Method and device for running virtual application, electronic equipment and medium
By mapping the shared folders in the file server to a local target disk and saving data on the target disk when the virtual application is running, the problem of low data security in the virtual application is solved, achieving higher data security and controllability.
Patent Information
- Application Number
- CN202411848901.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-16
- Publication Date
- 2025-04-25
AI Technical Summary
Existing virtual applications store application data in terminal devices, resulting in low data security.
By receiving the virtual application running request from the client, sending a shared file policy acquisition request to the management platform. According to the obtained shared file policy, the shared folder in the file server is mapped to the local target disk, and when running the virtual application, the application data is saved on the target disk.
It realizes the implementation of saving the application data of virtual applications in a shared folder at the remote end, rather than in the local terminal, thereby improving the security and controllability of the data.
Smart Images
Figure CN119885255A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of cloud platform technology, and in particular to methods, devices, electronic devices and media for running virtual applications. Background Art
[0002] Cloud computing technology is changing with each passing day, and cloud desktops are now widely used in all walks of life. In order to improve customer experience, reduce customer costs, and increase server concurrency, virtual application technology is also accelerating its promotion and implementation in the virtualization field.
[0003] Existing virtual applications store application data of the virtual applications in terminal devices, and the security of the application data is relatively low. Summary of the invention
[0004] To overcome the problems existing in the related art, this specification provides a method, device, electronic device and medium for running a virtual application.
[0005] According to a first aspect of an embodiment of the present specification, a method for running a virtual application is provided, which is applied to an application server, and the method includes: receiving a virtual application running request sent by a client, the virtual application running request including a user identifier and an application identifier; sending a shared file policy acquisition request to a management platform, the shared file policy acquisition request including the user identifier; receiving a shared file policy corresponding to the user identifier sent by the management platform; mapping a shared folder in a file server to a local target disk according to the shared file policy; running the virtual application corresponding to the application identifier, and sending a user interface of the virtual application to the client; and in the process of running the virtual application, saving application data of the virtual application in the target disk.
[0006] According to a first aspect of an embodiment of the present specification, a method for running a virtual application is provided, which is applied to a management platform, and the method includes: receiving a shared file policy acquisition request sent by an application server, the shared file policy acquisition request including a user identifier; querying a shared file policy corresponding to the user identifier; and sending the shared file policy to the application server.
[0007] According to a third aspect of an embodiment of the present specification, a device for running a virtual application is provided, comprising: a running request receiving module, used to receive a virtual application running request sent by a client, the virtual application running request including a user identifier and an application identifier; a policy acquisition request sending module, used to send a shared file policy acquisition request to a management platform, the shared file policy acquisition request including the user identifier; a policy receiving module, used to receive a shared file policy corresponding to the user identifier sent by the management platform; a mapping module, used to map a shared folder in a file server to a local target disk according to the shared file policy; a running module, used to run the virtual application corresponding to the application identifier, and send the user interface of the virtual application to the client; and a saving module, used to save the application data of the virtual application in the target disk during the running of the virtual application.
[0008] According to the fourth aspect of the embodiments of this specification, a device for running a virtual application is provided, including: a policy acquisition request receiving module, used to receive a shared file policy acquisition request sent by an application server, the shared file policy acquisition request including a user identifier; a policy query module, used to query the shared file policy corresponding to the user identifier; and a policy sending module, used to send the shared file policy to the application server.
[0009] According to a fifth aspect of the embodiments of this specification, an electronic device is provided, including:
[0010] processor;
[0011] a memory for storing processor-executable instructions;
[0012] The processor is configured to execute the method for running a virtual application according to the first aspect, the second aspect or any corresponding implementation manner thereof.
[0013] According to the sixth aspect of the embodiments of this specification, a computer-readable storage medium is provided, on which computer instructions are stored, and the computer instructions are used to enable a computer to execute the method of running a virtual application according to the above-mentioned first aspect, second aspect or any corresponding embodiment.
