Remote terminal auxiliary device, control method thereof and electronic equipment

Abstract

The invention discloses a remote terminal auxiliary device, a control method thereof and electronic equipment, and relates to the technical field of computers, and the method comprises the steps that an interaction module provides an interaction interface, receives an initial input instruction and sends the initial input instruction to a main control module in an enhanced auxiliary mode; the main control module performs format conversion on the initial input instruction to obtain a corresponding command with a uniform format; the agent module interacts with the equipment through a remote access protocol supported by the equipment after receiving a corresponding command in a uniform format, and returns an obtained equipment data flow to the main control module, the main control module sends the equipment data flow to the interaction module, and the interaction module converts the equipment data flow into a visual interface. The layered design can provide a convenient and fast enhanced auxiliary mode, the required initial input instruction is conveniently executed, the command format conversion is processed, the equipment is operated through the unified command format, and the problem of operation difficulty caused by the fact that a user is not familiar with a specific system command line is solved.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and particularly to a remote terminal assistance device, a control method thereof, and an electronic device. Background Art

[0002] In the process of operation and maintenance management of a data center, operations on core devices are usually carried out by means of remote login, and remote access to the devices is performed through the remote management protocol of the devices. During the execution of a remote terminal, the operating system types of devices from different manufacturers are different, and the command line formats are also different. For unfamiliar users, the operation is difficult, and there is also a possibility of misoperation in manual operation, resulting in system problems. The data center management platform software integrates a unified remote terminal access function, that is, through a unified entry provided by the management platform software, remote login and access operations on multiple devices are realized. However, the traditional management platform software cannot provide auxiliary support during the user operation process and cannot solve the operation difficulty problem caused by users' unfamiliarity with specific system command lines. Summary of the Invention

[0003] The present invention provides a remote terminal assistance device, a control method thereof, and an electronic device, so as to at least solve the problem of operation difficulty caused by users' unfamiliarity with specific system command lines in related technologies.

[0004] The present invention provides a remote terminal assistance device, including:

[0005] An interaction module, configured to provide an interaction interface, and in an enhanced assistance mode, receive an initial input instruction and send it to a main control module; and further configured to convert the device data stream sent by the main control module into a visual interface;

[0006] The main control module is configured to, after receiving the initial input instruction, perform format conversion on the initial input instruction to obtain a corresponding command in a unified format and forward it to an agent module; and further configured to send the device data stream returned by the agent module to the interaction module;

[0007] The agent module is configured to, after receiving the corresponding command in a unified format, interact with a device through a remote access protocol supported by the device, and return the obtained device data stream to the main control module.

[0008] The present invention further provides a control method of a remote terminal assistance device, including:

[0009] In an enhanced assistance mode, an interaction module receives an initial input instruction through an interaction interface and sends it to a main control module;

[0010] After receiving the initial input instruction, the main control module converts the format of the initial input instruction to obtain a corresponding command in a unified format and forwards it to the proxy module; it is also used to send the device data stream returned by the proxy module to the interaction module;

[0011] After receiving the corresponding command in a unified format, the proxy module interacts with the device through the remote access protocol supported by the device and returns the obtained device data stream to the main control module;

[0012] The main control module sends the device data stream returned by the proxy module to the interaction module;

[0013] The interaction module converts the device data stream sent by the main control module into a visual interface.

[0014] The present invention also provides an electronic device, including the above-mentioned remote terminal assistance device provided by the present invention.

[0015] Through the present invention, an interaction module, a main control module, and a proxy module are designed in the remote terminal assistance device. The interaction module provides an interaction interface and, in the enhanced assistance mode, receives the initial input instruction and sends it to the main control module. After receiving the initial input instruction, the main control module converts the format of the initial input instruction to obtain a corresponding command in a unified format and forwards it to the proxy module. After receiving the corresponding command in a unified format, the proxy module interacts with the device through the remote access protocol supported by the device and returns the obtained device data stream to the main control module. The main control module sends the device data stream returned by the proxy module to the interaction module, and the interaction module converts the device data stream sent by the main control module into a visual interface. Such a hierarchical design can provide a convenient and easy operation in the enhanced assistance mode, facilitate the execution of the required initial input instruction, handle the command format conversion by the present invention, perform operations on the device through a unified command format, solve the operation difficulty problem caused by users' unfamiliarity with specific system command lines, avoid errors, and can provide enhanced assistance for the remote access of the device. And the present invention internally provides an additional data stream forwarding function, which can effectively break through the limitation of multi-subnet isolation, realize the remote access between the management software and the devices in different subnets, and solve the problem that traditional remote access tools cannot work in this scenario.

[0016] In addition, the present invention also provides a corresponding control method and electronic device for the remote terminal assistance device, which have the same or corresponding technical features as the above-mentioned remote terminal assistance device, and the effects are the same. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] To more clearly illustrate the embodiments of the present invention, the accompanying drawings required for the embodiments will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other accompanying drawings can be obtained based on these drawings.

