Cloud desktop based authorization method and apparatus, computing device, and storage medium

Abstract

The application discloses a cloud desktop-based authorization method and device, a computing device and a storage medium. The cloud desktop-based authorization method is executed in a computing device, and a cloud desktop runs in the computing device. The method comprises the following steps: obtaining authentication data from a cloud server, wherein the cloud server is connected with the computing device through a cloud computing management platform; generating authorization information based on the authentication data; sending the authorization information to an authorization server, so that the authorization server matches the authorization information with a pre-stored authorization file, and returns an authorization indication indicating that the cloud desktop meets an authorization condition to the computing device when the matching succeeds; and authorizing the cloud desktop in response to receiving the authorization indication.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer, in particular to an authorization method and device based on cloud desktop, computing device and storage medium. BACKGROUND

[0002] In recent years, the development speed of Internet technology is getting faster and faster, and many advanced computer technologies and information technologies have emerged. The application level of computer has been significantly improved. Generally speaking, people will choose physical host according to their maximum needs, so many physical devices that do not need to be purchased are ignored in actual application, resulting in that the utilization efficiency of resources is restricted. Cloud desktop is to use virtual technology to virtualize various physical devices, so as to effectively improve the utilization rate of resources, thereby saving cost and improving application quality.

[0003] Since the physical bottom layer of cloud desktop is qemu / kvm (virtual machine), when authorization is performed under cloud desktop, due to the characteristics of virtual machine, the hardware information of virtual machine will change when some regular operations of virtual machine are performed. If these hardware information is used for authorization authentication, authorization loss and instability will inevitably occur. SUMMARY

[0004] In view of the above problems, the present application is proposed in order to provide an authorization method, device, computing device and storage medium based on cloud desktop, which overcomes the above problems or at least partially solves the above problems.

[0005] According to one aspect of the present application, an authorization method based on cloud desktop is provided, which is executed in a computing device, and a cloud desktop runs in the computing device. The method comprises: obtaining authentication data from a cloud server, the cloud server being communicatively connected with the computing device through a cloud computing management platform; generating authorization information based on the authentication data; sending the authorization information to an authorization server, so that the authorization server matches the authorization information with a pre-stored authorization file, and returns an authorization indication indicating that the cloud desktop meets the authorization condition to the computing device when the matching is successful; and authorizing the cloud desktop in response to receiving the authorization indication.

[0006] Optionally, in the authorization method based on cloud desktop according to the present application, wherein the authorization information is generated based on the authentication data, comprising: associating the authentication information with the hardware information of the virtual machine to which the cloud desktop belongs, to obtain the authorization information.

[0007] Optionally, in the authorization method based on cloud desktop according to the present application, further comprising: detecting whether the current authorization environment is a cloud desktop environment.

[0008] Optionally, in the cloud desktop based authorization method according to the present application, wherein the authentication data is obtained from the cloud server, comprising: sending an obtaining request for obtaining the authentication data to the cloud computing management platform, so as to forward the obtaining request to the cloud server through the cloud computing management platform, and then send the authentication data to the computing device through the cloud computing management platform.

[0009] Optionally, in the cloud desktop based authorization method according to the present application, wherein the cloud computing management platform is an Openstack platform.

[0010] Optionally, in the cloud desktop based authorization method according to the present application, wherein the authentication data is cloud server ID information sent to the cloud desktop through the cloud computing management platform.

[0011] Optionally, in the cloud desktop based authorization method according to the present application, further comprising: displaying the authorization state of the cloud desktop.

[0012] According to another aspect of the present application, a cloud desktop based authorization device is provided, which resides in a computing device, and a cloud desktop runs in the computing device, the method comprising: an obtaining module, obtaining authentication data from a cloud server, the cloud server being communicatively connected with the computing device through a cloud computing management platform; a generating module, generating authorization information based on the authentication data; a sending module, sending the authorization information to an authorization server, so that the authorization server matches the authorization information with a pre-stored authorization file, and returns an authorization indication indicating that the cloud desktop meets the authorization condition to the computing device when the matching is successful; and an authorization module, authorizing the cloud desktop in response to receiving the authorization indication.

[0013] According to another aspect of the present application, a computing device is provided, comprising: at least one processor; and a memory storing program instructions, wherein the program instructions are configured to be suitable for being executed by the at least one processor, and the program instructions comprise instructions for executing the above method.

[0014] According to another aspect of the present application, a readable storage medium storing program instructions is provided, when the program instructions are read and executed by a computing device, the computing device executes the above method.

