A cloud phone access control method, device, system and medium

Abstract

The application discloses a cloud mobile phone access control method, device, system and medium, and the method comprises the following steps: receiving an access request sent by a user terminal through a preset unified port, wherein the access request carries the identification of a target cloud mobile phone; obtaining corresponding port connection information in a preset database according to the identification of the target cloud mobile phone; and establishing a connection with the target cloud mobile phone server according to the port connection information, so that the user terminal accesses the target cloud mobile phone through the bridge server. By adding a bridge server in the user terminal and the cloud mobile phone server, and by providing a unified port service to the outside to receive the access request and establish a connection with the cloud mobile phone server, the user terminal can realize access without carrying the port number of the cloud mobile phone when initiating the access request, and the information security of the cloud mobile phone access control is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of cloud mobile phone, and particularly relates to a cloud mobile phone access control method, device, system and medium. BACKGROUND

[0002] The cloud mobile phone is a mobile phone using cloud computing technology in network terminal service, and realizing cloud service through a cloud mobile phone server.

[0003] At present, in cloud mobile phone access control, each cloud mobile phone is mapped to a service port in a physical server, a physical terminal used by a user is connected to the cloud mobile phone server through the service port and accesses the corresponding cloud mobile phone, and remote access operation on the cloud mobile phone is realized through screen sharing into the cloud mobile phone interface.

[0004] This way needs to carry the corresponding port number every time the request is made due to the non-fixed port, which is inconvenient for port maintenance and may also cause the back-end deployment information to be leaked. SUMMARY

[0005] In view of the above deficiencies of the prior art, the present application aims to provide a cloud mobile phone access control method, device, system and medium applicable to financial technology or other related fields, and aims to improve the information security in cloud mobile phone access control.

[0006] The technical solution of the present application is as follows:

[0007] A cloud mobile phone access control method applied to a bridge server, the method comprising:

[0008] receiving an access request sent by a user terminal through a preset unified port, the access request carrying an identifier of a target cloud mobile phone;

[0009] querying corresponding port connection information in a preset database according to the identifier of the target cloud mobile phone;

[0010] establishing a connection with a target cloud mobile phone server according to the port connection information, so that the user terminal accesses the target cloud mobile phone through the bridge server.

[0011] In one embodiment, before the step of receiving an access request sent by a user terminal through a preset unified port, the method further comprises:

[0012] receiving cloud mobile phone registration information sent by the cloud mobile phone server and storing the cloud mobile phone registration information to a preset database, the cloud mobile phone registration information comprising an identifier and port connection information of a cloud mobile phone.

[0013] In one embodiment, the step of establishing a connection with a target cloud mobile phone server according to the port connection information comprises:

[0014] sending a connection request for full-duplex communication to a target cloud phone server according to the port connection information;

[0015] establishing a full-duplex communication connection with the target cloud phone server upon receiving a connection success message returned by the target cloud phone server.

[0016] In an embodiment, the full-duplex communication connection is a WebSocket communication connection.

[0017] In an embodiment, before the connection is established with the target cloud phone server according to the port connection information, the method further comprises:

[0018] authenticating the identity of the user requesting access.

[0019] In an embodiment, the authentication of the identity of the user requesting access comprises:

[0020] receiving authentication mapping information containing the correspondence between user information and a random token randomly generated by the physical server after successful authentication of the user information;

[0021] parsing the request user information and the request token carried in the access request;

[0022] authenticating the identity of the request user information and the request token according to the authentication mapping information.

[0023] In an embodiment, the port connection information includes a mapping port of the cloud phone and a corresponding deployed cloud phone server.

[0024] A cloud phone access control device, comprising:

[0025] a receiving module configured to receive an access request sent by a user terminal through a preset unified port, the access request carrying an identifier of a target cloud phone;

[0026] a port query module configured to query corresponding port connection information in a preset database according to the identifier of the target cloud phone;

[0027] a connection module configured to establish a connection with a cloud phone server according to the port connection information, so that the user terminal accesses the target cloud phone through the bridge server.