[0018] Figure 1 Schematic structural diagram of the remote terminal assistance device provided by the embodiment of the present invention;

[0019] Figure 2 Schematic overall architecture diagram of the remote terminal assistance device provided by the embodiment of the present invention;

[0020] Figure 3 Schematic structural diagram of the interceptor unit provided by the embodiment of the present invention;

[0021] Schematic diagram showing the existence of a processor chain between the first repeater unit and the second repeater unit provided by the embodiment of the present invention;

[0022] Figure 4 Flowchart of the control method of the remote terminal assistance device provided by the embodiment of the present invention. Detailed implementation manners

[0023] A remote terminal refers to remotely logging in to a device through a remote management protocol to perform management operations. The remote management protocol can be an encrypted network transmission protocol (Secure Shell, SHH), a remote login protocol (telnet), etc. In traditional data center management platform software, a unified remote terminal access function has been integrated, that is, through a unified entry provided by the management platform software, remote login and access operations to multiple devices are realized. At the same time, functions such as video auditing are provided to record the operation process for traceability. However, this method cannot provide auxiliary support during the user operation process, cannot solve the operation difficulties caused by users' unfamiliarity with specific system command lines, and in the process of remote device access, the traditional method cannot provide a convenient and easy auxiliary mode to help users execute the required commands and cannot support remote access where the management software and the device are in different subnets.

[0024] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, rather than all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts belong to the protection scope of the present invention.

[0025] It should be noted that in the description of the present invention, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed, or further includes elements inherent to such process, method, article or device. The terms "first", "second", etc. in the present invention are used to distinguish similar objects, rather than to describe a specific order or sequence.

[0026] In order to enable those skilled in the art of this technology to better understand the solution of the present invention, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0027] Combined with the specific application environment architecture or specific hardware architecture on which the execution of the remote terminal assistance device depends, the specific application environment architecture or specific hardware architecture will be described herein.

[0028] An embodiment of the present invention provides a remote terminal assistance device. The device will be described in detail in combination with the structure schematic diagram of the remote terminal assistance device. Figure 5 The structure schematic diagram of the remote terminal assistance device provided by the embodiment of the present invention is as Figure 1 shown. The device includes:

[0029] An interaction module 1, which is used to provide an interaction interface, and in the enhanced assistance mode, receive an initial input instruction and send it to the main control module 2; it is also used to convert the device data stream sent by the main control module 2 into a visual interface;

[0030] A main control module 2, which is used to perform format conversion on the initial input instruction after receiving it, obtain a corresponding command in a unified format and forward it to the proxy module 3; it is also used to send the device data stream returned by the proxy module 3 to the interaction module 1;

[0031] A proxy module 3, which is used to interact with the device through the remote access protocol supported by the device after receiving the corresponding command in a unified format, and return the obtained device data stream to the main control module 2.

[0032] In the above-mentioned remote terminal assistance device provided by the embodiments of the present invention, it includes three parts: an interaction module 1, a main control module 2, and a proxy module 3. Among them, the interaction module 1 provides an interaction interface. In the enhanced assistance mode, it receives an initial input instruction and sends it to the main control module 2; after receiving the initial input instruction, the main control module 2 performs format conversion on the initial input instruction to obtain a corresponding command in a unified format and forwards it to the proxy module 3; after receiving the corresponding command in the unified format, the proxy module 3 interacts with the device through the remote access protocol supported by the device and returns the obtained device data stream to the main control module 2. The main control module 2 sends the device data stream returned by the proxy module 3 to the interaction module 1, and the interaction module 1 converts the device data stream sent by the main control module 2 into a visual interface. Such a hierarchical design can provide convenient operations in the enhanced assistance mode, facilitate the execution of the required initial input instructions. The present invention processes the command format conversion, performs operations on the device through a unified command format, solves the operation difficulty problem caused by users' unfamiliarity with specific system command lines, avoids errors, and can provide enhanced assistance for the remote access of the device. Moreover, the present invention provides an additional data stream forwarding function internally, which can effectively break through the limitation of multi-subnet isolation, realize the remote access between the management software and devices in different subnets, and solve the problem that traditional remote access tools cannot work in this scenario.

[0033] It should be noted that the present invention is non-invasive to the operating system of the remote device and does not require the installation of additional proxy tools. Through the hierarchical design of the interaction module 1, the main control module 2, and the proxy module 3, the present invention can solve the problems of inconvenient integration and difficult access to cross-subnet devices in the remote access scenario of data center devices. It has lightness and feasibility, and can be flexibly integrated into the management platform or used as an independent tool.

[0034] Furthermore, in specific implementation, in the above-mentioned remote terminal assistance device provided by the embodiments of the present invention, the interaction module 1 is a functional module that provides an interaction interface and can convert the device data stream returned by the main control module 2 into a visual interface. The interaction module 1 can communicate with the main control module 2 through the front-end and back-end communication protocols; the interaction module 1 uses the communication protocol provided by the main control module 2 for integration.