[0015] According to the scheme of the present application, the authentication data obtained from the cloud server is used to generate the authorization information, which gives a better solution for authorization in the cloud desktop environment, especially when the user performs the operation of expansion and other operations affecting the cloud desktop hardware information, the stability of the authorization can still be guaranteed, and the cloud server can be used to manage and allocate the cloud desktop authorization, which improves the management of the cloud operating system and the use efficiency and experience of the user.

[0016] The above description is only a summary of the technical solutions of the present application. In order to enable one skilled in the art to better understand the technical means of the present application and to implement the same according to the contents of the description, and in order to enable the above and other purposes, features and advantages of the present application to be more apparent and understandable, the following specific embodiments of the present application are described. BRIEF DESCRIPTION OF DRAWINGS

[0017] Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The accompanying drawings are included to provide a description of the preferred embodiments and are not intended to limit the scope of the present application. Moreover, the same reference numerals are used throughout the same figures. In the drawings:

[0018] Figure 1 A schematic diagram of a computing device 100 according to an embodiment of the present application is shown;

[0019] Figure 2 A flowchart of a cloud desktop authorization method 200 according to an embodiment of the present application is shown;

[0020] Figure 3 A flowchart of a cloud desktop authorization method 200 according to an embodiment of the present application is shown;

[0021] Figure 4 A schematic diagram of a cloud desktop authorization device 400 according to an embodiment of the present application is shown. DETAILED DESCRIPTION

[0022] Exemplary embodiments of the present disclosure will be described more fully hereinafter with reference to the accompanying drawings. While example embodiments of the present disclosure are shown in the drawings, it is understood that the present disclosure can be embodied in various forms without being limited by the embodiments set forth herein. Rather, these embodiments are provided so that the present disclosure will be thorough and complete, and will fully convey the scope of the present disclosure to those skilled in the art.

[0023] Cloud desktop essentially stores and manages various user information by using virtualization technology, and through simple network access devices, the user end can enter the cloud desktop to achieve centralized management and efficient resource sharing. In addition, users can also personalize the cloud desktop according to their own needs to meet diversified needs.

[0024] Compared with the physical machine, the virtual machine has no hardware entity. That is, the physical machine is a hardware system with entity, such as a server, and the virtual machine is a hardware system virtually generated by the physical machine. In addition, the physical machine and the virtual machine are different in terms of containers and execution engines. Taking a computer as an example, a computer is a physical machine, but a computer can deploy multiple virtual machines, each of which can run different operating systems, and application programs can run in independent spaces without affecting each other. The execution engine of the physical machine is directly established on the CPU processor, the instruction set, the operating system and the hardware level; and the execution engine of the virtual machine is implemented by itself, which can formulate its own instruction set and the structure system of the execution engine, and can also execute some instruction set formats not directly supported by hardware.

[0025] The physical bottom layer of the cloud desktop is qemu / kvm (virtual machine). Due to the above differences in hardware entity, container and the like between the physical machine and the virtual machine, the hardware (CPU serial number, hard disk serial number, network card MAC address and the like of the virtual machine) that can be bound as unique information on the physical machine can not be applicable on the virtual machine. Due to the characteristics of the virtual machine, these information will change when some virtual machine routine operations are performed (for example, disk expansion will change the disk ID), and if these hardware information is used for authorization authentication, authorization loss and instability will inevitably occur.

[0026] In order to solve the above technical problems, the application provides an authorization method based on a cloud desktop, generates authorization information by using authentication data obtained from a cloud server, and provides a more optimal solution for authorization in a cloud desktop environment. Especially when the user performs operations such as expansion and other operations that affect the hardware information of the cloud desktop, the stability of the authorization can still be guaranteed, and the cloud server can be used to manage and allocate the cloud desktop authorization, and the management of the cloud operating system and the use efficiency and experience of the user can be improved. The method can be implemented as an application program and installed in a computing device 100. Figure 1 A schematic diagram of a computing device 100 according to an embodiment of the application is shown.

[0027] The computing device 100 described above can be implemented as a server, such as an application server, a Web server and the like; or can be implemented as a desktop computer, a notebook computer, a processor chip, a tablet computer and the like, but is not limited thereto. In the basic configuration, the computing device 100 includes at least one processing unit 102 and a system memory 104. According to an aspect, depending on the configuration and type of the computing device, the system memory 104 includes, but is not limited to, volatile storage (such as random access memory), non-volatile storage (such as read-only memory), flash memory, or any combination of such memories.