[0014] The technical solutions provided by the embodiments of this specification may have the following beneficial effects:
[0015] In an embodiment of this specification, a shared folder in a file server is mapped to a local target disk, and then application data of the virtual application is saved in the target disk. The application data is saved in a remote shared folder instead of in a local terminal, making the application data more secure and controllable.
[0016] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present specification. BRIEF DESCRIPTION OF THE DRAWINGS
[0017] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the specification and, together with the description, serve to explain the principles of the specification.
[0018] Figure 1 It is a schematic diagram of a system architecture shown in this specification according to an exemplary embodiment.
[0019] Figure 2 The flowchart of a method for running a virtual application is shown in accordance with an exemplary embodiment of the present specification.
[0020] Figure 3 It is a hardware structure diagram of the computer device where the device for running the virtual application in the embodiment of this specification is located.
[0021] Figure 4 It is a block diagram of a device for running a virtual application according to an exemplary embodiment of the present specification.
[0022] Figure 5 It is a block diagram of another device for running a virtual application according to an exemplary embodiment of the present specification.
[0023] Figure 6 It is a block diagram of another device for running a virtual application according to an exemplary embodiment of the present specification. DETAILED DESCRIPTION
[0024] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The implementations described in the following exemplary embodiments do not represent all implementations consistent with this specification. Instead, they are merely examples of devices and methods consistent with some aspects of this specification as detailed in the appended claims.
[0025] The terms used in this specification are for the purpose of describing specific embodiments only and are not intended to limit this specification. The singular forms "a", "the" and "the" used in this specification and the appended claims are also intended to include plural forms unless the context clearly indicates otherwise. It should also be understood that the term "and / or" used herein refers to and includes any or all possible combinations of one or more associated listed items.
[0026] It should be understood that although the terms first, second, third, etc. may be used in this specification to describe various information, this information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of this specification, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".
[0027] Next, the embodiments of this specification are described in detail.
[0028] The following combination Figure 1 The system architecture of the method and device for running virtual applications in the embodiments of this specification is described. It should be noted that: Figure 1 What is shown is merely an example of a system architecture to which the embodiments of this specification can be applied, to help those skilled in the art understand the technical content of this specification, but it does not mean that the embodiments of this specification cannot be used in other devices, systems, environments or scenarios.
[0029] Figure 1 It is a schematic diagram of a system architecture shown in this specification according to an exemplary embodiment.
[0030] like Figure 1 As shown, the system architecture may include, for example, a client, a management platform, and an application server.
[0031] According to the embodiments of this specification, a user can use a client to interact with a management platform and an application server through a network to receive or send messages, etc. The client can be a client of a virtual application. A virtual application is an application that does not require installation, is ready to use, and has a user experience similar to that of a local application. All computing tasks required for the virtual application are completed on the server side, and the client is only responsible for displaying the application interface and transmitting the input of the peripheral to the server side.
[0032] According to an embodiment of the present specification, a management platform can be used to manage virtual applications. An application server can serve as a server for a virtual application. An application server can correspond to one or more virtual applications.
[0033] For example, in this embodiment, the virtual application can be run in the Windows Server system of the application server. The Windows Server system is a multi-user system that supports multiple people to use it at the same time, and the remote desktop service component provides remote access functions. Clients implemented using the RDP (Remote Desktop Protocol) protocol can all connect to the virtual application published by the application server.
[0034] According to an embodiment of the present specification, a user can use a terminal device to log in to a client, and the management platform returns virtual application resource information to the client after the user logs in. The user can select a virtual application to be used based on the virtual application resource information. Based on this, the client sends a virtual application access request and a virtual application execution request to an application server corresponding to the virtual application.
[0035] If it is an Internet scenario, the system architecture may further include a gateway, which may forward the message of the client connecting to the virtual application to the corresponding application server so that the application server can establish a session and start the application.
[0036] If it is an intranet direct connection scenario, no gateway component is required. The client can directly establish a session connection with the application server and start the application.
[0037] According to an embodiment of the present specification, after receiving a virtual application running request sent by a client, the application server can obtain a shared file policy from a management platform. Then, according to the shared file policy, a shared folder in the file server is mapped to a local target disk. The virtual application corresponding to the application identifier is run, and a user interface of the virtual application is sent to the client. In the process of running the virtual application, the application data of the virtual application is saved in the target disk.
