step 327;

p0120Step 327, the user does not have access;

p0121Step 328, based on the permissions automatically generated VDI subsystem interface;

p0122Step 329, using the VDI subsystem functions;

p0123Step 330, using the end user exits;

p0124Step 331, the system overtime;

p0125Step 332, cancellation credentials. Figure 4 Connection Broker

p0126Connection Broker 122 is one of the most important parts of VDI system, the process is as follows: The user sends a login request to the server, if a user outside the firewall, the connection broker 122 for the user to set up VPN (Virtual Private Network) connection; otherwise, the direct transfer the next step is determined whether the user is SSO authentication and authorization; if not authenticated, then tell the client display an error message, if certified, put the request reached the SIP Proxy server, SIP proxy server to resolve the address to the next hop to issue a call request; the request reaches the service switching point in the virtual machine / real machine switch, if the user requests the application of the virtual machine, then switch to the virtual machine inlet, and connected to the back of the virtual machine management center, so that the virtual machine Dispatcher Gets the virtual machine, find the application ID from the list of apps to find the best virtual machine and informs the application proxy activation application on the virtual machine, and finally start the Spice server, transfer applications the first screen to the client; if the user requests the application of a real machine, then switch to the real inlet and connected to the real machine management center back, query real machine list and the application list, select use a flat-real machine under of an application to find the best real machine and informs the application proxy activation application on the real machine, and finally start the Spice servers, mass application first screen to the client (note here, the real machine also and virtual machines, like using SIP protocol start a conversation, using Spice transfer real machine screen; in connection proxy can also be embodied SIP, but the focus has been mixed. in traditional VDI is not used SIP protocol case, by connecting agents to establish a connection, because the traditional screen transfer protocol RDP only merely responsible for transmitting the screen; and after we took the SIP protocol is based on the connection of proxy-based, throughout the virtual desktop infrastructure includes a SIP proxy connection for SIP communications).

p0127Here's connection broker (Extended connection broker) will be the real machine and the virtual machine into a system that can simultaneously connect to the real machine management center and virtual machine management center.

p0128In step 401, the user sends a login request to the server;

p0129Step 402, the connection broker determine whether the user is outside the firewall. If so, transfers to step 403, otherwise the processing shifts to step 404;

p0130Step 403, the connection proxy for the user to set up VPN connections;

p0131Step 404, it is determined whether the user is SSO authentication and authorization. If so, transfers to step 406, otherwise the processing shifts to step 405;

p0132In step 405, telling the client display an error message;

p0133Step 406, SIP server forwards the request to the next hop server;

p0134Step 407, the virtual machine / real machine switch for the request to select the appropriate virtual or real machine inlet; step 408, if the user request is a virtual machine, the connection broker so that the virtual machine Dispatcher Gets the virtual machine from the application list found application ID (identity); if the user request is a real machine, the connection broker to make the real machine connection manager queries the real machine and application state;

p0135Step 409, connected applications, in three steps, (a) inform the virtual machine or a real machine on the application proxy application ID, (b) wait until the application is started or failed, (c) notify SIP client application is started, ready to accept application of the first screen, or reported to the boot failure error.

p0136Figure 5 - Figure 10 shows the SIP sessions and network management processes. 5 Session Management Console

p0137Figure 5 shows the Session Manager console operating process diagram. When the user requests (session) to reach the point of service can be managed, the operation of the operation range of management tools through the management console to handle session, in order to achieve load balancing, intelligent conversation and security. Specific steps are as follows - step 501, the service monitor to monitor the user requests a virtual machine / real machine;

p0138Step 502, it is determined whether the user through SIP registration certification. If passed, transfers to step 504, otherwise the processing shifts to step 503; Step 503, telling the client display an error message;

p0139Step 504, the load balancer according to the rules the request is assigned to the SIP server;

p0140Step 505, it is determined whether the operation is a polymeric session. If so, transfers to step 506, otherwise the processing shifts to step 507;

p0141Step 506, into the conversation aggregator, on the session aggregators, in the back of Fig. 8A described in detail;

p0142Step 507, it is determined whether the operation is a split session. If so, transfers to step 508, otherwise the processing shifts to step 509;

p0143Step 508, into the conversation splitter on the session splitter, in the back of Fig. 8B described in detail;

p0144Step 509, the virtual SIP Overlay (overlay) management node determines the forwarding path of the request; step 510, the session manager also includes security management, QoS (Quality of Service) management, session statistics management and other management functions. Figure 6 SIP registration certificate

p0145User agent client sends a registration request to the registration server, registration is divided into two, including a registered user registration and machine, if it is registered machine, IP address, machine name and other information will be the machine registered the server (this kinds of registration is fixed machines registered, it can machine-related information to log into the system); if it is the user's registration, the registration screen to enter a user name, password and other information, registration information stored in the location server (such registration approach is flexible users can on different machines in different locations a user name and password to log into the system). If the registration server that the user does not send the authentication message, send a reply message 401 (Unauthorized) to the user agent request of the certificate, the user retransmitted registration request containing authentication information, registration server to authenticate the message for verification. If verified, the registration server to verify through and returns OK; if the verification fails, the user is required to resend contain authentication information registration request, the next step above. If the registration server that the user registration request carries the authentication message, the subsequent steps above. Registration information is stored in the location server.

