A method and apparatus for preventing cloud desktop screen capture

Abstract

The application provides a method and device for preventing cloud desktop screenshot. The method comprises the following steps: obtaining a cloud desktop security policy of a user from a cloud desktop management platform, wherein the cloud desktop security policy is a screenshot / recording screen prohibition security policy; logging in a cloud desktop virtual machine and connecting a cloud desktop of the cloud desktop virtual machine; identifying an operating system type of a cloud desktop client; if the operating system type is an operating system with a transparent frosted glass display interface, identifying a running state of a desktop window manager of the cloud desktop client; and when the running state of the desktop window manager of the cloud desktop client is started, refreshing a desktop window of an application of a running screenshot / recording screen process of the cloud desktop virtual machine to black opaque.

Description

Technical Field

[0001] This application relates to communication technology, and in particular to virtual desktop architecture technology, specifically a method and device for preventing cloud desktop screenshots and a remote assistance method and device. Background Technology

[0002] With the development of information technology and computers, cloud computing-related technologies are iterating and updating at an increasingly rapid pace, and the application scenarios are becoming more and more complex, with the needs under different application scenarios constantly being enriched.

[0003] Users can log in to cloud desktop virtual machines from different regions via client login, raising significant concerns about cloud desktop security. To improve the security of cloud desktop virtual machines, a visible or hidden watermark is added to the cloud desktops connected by the client. When a cloud desktop is screenshotted, the user who leaked the information can be identified based on the watermark information of the already leaked cloud desktop image; however, it cannot prevent screenshots of cloud desktops.

[0004] To prevent cloud desktop clients from taking screenshots of the displayed cloud desktop, when the Windows system is running and the desktop window manager has the "Enable Transparent Frosted Glass Display" function enabled, the frosted glass display is activated when the screenshot process is detected, causing the captured cloud desktop image to be blurred due to the frosted glass effect. However, special image processing tools can remove the frosted glass effect from the image and restore the content of the captured cloud desktop image, so it still cannot achieve the protection effect. Summary of the Invention

[0005] The purpose of this application is to provide a method and device for preventing cloud desktop screenshots, thereby preventing screenshots of cloud desktop images.

[0006] To achieve the above objectives, this application provides a method for preventing screenshots on a cloud desktop. The method includes: obtaining the user's cloud desktop security policy from the cloud desktop management platform, which is a policy that prohibits screenshots / screen recording; logging into the cloud desktop virtual machine and connecting to the cloud desktop of the cloud desktop virtual machine; identifying the operating system type of the cloud desktop client; if the operating system type is an operating system with a transparent frosted glass display interface, identifying the running status of the desktop window manager of the cloud desktop client; when the running status of the desktop window manager of the cloud desktop client is started, refreshing the desktop window of the application running the screenshot / screen recording process on the cloud desktop virtual machine to black and opaque.

[0007] To achieve the above objectives, this application also provides a device for preventing cloud desktop screenshots. The device includes a processor and a memory. The memory stores processor-executable instructions. The processor executes the processor-executable instructions in the memory to perform the following operations: obtaining the user's cloud desktop security policy from the cloud desktop management platform, which is a policy prohibiting screenshots / screen recording; logging into the cloud desktop virtual machine and connecting to the cloud desktop of the cloud desktop virtual machine; identifying the operating system type of the cloud desktop client; if the operating system type is an operating system with a transparent frosted glass display interface, identifying the running status of the cloud desktop client's desktop window manager; when the running status of the cloud desktop client's desktop window manager is "started," refreshing the desktop window of the application running the screenshot / screen recording process on the cloud desktop virtual machine to black and opaque. Attached Figure Description

[0008] Figure 1 A flowchart illustrating an embodiment of a method for preventing cloud desktop screenshots provided in this application;

[0009] Figure 2 This illustration shows how a cloud desktop client obtains a cloud desktop security policy, as provided in an embodiment of this application.

[0010] Figure 3 This application provides a flowchart illustrating an embodiment of a cloud desktop client managing cloud desktop security according to a cloud desktop security policy.