[0038] According to an embodiment of the present specification, a shared folder in a file server is mapped to a local target disk, and then the application data of the virtual application is saved in the target disk. The application data is saved in a remote shared folder instead of in a local terminal, making the application data more secure and controllable.
[0039] The following is a detailed description of the method for running a virtual application provided in the embodiments of this specification. Figure 2 As shown, Figure 2 This is a flowchart of a method for running a virtual application according to an exemplary embodiment of this specification. The method is applied to an application server. The method for running a virtual application provided by the embodiment of this specification may include the following steps.
[0040] In step 210, a virtual application execution request sent by a client is received, where the virtual application execution request includes a user identifier and an application identifier.
[0041] According to an embodiment of the present specification, a virtual application execution request may be used to request access to a virtual application. A user identifier may be a unique identifier of a user, such as a user name, an account number, etc. An application identifier may be a unique identifier of an application.
[0042] In step 220, a shared file policy acquisition request is sent to the management platform, where the shared file policy acquisition request includes a user identifier.
[0043] According to an embodiment of the present specification, a shared file policy may be used to indicate whether application data of a virtual application corresponding to a user is stored in a shared file during runtime.
[0044] In step 230, a shared file policy corresponding to the user identifier and sent by the management platform is received.
[0045] In step 240, according to the shared file policy, the shared folder in the file server is mapped to a local target disk.
[0046] According to the embodiment of the present specification, by mapping a shared folder in a file server to a local target disk, the shared folder can be used just like accessing a local disk.
[0047] In step 250, the virtual application corresponding to the application identifier is run, and the user interface of the virtual application is sent to the client.
[0048] In step 260, during the running of the virtual application, the application data of the virtual application is saved in the target disk.
[0049] According to the embodiments of this specification, the shared folder in the file server is mapped to a local target disk, and then the application data of the virtual application is saved in the target disk. The application data is saved in a remote shared folder instead of a local terminal, making the application data more secure and controllable. Secondly, since the application data is saved in a remote shared folder, it can be accessed between different application servers, and the data follows the user, making access more convenient. Thirdly, the file server is scalable, and the application data is saved in the shared folder of the file server, making the storage more scalable.
[0050] Optionally, after mapping the network disk in the file server, the local disk directly connected to the application server can also be hidden in the operating system. The local disk is a disk device directly connected to the computer, including a mechanical hard disk (HDD) and a solid-state drive (SSD). As a result, when the data of the virtual application is saved, only the shared folder can be seen, and the local disk cannot be seen, thereby avoiding saving data to the wrong place.
[0051] Exemplarily, for example, a group policy may be used to hide the local disk, or a registry editor may be used to set the local disk to be hidden.
[0052] Optionally, when the user wants to close the virtual application, the client can send a virtual application closing request to the application server, and the virtual application closing request can include the user ID of the user and the application ID of the virtual application to be closed. After the application server receives the virtual application closing request sent by the client, it closes the virtual application according to the virtual application closing request and unmaps the shared folder. Optionally, if the local disk was hidden before, the hidden local disk can be restored after the virtual application is closed.
[0053] Optionally, the shared file policy may include, for example, the network address of the file server, the path information of the shared folder, the permission enabling information, the access account information, and the access password. The network address of the file server may include, for example, the IP address of the file server. The path information of the shared folder may be used to indicate the location of the shared folder. The permission enabling information may be used to indicate whether the user's permission to use the shared folder to store application data is enabled. The access account information may be used to identify the identity of the access account, and may include, for example, an account number and an account name required to access the shared folder. The access password may be a password required to access the shared folder, and the access password corresponds to the access account.
[0054] Exemplarily, if the permission enabling information indicates that the permission is not enabled, the application server does not perform a shared folder mapping and can store application data in the original manner. If the permission enabling information indicates that the permission is enabled, the application server can send a connection request to the file server based on the network address and path information, and the connection request includes the access account information and the access password. After receiving the connection request, the file server verifies the access account information and the access password. If the verification is successful, the file server establishes a connection with the application server. The application server can create a target disk and bind the target disk to the connection to map the shared folder as a local target disk.