[0028] According to an aspect, system memory 104 includes operating system 105. System memory 104 also includes program module 150. According to an aspect, operating system 105 is suitable for controlling the operation of computing device 100. Furthermore, examples are practiced in conjunction with a graphics library, other operating systems, or any other application program, and are not limited to any particular application or system. In Figure 1 This basic configuration is illustrated in FIG. 1 by those components within dashed line 108. According to an aspect, computing device 100 has additional features or functionality. For example, according to an aspect, computing device 100 includes additional data storage devices (removable and / or non-removable) such as, for example, magnetic disks, optical disks, or tape. Such additional storage is illustrated in FIG. 1 by removable storage 109 and non-removable storage 110. Figure 1

[0029] As stated above, according to an aspect, program modules are stored in system memory 104. According to an aspect, program modules can include one or more applications. The application is not limited by the type of applications it supports. For example, applications can include email and contacts applications, word processing applications, spreadsheet applications, database applications, slide presentation applications, painting or computer-aided applications, web browser applications, etc. In embodiments according to the application, the applications in the program modules can be cloud desktop based authorization apparatus 400 configured to perform the cloud desktop based authorization method 200 of the application.

[0030] According to an aspect, examples can be practiced with circuitry integrated on a single integrated circuit chip, with discrete electronic components, with application specific integrated circuits, or with a combination of other circuitry integrated on a single integrated circuit chip, discrete electronic components, or application specific integrated circuits. Figure 1 According to an aspect, such a SOC device can include one or more processing units, graphics units, communications units, system virtualization units, and various application functionality all as integrated (or "burned") onto the chip substrate as a single integrated circuit. When operating via a SOC, the functionality, described herein, can be operated via application-specific logic integrated with other components of the computing device 100 on the single integrated circuit (chip). Example embodiments of the application can also be practiced using other technologies where structural features and functions can be integrated on a single semiconducting chip, with discrete electronic components, or using a combination of other circuitry integrated on a single semiconducting chip, discrete electronic components, or application specific integrated circuits.

[0031] ​According to an aspect, the computing device 100 can also have one or more input device(s) 112 such as a keyboard, a mouse, a pen, a voice input device, a touch input device, etc. Output device(s) 114 such as a display, speakers, a printer, etc. can also be included. The aforementioned devices are examples and others can be used. The computing device 100 can include one or more communication connections 116 allowing communications with other computing devices 118 such as printers, etc. Examples of suitable communication connections 116 include, but are not limited to, RF transmitter, receiver, and / or transceiver circuitry; universal serial bus (USB), parallel, and / or serial ports.

[0032] The term computer readable media as used herein includes computer storage media. Computer storage media can include volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, or program modules. The system memory 104, the removable storage device 109, and the non-removable storage device 110 are all computer storage media examples (i.e., memory storage.) Computer storage media can include Random Access Memory (RAM), Read Only Memory (ROM), Electronically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store information and which can be accessed by the computing device 100. According to an aspect, any such computer storage media can be part of the computing device 100. Computer storage media does not include a modulated data signal or other propagated data signal.

[0033] According to an aspect, communication media typically embodies computer readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transport mechanism and includes any information delivery media. According to an aspect, the term "modulated data signal" describes a signal that has one or more characteristics set or changed in such a manner as to encode information in the signal. By way of example, and not limitation, communication media includes wired media such as a wired network or direct-wired connection, and wireless media such as acoustic, radio frequency (RF), infrared, and other wireless media.

[0034] In an embodiment according to the present application, the computing device 100 is configured to perform the cloud desktop based authorization method 200 according to the present application. The computing device 100 comprises one or more processors, and one or more readable storage media storing program instructions which, when configured to be executed by the one or more processors, cause the computing device to perform the cloud desktop based authorization method 200 in the embodiments of the present application.

[0035] According to an embodiment of the present application, the cloud desktop based authorization apparatus 400 of the computing device 100 is configured to perform the cloud desktop based authorization method 200 according to the present application. In the cloud desktop based authorization apparatus 400, a plurality of program instructions for performing the cloud desktop based authorization method 200 according to the present application are included, which can instruct the processor to perform the cloud desktop based authorization method 200 according to the present application, so that the computing device 100 performs the cloud desktop based authorization method 200 according to the present application, to generate authorization information by using the authentication data obtained from the cloud server, to give a better solution for authorization in the cloud desktop environment, and especially when the user performs an operation of expansion and other operations affecting the cloud desktop hardware information, the stability of authorization can still be ensured, and the cloud server can be used to manage and allocate the cloud desktop authorization, to improve the manageability of the cloud operating system and the use efficiency and experience of the user.

