Kernel level desktop access control method

Abstract

The invention discloses a kernel level desktop access control method which belongs to the field of information management. The kernel level desktop access control method comprises the following modules of: 1, an application management and control drive in a kernel layer, wherein the application management and control drive is realized on the basis of a Windows filter manager and is in charge of implementing the forced access control on access to a desktop application; and 2, a strategy application service consisting of a drive communication sub module and an access strategy sub module and being positioned in an application layer, wherein the strategy application service obtains a desktop configuration strategy corresponding to a user through communication with a desk virtual service end, and controls the application management and control drive according to the strategy definition to ensure that the application management and control drive takes effect. Under an environment of a desktop delivery framework, the invention provides a method for managing and controlling user behaviors on the basis of an application management and control module of the kernel layer of an operating system, and the method prevents the user from illegally operating an application program being installed in a server but being not delivered to a desktop. The kernel level desktop access control method is realized on the basis of the filter manager of the kernel layer of the operating system, ensures enforceability of access control on the bottom layer of a system, and realizes safety and high efficiency and wide applicability.

Description

technical field [0001] The invention relates to the field of computer information management, in particular to a kernel-level desktop access control method and a solution for managing and controlling terminal users' desktops and application programs based on the desktop delivery environment. Background technique [0002] Today, with the rapid development of informatization, the infrastructure of enterprise IT platforms is also undergoing continuous changes, gradually upgrading from the traditional "distributed PC system" to the "client / server" system. Thin clients and cloud terminals are terminal devices under this system, which are simplified computers without powerful computing resources, local storage, floppy drives, optical drives, etc., which can use powerful server software and hardware resources for local computing. Users can use the terminal to remotely access the desktop environment distributed by the server at the same time for office work. Terminal equipment has ...

AI Technical Summary

Problems solved by technology

However, the management and control based on desktop delivery still stays at the application layer of the operating system, and users can still easily crack it in various ways, for example, using the resource manager or shortcuts to directly execute the application software installed in the server but not delivered to the desktop ;For example, many business systems of an enterprise require administrator privileges to run, and users can modify the system as they wish after obtaining this privilege, resulting in ineffective management and control

Images