p0146User agent client to user agent server issued Invite (session invitation) request, the proxy server that the user does not send the authentication message, it sends a response message 407 (Proxy-Authentication Request) to a user request of the certificate; user sends ACK (acknowledgment) users retransmission contains authentication information Invite request, the proxy server authenticate the request and sends 200 OK to confirm. Register server registers the authentication information stored in the location server. User agent server to the user agent client sends the INVITE method session description SDP (Session Description Protocol) for analysis, if the client device has to receive and decode the server sends multimedia signal capability, then the two sides can communicate properly, otherwise display client error.

p0147Step 601, the user agent client sends a registration request to the registration server;

p0148Step 602 determines whether the requested user-machine registration. If so, transfers to step 603, otherwise the processing shifts to step 604;

p0149Step 603, the registration screen to enter the user machine's IP address, machine name and other information; step 604, the registration screen to enter a user name, password and other information; Step 605, the judgment whether the request carries the authentication message. If so, transfers to step 607, otherwise the processing shifts to step 606;

p0150Step 606, the registration server sends a reply message 401 (Unauthorized) to the user agent request of the certificate;

p0151Step 607, the registration server authentication message to verify;

p0152Step 608, the user retransmission containing the registration request authentication information;

p0153Step 609 determines the authentication message Register request carries whether verified. If passed, transferred to step 610, otherwise the processing shifts to step 608;

p0154Step 610, the registration server sends a 200 OK confirmation verified by;

p0155Step 611, the user's registration information is stored in the location server;

p0156Step 612, the user agent client sends Invite request to the user agent server; step 613, it is judged Invite whether the request carries the authentication message. If Invite request carries the authentication message, transferred to step 617, otherwise the processing shifts to step 614;

p0157Step 614, the proxy server sends a reply message 407 (Proxy-Authentication Request) to a user request of the certificate;

p0158Step 615, the user sends an acknowledgment message ACK;

p0159Step 616, the user retransmission contains Invite request authentication information;

p0160Step 617, the proxy server authentication message to verify;

p0161Step 618, it is judged Invite request authentication message if verified. If verified, transfers to step 619, otherwise the processing shifts to step 617;

p0162Step 619, the user agent server side INVITE method the user agent client sends the session description SDP analyzed; SIP SDP is used for capability exchange, current, SIP might as H.245 complete and flexible negotiation capability, because restricted in SDP expression, such as SIP does not support asymmetric capability exchange (only accept or issued only) as well as audio and video encoding concurrency. When SIP callers when, SIP in the INVITE method session description indicates that it can accept the media type and its parameters, it may also indicate their willingness to send media types.

p0163Step 620 determines the client device has the ability to multimedia signal receiving and decoding the server sent. If so, transfers to step 322, otherwise the processing shifts to step 321;

p0164Step 621, the client error, the client device does not have the receiving server sent the virtual machine / real machine screen capabilities, users wishing to use VDI system, you need to change the terminal equipment, or change a SIP client, install the RDP client this of course an alternative;

p0165Step 622, the two sides can communicate that the client device may receive server sent by the virtual machine / solid screen. 7 is a SIP session Figure

p0166(Of course, Invite requests and Option request the order can be changed) client initiates a session request Invite request a virtual machine. Background service point receives a user request, and properly handle this request, issue a temporary response lxx. The client receives a provisional response message, determine whether the timeout if a timeout, the client re-initiate the session request Invite request a virtual machine; if not timed out, continue to wait from a background service Response service points. In the background service point, if required additional action to complete the request, and this request is forwarded to another server on the processing is issued redirect 3xx response; if the request contains bad syntax or can not in this server complete, issue client error 4xx response; If the server does not correctly handle an apparently valid request, it sends the server error 5xx response; if the request can not be fulfilled at any server, issue the global errors 6xx response; if the request has been successfully received and handled correctly this request is issued successfully processed 200OK response. Client If you receive 3xx-6_XXIn response, the client re-initiate the session request Invite request a virtual machine (indicated this request virtual machine failure); If the received 200 OK response, it continues to wait for the next response. Server to client makes Option request asking whether the client has to receive and decode the server sends the multimedia signal (media type and media parameters) capabilities. The client receives the Option request, if the server sends a multimedia signal (media type and media parameters) in that they can accept the media type and parameter range, the client with the server communicate properly, return 200 OK, and make transmission media streams ready; on the contrary, the two sides can not communicate, the session ends (consult this step machine capability can also be done in a registered certification process as an alternative to the program inflexible, but easy to use, so in the back. during the session no longer consider machine capacity exchange). The server receives a 200 OK response, began to prepare transfer screen. Through the task drive calculates the position of the screen, and call Spice protocol, transfer screen. The client receives Spice stream server transmitted concurrent 200 OK response acknowledgment. Server if the timeout, then re-prepare transfer screen; on the contrary, in the normal waiting time to receive a 200 OK response. The client sends a Bye request to release the call server received Bye request, sent 200 OK response.

