A remote access method, proxy server and client

Abstract

The embodiments of the invention disclose a remote access method, an agent server and a client end, wherein the method comprises the steps that: when the agent server receives a virtual network computer VNC access request carrying a target user identifier; and sent by a target client end, the agent server obtains a secret key matched with the target user identifier; the secret key is utilized for carrying out encryption processing on random data, and encrypted data is generated and output to the target client end so as to enable the target client end to carry out decryption processing on the encrypted data and obtain decrypted data; the encrypted data sent by the target client end is received; the encrypted data is compared with the random data; and if the encrypted data is consistent with the random data, the target client end is allowed to establish a VNC access connection with a virtual machine. According to the embodiments of the invention, invalid VNC access caused by information leakage is voided, the information leakage risk is reduced, and the safety of the VNC access is improved.

Description

technical field [0001] The invention relates to the technical field of computers, and in particular to a remote access method, a proxy server and a client. Background technique [0002] OpenStack is an open source cloud computing management platform project, which can provide a cloud computing management platform with simple implementation, large-scale expansion, richness, and unified standards. It integrates the virtual network computer remote control (Virtual Network Computer, VNC) function in the Nova component . In the OpenStack environment, the user can obtain a Uniform Resource Locator (Uniform Resoure Locator, URL) address through the Nova component, and initiate a VNC access request according to the URL address, and the proxy server receives the VNC access request and executes the URL in the request. Check the data token for verification. If the verification is passed, the proxy server can allow the VNC client to access the VNC connection. However, in the process, s...

AI Technical Summary

Problems solved by technology

In the OpenStack environment, the user can obtain a Uniform Resource Locator (Uniform Resoure Locator, URL) address through the Nova component, and initiate a VNC access request according to the URL address, and the proxy server receives the VNC access request and executes the URL in the request. Check the data token for verification. If the verification is passed, the proxy server can allow the VNC client to access the VNC connection. However, in the process, since the token information is in plain text, Nova will store the token information in the open cache, so It is easy to be obtained by other illegal users, and any illegal user who obtains the token information can operate the user's virtual machine through the VNC function, which will not only cause information leakage of the virtual machine, but also allow multiple users to connect and access the VNC at the same time , will also affect the security of VNC access

Images