[0036] Figure 2 A flowchart of the cloud desktop based authorization method 200 according to an embodiment of the present application is shown. The method 200 is suitable for being performed in a computing device (for example, the aforementioned computing device 100). The cloud desktop runs in the computing device.

[0037] As Figure 2 shown, the purpose of the method 200 is to implement a method of generating authorization information by using authentication data obtained from a cloud server, to give a better solution for authorization in the cloud desktop environment. It is worth noting that the present application is to perform authorization in the cloud environment, and therefore, before performing authorization, it is necessary to detect whether the current authorization environment is a cloud desktop environment. If yes, the method 200 of the present application is performed.

[0038] The method 200 starts from step 202, in which authentication data from a cloud server is acquired, the cloud server being communicatively connected with the computing device through a cloud computing management platform. The cloud server (Elastic Compute Service, ECS for short) is a computing service that is simple and efficient, safe and reliable, and has elastic processing capacity. The ECS can allocate at least one cloud desktop to a user, and the user can use the cloud desktop after authentication. In the whole complex cloud computing architecture, a powerful management platform (i.e., the cloud computing management platform of the present application, Openstack) is needed to realize the integration and virtualization of hardware resources. Users can apply for various hardware resources and middleware resources through the cloud computing management platform.

[0039] It should be noted that OpenStack is an open source cloud computing management platform project, which is a combination of a series of open source projects. It is an open source code project authorized by Apache license (a free software license issued by Apache Software Foundation) developed and initiated by NASA (National Aeronautics and Space Administration) and Rackspace. OpenStack provides scalable and elastic cloud computing services for private clouds and public clouds. The project aims to provide a simple-to-implement, scalable, rich, and standard unified cloud computing management platform. OpenStack is the most influential cloud computing management tool today, and the system or its evolved version is widely used in various industries, including self-built private clouds, public clouds, leased private clouds, and public-private hybrid clouds. Many enterprises currently use OpenStack to manage cloud system environments.

[0040] The cloud desktop interacts with the cloud server through the cloud computing management platform, and the specific process of acquiring authentication data from the cloud server includes:

[0041] First, an acquisition request for acquiring authentication data is sent to the cloud computing management platform.

[0042] Then, the cloud computing management platform forwards the acquisition request to the cloud server, so that the cloud server sends the authentication data to the computing device through the cloud computing management platform. The authentication data is cloud server ID information issued to the cloud desktop through the cloud computing management platform.

[0043] Subsequently, in step 204, authorization information is generated based on the authentication data. Specifically, the authentication information is associated with the hardware information of the virtual machine to which the cloud desktop belongs, to obtain the authorization information. The present application utilizes the hardware information of the cloud desktop system itself (the hardware information of the virtual machine), and combines the ID information of the ECS issued to the cloud desktop through the Openstack management platform, as the unique hardware binding information, to ensure that when the operation related to the cloud desktop affects the hardware information, the stability of the authorization can still be ensured and the management of the cloud server is easier.

[0044] Subsequently, in step 206, the authorization information is sent to the authorization server, so that the authorization server matches the authorization information with the pre-stored authorization file, and returns an authorization indication indicating that the cloud desktop meets the authorization condition to the computing device when the matching is successful. It is worth noting that the authorization file is generated in the registration stage of the cloud desktop. The generation process of the authorization file includes: associating the cloud server ID information issued by the cloud computing management platform to the cloud desktop with the hardware information of the virtual machine to which the cloud desktop belongs, and sending to the authorization server for storage, to obtain the authorization file. In the subsequent authorization process, the authorization server only needs to match the authorization information obtained from the cloud desktop with the authorization file.

[0045] Finally, in step 208, the cloud desktop is authorized in response to receiving the authorization indication. And after the authorization is successful, the authorization state of the cloud desktop is displayed.

[0046] In one specific example, referring to Figure 3 , Figure 3 a flow chart of a method for cloud desktop license authentication according to one embodiment of the present application is shown.

[0047] In Figure 3 , Client: authorization management client user interaction GUI interface;

[0048] Agent: authorization management client daemon process;

[0049] LicenseServer: authorization server;

[0050] OpenStack: cloud computing management platform project;

[0051] ECS: cloud server.