[0028] A cloud phone access control system, the system comprising at least one processor; and,

[0029] a memory in communication connection with the at least one processor; wherein,

[0030] The memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the cloud mobile phone access control method.

[0031] A non-volatile computer readable storage medium stores computer executable instructions that, when executed by one or more processors, cause the one or more processors to perform the cloud mobile phone access control method.

[0032] Beneficial effects: The application discloses a cloud mobile phone access control method, device, system and medium, compared with the prior art, the application embodiment adds a bridge server in the user terminal and the cloud mobile phone server, and the bridge server provides a unified port service to receive an access request and establish a connection with the cloud mobile phone server, so that the user terminal does not need to carry the port number of the cloud mobile phone when initiating an access request, and the information security of the cloud mobile phone access control is improved. BRIEF DESCRIPTION OF DRAWINGS

[0033] The application will be further described below in combination with the drawings and embodiments, and the drawings are as follows:

[0034] Figure 1 A flowchart of the cloud mobile phone access control method provided by the application embodiment;

[0035] Figure 2 Another flowchart of the cloud mobile phone access control method provided by the application embodiment;

[0036] Figure 3 A flowchart of step S300 in the cloud mobile phone access control method provided by the application embodiment;

[0037] Figure 4 Another flowchart of the cloud mobile phone access control method provided by the application embodiment;

[0038] Figure 5 A flowchart of step S500 in the cloud mobile phone access control method provided by the application embodiment;

[0039] Figure 6 A functional module schematic diagram of the cloud mobile phone access control device provided by the application embodiment;

[0040] Figure 7 A hardware structure schematic diagram of the cloud mobile phone access control system provided by the application embodiment. DETAILED DESCRIPTION

[0041] In order to make the objectives, technical solutions and effects of the present application clearer and more explicit, the present application is further described in detail below. It should be understood that the specific embodiments described herein are only used to explain the present application and not to limit the present application. The embodiments of the present application are described below with reference to the accompanying drawings.

[0042] Referring to Figure 1 , Figure 1 The flowchart of an embodiment of the cloud phone access control method provided by the present application is shown in FIG. 1. The cloud phone access control method provided by the present application is applied to a system comprising a user terminal, a bridge server, a cloud phone server and a network. The network is a medium for providing a communication link between the terminal device and the server, which can comprise various connection types, such as wired, wireless communication link or optical fiber cable, etc. The operating system on the user terminal can comprise a handheld device operating system (iPhone operating system, iOS system), an Android system or other operating systems. The user terminal is connected to the bridge server through the network, so that the bridge server acts as the server of the user terminal. The bridge server is connected to the cloud phone server, so that the bridge server acts as the client of the cloud phone server. The information flow between the user terminal and the cloud phone server is uploaded and issued through the bridge server, so as to realize the access control of the user terminal to the cloud phone deployed on the cloud phone server. As shown in FIG. 1, the method specifically comprises the following steps: Figure 1

[0043] S100, receiving an access request sent by a user terminal through a preset unified port, wherein the access request carries an identifier of a target cloud phone.

[0044] In the embodiment, when the user needs to access the target cloud phone, the user initiates an access request to the bridge server through the client installed on the user terminal. Unlike the existing mapping of a port for each cloud phone, the bridge server provides a preset unified port for communication in the embodiment, such as port 8080 or other ports, etc., so as to solve the problems of port exposure or complex configuration and maintenance caused by the non-fixed port of the cloud phone. Therefore, when initiating the access request, the device port of the target cloud phone does not need to be considered, and only the identifier of the target cloud phone, such as the cloud phone id, is carried to realize convenient and accurate access control.

[0045] In one embodiment, referring to FIG. 2, which is another flowchart of the cloud phone access control method provided by the embodiment of the present application, as shown in FIG. 2, before step S100, the method further comprises: Figure 2 Figure 2

[0046] S400, receiving cloud phone registration information sent by the cloud phone server and storing the cloud phone registration information into a preset database, wherein the cloud phone registration information comprises an identifier and port connection information of the cloud phone.​​​

[0047] In this embodiment, the cloud phone server sends the related registration information of the cloud phone deployed therein to the bridge server and stores the same in the local database for calling at any time. The specific cloud phone registration information includes the identification of the cloud phone, i.e., the phone id, and the port connection information, which further includes the mapping port of the cloud phone and the server information, i.e., the cloud phone server where the cloud phone is deployed. The related information of the cloud phone is uniformly stored, so that the user terminal does not need to pay attention to the specific port connection information when initiating an access request, and the mapping connection in the bridge server is safe and convenient.