[0035] In implementation, the interaction module 1 is a functional module with the function of providing a user interaction interface. This interface is a bridge between the user and the device, through which the user can interact with the device. The interaction module 1 can also convert the device data stream returned by the main control module 2 into a visual interface. The device data stream is generally data collected or generated by the device, such as sensor data, device status information, etc. When these data exist in their original form, it is difficult for users to understand, while the interaction module 1 can convert them into intuitive visual forms such as graphics, tables, and texts, achieving different visual effects and facilitating users to view and operate. The implementation method here can be Swing (an image user interface toolkit) and JavaScript xterm (a library written in JavaScript). If Swing is used to implement the interaction module 1, a desktop interaction interface with rich functions and beautiful appearance can be developed. If the xterm library is used to implement the interaction module 1, a terminal-like interaction interface can be built on the web page, where users can input commands and view the data returned by the device. The interaction module 1 and the main control module 2 can communicate through a front-end and back-end communication protocol. Here, the front-end and back-end communication protocol is the rule followed by front-end and back-end data interaction, which can include but is not limited to HTTP (Hyper Text Transfer Protocol), WebSocket (a protocol for full-duplex communication on a single Transmission Control Protocol connection), etc. With these protocols, the interaction module 1 can send requests to the main control module 2, and after the main control module 2 processes the requests, it returns the device data stream to the interaction module 1. The interaction module 1 is integrated using the communication protocol provided by the main control module 2, which means that the interaction module 1 can be freely replaced according to user needs and only needs to be integrated using the communication protocol provided by the main control module 2. For example, if the main control module 2 specifies the use of the HTTP protocol and defines specific request formats and response formats, the interaction module 1 can send requests and process responses according to these requirements.

[0036] Furthermore, in specific implementation, in the above-mentioned remote terminal assistance device provided by the embodiment of the present invention, the main control module 2 may include a processor unit and a first forwarder unit; wherein, the processor unit can be used to determine whether to enter or exit the enhanced assistance mode according to the input shortcut key information; in the enhanced assistance mode, perform format conversion processing on the received initial input instruction to obtain at least one command in a unified format and send it to the first forwarder unit; the first forwarder unit can be used to forward at least one command in the unified format to the proxy module 3, and send the device data stream returned by the proxy module 3 to the interaction module 1.

[0037] Figure 1 It is a schematic diagram of the overall architecture of the remote terminal assistance device provided by the embodiment of the present invention. In implementation, asFigure 2 As shown in the figure, the main control module 2 includes a processor unit 21 and a first transponder unit 22. The processor unit 21 can determine whether to enter or exit the enhanced assistance mode according to the input shortcut key information; in the enhanced assistance mode, it performs format conversion processing on the received initial input instruction to obtain at least one command in a unified format and sends it to the first transponder unit 22. The first transponder unit 22 forwards at least one command in the unified format to the proxy module 3, and sends the device data stream returned by the proxy module 3 to the interaction module 1. That is, the processor unit 21 of the main control module 2 can analyze and process the user's input, and forward it to the proxy module 3 for execution by the first transponder unit 22.

[0038] It should be noted that the combination of the processor unit 21 and the first transponder unit 22 enables the remote terminal assistance device to have a command conversion function, supports one-to-one mapping of commands, and supports one-to-many mapping of commands. In the enhanced mode, the present invention can shield the differences of underlying devices through a unified command line method and support flexible compatibility expansion.

[0039] Furthermore, in specific implementation, in the above-mentioned remote terminal assistance device provided by the embodiment of the present invention, the processor unit 21 may include an interceptor unit, a converter unit, and a recorder unit; the interceptor unit can be used to intercept and identify the input shortcut key information. In the non-enhanced assistance mode, when the shortcut key information is identified as the first set input, it enters the enhanced assistance mode; in the enhanced assistance mode, when the shortcut key information is identified as the second set input, it exits the enhanced assistance mode; the converter unit can be used to convert the initial input instruction into one or more commands supported by the device in the enhanced assistance mode; the recorder unit can be used to record the interaction content in real time through text-based operations.

[0040] In implementation, as Figure 2 shown in the figure, the processor unit 21 may include an interceptor unit 211, a converter unit 212, and a recorder unit 213; the interceptor unit 211 intercepts and identifies the input shortcut key information. In the non-enhanced assistance mode, when the shortcut key information is identified as the first set input (such as Ctrl+A), it enters the enhanced assistance mode; in the enhanced assistance mode, when the shortcut key information is identified as the second set input (such as Ctrl+B), it exits the enhanced assistance mode. That is, when the user performs a remote operation on the device, they can enter or exit the enhanced assistance mode through the shortcut key information (such as Ctrl+A or Ctrl+B). This realizes the enhanced assistance for remote access to the device and supports real-time entry / exit from the enhanced assistance mode.

[0041] In practical applications, the present invention can directly enter the enhanced mode during access through user permission control and does not support exiting. This can achieve a full-process foolproof assistance and flexibly restrict the commands that users can use, and is applicable to some anti-fool scenarios or scenarios that require high security.

[0042] In the enhanced assistance mode, the converter unit 212 can convert the initial input instruction input by the user into one or more specific commands supported by the specific device system, and then support the one-to-one and one-to-many conversion of commands. This can improve compatibility, enhance the user experience, improve the flexibility of the system, meet complex control requirements, and facilitate system expansion and upgrade. The recorder unit 213 can record the interaction content in real time in a text-based operation, which is convenient for subsequent auditing. This method supports custom settings, can flexibly configure the external storage method, and all operations performed by the user have text records in the background, with high auditing efficiency, space saving, and easier retrieval.

[0043] Furthermore, in specific implementation, in the above-mentioned remote terminal assistance device provided by the embodiment of the present invention, the interceptor unit 211 can also be used to intercept the initial input instruction, cache each character in the initial input instruction one by one through the character buffer to identify whether the initial input instruction is a set instruction; when it is identified that the initial input instruction is a set instruction, intercept or temporarily store the initial input instruction.