[0055] A method for running a virtual application is described below according to another exemplary embodiment.
[0056] The client sends a login request to the management platform, which includes a user ID and identity authentication information.
[0057] The management platform receives the login request sent by the client and verifies the identity authentication information.
[0058] If the verification is successful, the management platform queries the virtual application resource information corresponding to the user ID, the virtual application resource information including the application ID and application server corresponding to at least one virtual application that the user is authorized to use.
[0059] The management platform sends the virtual application resource information to the client.
[0060] The client receives the virtual application resource information and displays it to the user. The user can select the virtual application to be used according to the virtual application resource information. Based on this, the client sends a virtual application running request to the application server corresponding to the virtual application, and the virtual application running request includes a user identifier and an application identifier of the virtual application.
[0061] The application server receives the virtual application running request sent by the client.
[0062] The application server sends a shared file policy acquisition request to the management platform, where the shared file policy acquisition request includes a user identifier.
[0063] The management platform receives the shared file policy acquisition request sent by the application server.
[0064] The management platform queries the shared file policy corresponding to the user ID.
[0065] The management platform sends the shared file policy to the application server.
[0066] The application server receives the shared file policy corresponding to the user identifier sent by the management platform;
[0067] The application server maps the shared folder in the file server to a local target disk according to the shared file policy, and hides the local disk directly connected to the application server in the operating system.
[0068] The application server runs the virtual application corresponding to the application identifier and sends the user interface of the virtual application to the client. In the process of running the virtual application, the application data of the virtual application is stored in the target disk.
[0069] When the user closes the virtual application, the client sends a virtual application closing request to the application server, and the virtual application closing request includes a user identifier and an application identifier;
[0070] The application server receives the virtual application closing request sent by the client.
[0071] The application server closes the virtual application according to the virtual application closing request, and unmaps the shared folder to restore the hidden local disk.
[0072] like Figure 3 FIG. 1 is a flowchart of another method for running a virtual application according to an exemplary embodiment. The method for running a virtual application may include the following steps:
[0073] Exemplarily, in this embodiment, the client may be a Workspace client. The application server may be configured with an Agent service. The file server may be a Samba server. The shared folder may be a Samba shared folder. Samba is software that implements the SMB protocol on Linux and UNIX systems, and is composed of a server and a client program. SMB (Server Messages Block) is a communication protocol for sharing files and printers on a local area network. It provides sharing services for resources such as files and printers between different computers in the local area network.
[0074] Based on this, you can pre-build a Samba server and connect it to storage resources. The management platform connects to the Samba server, and the user enables Samba permissions. The administrator authorizes the user to access the virtual application.
[0075] The management platform can, for example, connect to the Samba server via SSH (Secure Shell) and operate the Samba service via Linux commands. Linux commands can include, for example:
[0076] systemctl start smb, used to start the Samba service;
[0077] useradd smbuser, used to create a Samba user;
[0078] smbpasswd -a smbuser, used to set the Samba account password;
[0079] chmod, used to set the access permissions of the Samba folder.
[0080] The user sends a login request to the management platform through the client to log in. The management platform receives the login request sent by the client. The identity authentication information in the login request is verified. If the verification is successful, the management platform queries the virtual application resource information that the user has authorized, and sends the virtual application resource information to the client.
[0081] The client can display the icon of each virtual application in the virtual application resource information. The user can select the virtual application by double-clicking the application icon, etc. When the client detects that the virtual application is selected, it sends a corresponding virtual application running request to the application server to request the application server to run the virtual application.
[0082] In a non-gateway scenario, whenever a request is made to run a virtual application, the client requests the management platform to obtain the application information corresponding to the virtual application published by the application server, which may include the application alias, the application server IP address, the port number that the application server RDP service listens to, etc. The client adds the application information to the user name, password, domain name, etc., and initiates a connection to the application server. At the same time, the management platform sends the user information and the application information of the virtual application to be connected to the Agent of the application server.