[0048] Preferably, since the deployment of the cloud phone may change dynamically, the cloud phone server can maintain the cloud phone registration information regularly, for example, sending the updated cloud phone registration information to the bridge server every preset time to replace the historically stored registration information, so as to ensure the timeliness and accuracy of the cloud phone registration information.

[0049] S200, querying the corresponding port connection information in the preset database according to the identification of the target cloud phone.

[0050] In this embodiment, based on the cloud phone registration information stored in the local database in advance, the bridge server can parse and obtain the phone id of the target cloud phone after receiving the access request at the preset unified port, and query the corresponding mapping port, the deployed cloud phone server and other port connection information in the local database according to the phone id, so as to serve as the accurate identification of the target cloud phone.

[0051] S300, establishing a connection with the target cloud phone server according to the port connection information, so that the user terminal accesses the target cloud phone through the bridge server.

[0052] In this embodiment, the bridge server establishes a connection with the corresponding target cloud phone server internally based on the queried port connection information, so that the user terminal can also realize connection access without obtaining the service port mapped by each cloud phone. By adding the bridge server as the communication connection between the user terminal and the target cloud phone server, the user terminal reaches the effect of accessing the target cloud phone through the bridge server, and ensures the information security when the cloud phone is accessed.

[0053] In one embodiment, please refer to Figure 3 which is the flowchart of step S300 in the cloud phone access control method provided by the embodiment of the present application, as shown in Figure 3 , step S300 includes:

[0054] S301, send a connection request of full-duplex communication to the target cloud mobile server according to the port connection information;

[0055] S302, when a connection success message returned by the target cloud mobile server is received, establish a full-duplex communication connection with the target cloud mobile server.

[0056] In the embodiment, when establishing the communication connection between the bridge server and the target cloud mobile server, the connection request of full-duplex communication is initiated according to the port connection information, and the connection request of full-duplex communication is specifically a connection request based on the WebSocket communication protocol, that is, the bridge server and the target cloud mobile server both start the WebSocket service to realize the full-duplex communication connection, so that they can send and receive messages at the same time, and when the connection success message is received, that is, the handshake between them is successful, the full-duplex communication connection between the bridge server and the target cloud mobile server, that is, the WebSocket communication connection is established, at this time, the bridge server acts as the WebSocket server of the user terminal and simultaneously acts as the WebSocket client of the cloud mobile server, uploads and issues the WebSocket information flow of both sides, and realizes the fast and timely cloud mobile interaction control.

[0057] Specifically, the WebSocket connection request is sent to the WebSocket server of the cloud mobile server through the transmission control protocol, so that the WebSocket full-duplex communication mode is established between the bridge server and the cloud mobile server. The establishment stage of the WebSocket communication depends on the http protocol. The first handshake stage of the connection establishment utilizes the http protocol, and after the connection establishment is successful, that is, the first handshake is completed, the WebSocket protocol is switched, and the WebSocket protocol is completely separated from the http protocol. The WebSocket completes a handshake action between the bridge server and the cloud mobile server, and after the connection is established, the WebSocket server can actively transmit data to the WebSocket client, and the WebSocket client can send data to the WebSocket server at any time. The WebSocket server and the WebSocket client can freely send data at any time, and the instantaneity and transmission efficiency of the cloud mobile access control are improved.

[0058] In an embodiment, please refer to Figure 4 which is another flowchart of the cloud mobile access control method provided by the embodiment of the application, as shown in Figure 4 Before step S300, the method further includes:

[0059] S500, perform authentication processing on the user identity requesting access.

[0060] In the embodiment, to ensure the security of the cloud phone access, the identity of the user currently requesting access is further authenticated before the connection is established, to ensure the legitimacy of the user identity, avoid abnormal access control of the cloud phone by illegal users, and improve the security of the cloud phone access control.