[0044] Figure 2 It is a structural schematic diagram of the interceptor unit provided by the embodiment of the present invention. In implementation, as Figure 3 shown, in order to support interactive commands in the remote terminal (such as text editing in the vim mode), in the non-enhanced mode, the present invention sends the user's character input to the backend one by one. For example, when the user inputs the character a, the present invention directly sends the character a to the device. In the interceptor unit, each character input by the user is cached through the character buffer for checking whether it is a specific instruction. When it is detected that the initial input instruction is a specific instruction, the initial input instruction can be intercepted or temporarily stored.

[0045] Furthermore, in specific implementation, in the above-mentioned remote terminal assistance device provided by the embodiment of the present invention, the interceptor unit 211 can include a trigger subunit and at least one interceptor subunit on the interceptor chain; the trigger subunit is used to trigger the interceptor subunit corresponding to the set instruction on the interceptor chain when it is identified that the initial input instruction is a set instruction; the interceptor subunit is used to intercept or temporarily store the initial input instruction.

[0046] In implementation, as Figure 3As shown in the figure, when the present invention sends characters to a device, it can pass through an interceptor chain, but the interceptors on the default interceptor chain are all in an inactive state. When a specific instruction sequence is detected, the corresponding interceptor subunit on the interceptor chain is triggered by a trigger, and at this time, the user's input is interrupted and not sent to the backend. Since the triggering of most instructions requires the combination of the enter key to end, the present invention can use the enter key + the characters in the character buffer for pattern matching to determine whether it is a set instruction (such as a prohibited instruction). At this time, only the sending of the last enter character of the instruction needs to be blocked to complete the interception or temporary storage of the instruction. This can timely identify and intercept malicious instructions that may cause losses to the system, avoid data loss caused by misoperations or malicious attacks, protect the safe and stable operation of the system, and can reduce the time for the user to wait for the backend response, improve the operation efficiency, and avoid the user wasting time due to invalid instructions.

[0047] Further, in specific implementation, in the above remote terminal auxiliary device provided by the embodiment of the present invention, the interceptor subunit may include an enhanced auxiliary interceptor subunit, a high-risk instruction interceptor subunit, and a permission interceptor subunit. The trigger subunit can be used to trigger the enhanced auxiliary interceptor subunit to temporarily store the set instruction when it recognizes that the initial input instruction is a set instruction for entering the enhanced auxiliary mode; trigger the high-risk instruction interceptor subunit to intercept the initial input instruction when it recognizes that the initial input instruction is a high-risk instruction; and trigger the permission interceptor subunit to intercept the initial input instruction when it recognizes that the initial input instruction is an over-authority instruction.

[0048] It should be noted that since the traditional data center management platform software cannot restrict users from performing certain over-authority or high-risk operations, and there are problems with difficult retrieval in the provided video auditing method. Video files are usually large, and it is often time-consuming and laborious to retrieve them after problems occur, and it is impossible to immediately identify and notify when users perform illegal or high-risk operations. That is, in the remote terminal solution provided by the traditional data center management software, the auditing solution is lagging or inconvenient, cannot restrict users from performing certain operations, or cannot immediately identify and notify when users perform illegal or high-risk operations. To solve this problem, the present invention supports text-based real-time auditing functions, can automatically identify high-risk operations or over-authority operations input by users, and restrict execution. In implementation, the present invention sets an enhanced auxiliary interceptor subunit, a high-risk instruction interceptor subunit, a permission interceptor subunit, etc. on the interceptor chain.

[0049] When the trigger subunit hears the instruction for the user to enter the enhanced assistance mode, it will trigger the enhanced assistance interceptor subunit. At this time, the enhanced assistance interceptor subunit will intervene in the interaction process between the user and the device. In the enhanced mode, the characters input by the user will not be immediately sent to the device, but will be temporarily stored and parsed by the enhanced assistance interceptor subunit and then sent to the backend. For example, in the enhanced assistance mode, when the user configures a Virtual Local Area Network (VLAN) for the device, the user inputs a general instruction format defined in the present invention, vlan create 2-4 boundinterface 1, that is, to create VLAN 2, VLAN 3, and VLAN 4 and bind them to the physical interface No. 1. The enhanced assistance interceptor subunit caches the general instruction input by the user, which means temporarily saving the instruction and waiting for further processing. When the user presses the Enter key, it is sent to the converter unit for command conversion, and the command is parsed into multiple commands compatible with specific switches. These commands can include relevant instructions for creating VLANs and relevant instructions for binding VLANs to specified ports. Then, the converter unit sends the parsed specific commands to the device one by one, thus completing the VLAN configuration operation for the device. This overall method greatly reduces the user's operation steps and input workload, improves the user operation convenience, and reduces the system processing burden and improves the configuration accuracy.

[0050] Furthermore, in specific implementation, in the above-mentioned remote terminal assistance device provided by the embodiments of the present invention, for devices with different operating systems and / or different command line formats, there can be multiple converter units 212; the converter unit 212 can also be extended by means of hot-loading plugins to be compatible with new devices.