[0011] Figure 4 This is a schematic diagram of a device embodiment for preventing cloud desktop screenshots, provided in this application. Detailed Implementation

[0012] The following detailed description will be provided with reference to several examples illustrated in the accompanying figures. In this detailed description, numerous specific details are used to provide a comprehensive understanding of the present application. Known methods, steps, components, and circuits are not described in detail in the examples to avoid obscuring their meaning.

[0013] In the terminology used, the term "including" means including but not limited to; the term "containing" means including but not limited to; the terms "above," "within," and "below" include the number itself; the terms "greater than" and "less than" mean not including the number itself. The term "based on" means based on at least a portion of them.

[0014] Figure 1 The image shows a method for preventing cloud desktop screenshots provided in this application. The method includes:

[0015] Step 101: Obtain the user's cloud desktop security policy from the cloud desktop management platform, which is a security policy that prohibits screenshots / screen recording;

[0016] Step 102: Log in to the cloud desktop virtual machine and connect to the cloud desktop of the cloud desktop virtual machine;

[0017] Step 103: Identify the operating system type of the cloud desktop client;

[0018] Step 104: If the operating system type is an operating system with a transparent frosted glass display interface, identify the running status of the desktop window manager of the cloud desktop client.

[0019] Step 105: When the desktop window manager of the cloud desktop client is running in the "Started" state, refresh the desktop window of the application running the screenshot / screen recording process of the cloud desktop virtual machine to black and opaque.

[0020] Figure 1 The beneficial effect of this embodiment is that even if the client has an operating system with a transparent frosted glass display interface, the cloud desktop window is refreshed to black and opaque when the user takes a screenshot through the client; even if the transparency is increased through a special image editing program, it is impossible to obtain the cloud desktop content through a screenshot of an opaque window, and it is even impossible to obtain the cloud desktop content by removing the frosted glass effect from the screenshot.

[0021] Figure 2 This diagram illustrates how a cloud desktop client obtains a cloud desktop security policy, as provided in an embodiment of this application. The cloud desktop client sends a cloud desktop login authentication request to the cloud desktop management platform; the cloud desktop management platform performs authentication based on the received cloud desktop login authentication request.

[0022] After successful authentication, the cloud desktop management platform sends authorized cloud desktop resources and policies to the cloud desktop client. Furthermore, based on the gateway configuration, the platform also returns gateway information to the client. The cloud desktop policies include security policies regarding whether users are allowed to take screenshots / record their screens.

[0023] External network users initiate a desktop connection request to the gateway through the cloud desktop client based on the received gateway information. The gateway forwards the desktop connection request to the cloud desktop virtual machine. After authentication and information verification, the user is connected to the corresponding cloud desktop.

[0024] Figure 3 This is a flowchart illustrating an embodiment of a cloud desktop client provided in this application that manages cloud desktop security according to a cloud desktop security policy.

[0025] Step 301: Display the cloud desktop screen;

[0026] pass Figure 2As shown in the steps, after a user (external network user) successfully connects to the cloud desktop virtual machine's cloud desktop through the cloud desktop client, and the cloud desktop client displays the cloud desktop virtual machine's cloud desktop, the cloud desktop client processes user behaviors such as screenshotting / screen recording based on the cloud desktop security policy.

[0027] Step 302: Determine whether the acquired cloud desktop security policy allows screenshots or screen recording; if allowed, proceed to step 303; if not, proceed to step 311.

[0028] Step 303: Execute the client window in normal mode;

[0029] After the client starts in normal mode via the client serial port, it allows the cloud desktop client to minimize, maximize, and close the window of the cloud desktop virtual machine. In this way, the cloud desktop client can return to the local cloud desktop client by minimizing or closing the window, and the user can freely use the system resources of the cloud desktop client, including the resource manager, task manager, desktop, local disk, etc.; and then return to the cloud desktop by maximizing the window.

[0030] Step 304: Create a cloud desktop window;

[0031] Step 311: Determine whether the cloud desktop client's operating system is an operating system with a frosted glass display interface; if yes, proceed to step 312; if no, proceed to step 317.

[0032] For example, cloud desktop clients can identify whether an operating system has a frosted glass display interface based on the type of operating system. For instance, Microsoft operating systems have the Aero feature, which has a frosted glass display interface.