p0167Step 701, registration ends;

p0168Step 702, the client to the back-end service point initiates a session request with the virtual machine / real machine; step 703, the client receives from background service points provisional response message;

p0169Step 704, it is determined whether the response timeout. If so, transfers to step 702, otherwise the processing shifts to step

p0170705;

p0171Step 705 determines whether a response is received 3xx-6xx.

p0172Step 706, the client receives the background service point 200 OK response;

p0173Step 707, the client receives the background service point Option request;

p0174Step 708, it is determined whether the client has received and decoded background service point sends multimedia signal capabilities. If received, transfers to step 710, otherwise the processing shifts to step 709;

p0175Step 709, the client does not have to receive and decode the background service point sends multimedia signal capacity, the two sides can not communicate, the session ends;

p0176Step 710, the client has the ability to receive and multimedia signal decoding background service point sends the client can the server communicate properly with the return 200 OK;

p0177Step 711, confirmation, start the client and back-office services between points media streaming;

p0178Step 712, the client waits to receive a background service point sends the virtual machine screen;

p0179Step 713, the client receives the SPICE data stream server transfer, namely the virtual machine screen; step 714, the client receives the virtual machine screen, send the 200 OK response to the backend service points; step 715, the client sends a Bye request release call;

p0180Step 716, the background service point waiting for the user registration is successful; Step 717, the background service point receives a user request;

p0181Step 718, the background service points issued a provisional response;

p0182Step 719 determines the background service point is successfully processed client requests. If so, transfers to step 724, otherwise the processing shifts to step 720, step 721, step 722, step 723;

p0183Step 720, redirection;

p0184Step 721, the client error;

p0185Step 722, the server-side error;

p0186Step 723, the global error;

p0187Step 724, the background service point successfully handle client requests, send 200 OK response;

p0188Step 725, the server to the client to issue Option request to inquire whether the client has received and decoded background service point sends multimedia signal capability;

p0189Step 726, the background service point receives client 200 OK response;

p0190Step 727, the background service point do pass screen preparations;

p0191Step 728, task-driven, calculated screen location;

p0192Step 729, the call SPICE, transmission screen;

p0193Step 730, it is determined to wait for a response has timed out;

p0194Step 731, receive a 200 OK response;

p0195Step 732, received Bye request, send a 200 OK response. 8 sessions converter

p0196Through SIP server conversion function, you can achieve multiple users using a virtual machine, a user simultaneously using multiple virtual machine, providing users the flexibility to allocate virtual machines, improve resource utilization, intelligent conversation, which is the present invention. a major feature.

p01978A is a conversation aggregator, multi-user use a virtual machine process is described.

p0198Step 8101, the user selects the application to the background service point issue virtual machine / real machine using a request; Step 8102, the request reaches the SIP server (session converter), SIP server can be either at the access point to be at the service switching point and background service point, where SIP server is a SIP server to access the access point;

p0199Step 8103, the request is used to divide the timer convergence time interval, SIP has a time mechanism to determine a minimum period of time, the request timeframe that converge and then transmitted; step 8104, SIP server computing the number of all virtual machines in the time period (interval) within the request within SIP server can set up a counter to count the number of periods of virtual machine;

p0200Step 8105, the number of judges requested is greater than one. If greater than 1, proceeds to step 8107, otherwise it proceeds to step 8106;

p0201Step 8106, the number of judges requested is equal to one. If equal to 1, proceeds to step 8108, otherwise it proceeds to step 8101;

p0202Step 8107, a plurality of request converging to a session request sent back table service points; step 8108, the individual requests sent directly back table service points;

p0203Step 8109, the background service point for the request to allocate a virtual machine / real machine; Step 8110 determines whether the request is a request to a plurality of original request after the link aggregation. If so, proceeds to step 8112, otherwise transferred to 8111;

p0204Step 8111, application proxy open the appropriate application, and the screen returns directly to the user; Step 8112, the request is brought together after the decomposition to the original request, the application proxy for each of the original request to open its request for applications, and the screen returns to respectively each user.

p02058B is a session splitter, describes a user to use multiple virtual machines process. Since SIP Proxy Server (SIP Proxy Server) main task is to complete the message forwarding, forwarding the request before it can rewrite the original request message content. It may also represent other client initiated requests, acts as both a server and act as a client. As used herein, SIP Proxy Server function, you can assign a user multiple sessions, enabling a user to use multiple virtual machines.

p0206Step 8201, the user selects the application issues using the request virtual machine / real machine to a background service points; step 8202, the request reaches the SIP Server (Session converter);

p0207Step 8203, it is determined whether the user request multiple virtual machines. If the user requests a plurality of virtual machines, proceeds to step 8204, otherwise proceeds to step 8205;

p0208Step 8204, SIP server according to the user's requirements, sending more than one session to the back-end service point request; step 8205, SIP server routes the request to the backend service points;

p0209Step 8206, the background service point for each session request allocation of a virtual machine;

p0210Step 8207, the background service point for the session requesting allocation of a virtual machine;

p0211Step 8208, the background service point multiple virtual machine is returned to the user;

p0212Step 8209, the background service point single virtual machine is returned to a user; Fig. 9 Virtual SIP OVERLAY (virtual SIP coverage) node