[0051] [[ID=⑥]]In implementation, the converter unit 212 of the present invention can convert the defined general commands into commands compatible with specific devices. For devices with different operating systems / different command line formats, they can be respectively converted by multiple converters. This can ensure that the system can interact seamlessly with various different devices without worrying about command format incompatibility issues. When adding support for a new operating system or device type, only the corresponding converter needs to be added. This modular design makes the system very convenient to expand and does not affect the functions of other parts.

[0052] The converter unit 212 of the present invention can support expansion by means of plug-ins. That is, the command conversion function of the remote terminal assistance device can also support flexible function expansion, support compatibility with new devices by means of plug-ins, and the plug-ins support hot loading, and the service will not be interrupted during the expansion process. The implementation method here can be to allow developers to dynamically load and discover service implementations through a configuration file (usually a file in the META-INF / services directory) by means of the Java SPI (Service Provider Interface) mechanism. By defining the corresponding service provider interface in the present invention, different compatibility plug-ins (jar packages) can perform compatibility expansion, realize the ability expansion in the hot loading mode, and dynamically be compatible with devices of more manufacturers.

[0053]

[0054] Meanwhile, the present invention provides a configuration file-based method to facilitate users to flexibly modify and expand commands. The configuration file-based method includes, but is not limited to, Extensible Markup Language (XML), JavaScript Object Notation (JSON), and YAML (YAML Ain't Markup Language) formats. Here, the JSON method is used for example description.

[0055]

[0056] It can be seen from the above code that a command configuration is defined in the JSON format, and the command conversion, execution, and rollback processes of specific manufacturer devices are configured. Among them: deviceInfo defines the manufacturer, model, serial number, and system version information of the device, which is used to distinguish the device type; parentCommands defines the command conversion relationship corresponding to this device. Here, it includes a command deployApp, which corresponds to multiple sub-commands. Each sub-command includes a judgment on whether the result is normal and the corresponding failure rollback command; rollbackStrategy defines whether to continue execution or directly terminate if a rollback occurs when a certain sub-command fails to execute.

[0057] Furthermore, in specific implementation, in the above-mentioned remote terminal assistance device provided by the embodiment of the present invention, the converter unit 212 can also be used to modify or expand the conversion, instructions, and rollback strategy of one or more commands in a one-to-many conversion scenario by means of a configuration file.

[0058] In implementation, in the one-to-many conversion scenario of the present invention, the converter unit 212 supports manual configuration by the user to specify detailed settings such as rollback policies. That is, the command conversion function of the remote terminal assistance device can also support quick rollback of one or more commands. In this way, the user can flexibly select the timing, scope, and method of rollback according to business requirements to meet diverse business scenarios, and can specify to trigger rollback under specific conditions, such as specific error codes occurring during the conversion process, data verification failures, etc., so as to correct errors in a timely manner, ensure the stability of the system and the integrity of the data, and ensure that the risk of data loss and service interruption is minimized to the greatest extent under any circumstances.

[0059] Further, in specific implementation, in the above-mentioned remote terminal assistance device provided by the embodiment of the present invention, the proxy module 3 may include a local proxy module and a remote proxy module; the main control module 2 maintains a first registry for the local proxy module and a second registry for the remote proxy module; the local proxy module is used to directly search for the first registry within the process to register its own information when starting up; the remote proxy module is used to query the address of the main control module 2 by means of a configuration file and initiate a long connection establishment request when starting up; a long connection refers to a connection that can continuously send multiple data packets.

[0060] In implementation, to support remote access to devices in a network isolation scenario, the main control module 2 maintains two registries, one for the local proxy module and one for the remote proxy module. The proxy module registers when starting up. Among them, local registration: when the proxy module 3 starts up, it directly searches for the local registry within the process to register its own information. Remote registration: when the main control module 2 starts up, it performs long connection access listening on a specific port. When the proxy module 3 starts up, it queries the address of the main control module 2 by means of a configuration file and initiates a long connection establishment request. In this way, the main control module 2 and the proxy module 3 can communicate through a long connection as the boundary exit of the subnet. The implementation method here may include, but is not limited to, the Java Netty (a Java open source framework for providing an asynchronous, event-driven network application framework and tools) library.

[0061] Further, in specific implementation, in the above-mentioned remote terminal assistance device provided by the embodiment of the present invention, the first forwarder unit 22 is specifically used to forward at least one command in a unified format to the remote proxy module by means of a long connection in a network isolation scenario; and forward at least one command in a unified format to the local proxy module within the same local process or between processes in a non-network isolation scenario.

[0062] In implementation, the network isolation here means that in some data centers, there is only one management platform, but the devices are located in multiple isolated subnets (these subnets may even span regions or data centers). The network where the management platform is located is not connected to these isolated subnets. Each subnet needs to interact with the management platform through an agent platform with gateway functions. In this scenario, the present invention provides additional data forwarding capabilities through a remote terminal assistance device.

[0063] In the scenario of network isolation, the main control module 2 and the proxy module 3 perform data forwarding through a forwarder unit. The implementation method is to perform efficient data stream interaction through a long connection. The implementation methods may include, but are not limited to, the Java Netty library. When implementing, it is necessary to consider the data interaction encoding and decoding protocol to achieve more efficient forwarding, which will not be described in detail in the present invention. If there is no network isolation scenario, there is no need for a network connection between the forwarder units of the main control module 2 and the proxy module 3. They directly communicate within the same process or between processes of the system locally to improve the interaction efficiency.