[0052] As Figure 3 shown, the specific process of license authentication on the cloud desktop includes:

[0053] 1. The user opens the authorization management client and performs the serial number activation operation;

[0054] 2. The user interaction interface sends an authentication request to the authorization daemon process;

[0055] 3. The daemon judges the current platform environment, and if it is a cloud desktop, sends a request to the OpenStack to obtain ECS authentication information;

[0056] 4. The OpenStack management platform obtains the authentication data of the ECS and issues it to the daemon of the cloud desktop;

[0057] 5. The daemon obtains the hardware information specific to the cloud desktop and sends it to the authorization server;

[0058] 6. The authorization server checks, analyzes and stores the authentication data, and then sends the authorization result to the client;

[0059] 7. The client receives the data, updates the activation state, and displays it to the user.

[0060] The method provided by the application generates authorization information by using the authentication data obtained from the cloud server, and provides a better solution for authorization in the cloud desktop environment. In particular, when the user performs operations such as expansion and addition that affect the hardware information of the cloud desktop, the stability of the authorization can still be guaranteed, and the cloud server can be used to manage and distribute the cloud desktop authorization, thereby improving the manageability of the cloud operating system and the use efficiency and experience of the user.

[0061] Figure 4 A structure schematic diagram of a cloud desktop-based authorization apparatus 400 according to an embodiment of the application is shown. The apparatus 400 resides in a computing device, and a cloud desktop runs in the computing device. The apparatus 400 includes an obtaining module 402, a generating module 404, a sending module 406 and an authorization module 408 which are coupled with each other. The obtaining module 402 obtains authentication data from a cloud server, and the cloud server is in communication connection with the computing device through a cloud computing management platform. The generating module 404 generates authorization information based on the authentication data. The sending module 406 sends the authorization information to an authorization server, so that the authorization server matches the authorization information with a pre-stored authorization file, and when the matching is successful, returns an authorization indication indicating that the cloud desktop meets the authorization condition to the computing device. The authorization module 408 authorizes the cloud desktop in response to receiving the authorization indication.

[0062] It should be noted that the working principle and process of the apparatus 400 provided in the embodiment are similar to those of the method 200, and the related parts can be referred to the description of the method 200, which will not be repeated here.

[0063] The various techniques described herein can be implemented in connection with hardware or software or, where appropriate, with a combination of both. Thus, the methods and apparatus of the present application, or certain aspects or portions thereof, can take the form of program code (i.e., instructions) embodied in tangible media, such as removable hard disks, USB flash drives, optical tapes, CD-ROMs, or any other machine-readable storage medium, wherein, when the program code is loaded into and executed by a machine, such as a computer, the machine becomes an apparatus for practicing the subject application.

[0064] Where a program code is executed on a programmable computer, the computing device generally includes a processor, a processor readable storage medium (including volatile and non-volatile memory and / or storage elements), at least one input device, and at least one output device. The storage medium is configured to store program code which is readable by the processor; the processor is configured to execute instructions in the program code stored in the storage medium to perform the methods of the present application.

[0065] In the context of this document, a "storage medium" can be any physical medium that stores data and / or instructions for use by or in connection with an instruction execution system. In the context of this document, a "machine-readable medium" can be any medium that is capable of storing, containing or storing a set of instructions for execution by the machine and that causes the machine to perform any one or more of the methodologies of the present application. The term "machine-readable medium" shall also encompass communications media, including any medium that facilitates the transfer of a set of instructions from one machine to another, e.g., according to a communication protocol. Combinations of the above should also be included within the scope of machine-readable media.

[0066] In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the application can be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been described in detail in order to avoid obscuring the understanding of this description.

[0067] In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the application can be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been described in detail in order to avoid obscuring the understanding of this description.

[0068] Similarly, it is to be understood that the embodiments of the present application can be placed into practice notwithstanding modifications to form yet further embodiments of the present application. As such, the terms and expressions of the foregoing description are used as terms of description and not of limitation, and there is no intention, in the use of such terms and expressions, of excluding any equivalents of the features shown and described or portions thereof. It is recognized that various modifications are possible within the scope of the application, and the inventive scope is to be interpreted by the appended claims and their equivalents in which:

[0069] Those skilled in the art will understand that the modules, or units, or components of the devices in the examples disclosed herein can be arranged in a device as described in the examples, or alternatively can be located in one or more devices different from the devices in the examples. The modules in the foregoing examples can be combined into one module or further divided into multiple sub-modules.