p0213The figure shows the composition of SIP Overlay node 91, SIP Links numerous SIP server and poses a SIP overlay network. In this overlay node 91, API 913 interface provides a unified interface to achieve interconnection overlay network between, Overlay Manager 912 is responsible for Overlay node management, the establishment Overlay signaling virtual desktops transmission and. Port has Spice port 9111 and SIP port 9112, SIP port 9111 for forwarding signaling stream, Spice port 9112 for forwarding virtual desktops stream. SIP User Agent 90 can be either a SIP user agent client, it can be a SIP user agent server. Figure 10 SIP-based load balancing

p0214Figure 10 shows the equilibrium-based SIP load process. Since SIP have sessions and translation of these two matters, and the session is a state created by Invite affairs, ending with a BYE transaction. Thus SIP There spending both transactions and sessions. It is possible to use the method to assign the same session to the same SIP server. (Advantage of equalization method of such a load is manageable) Assume that each SIP servers are after virtualization average distribution server with the same performance. Process is as follows: Step 1001, the client makes the virtual machine / real requests to the load balancer;

p0215Step 1002, the load balancer determines whether the request is Invite request. If so, transfers to step 1005, otherwise the processing shifts to step 1003; Step 1003, it is determined whether the request is Bye request. If so, transfers to step 1006, otherwise the processing shifts to step 1004;

p0216Step 1004, through the load balancer, the request is assigned to with the same CALL-ID where the SIP server (the same session within all relevant SIP messages with the same Call-ID); Step 1005, the request CALL-ID is recorded in the load balancer;

p0217Step 1006 through load balancing, locate the bye request Call-ID the same request where the SIP server i, Count (i) = count (i)-l _;

p0218Step 1007, For i = l to n, view the SIP server SIP (i) (assuming n SIP server); step 1008, it is determined whether the load SIP (i) on. If so, proceeds to step 1010, otherwise the processing shifts to step 1009;

p0219Step 1009, it is determined whether i is less than ^ if i is less than n, transfers to step 1007, begin the next cycle, otherwise turn to step 1011;

p0220Step 1010, setting Count (i) = 0;

p0221Step 1011, the load balancer find count (i) the minimum SIP server, and the request is assigned to the server;

p0222Step 1012, the Invite request assigned to SIP (i) server;

p0223Step 1013, set the Count (i) = count (i) + l, and began to wait for the next request soon; Figure 11-15 is a real machine management unit, given the real machine management process.

p0224Figure 11 VM / RM switch

p0225Figure 11 shows the virtual machine / real machine switches workflow situation. In our VDI, the user can according to their needs, choose to use a virtual machine or a real machine, its swap Yumi machine / virtual machine switch to accomplish specific implementation process is as follows:

p0226Step 1101, the user requests to sign and enter the exchanger;

p0227Step 1102 determines whether the user selects a real machine. If you choose a real machine, proceeds to step 1103, otherwise it proceeds to step 1104;

p0228Step 1103, switch to the real inlet;

p0229Step 1104, switch to the virtual machine inlet;

p0230Step 1105 determines real machines and applications selected by the user, notification application proxy activation application on the real machine, and ip / spice port number (port) return;

p0231Step 1106, to find the best virtual machine and informs the application proxy in the virtual machine on the active application; step 1107, Spice server: Fax application first screen to the client. 12 real machine connection manager

p0232Figure 12 shows the real machine Connection Manager workflow situation. Connection Manager (connection manager) is responsible for accepting user pc (personal computer) requests first checks pc whether the status of available, then the customer will be using application (application) messages through a proxy Controller (Controller) to agents, it opens the corresponding application (application). Then the connection manager (Connection Manager) returns information to the switch (switch), while recording the user's usage condition. Its implementation process is as follows:

p0233Step 1201, the real machine connection manager receives the user with real machine's request;

p0234Step 1202, the real machine connection manager queries the real machine list and the application list, select Use a desk real machine under an application;

p0235Step 1203, the real machine connection manager to check pc whether the status of power on (powered). If the power on, turn to step 1205, otherwise turn to step 1204;

p0236Step 1204, the test results back to the switch, notifying the user pc does not start, can not be used; step 1205, the application of information transmitted needs to start to the agent, the modified state the pc;

p0237Step 1206, it is determined whether the application is started. If the application has been started, transferred to step 1208, otherwise the processing shifts to step 1207;

p0238Step 1207, returns to the switch, notifying the user application failed to start, can not be used; Step 1208, the pc's ip / vnc port and other information back to the switch. 13 Agent Controller

p0239Figure 13 shows the Agent Controller work process diagram. Agent Controller is responsible for receiving the agent sent to

p0240ActiveMQ message, including the pc poweron / poweroff and user login / logout (login / logout); When a user requests using pc, proxy controller sends open / close app instructions to the broker. Agent periodically sends heart beat (heartbeat) to the Agent Controller after pc start if receives no heart beat, will think this pc has poweroff, users can not use. Process is as follows:

p0241Step 1301, the agent controller receiving agent sent heart beat;

p0242Step 1302, the agent controller receiving agent sent to ActiveMQ message;

p0243Step 1303, the agent controller judges a certain period of time whether it has received heartbea if received, go to step 1315, otherwise the processing shifts to step 1309;