[0064] Further, in specific implementation, in the above-mentioned remote terminal assistance device provided by the embodiments of the present invention, as Figure 3 shown, the proxy module 3 may include a second forwarder unit 31 and an executor unit 32; the second forwarder unit 31 can be used to receive the corresponding commands in a unified format sent by the first forwarder unit 22 and forward them to the executor unit, and receive the device data stream sent by the device and forward the device data stream to the main control module 2; the executor unit 32 can be used to interact with the device through the remote protocol supported by the device.

[0065] In implementation, different types of devices may use different remote protocols for communication. The proxy module 3 mainly includes a second forwarder unit 31 and an executor unit 32. The existence of the executor unit 32 enables the upper-layer system to not need to care about the protocols adopted by specific devices, and only needs to send unified instructions through the proxy module 3. The executor unit 32 can serve as a barrier between the internal device and the external network. The instructions of the external system are forwarded and processed through the proxy module 3. When the executor unit 32 interacts with devices (such as the first device, the second device,..., the Nth device, etc.), it can filter and verify the instructions to prevent illegal instructions from directly accessing the device, thereby protecting the device and the system from external attacks.

[0066] Further, in specific implementation, in the above-mentioned remote terminal assistance device provided by the embodiments of the present invention, a processor chain may be provided between the first repeater unit 22 and the second repeater unit 31; the processor chain includes a traffic encryption module, a traffic compression module, a rate negotiation module, and a routing load module; the traffic encryption module and the traffic compression module are enabled when the master control module 2 and the proxy module 3 are located in subnets across regions; the rate negotiation module and the routing load module are enabled when remotely controlling multiple devices in multiple subnets simultaneously.

[0067] In implementation, functions such as traffic encryption, traffic compression, rate negotiation, and load balancing are also supported between the master control module 2 and the proxy module 3. The implementation method is to set corresponding processor modules at both ends of the long connection to implement corresponding processing. In the present invention, these modules can be set to be enabled or disabled through configuration to flexibly meet the requirements of different scenarios. Figure 2 It is a schematic diagram of the existence of a processor chain between the first repeater unit and the second repeater unit provided by the embodiments of the present invention. As Figure 4 shown, when the master control module and the proxy module are located in subnets across regions, the user can choose to enable the traffic encryption and traffic compression modules. When the device scale is very large and multiple devices in multiple subnets need to be remotely controlled simultaneously, and the network traffic cannot affect normal services, the rate can be negotiated through the rate negotiation module, and the load balancing of traffic can be achieved through the routing load module. Taking the implementation method of the Java Netty framework as an example, the implementation method of these processor modules is: construct corresponding handlers and enable / disable control in the Netty's ChannelHandler (which is a key component for processing inbound and outbound data).

[0068] The above-mentioned remote terminal assistance device provided by the embodiments of the present invention will be further described below in combination with the application scenario of data center device management:

[0069] There are multiple network devices from different manufacturers in the user's data center. Their operating systems and command line formats are all different, and the types of remote access protocols supported are also different (some support remote access through the telnet protocol, and some support remote access through the ssh method). Since the user is not familiar with the command lines of these devices, the efficiency is very low when remotely operating the devices. Since the network devices are all core devices, the user needs to log in to each device separately for configuration due to auditing needs and operating habits.

[0070] Users can log in to remote devices using the interactive interface provided by the interactive module of the remote terminal assistance device of the present invention and perform some relatively simple operations, such as viewing a certain file directory, etc. Next, the user needs to configure VLAN for the device, but the user is not familiar with the VLAN commands of these devices. So the user enters the enhanced assistance mode through the set shortcut keys (such as Ctrl+A). In the enhanced assistance mode, the present invention provides consistent commands externally, and users don't need to worry about the differences in the command lines of the underlying switch systems. When the user enters "show vlan all", the present invention converts it into the VLAN query command supported by the corresponding device, and the VLAN information of the switch is queried. Next, when the user enters "vlan create 2-4 bound interface 1", VLAN2, VLAN3, and VLAN4 are directly created and bound to the physical port No. 1. The present invention converts this general command into multiple commands of the specific switch for execution. Moreover, this conversion supports extended compatibility and various detailed settings such as rollback policies (such as what the corresponding multiple commands are and how to roll back if executed incorrectly), and users can customize and modify them.

[0071] After the user creates the VLAN, the user exits the enhanced assistance mode through the shortcut key (such as Ctrl+B) and continues to perform other operations. At this time, the user enters a "reboot" + enter command, and the present invention can immediately recognize that this is a high-risk operation, directly intercept it and send a warning. At the same time, the process of each operation of the user is recorded in the text database of the present invention, which is convenient for regular retrieval and auditing.