[0070] Those skilled in the art will understand that the modules in the devices in the examples can be adaptively changed and disposed in one or more devices different from the examples. The modules or units or components in the examples can be combined into one module or unit or component, and further can be divided into multiple sub-modules or sub-units or sub-components. Except that at least some of such features and / or processes or units are mutually exclusive, any combination of all the features disclosed in the specification (including the accompanying claims, abstract and drawings), and all the processes or units of any method or device disclosed thus can be adopted. Unless explicitly stated otherwise, each feature disclosed in the specification (including the accompanying claims, abstract and drawings) can be replaced by an alternative feature providing the same, equivalent or similar purpose.

[0071] Further, those skilled in the art will understand that the combination of features of different embodiments means within the scope of the present application and forms different embodiments, although some of the examples described herein include certain features rather than others included in other examples. For example, in the following claims, any one of the claimed embodiments can be used in any combination.

[0072] Furthermore, some of the embodiments described herein are of a "method" or a "process" that can be embodied in software, firmware or hardware, and when embodied in software, can be implemented with computer- executable instructions. The rules of equivalence, as well as the "means-plus-function" or "step-plus-function" clauses below, are meant to cover both "articles of manufacture" and "combinations of articles of manufacture" that consist of one or more computer- readable media storing computer-executable instructions.

[0073] As used herein, unless otherwise indicated, the use of the ordinal adjectives "first", "second", "third" and so forth, merely designate different instances of an object, and do not imply a specific order or sequence unless explicitly stated.

[0074] While the application has been described in terms of several embodiments, those skilled in the art will recognize that the application can be practiced with modifications and alterations limited only by the spirit and scope of the inventiveness. Furthermore, the purpose of the description is to enable any person skilled in the art to practice the application as described in the specification and claimed claims. The contexts of the specification make it clear that acts and elements described in the specification can be combined in other configurations, that the acts and elements can be performed at different time, and that some acts and elements can be largely or completely omitted without adversely affecting the outcome (e.g., the acts described with reference to the different embodiments can be performed in an order different than described and in some cases can be performed concurrently). Accordingly, there are no intended limitations on the description of the application except as specifically recited in the attached claims and all translation of the claims to the patent laws of any country are hereby expressly rejected.

Claims

1. A cloud desktop-based authorization method, executed in a computing device, wherein the cloud desktop runs in the computing device, the method comprising: Authentication data is obtained from a cloud server, which communicates with the computing device through a cloud computing management platform; Based on the authentication data, authorization information is generated, including associating the authentication data with the hardware information of the virtual machine to which the cloud desktop belongs, to obtain the authorization information; The authorization information is sent to the authorization server so that the authorization server matches the authorization information with the pre-stored authorization file, and when the match is successful, returns an authorization instruction to the computing device indicating that the cloud desktop meets the authorization conditions; In response to receiving the authorization instruction, the cloud desktop is authorized.

2. The method as described in claim 1, wherein, Also includes: Check if the current authorized environment is a cloud desktop environment.

3. The method as described in claim 1 or 2, wherein, Obtain authentication data from the cloud server, including: A request to obtain the authentication data is sent to the cloud computing management platform, which then forwards the request to the cloud server. The cloud server then forwards the authentication data to the computing device through the cloud computing management platform.

4. The method of claim 1, wherein, The cloud computing management platform is the OpenStack platform.

5. The method as described in claim 1 or 2, wherein, The authentication data is the cloud server ID information that is sent to the cloud desktop through the cloud computing management platform.

6. The method of claim 1, wherein, Also includes: Displays the authorization status of the cloud desktop.

7. A cloud desktop-based licensing device residing in a computing device, the cloud desktop running on the computing device, the device comprising: The acquisition module acquires authentication data from a cloud server, which communicates with the computing device through a cloud computing management platform. The generation module generates authorization information based on the authentication data, including associating the authentication data with the hardware information of the virtual machine to which the cloud desktop belongs to obtain the authorization information; The sending module sends the authorization information to the authorization server, so that the authorization server matches the authorization information with the pre-stored authorization file, and when the match is successful, returns an authorization instruction to the computing device indicating that the cloud desktop meets the authorization conditions; The authorization module, in response to receiving the authorization instruction, authorizes the cloud desktop.

8. A computing device, comprising: At least one processor; and A memory storing program instructions configured to be executed by the at least one processor, the program instructions including instructions for performing the method as described in any one of claims 1-6.

9. A readable storage medium storing program instructions that, when read and executed by a computing device, cause the computing device to perform the method as described in any one of claims 1-6.

Images