[0061] In one embodiment, referring to Figure 5 which is a flowchart of step S500 in the cloud phone access control method provided by the embodiment, as shown in Figure 5 step S500 includes:

[0062] S501, receiving authentication mapping information, the authentication mapping information containing the correspondence between the user information and the random token, the random token being randomly generated by the physical server after successfully authenticating the user information;

[0063] S502, parsing the request user information and the request token carried in the access request;

[0064] S503, identity authentication of the request user information and the request token according to the authentication mapping information.

[0065] In the existing direct connection scheme between the user terminal and the cloud phone with a non-fixed port, if authentication processing is needed to improve the access security, the open source components need to be modified, and the business control process needs to be added, so that the authentication process is very troublesome and inefficient.

[0066] In the embodiment, after the bridge server is added, an efficient and convenient authentication process can be realized through random token verification. Specifically, when a user uses the http protocol to apply for a device and needs to log in, the request header will carry user information such as a username and a password. At this time, the user information authentication will be performed on the background, i.e., the physical server. If the user information authentication is successful, a random token corresponding to the user information will be randomly generated, and the correspondence between the user information and the corresponding random token will be sent to the bridge server as authentication mapping information for storage.

[0067] Then, when the user terminal initiates an access request, the request token of the current request user randomly generated before will be carried in the request body. The bridge server will match and verify the request user information and the request token of the current request access according to the stored authentication mapping information, confirm whether the correspondence of the two is consistent with that in the authentication mapping information, and if so, the authentication is successful, and the connection request for establishing a connection is forwarded to the cloud phone server. If not, the authentication fails, and the authentication failure information is directly returned to the user terminal, to ensure the security and privacy of the cloud phone access.

[0068] Another embodiment of the present application provides a cloud phone access control device, as shown inFigure 6 As shown in the figure, the device 1 comprises:

[0069] The receiving module 11 is configured to receive an access request sent by a user terminal through a preset unified port, wherein the access request carries an identifier of a target cloud mobile phone.

[0070] The port query module 12 is configured to query corresponding port connection information in a preset database according to the identifier of the target cloud mobile phone.

[0071] The connection module 13 is configured to establish a connection with a cloud mobile phone server according to the port connection information, so that the user terminal accesses the target cloud mobile phone through the bridge server.

[0072] The module referred to in the present application refers to a series of computer program instructions capable of completing a specific function, and is more suitable for describing the execution process of cloud mobile phone access control than a program. The specific implementation of each module is described in the above method embodiment, and will not be described here.

[0073] In one embodiment, the device 1 further comprises:

[0074] The registration storage module is configured to receive cloud mobile phone registration information sent by the cloud mobile phone server and store the cloud mobile phone registration information in a preset database, wherein the cloud mobile phone registration information comprises an identifier and port connection information of a cloud mobile phone.

[0075] In one embodiment, the connection module 13 comprises:

[0076] The request sending unit is configured to send a full-duplex communication connection request to the target cloud mobile phone server according to the port connection information.

[0077] The connection unit is configured to establish a full-duplex communication connection with the target cloud mobile phone server when a connection success message returned by the target cloud mobile phone server is received.

[0078] In one embodiment, the full-duplex communication connection is a WebSocket communication connection.

[0079] In one embodiment, the device 1 further comprises:

[0080] The authentication module is configured to perform authentication processing on the identity of a user requesting access.

[0081] In one embodiment, the authentication module comprises:

[0082] The receiving unit is configured to receive authentication mapping information, wherein the authentication mapping information comprises a corresponding relationship between user information and a random token, and the random token is randomly generated by a physical server after successfully authenticating the user information.

[0083] The parsing unit is used to parse and obtain the requesting user information and request token carried in the access request;

[0084] The authentication unit is used to authenticate the requesting user information and the request token based on the authentication mapping information.

[0085] In one embodiment, the port connection information includes the mapped port of the cloud phone and the corresponding deployed cloud phone server.