p0244Step 1304, the Agent Controller user is issued a login request. If so, transfers to step

p02451310, otherwise, transfers to step 1305;

p0246Step 1305, the proxy controller determines whether the user has issued a logout request. If so, transfers to step 1311, otherwise the processing shifts to step 1306;

p0247Step 1306, the proxy controller determines whether the user issued power on request. If so, transfers to step 1312, otherwise the processing shifts to step 1307;

p0248Step 1307, the proxy controller determines whether the user receives power off request. If so, transfers to step 1313, otherwise the processing shifts to step 1308;

p0249Step 1308, the proxy controller determines whether the user requests pc. If so, transfers to step 1314, otherwise the processing shifts to step 1315;

p0250Step 1309, notify the pc has poweroff, users can not use;

p0251Step 1310, sends login instructions to the agent;

p0252Step 1311, sent logout command to the agent;

p0253Step 1312, the transmission power on command to the agent;

p0254Step 1313, sending power off commands to the proxy; Step 1314, sent on / off instruction of the application to the agent;

p0255Step 1315, no action. 14 to get the real machine / application usage records

p0256Figure 14 shows the get the real machine / application using the recording process diagram. According to user pc / application records, generating a user usage reports, including each application usage time statistics, pc use time statistics. Specific procedures are as follows:

p0257Step 1401, to request the real machine / application value entered;

p0258Step 1402 determines real machine whether the running state. If so, transfers to step 1404, otherwise the processing shifts to step 1403;

p0259Step 1403, an error is returned;

p0260Step 1404, obtain the predetermined real machine process ID (PID);

p0261Step 1405, the agent with pid call performance;

p0262Step 1406, returning CPU, memory, heart rate information to the real machine, the use of time and the application time;

p0263Step 1407, generating application usage reports. 15 real machine state manager

p0264Figure 15 shows the actual machine state manager working process diagram. Real Machine Status Manager responsible for monitoring pc state, is to convert poweron / poweroff / using in a responsible state. Process is as follows: Step 1501, the state manager to get the real status of the unit;

p0265Step 1502; Analyzing status is Power on. If so, transfers to step 1506, otherwise the processing shifts to step 1503;

p0266Step 1503, it is determined whether the state is Power off. If so, transfers to step 1506, otherwise the processing shifts to step 1504;

p0267Step 1504; Analyzing status is being use. If so, transfers to step 1506, otherwise the processing shifts to step 1505;

p0268Step 1505; state = N / A (empty);

p0269Step 1506; return status. Figure 16-21 is a virtual machine pool management section.

p027016 overnight swap pool policy Figure

p0271Figure 16 shows the overnight swap pool policy process diagram.

p0272In accordance with the program schedule of pre-arranged certain virtual desktop pool to a class (rather than allow students to choose their own operating system). VDI must be in accordance with the course schedule prearranged Policy Manager virtual machine pool. For example, the day before know a class the next day to switch to a different operating system, in the overnight automatically in the course schedule to switch. This strategy relatively inflexible to cope with the course suddenly changed the situation, and there is still the day to change the pool, to the student wait situation. Total FIG. 1A seat and classroom management database is used to store the unit Minute data. Implementation process is as follows:

p0273Step 1601, create a virtual machine on the template, and the virtual machine template clone virtual machine;

p0274Step 1602, every morning, open the virtual machine;

p0275Step 1603, calling the curriculum;

p0276Step 1604, according to the curriculum, the classroom and the virtual machine pool statically bound;

p0277Step 1605, the evening after the end of the course, turn off the virtual machine;

p0278Step 1606, restore the virtual machine. 17 for batch restore a backup pool in Figure

p0279Figure 17 shows the process of FIG spare pool created. Spare pool is mainly used to solve the case of course the sudden change, which requires replacement of courses within 10 minutes between classes. Due to the large quantities of virtual machines to restore and open take a long inches between the generally difficult in recess in such a short period of time to complete the replacement curriculum task, then you need to use an alternate pool. Create the following steps:

p0280Step 1701, create a primary virtual machine pool;

p0281Step 1702, set the default state of the main virtual machine pool for power on;

p0282Step 1703, the use of linked-clone, create corresponding spare pool by pool name to correspond with the main virtual machine, where the use linked-clone method, in order to save the physical server resources; Step 1704, set the default state of the standby pool to suspend, this set is to be able in a virtual machine for a short time Neijiang spare pool to return to normal working condition. 18 spare pool use policy a request for a virtual machine

p0283Figure 18 shows the spare pool use policy - process requests a virtual machine. In the case of the primary virtual machine pool and extra pool with the use of user requests virtual machine, if - the virtual machine host virtual machine pool enough, use the virtual machine host virtual machines in the pool, otherwise the master virtual machine pool virtual machine corresponding spare pool by following these steps:

p0284Step 1801, the user requests a virtual machine;

p0285Step 1802 determines the main pool, the virtual machine state whether the power on. If so, transfers to step 1803, otherwise the processing shifts to step 1804;

p0286Step 1803, assigned virtual machine to the user

p0287Step 1804, judgment spare pool corresponding standby virtual machine status is power On. If so, transfers to step 1803, otherwise the processing shifts to step 1805;

