A virtual desktop access device control method and device

Abstract

The invention discloses an access device control method of a virtual desktop. The method includes: acquiring virtualization platform information, and setting a driver interface; acquiring management and control rules, and distributing the same to device drivers and file drivers; calling a corresponding device driver or file driver according to the driver interface when an access device accesses the virtual desktop through device mapping or file mapping; and managing and controlling the access device by the device driver or file driver according to the management and control rules. According to the method, virtualization driver interfaces can be unified, blue screens can be avoided, file mapping can be managed and controlled, indirect copying can be managed and controlled, and the management and control rules are easily updated.

Description

technical field [0001] The present invention relates to the field of virtual machines, and more specifically, to a method and device for controlling an access device of a virtual desktop. Background technique [0002] In the virtualization environment, the use of USB storage devices includes two methods. One is to map the USB storage device on the local login machine to the virtual desktop in the form of a device, and the other is to map the USB storage device in the form of a file. The virtual desktop There is a corresponding drive letter of the local disk of the login machine in . [0003] On a physical machine with Windows system installed, after the USB storage device is connected, it is first recognized by the USB device driver, then by the disk driver, and finally by the file system driver. Only when these steps are normal can it be applied Program use. [0004] The traditional way to manage and control USB storage devices is to develop a WDM (Windows Driver Module, ...

AI Technical Summary

Problems solved by technology

[0005] There are many shortcomings in the traditional method of controlling USB storage devices in a virtualized environment: First, the USB driver of the physical computer is developed by Microsoft. In order to ensure its backward compatibility with third-party software, its driver name remains unchanged. However, the USB bus driver developed by each virtualization manufacturer has its own definition of the device name, which is different, so that the driver developed for the physical machine cannot be used in the virtualization environment; second, after obtaining the VID of the USB storage device and When PID is used, the WDM driver can send a specific IRP request down to get it successfully, but in a virtualized environment, some manufacturers will fail to do so, or even blue screen; third, use the WDM driver, in the virtualized environment You can only control the USB storage device in the way of device mapping, but not in the way of file mapping, and also cannot perform read-only control on the file mapping method; When the local disk without a local disk) adopts the file mapping method, in the virtual desktop, by copying the file to the local disk, then the file can be copied to the USB storage device on the login machine; When the storage device is operating, if the control rule is changed from allowed to prohibited, the USB storage device is used by the system and cannot be stopped. You can only restart the computer, which is not friendly to users.

However, in occasions with high security requirements, virtual desktop access peripherals, especially mobile storage devices, have a major impact on the security of virtual desktops

[0007] There is currently no effective solution for the problems of inconsistent virtualization driver interface, blue screen of IRP request, uncontrollable file mapping, uncontrollable indirect copy, and complex control rule changes in the existing technology.

Images