[0086] Another embodiment of the present invention provides a cloud mobile phone access control system, such as... Figure 7 As shown, system 10 includes:

[0087] One or more processors 110 and memory 120, Figure 7 The following description uses a processor 110 as an example. The processor 110 and the memory 120 can be connected via a bus or other means. Figure 7 Taking the example of a connection between China and Israel via a bus.

[0088] Processor 110 is used to perform various control logics of system 10, and can be a general-purpose processor, digital signal processor (DSP), application-specific integrated circuit (ASIC), field-programmable gate array (FPGA), microcontroller, ARM (Acorn RISC Machine) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or any combination of these components. Furthermore, processor 110 can also be any conventional processor, microprocessor, or state machine. Processor 110 can also be implemented as a combination of computing devices, such as a combination of DSP and microprocessor, multiple microprocessors, one or more microprocessors combined with DSP and / or any other such configuration.

[0089] The memory 120, as a non-volatile computer-readable storage medium, can be used to store non-volatile software programs, non-volatile computer-executable programs, and modules, such as the program instructions corresponding to the cloud phone access control method in the embodiments of the present invention. The processor 110 executes various functional applications and data processing of the system 10 by running the non-volatile software programs, instructions, and units stored in the memory 120, thereby implementing the cloud phone access control method in the above method embodiments.

[0090] The memory 120 can include a program storage area and a data storage area, where the program storage area can store an operating system, at least one application required by a function, and the data storage area can store data created according to the use of the system 10, etc. In addition, the memory 120 can include a high-speed random access memory, and can also include a non-volatile memory, such as at least one magnetic disk storage device, a flash memory device, or other non-volatile solid-state memory device. In some embodiments, the memory 120 can optionally include a memory disposed remotely with respect to the processor 110, which can be connected to the system 10 through a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0091] One or more units are stored in the memory 120, and when executed by the one or more processors 110, implement the following steps:

[0092] Receiving an access request sent by a user terminal through a preset unified port, the access request carrying an identifier of a target cloud mobile phone;

[0093] Obtaining corresponding port connection information in a preset database according to the identifier of the target cloud mobile phone;

[0094] Establishing a connection with a target cloud mobile phone server according to the port connection information, so that the user terminal accesses the target cloud mobile phone through the bridge server.

[0095] In one embodiment, before the receiving an access request sent by a user terminal through a preset unified port, the method further comprises:

[0096] Receiving cloud mobile phone registration information sent by the cloud mobile phone server and storing it to a preset database, the cloud mobile phone registration information including an identifier of a cloud mobile phone and port connection information.

[0097] In one embodiment, the establishing a connection with a target cloud mobile phone server according to the port connection information comprises:

[0098] Sending a full-duplex communication connection request to the target cloud mobile phone server according to the port connection information;

[0099] When a connection success message returned by the target cloud mobile phone server is received, establishing a full-duplex communication connection with the target cloud mobile phone server.

[0100] In one embodiment, the full-duplex communication connection is a WebSocket communication connection.

[0101] In one embodiment, before the establishing a connection with a target cloud mobile phone server according to the port connection information, the method further comprises:

[0102] authenticating the identity of a user requesting access.

[0103] In one embodiment, the authenticating the identity of a user requesting access comprises:

[0104] receiving authentication mapping information, the authentication mapping information comprising a correspondence between user information and a random token, the random token being randomly generated by a physical server after successfully authenticating the user information;

[0105] parsing request user information and a request token carried in the access request;

[0106] authenticating the identity of the request user information and the request token according to the authentication mapping information.

[0107] In one embodiment, the port connection information comprises a mapping port of the cloud phone and a corresponding deployed cloud phone server.

[0108] The embodiments of the present application provide a non-volatile computer readable storage medium, the computer readable storage medium stores computer executable instructions, the computer executable instructions are executed by one or more processors, for example, the method steps S100 to S300 in the above description. Figure 1

[0109] By way of example, non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable ROM (EEPROM), or flash memory. Volatile memory can include random access memory (RAM), as external cache memory for a processor. By way of illustration, and not limitation, RAM can be available at many forms, such as synchronous RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), Synchlink DRAM (SLDRAM), and direct Rambus RAM (DRRAM). Disclosed memory components or memory of the operating environment described herein are intended to comprise one or more of these and / or any other suitable type of memory.