p0288Step 1805 determines the main pool, the virtual machine status is suspend. If so, transfers to step 1805, otherwise the processing shifts to step 1807;

p0289Step 1806, the system will automatically help the boot and is assigned to the user;

p0290Step 1807, judgment spare pool corresponding standby virtual machine status is suspend. If so, transfers to step 1806, otherwise the processing shifts to step 1808;

p0291Step 1808, informing the user no virtual machine available. 19 spare pools optimization strategy Figure 19 shows the spare pool optimization strategy. In addition to the overnight swap pool features of FIG. 16, there must be a temporary switch to a spare pool. And there must be between the numerous classrooms search idle pool. Finally, in fact, all of the virtual desktop pool can be viewed as spare pool, then the classroom and extra pool time for dynamic specified (dynamic assignment). Process is as follows:

p0292Step 1901, the curriculum occur temporarily change;

p0293Step 1902, the classrooms and spare pools time for dynamic designation;

p0294Step 1903, from time = 9AM, next classtime to 10PM, Dec 31, 2010

p0295Step 1904, clears all pool.assigned = false

p0296Step 1905, For classroom = l to n

p0297Step 1906, For pool ^ l to n

p0298Step 1907 determines classroom whether at this time curriculum. If so, transfers to step 1905, otherwise the processing shifts to step 1913;

p0299Step 1908, it is judged pool [l] assigned = true if, transfers to step 1905, otherwise turn to step 1909.?;

p0300Step 1909, judgment VDIOptimalPolicy () = EnergySaving? If so, transfers to step

p03011910, otherwise turn to step 1911;

p0302Step 1910, judgment EnergyEfficiency (pool) <60% if, transfers to step 1905, otherwise turn to step 1911?;

p0303Step 191 1, pool has not yet complete batch-revert if, transfers to step 1905, otherwise turn to step 1912?;

p0304Step 1912, Pool [l]. Assigned = true; assigned_pair [time] = (classroom, pool). 20 spare pool Use Strategy One exit virtual machine

p0305Figure 20 shows the spare pool Use Strategy One exit virtual machine process. Spare pool after use, the user must return the virtual machine and exit the standby pool. Proceed as follows:

p0306Step 2001, issued by the user to exit the virtual machine a request;

p0307Step 2002, the system the virtual machine into the restore (revert) waiting queue;

p0308Step 2003, the desktop status to restore (REVERTING). 21 Flexible Pool Rules Figure

p0309Figure 21 shows an elastic pool of rule of FIG. In order to more fully utilize the virtual machine resources, we do not need the virtual desktop pool and classroom static binding, but rather to establish a flexible access relations, which requires the use of certain rules. Its implementation process is as follows:

p0310Step 2101, the elastic pool size parameter;

p0311Step 2102, the initial four kinds of value (ηήη = initial value, max = maximum, threshold threshold 1 "013 100 = reserved value, and 1 <Threshold (threshold) Provision (Reserved) <min (initial) <max);

p0312Step 2103, it is determined whether the user requests a virtual machine. If so, transfers to step 2107, otherwise the processing shifts to step 2104; Step 2104 determines whether the user restitution virtual machine. If so, transfers to step 2108, otherwise the processing shifts to step 2105;

p0313Step 2105, an illegal operation and error;

p0314Step 2106, no action;

p0315Step 2107, it is determined "idle and 0 \ ^ 1" 011 virtual machine <= '1¾ ^ 1101 (1 ,, and is idle and power on the machine + is starting virtual machine <= Provision'? "If so, turn to step 2112, otherwise the processing shifts to step 2106;

p0316Step 2108, to identify the pool in at idle (idle) state over a certain time of the virtual machine; step 2109, it is judged "RUNNING - idle <min?". If so, transfers to step 2113, otherwise the processing shifts to step 2110;

p0317Step 2110, off the number of virtual machines = idle;

p0318Step 2111, calls clone, clone number = 'Provision, value;

p0319Step 2112, it is determined whether there is Power off the virtual machine exists. If so, transfers to step 2115, otherwise the processing shifts to step 2111;

p0320Step 2113, off the virtual machine Quantity = RUNNING - min;

p0321Step 2114, the call power on a virtual machine, and call the clone, clone number = 'Provision, value; step 2115, it is judged "Power off the virtual machine number <Provision-(idle and power on the machine + is starting virtual machine)? . " If so, transfers to step 2114, otherwise the processing shifts to step 2116;

p0322Step 2116, calling power on a virtual machine, the number of Provision- (idle and power on the machine + is starting virtual machine). Figures 22 to 27 shows the application virtualization, application layering, bonding process virtual machines and virtual applications.