[0033] Step 312: Determine whether the operating system of the cloud desktop client has enabled the desktop window manager; if yes, proceed to step 313; otherwise, proceed to step 317.

[0034] Step 313: Execute the client window in normal mode;

[0035] Step 314: Create a cloud desktop window;

[0036] Step 315: Configure cloud desktop window properties and enable screen protection.

[0037] The cloud desktop client calls the operating system's application programming interface to set the cloud desktop window properties as follows: the cloud desktop layered window of the application running the screenshot / screen recording process is opaque; and the cloud desktop window of the application running the screenshot / screen recording process is refreshed to black.

[0038] For example, using the Windows API to set Layered Window Attributes, you can make the layered window of the application running the screenshot / screen recording process opaque, and using the Windows API to set WindowDisplay Affinity, you can make the window of the application running the screenshot / screen recording process black.

[0039] Step 316: Refresh the cloud desktop window of the application running the screenshot / screen recording process to black and opaque.

[0040] When the cloud desktop client's operating system has a frosted glass display and the desktop window manager process is running, users can minimize or close the cloud desktop window and return to the local cloud desktop client, freely using the cloud desktop client's system resources. They can then use the local system resources of the cloud desktop client to take screenshots or record the screen. Therefore, by refreshing the cloud desktop window (which is running a screenshot / recording process on the cloud desktop virtual machine) to black and opaque, even if the brightness of the screenshot is increased after the user takes a screenshot using the cloud desktop client's local resources, the content of the screenshot cannot be restored to the black frosted glass display.

[0041] Step 317: Execute the client window domination mode;

[0042] Step 318: Create a full-screen cloud desktop window, disable the operating system hotkeys on the cloud desktop client, and hide the operating system taskbar on the cloud desktop client.

[0043] Because the cloud desktop window displayed by the cloud desktop client is in full-screen mode, there are no minimize, maximize, or close buttons. Users cannot return to the cloud desktop client by closing or minimizing the cloud desktop window, and therefore cannot use its local system resources.

[0044] Because the operating system hotkeys of the cloud desktop client are disabled and the operating system taskbar of the cloud desktop client is hidden, users cannot switch back to the client's local desktop or take screenshots using the operating system hotkeys; they also cannot use the operating system of the cloud desktop client; thus, users cannot take screenshots / records of the cloud desktop.

[0045] Different operating systems have different methods for setting functions to disable operating system hotkeys and modifying system files, as well as different ways to hide the system file in the operating system taskbar. For example, Windows uses API functions to hook callback functions for keyboard events. Upon receiving any keystroke, the callback function checks if it's a Windows hotkey, such as ALT, Ctrl, Shift, or TAB. If it is, the callback function simply discards the keystroke and doesn't pass it to the operating system. In other words, the operating system cannot respond to key combinations. This application does not impose restrictions; users can configure it according to the specific differences in their operating systems.

[0046] Through the above embodiments, this application can prevent screenshots or screen recordings of the cloud desktop window based on the type of cloud desktop client, thereby preventing the leakage of cloud desktop content.

[0047] Figure 4 This is a schematic diagram of a device embodiment for preventing screenshots on a cloud desktop, provided in this application. The device 40 includes a network interface (not shown), a processor 41, and a memory 42. The memory 42 stores processor-executable instructions. The processor 41 executes the processor-executable instructions in the memory 42 to perform the following operations: obtaining the user's cloud desktop security policy from the cloud desktop management platform, which is a policy to prohibit screenshots / screen recording; logging into the cloud desktop virtual machine and connecting to the cloud desktop of the cloud desktop virtual machine; identifying the operating system type of the cloud desktop client; if the operating system type is an operating system with a transparent frosted glass display interface, identifying the running status of the desktop window manager of the cloud desktop client; when the running status of the desktop window manager of the cloud desktop client is started, refreshing the desktop window of the application running the screenshot / screen recording process on the cloud desktop virtual machine to black and opaque.

[0048] The processor 41 also performs the following operations by running processor-executable instructions in the memory 42: when the desktop window manager of the operating system with the transparent frosted glass display interface is not running, creates a dominating mode cloud desktop window; disables the operating system hotkeys of the cloud desktop client; and hides the operating system taskbar of the cloud desktop client.