[0072] It should be noted that the remote terminal assistance device proposed by the present invention can be oriented to the management of data center devices and can enhance the assistance for remote access to devices. In terms of operation convenience, users can switch to the enhanced assistance mode through shortcut instructions and operate different types of devices in a unified command format. The present invention processes command conversion, solves the operation difficulty problem caused by unfamiliarity with specific system command lines, and improves operation efficiency and accuracy. In addition, the command conversion function supports multiple mapping methods and quick rollback, and also has flexible scalability. It can be based on hot-loaded plugins and does not require interrupting services for compatibility expansion, further enhancing the practicality and versatility of the tool. In terms of security, the text-based instant audit function can automatically identify and restrict users' high-risk and unauthorized operations, and the identification mode can also be customized. All operations have text records, which not only improves audit efficiency but also saves space, making up for the deficiencies of existing common screen recording audit technologies in lacking real-time performance and being difficult to retrieve. In terms of network adaptability, the data stream forwarding function integrated inside the present invention effectively breaks through the limitations of multi-subnet isolation, realizes remote access between the management software and devices in different subnets, and solves the problem that traditional remote access tools cannot work in this scenario. It provides a more efficient, secure and convenient solution for the remote management of data center devices.

[0073] Through the description of the above embodiments, those skilled in the art can clearly understand that the device according to the above embodiments can be implemented by means of software plus a necessary general hardware platform. Of course, it can also be implemented by hardware, but in many cases, the former is a better implementation method.

[0074] In the above embodiments, the remote terminal assistance device has been described in detail. The present invention also provides corresponding embodiments of the control method for the remote terminal assistance device.

[0075] Figure 4 It is a flowchart of the control method for the remote terminal assistance device provided by the embodiments of the present invention. As Figure 5 Figure 5 shown, the control method includes the following steps:

[0076] S501. In the enhanced assistance mode, the interaction module receives the initial input instruction through the interaction interface and sends it to the main control module.

[0077] S502. After receiving the initial input instruction, the main control module performs format conversion on the initial input instruction to obtain a corresponding command in a unified format and forwards it to the proxy module; it is also used to send the device data stream returned by the proxy module to the interaction module.

[0078] S503. After receiving the corresponding command in a unified format, the proxy module interacts with the device through the remote access protocol supported by the device and returns the obtained device data stream to the main control module.

[0079] S504. The main control module sends the device data stream returned by the proxy module to the interaction module.

[0080] S505. The interaction module converts the device data stream sent by the main control module into a visual interface.

[0081] In the control method of the above-mentioned remote terminal assistance device provided by the embodiments of the present invention, it is convenient to execute the required initial input instructions. The present invention processes the command format conversion and operates the device through a unified command format, solving the problem of difficult operation caused by users' unfamiliarity with specific system command lines, avoiding errors, and being able to enhance the assistance for remote access to the device. And the present invention provides an additional data stream forwarding function internally, which can effectively break through the limitation of multi-subnet isolation, realize the remote access between the management software and the devices in different subnets, and solve the problem that traditional remote access tools cannot work in this scenario.

[0082] Since the embodiments of the control method part of the remote terminal assistance device correspond to the embodiments of the remote terminal assistance device part, the description of the features in the corresponding embodiments of the control method of the remote terminal assistance device can refer to the relevant descriptions of the corresponding embodiments of the remote terminal assistance device, and will not be elaborated here one by one. And it has the same beneficial effects as the above-mentioned remote terminal assistance device.

[0083] Further, in specific implementation, in the control method of the above-mentioned remote terminal assistance device provided by the embodiments of the present invention, after receiving the initial input instruction, the main control module performs format conversion on the initial input instruction to obtain a corresponding command in a unified format and forwards it to the proxy module. Specifically, it may include: the processor unit of the main control module determines whether to enter or exit the enhanced assistance mode according to the input shortcut key information; in the enhanced assistance mode, performs format conversion processing on the received initial input instruction to obtain at least one command in a unified format and sends it to the first forwarder unit of the main control module; the first forwarder unit is used to forward at least one command in a unified format to the proxy module.

[0084] Further, in specific implementation, in the control method of the above-mentioned remote terminal assistance device provided by the embodiments of the present invention, the processor unit determines whether to enter or exit the enhanced assistance mode according to the input shortcut key information. Specifically, it may include: the interceptor unit intercepts and identifies the input shortcut key information. In the non-enhanced assistance mode, when the shortcut key information is identified as the first set input, it enters the enhanced assistance mode; in the enhanced assistance mode, when the shortcut key information is identified as the second set input, it exits the enhanced assistance mode; the converter unit converts the initial input instruction into one or more commands supported by the device in the enhanced assistance mode; the recorder unit records the interaction content in real time through text-based operations.

[0085] Further, in specific implementation, in the control method of the above remote terminal auxiliary device provided by the embodiments of the present invention, it may further include: the converter unit is extended by means of hot-loading plugins to be compatible with new devices; in a one-to-many conversion scenario, the converter unit modifies or extends the conversion of one or more commands, instructions, and rollback policies by means of a configuration file.

[0086] Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by means of software plus a necessary general hardware platform. Of course, it can also be implemented by hardware, but in many cases, the former is a better implementation method.

[0087] Based on the same inventive concept, the embodiments of the present invention also provide an electronic device including the above remote terminal auxiliary device. Since the principle of the electronic device to solve problems is similar to that of the foregoing remote terminal auxiliary device, the implementation of the electronic device can refer to the implementation of the remote terminal auxiliary device, and the repeated parts will not be described again. And it has the same beneficial effects as the above remote terminal auxiliary device.

[0088] The various embodiments in this specification are described in a progressive manner, and the key points of each embodiment are the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.

[0089] Those skilled in the art can further realize that the units and algorithm steps of each example described in combination with the embodiments disclosed in this article can be implemented by electronic hardware, computer software, or a combination of the two. To clearly illustrate the interchangeability of hardware and software, the components and steps of each example have been generally described according to functions in the above description. Whether these functions are executed in a hardware or software manner depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present invention.