p032322 predeployment course of action diagram

p0324Figure 22 shows the implementation process diagram pre-deployment actions. Pre-deployment action is intended to collect a user's computer the various software and hardware information, is behind the creation of a virtual machine template to provide evidence. Implemented as a client and server interact with each process, the following steps - step 2201, the client user registration;

p0325Step 2202 checks the user registration information;

p0326Step 2203, collecting PC information sent to the server

p0327Step 2204, save basic pc information;

p0328Step 2205, collect the registry all the file extent information and sent to the server;

p0329Step 2206, save the user file link information;

p0330Step 2207, from the registry see if the user installed the application from the server;

p0331Steps 2208 to find all user files extensions linking applications and returned to the client;

p0332In step 2209, sends all users to install the application to the server;

p0333Step 2210, save the user installed applications;

p0334Step 2211, from the registry View unrecognized path and sent to the server;

p0335Step 2212, holds other software registration path; Step 2213, collect the user's desktop shortcut information, and sent to the server;

p0336Step 2214, saving the user a shortcut information;

p0337Step 2215, upload the user's personal data;

p0338Step 2216, user data is transmitted to the server;

p0339Step 2217, save user data;

p0340Step 2218, please provide the cd or upload exe, dll;

p0341Step 2219, listed unserialized applied to the client;

p0342Step 2220, upload exe or dll;

p0343Step 2221, saving users to upload information;

p0344Step 2222, the user to confirm all the information;

p0345Step 2223, the server confirm the end. 23 pre-deployment action client sequence table of FIG.

p0346Figure 23 shows the pre-deployment action client's sequence table of FIG. Client's role is mainly administrative user authorized to collect user needs a computer-related information. Steps are as follows - step 2301, the user to the client is sent out requests;

p0347A step 2302, the pre-deployment action client to collect user information from Active Directory (AD); the step 2303, the pre-deployment action sent by the client-based information to its server-side;

p0348Step 2304, it is determined to return success. If so, transfers to step 2306, otherwise, transfers to step 2305;

p0349Step 2305, the user exits;

p0350Step 2306, pre-deployment action clients to gather relevant information;

p0351Step 2307, the user wants to select the relevant information;

p0352Step 2308, pre-deployment action client transfer group information, application information, and uploaded files to pre-deployment action on the server side;

p0353Step 2309, pre-deployment action sent by the client end of the notice to the server;

p0354Step 2310, the user final confirmation;

p0355Step 2311, pre-deployment action client to confirm or cancel;

p0356Step 2312, the user exits. Figure 24 SOD application streaming

p0357Figure 24 shows the SOD application streaming implementation process diagram. In application virtualization, the application from a data center or other network location provided, and in a virtual environment for remote client (client) locally. Virtualized applications in a vacuum zone to run, and its operation is independent of Caozuoxitong and local desktops on other applications. It is through the computer simulated software environment, so as to achieve even without installing the software, you can also run normally in a virtual environment on a computer software. This means several advantages, the software no longer need a traditional download, install, uninstall procedure; directly using the software, without having to restart the waiting time; different application compatibility, not conflict; no longer shall Application failures, updating, migration problems. SOD application streaming based Sequencer (sequencer) and Client (client) in two parts has been prepared on the basis of. Sequencer section features mainly on the Application suite (application package) virtualization pretreatment, Sequencer concrete realization already in FIG. 22 described in detail, client's main function is to run the startup Sequencer has sequence (serialization) of the Application package applications, Client's implementation has been described in detail in FIG. 23. According to the actual demand, SOD client can be installed on a remote terminal client device can also be installed on a background service point of the virtual machine or a real machine. SOD application streaming steps are as follows:

p0358Client Procedure is - step 2401, the user enters the user interface;

p0359Step 2402, based on user permissions select the application;

p0360Step 2403, from the application list found application ID;

p0361Step 2404, it is determined whether the user first use the app. If so, transfers to step 2405, otherwise the processing shifts to step 2407;

p0362Step 2405, the application responds by config (configuration) file attached to SOD server; Step 2406, received server applications file stream;

p0363Step 2407, the client uses the virtual application;

p0364Server-side action steps:

p0365Step 2410, start the server;

p0366Step 2411, the installation of monitoring directory, open the monitor;

p0367Step 2412, began to install applications;

p0368Step 2413, monitor registry, installed in C disk file and other information;

p0369Step 2414, whether the installation process is completed. If the installation process is complete, then transferred to step 2415, otherwise turn to step 2413;

p0370Step 2415, collect a variety of file information, registry information;

p0371Step 2416, sort files;

p0372Step 2417, packaged packaged into tsap file;

p0373Step 2418, receiving application requests sent by the client;

p0374Step 2419, find the corresponding application through the application ID;

p0375Step 2420, application file stream to the client. In conjunction with Figure 25 VDI and SOD

p0376Figure 25 depicts a combination of VDI and SOD process, mainly through the virtual application is installed on a virtual machine up to achieve. Of course, in practice, can also provide users with a variety of options, users can either use the virtual machine on the virtual application, you can also use the virtual machine is actually installed application. Process is as follows:

p0377Step 2501, collecting memory, CPU, applications, hosts, operating systems and other setup information; step 2502, to establish a template record through the above information;

p0378The specific process step 2503, a template-record information to create a virtual machine, create a virtual machine has been described in detail in Application No. "CN 200810204286.X" patent; Step 2504, the SOD client is installed on a virtual machine;

p0379Step 2505, providing image files;