[0049] The processor 41 also performs the following operations by running processor-executable instructions in the memory 42: if the operating system type is an operating system without a transparent frosted glass display interface, create a full-screen mode cloud desktop window; disable the operating system hotkeys of the cloud desktop client; and hide the operating system taskbar of the cloud desktop client.

[0050] The processor 41 executes instructions from the execution memory 42 to refresh the desktop window of the application running the screen capture / screen recording process of the cloud desktop virtual machine to black and opaque, including the following operations: calling the application programming interface of the operating system to set the layered window of the application running the screen capture / screen recording process of the cloud desktop virtual machine to opaque; and setting the application window of the application running the screen capture / screen recording process of the cloud desktop virtual machine to black.

[0051] The above description is merely a preferred embodiment of this application and is not intended to limit this application. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of protection of this application.

Claims

1. A method for preventing cloud desktop screenshots, characterized in that, The method includes: The cloud desktop security policy obtained from the cloud desktop management platform is a policy that prohibits screenshots / screen recording. Log in to the cloud desktop virtual machine and connect to the cloud desktop of the cloud desktop virtual machine; Identify the operating system type of the cloud desktop client; If the operating system type is an operating system with a transparent frosted glass display interface, identify the running status of the desktop window manager of the cloud desktop client; When the desktop window manager of the cloud desktop client is running in the "started" state, the desktop window of the application running the screenshot / screen recording process in the cloud desktop virtual machine is refreshed to black and opaque. The method further includes: When the desktop window manager of the operating system with the transparent frosted glass display interface is not running, a full-screen mode cloud desktop window is created; the operating system hotkeys of the cloud desktop client are disabled, and the operating system taskbar of the cloud desktop client is hidden.

2. The method according to claim 1, characterized in that, The method further includes: If the operating system type is an operating system without a transparent frosted glass display interface, create a full-screen mode cloud desktop window; disable the operating system hotkeys of the cloud desktop client, and hide the operating system taskbar of the cloud desktop client.

3. The method according to claim 1, characterized in that, The step of refreshing the desktop window of the application running the screenshot / screen recording process in the cloud desktop virtual machine to black and opaque includes: Set the layered window of the application to opaque; Set the application's window to refresh to black.

4. A device for preventing cloud desktop screenshots, characterized in that, The device includes a processor and a memory; the memory stores processor-executable instructions; wherein the processor executes the processor-executable instructions in the memory to perform the following operations: The cloud desktop security policy obtained from the cloud desktop management platform is a policy that prohibits screenshots / screen recording. Log in to the cloud desktop virtual machine and connect to the cloud desktop of the cloud desktop virtual machine; Identify the operating system type of the cloud desktop client; If the operating system type is an operating system with a transparent frosted glass display interface, identify the running status of the desktop window manager of the cloud desktop client; When the desktop window manager of the cloud desktop client is running in the "started" state, the desktop window of the application running the screenshot / screen recording process in the cloud desktop virtual machine is refreshed to black and opaque. The processor also performs the following operations by executing processor-executable instructions in the memory: When the desktop window manager of the operating system with the transparent frosted glass display interface is not running, a full-screen mode cloud desktop window is created; the operating system hotkeys of the cloud desktop client are disabled, and the operating system taskbar of the cloud desktop client is hidden.

5. The device according to claim 4, characterized in that, The processor also performs the following operations by executing processor-executable instructions in the memory: If the operating system type is an operating system without a transparent frosted glass display interface, create a full-screen mode cloud desktop window; disable the operating system hotkeys of the cloud desktop client, and hide the operating system taskbar of the cloud desktop client.

6. The device according to claim 4, characterized in that, The processor executes instructions from the memory to refresh the desktop window of the application running the screenshot / screen recording process in the cloud desktop virtual machine to black and opaque, including the following operations: Call the application programming interface of the operating system to set the layered window of the application running the screen capture / screen recording process of the cloud desktop virtual machine to be opaque; The application window of the cloud desktop virtual machine that runs the screenshot / screen recording process is refreshed to black.

Images