[0083] In the gateway scenario, in addition to obtaining application information published by the application server, the client can also obtain gateway information from the management platform and initiate a virtual application connection to the gateway. The gateway forwards the connection request to the corresponding application server.
[0084] In addition, if it is a Microsoft AD (Active Directory) domain user, the Agent service of the application server can add the domain user to the remote desktop group of the application server. If it is a local user, the Agent can create the user and add the user to the remote desktop group.
[0085] After receiving the virtual application running request, the application server can create a user session.
[0086] When the agent of the application server detects the creation of a new session, it can request the user's Samba policy from the management platform. The Samba policy can include the path of the Samba folder corresponding to the user, permission enabling information, Samba user name, password, and IP address.
[0087] According to the Samba policy, the Agent can use the Windows API interface to create a network disk mapping and a corresponding desktop shortcut. For example, the WNetAddConnection2 interface can be used to establish a connection request to the target path of the Samba server network resource, and the local can access the network resource later. The SHGetFolderPath interface can be used to find and obtain the system resource folder path, such as the desktop path. The IShellLink interface can be used to create a desktop shortcut. In addition, the WNetCancelConnection2 interface can be used to cancel the existing network connection.
[0088] The data generated by the virtual application can be directly saved in the mapped Samba shared folder. Each user has a corresponding shared folder, which is independent and invisible to each other. Since accessing the Samba shared folder requires an account and password, different user shared folders have independent passwords, so the administrator cannot directly access the user's shared folder. This improves data security.
[0089] In addition, the Agent can hide all drive letters of the local disk of the application server by modifying the group policy of the Windows Server system of the application server.
[0090] When saving the document data of the virtual application, you can select the mapped Samba shared folder. In this way, all the data is stored in the storage connected to the Samba server. Each user has his own shared folder, and the data is independent of each other.
[0091] When users connect to different application servers, the same samba shared folder is mounted each time, thus ensuring data access consistency.
[0092] Corresponding to the embodiments of the aforementioned method, this specification also provides embodiments of an apparatus for running a virtual application and a terminal used therein.
[0093] The embodiments of the apparatus for running virtual applications in this specification can be applied to computer devices, such as servers or terminal devices. The apparatus embodiments can be implemented by software, hardware, or a combination of software and hardware. Taking software implementation as an example, as a logically sensed apparatus, the processor in which the apparatus is located reads the corresponding computer program instructions in the non-volatile memory into the memory and runs the instructions. From the hardware level, if Figure 4 As shown in the figure, it is a hardware structure diagram of the computer device where the device for running the virtual application in the embodiment of this specification is located. Figure 4 In addition to the processor 410, memory 430, network interface 420, and non-volatile memory 440 shown, the server or electronic device where the device 431 is located in the embodiment may also include other hardware according to the actual function of the computer device, which will not be described in detail.
[0094] like Figure 5 As shown, Figure 5 1 is a block diagram of a device for running a virtual application according to an exemplary embodiment of the present specification, the device comprising:
[0095] The running request receiving module 510 is used to receive a virtual application running request sent by a client, where the virtual application running request includes a user identifier and an application identifier;
[0096] A policy acquisition request sending module 520 is used to send a shared file policy acquisition request to the management platform, where the shared file policy acquisition request includes a user identifier;
[0097] The policy receiving module 530 is used to receive the shared file policy corresponding to the user identifier sent by the management platform;
[0098] A mapping module 540, used to map a shared folder in the file server to a local target disk according to a shared file policy;
[0099] The running module 550 is used to run the virtual application corresponding to the application identifier and send the user interface of the virtual application to the client;
[0100] The saving module 560 is used to save the application data of the virtual application in the target disk during the running of the virtual application.
[0101] Optionally, the device may further include:
[0102] The hiding module is used to hide the local disk directly connected to the application server in the operating system after mapping the network disk in the file server.