p0380The above information collected primarily through 22 pre-deployment course of action to get, and this information as the basis to build a template. User requests the use of virtual machines on the virtual application, SOD client program will automatically find the backend server (SOD server) on the application, and then apply the stream to a virtual machine, the user can use the virtual machine virtual applications. Figure 26 Template Versioning

p0381Figure 26 depicts the template version of the implementation process. Within the company organization, different departments often have different template, often encounter upgrade update problem, you can use the version tree of a solution template version of the problem, the implementation process is as follows:

p0382Step 2601, the template fixed;

p0383Step 2602, the operating system installed, provide image file;

p0384Step 2603, installed VDI, determined action should be deployed on the template;

p0385Step 2604, the emergence of new template requirements, replacement of the template version;

p0386Step 2605, builds the tree, the original version to the root of the tree;

p0387Step 2606, a new version on the tree leaf node;

p0388Step 2607, expanding tree child nodes;

p0389Step 2608, regular version tree for evaluation;

p0390Step 2609, remove the redundant old nodes optimized version tree. 27 layered virtual desktop

p0391Figure 27 shows the hierarchical virtual desktop (layered- VDI) methods, depending on the form of its desktop and on the application of stratification, this is conducive administrator hierarchical management, different administrators have different administrative rights can manage different layers are independent between the layers, the inner layer are related. On the other hand, the user VDI, is essentially using an application on the virtual desktop, how convenient to safely use the application in order to maximally reflect the value of the VDI. In the present invention, from bottom to top virtual desktops into companies operating systems, corporate applications, user applications, user data & set up four levels. Process is as follows:

p0392Step 2701, in accordance with the form of its hierarchical: from bottom to top for the company operating systems, corporate applications, user applications, user data & settings;

p0393Step 2702, the virtual workspace manager for each managed separately;

p0394Step 2703, set a different administrator and user privileges: telecom administrator, company Caozuojitong administrators, corporate applications administrator, user permission settings;

p0395Step 2704, different administrators to the appropriate permissions to enter their own management interface; Step 2705, the administrator of the application of the respective responsibilities within the management; 28 beyond the scope of screen display Figure 28 depicts a virtual desktop infrastructure of the present invention is used in a securities company a preferred embodiment, mainly for settling securities firms a conversation across the problem of multiple screens to display. Figure 28 shows when the display data exceeds the screen range inch, how multiple screens work process diagram data. The main idea is: application proxy consists of two parts, a part (end) known as Application Builder, the bottom is called virtual interface. When the application up and running, the virtual interface detection written in the display memory on application data, if more than the screen area to calculate the excess screen number, and informs the application generator for each excess screen spawn a process. Original application screens and generate process screens together sent to the client. Specific procedures are as follows:

p0396Step 2801, the client selects application requests a virtual machine / real machine (client sends mode request is diverse, may be one device makes a request, it can be generated automatically when the user boot);

p0397Step 2802, the request reaches the background service point (request is transmitted to the backend service points); step 2803, application proxy to open the corresponding application;

p0398Step 2804, it is determined whether the application starts normally. If the application starts, turn to step 2806, otherwise the processing shifts to step 2805;

p0399Step 2805, tells the client application failed to start, given that the end of the request;

p0400Step 2806, once informed of the application has been started, the application proxy automatic monitoring application data; step 2807, it is determined to display whether the data beyond the screen. If it exceeds, shift to step 2808, otherwise the processing shifts to step 2809;

p0401Step 2808, calculations show that the number of screen data exceeded, the application proxy to generate the corresponding number of process (a process that an application);

p0402Step 2809, started spice server, application screen sent to the client;

p0403Step 2810, started spice server, the original application screens and screen generation process is sent to the client;

p0404Step 2811, the client receives the screen, the display on the display. 29 Screen Area Display

p0405Figure 29 depicts a virtual desktop infrastructure of the present invention is used in the factory to a preferred embodiment, mainly used to solve the problem multiple sessions plants on a large screen display. Figure 29 shows the screens display work process diagram. Mainly to solve a large screen into multiple zones, each display problems different content. The main idea is: The client is a large screen for each partition set the same IP address, a different TCP port number, in order to distinguish each district, at the request of the virtual desktop partition the IP address and TCP port number will virtual Desktop return to the partition. Works as follows: Step 2901, the client of the same display different partitions set the same IP address of a different port number;

p0406Step 2902, the user (select the application) requests the virtual machine / real machine;

p0407Step 2903, the request reaches the background service points;

p0408Step 2904, it is determined whether the client requires seamless (seamless) (seamless refers to whether the client requires a turn on the computer, the first screen received is not a desktop, but applications). If so, transfers to step 2905, otherwise the processing shifts to step 2906; Step 2905, the application proxy Check the list;

p0409Step 2906, application proxy open applications;

p0410Step 2907, locate the application and start the application;

p0411Step 2908, started spice server, the screen is returned to the client;

p0412Step 2909, the client based on IP and port number of the application screen to the appropriate display area; step 2910, the screen is refreshed. The above examples are familiar with the art to provide personnel to make or use the invention, a person skilled in the art may be made without departing from the inventive concept of the present invention, the above-described embodiments may be made of a variety of modifications or changes, thus the scope of the present invention is not limited by the above embodiments, but should be in line with the book mentioned the innovative features of claim maximum range.