Cloud computation system and application access method thereof

Abstract

The invention provides an application access method of a cloud computation system, comprising the steps that different types of applications are installed in different virtual machines, a virtual machine (APPHole) which only runs one type of application is optimized to improve the safety performance according to the type of the application installed; a Hole agent establishes connection with the corresponding APPHole according to the demand of a user on the application, and provides the application of the connected APPHole for the user; after the user finishes running the application, the Hole agent disconnects from the APPHole, and the cloud computation system recovers the resource provided for the user in the APPHole. The invention also provides the cloud computation system. With the cloud computation system and the application access method thereof, the safety of the cloud computation system is greatly reinforced.

Description

technical field [0001] The invention relates to cloud computing technology, in particular to a cloud computing system and an application access method thereof. Background technique [0002] One form of cloud computing service is that the system provides a virtual machine for users to use. The virtual machine has an operating system pre-installed, and the user can use the virtual machine as if using a local computer. figure 1 It is a schematic diagram of the architecture of the existing cloud computing system. [0003] Such as figure 1 As shown, the cloud computing system includes the following components: [0004] 1. Product network: a network that users can access, and a user-oriented network provided to virtual machines. Users can connect to the virtual machine through the network and use the resources on the virtual machine. [0005] 2. Host or Hypervisor: physical machine, which provides the operating environment of the virtual machine and the virtual hardware simula...

AI Technical Summary

Problems solved by technology

[0014] The above-mentioned application method, that is, all the applications used by the user are on a single machine (or virtual machine), this method has original inherent deficiencies in security:

[0015] For the host machine (the target machine where the application is installed), it will become unsafe as the number of applications increases

Because more applications are added, which means opening more system services or ports, etc., leaking more system resources to the outside world

At the same time, the probability of defects in the application itself (which may lead to information leakage or system crash) will increase greatly with the increase in the number of installed applications

[0016] For users, all applications on one machine (All-in-One) means that once a hacker has mastered this machine, he will gain control of all applications, including chat records, email records, credit card Account number, etc., in this case, means that user information will be completely lost

Images