[0103] Optionally, the shared file policy includes the network address of the file server, path information of the shared folder, permission enabling information, access account information and access password. The mapping module includes:
[0104] A connection request sending submodule, for sending a connection request to the file server according to the network address and path information if the permission enabling information indicates that the permission has been enabled, the connection request including the access account information and the access password, so that the file server verifies the access account information and the access password, and establishes a connection with the application server if the verification is successful;
[0105] Create a submodule to create a target disk and bind the target disk to the connection.
[0106] Optionally, the device further comprises:
[0107] A closing request receiving module, used for receiving a virtual application closing request sent by a client, wherein the virtual application closing request includes a user identifier and an application identifier;
[0108] The application closing module is used to close the virtual application and release the mapping of the shared folder according to the virtual application closing request.
[0109] According to the embodiments of this specification, the shared folder in the file server is mapped to a local target disk, and then the application data of the virtual application is saved in the target disk. The application data is saved in a remote shared folder instead of a local terminal, making the application data more secure and controllable. Secondly, since the application data is saved in a remote shared folder, it can be accessed between different application servers, and the data follows the user, making access more convenient. Thirdly, the file server is scalable, and the application data is saved in the shared folder of the file server, making the storage more scalable.
[0110] Correspondingly, the present specification also provides an electronic device, which includes a processor; a memory for storing instructions executable by the processor; wherein the processor is configured to: receive a virtual application running request sent by a client, the virtual application running request including a user identifier and an application identifier; send a shared file policy acquisition request to a management platform, the shared file policy acquisition request including a user identifier; receive a shared file policy corresponding to the user identifier sent by the management platform; map a shared folder in a file server to a local target disk according to the shared file policy; run the virtual application corresponding to the application identifier, and send the user interface of the virtual application to the client; and during the running of the virtual application, save the application data of the virtual application in the target disk.
[0111] like Figure 6 As shown, Figure 6 is a block diagram of another device for running a virtual application according to an exemplary embodiment of the present specification, the device comprising:
[0112] The policy acquisition request receiving module 610 is used to receive a shared file policy acquisition request sent by an application server, where the shared file policy acquisition request includes a user identifier;
[0113] A policy query module 620, used to query a shared file policy corresponding to a user identifier;
[0114] The policy sending module 630 is used to send the shared file policy to the application server.
[0115] Optionally, the device may further include:
[0116] A login request receiving module, used to receive a login request sent by a client, the login request including a user identifier and identity authentication information;
[0117] A verification module, used to verify identity authentication information;
[0118] An application information query module, used for querying virtual application resource information corresponding to the user identifier if the verification is passed, the virtual application resource information including an application identifier and an application server corresponding to at least one virtual application;
[0119] The application information sending module is used to send the virtual application resource information to the client.
[0120] Optionally, the shared file policy includes the network address of the file server, path information of the shared folder, permission enabling information, access account information and access password.
[0121] According to the embodiments of this specification, the shared folder in the file server is mapped to a local target disk, and then the application data of the virtual application is saved in the target disk. The application data is saved in a remote shared folder instead of a local terminal, making the application data more secure and controllable. Secondly, since the application data is saved in a remote shared folder, it can be accessed between different application servers, and the data follows the user, making access more convenient. Thirdly, the file server is scalable, and the application data is saved in the shared folder of the file server, making the storage more scalable.
[0122] Correspondingly, the present specification also provides an electronic device, which includes a processor; a memory for storing processor executable instructions; wherein the processor is configured to: receive a shared file policy acquisition request sent by an application server, the shared file policy acquisition request including a user identifier; query the shared file policy corresponding to the user identifier; and send the shared file policy to the application server.
[0123] The implementation process of the functions and effects of each module in the above-mentioned device is specifically described in the implementation process of the corresponding steps in the above-mentioned method, which will not be repeated here.
[0124] For the device embodiment, since it basically corresponds to the method embodiment, the relevant parts can refer to the partial description of the method embodiment. The device embodiment described above is only schematic, wherein the modules described as separate components may or may not be physically separated, and the components displayed as modules may or may not be physical modules, that is, they may be located in one place, or they may be distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this specification. A person of ordinary skill in the art can understand and implement it without paying creative labor.
[0125] The above is a description of a specific embodiment of the specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.