[0110] ​To sum up, in the cloud mobile access control method, device, system and medium disclosed by the application, the method receives an access request sent by a user terminal through a preset unified port, and the access request carries an identifier of a target cloud mobile; corresponding port connection information is obtained by querying a preset database according to the identifier of the target cloud mobile; and a connection is established with a target cloud mobile server according to the port connection information, so that the user terminal accesses the target cloud mobile through the bridge server. By adding a bridge server in the user terminal and the cloud mobile server, and providing a unified port service to receive an access request and establish a connection with the cloud mobile server, the user terminal can access the cloud mobile without carrying the port number of the cloud mobile when initiating an access request, and the information security of the cloud mobile access control is improved.

[0111] Of course, those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by a computer program instructing related hardware (such as a processor, a controller, etc.) to complete, and the computer program can be stored in a non-volatile computer readable storage medium. When the computer program is executed, the processes of the above-mentioned embodiment methods can be included. The storage medium can be a memory, a disk, a floppy disk, a flash memory, an optical storage, etc.

[0112] It should be understood that the application is not limited to the above examples, and those skilled in the art can make improvements or changes according to the above description, and all these improvements and changes should belong to the protection scope of the appended claims of the application.

Claims

1. A cloud phone access control method, characterized in that, Applied to a bridging server, the method includes: The system receives access requests sent by user terminals through a preset unified port, and the access requests carry the identifier of the target cloud phone. Based on the identifier of the target cloud phone, the corresponding port connection information is obtained by querying the preset database; A connection is established with the target cloud phone server based on the port connection information, so that the user terminal can access the target cloud phone through the bridging server.

2. The cloud phone access control method according to claim 1, characterized in that, Before receiving the access request sent by the user terminal through the preset unified port, the method further includes: The cloud phone registration information sent by the cloud phone server is received and stored in a preset database. The cloud phone registration information includes the cloud phone's identifier and port connection information.

3. The cloud phone access control method according to claim 1, characterized in that, The step of establishing a connection with the target cloud phone server based on the port connection information includes: Based on the port connection information, a full-duplex communication connection request is sent to the target cloud mobile phone server. Upon receiving a connection success message from the target cloud mobile phone server, a full-duplex communication connection is established with the target cloud mobile phone server.

4. The cloud phone access control method according to claim 3, characterized in that, The full-duplex communication connection is a WebSocket communication connection.

5. The cloud phone access control method according to claim 1, characterized in that, Before establishing a connection with the target cloud phone server based on the port connection information, the method further includes: The system authenticates the identity of the user requesting access.

6. The cloud phone access control method according to claim 5, characterized in that, The authentication process for the user requesting access includes: Receive authentication mapping information, which includes the correspondence between user information and random tokens, wherein the random tokens are randomly generated by the physical server after the user information is successfully authenticated; Parse and obtain the requesting user information and request token carried in the access request; The authentication mapping information is used to authenticate the requesting user information and the request token.

7. The cloud phone access control method according to any one of claims 1-6, characterized in that, The port connection information includes the mapped port of the cloud phone and the corresponding deployed cloud phone server.

8. A cloud phone access control device, characterized in that, Applied to a bridging server, the bridging server provides a preset unified port for communication. The device includes: The receiving module is used to receive access requests sent by user terminals through a preset unified port, wherein the access request carries the identifier of the target cloud phone; The port query module is used to query the corresponding port connection information in a preset database based on the identifier of the target cloud phone; The connection module is used to establish a connection with the cloud phone server based on the port connection information, so that the user terminal can access the target cloud phone through the bridging server.

9. A cloud mobile phone access control system, characterized in that, The system includes at least one processor; and, A memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, which, when executed by the at least one processor, enables the at least one processor to perform the cloud phone access control method according to any one of claims 1-7.

10. A non-volatile computer-readable storage medium, characterized in that, The non-volatile computer-readable storage medium stores computer-executable instructions that, when executed by one or more processors, cause the one or more processors to perform the cloud phone access control method according to any one of claims 1-7.

Images