[0126] Those skilled in the art will readily appreciate other embodiments of the specification after considering the specification and practicing the invention claimed herein. The specification is intended to cover any variations, uses or adaptations of the specification that follow the general principles of the specification and include common knowledge or customary techniques in the art that are not claimed in the specification. The specification and examples are to be considered exemplary only, and the true scope and spirit of the specification are indicated by the following claims.
[0127] It should be understood that the present description is not limited to the precise structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present description is limited only by the appended claims.
[0128] The above description is only a preferred embodiment of this specification and is not intended to limit this specification. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of this specification should be included in the scope of protection of this specification.
Claims
1. A method for running a virtual application, applied to an application server, characterized in that: The method comprises: Receiving a virtual application running request sent by a client, wherein the virtual application running request includes a user identifier and an application identifier; Sending a shared file policy acquisition request to a management platform, wherein the shared file policy acquisition request includes the user identifier; Receiving a shared file policy corresponding to the user identifier sent by the management platform; According to the shared file policy, mapping the shared folder in the file server to a local target disk; Running the virtual application corresponding to the application identifier, and sending a user interface of the virtual application to the client; During the running of the virtual application, the application data of the virtual application is saved in the target disk.
2. The method according to claim 1, characterized in that After mapping the network disk in the file server, the method further comprises: The local disk directly connected to the application server is hidden in the operating system.
3. The method according to claim 1, characterized in that The shared file policy includes the network address of the file server, the path information of the shared folder, permission enabling information, access account information and access password; Mapping the shared folder in the file server to a local target disk according to the shared file policy includes: If the permission enabling information indicates that the permission has been enabled, sending a connection request to the file server according to the network address and the path information, the connection request including the access account information and the access password, so that the file server verifies the access account information and the access password, and establishes a connection with the application server if the verification passes; A target disk is created, and the target disk is bound to the connection.
4. The method according to claim 1, characterized in that The method further comprises: Receiving a virtual application closing request sent by a client, wherein the virtual application closing request includes the user identifier and the application identifier; According to the virtual application closing request, the virtual application is closed, and the mapping of the shared folder is released.
5. A method for accessing a virtual application, applied to a management platform, characterized in that: The method comprises: Receiving a shared file policy acquisition request sent by an application server, wherein the shared file policy acquisition request includes a user identifier; Querying a shared file policy corresponding to the user identifier; Send the shared file policy to the application server.
6. The method according to claim 5, characterized in that The method further comprises: Receive a login request sent by a client, the login request including a user identifier and identity authentication information; Verifying the identity authentication information; If the verification is successful, querying virtual application resource information corresponding to the user identifier, the virtual application resource information including an application identifier and an application server corresponding to at least one virtual application; The virtual application resource information is sent to the client.
7. The method according to claim 5, characterized in that The shared file policy includes the network address of the file server, path information of the shared folder, permission enabling information, access account information and access password.
8. A device for running a virtual application, characterized in that: The device comprises: A running request receiving module, used to receive a virtual application running request sent by a client, wherein the virtual application running request includes a user identifier and an application identifier; A policy acquisition request sending module, used to send a shared file policy acquisition request to the management platform, wherein the shared file policy acquisition request includes the user identifier; A policy receiving module, used for receiving a shared file policy corresponding to the user identifier sent by the management platform; A mapping module, used to map a shared folder in the file server to a local target disk according to the shared file policy; A running module, used for running the virtual application corresponding to the application identifier and sending a user interface of the virtual application to the client; The saving module is used to save the application data of the virtual application in the target disk during the running of the virtual application.
9. A device for running a virtual application, characterized in that: The device comprises: A policy acquisition request receiving module, used to receive a shared file policy acquisition request sent by an application server, wherein the shared file policy acquisition request includes a user identifier; A policy query module, used to query the shared file policy corresponding to the user identifier; A policy sending module is used to send the shared file policy to the application server.
10. An electronic device comprising: processor; a memory for storing processor-executable instructions; The processor is configured to execute the method according to any one of claims 1 to 7.
11. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the method according to any one of claims 1 to 7.