[0090] The above has introduced in detail a remote terminal auxiliary device and its control method and an electronic device provided by the present invention. Specific examples are used in this article to elaborate on the principle and implementation manner of the present invention. The description of the above embodiments is only used to help understand the method and its core idea of the present invention. It should be noted that for those of ordinary skill in the art in this technical field, without departing from the principle of the present invention, several improvements and modifications can be made to the present invention, and these improvements and modifications also fall within the protection scope of the present invention.

Claims

1. A remote terminal assistance device, characterized in that, Including: An interaction module, which is used to provide an interaction interface and, in the enhanced assistance mode, receive an initial input instruction and send it to the main control module; It is also used to convert the device data stream sent by the main control module into a visual interface; The main control module is used to, after receiving the initial input instruction, perform format conversion on the initial input instruction to obtain a corresponding command in a unified format and forward it to the proxy module; it is also used to send the device data stream returned by the proxy module to the interaction module; The proxy module is used to, after receiving the corresponding command in a unified format, interact with the device through a remote access protocol supported by the device and return the obtained device data stream to the main control module.

2. The remote terminal assistance device according to claim 1, wherein The main control module includes a processor unit and a first forwarder unit; The processor unit is used to determine whether to enter or exit the enhanced assistance mode according to the input shortcut key information; In the enhanced assistance mode, perform format conversion processing on the received initial input instruction to obtain at least one command in a unified format and send it to the first forwarder unit; The first forwarder unit is used to forward at least one command in a unified format to the proxy module and send the device data stream returned by the proxy module to the interaction module.

3. The remote terminal assistance device according to claim 2, characterized in that, The processor unit includes an interceptor unit, a converter unit, and a recorder unit; The interceptor unit is used to intercept and identify the input shortcut key information. In the non-enhanced assistance mode, when it recognizes that the shortcut key information is the first set input, it enters the enhanced assistance mode; In the enhanced assistance mode, when it recognizes that the shortcut key information is the second set input, it exits the enhanced assistance mode; The converter unit is used to, in the enhanced assistance mode, convert the initial input instruction into one or more commands supported by the device; The recorder unit is used to record the interaction content in real time through text-based operations.

4. The remote terminal assistance device according to claim 3, characterized in that, The interceptor unit is also used to intercept the initial input instruction, cache each character in the initial input instruction one by one through a character buffer to identify whether the initial input instruction is a set instruction; when it recognizes that the initial input instruction is a set instruction, intercept or temporarily store the initial input instruction.

5. The remote terminal assistance device according to claim 4, wherein The interceptor unit includes a trigger subunit and at least one interceptor subunit on the interceptor chain; The trigger subunit is used to, when it recognizes that the initial input instruction is a set instruction, trigger the interceptor subunit on the interceptor chain corresponding to the set instruction; The interceptor subunit is used to intercept or temporarily store the initial input instruction.

6. The remote terminal assistance device according to claim 5, wherein The interceptor subunit includes an enhanced assistance interceptor subunit, a high-risk instruction interceptor subunit, and a permission interceptor subunit; The trigger subunit is used to, when it recognizes that the initial input instruction is a set instruction for entering the enhanced assistance mode, trigger the enhanced assistance interceptor subunit so that the enhanced assistance interceptor subunit temporarily stores the set instruction; When it recognizes that the initial input instruction is a high-risk instruction, trigger the high-risk instruction interceptor subunit so that the high-risk instruction interceptor subunit intercepts the initial input instruction; When the initial input instruction is identified as an unauthorized instruction, the permission interceptor subunit is triggered to intercept the initial input instruction.

7. The remote terminal assistance device according to claim 3, wherein For devices with different operating systems and / or different command-line formats, there are multiple converter units; The converter unit is also used to be extended by means of hot-loading plugins to be compatible with new devices.

8. The remote terminal assistance device according to claim 7, wherein The converter unit is also used to modify or extend the conversion of one or more commands, instructions, and rollback policies through a configuration file in a one-to-many conversion scenario.

9. The remote terminal assistance device according to claim 2, wherein, The proxy module includes a local proxy module and a remote proxy module; The main control module maintains a first registry for the local proxy module and a second registry for the remote proxy module; The local proxy module is used to directly find the first registry within the process and register its own information at startup; The remote proxy module is used to query the address of the main control module and initiate a long connection establishment request through a configuration file at startup; the long connection refers to a connection that continuously sends multiple data packets.

10. The remote terminal assistance device according to claim 9, characterized in that, The first forwarder unit is used to forward at least one command in a unified format to the remote proxy module through a long connection in a network isolation scenario; in a non-network isolation scenario, forward at least one command in a unified format to the local proxy module within the same local process or between processes.

11. The remote terminal assistance device according to claim 2, characterized in that, The proxy module includes a second forwarder unit and an executor unit; The second forwarder unit is used to receive the corresponding command in a unified format sent by the first forwarder unit and forward it to the executor unit, and receive the device data stream sent by the device and forward the device data stream to the main control module; The executor unit is used to interact with the device through a remote protocol supported by the device.

12. The remote terminal assistance device according to claim 11, wherein A processor chain is provided between the first forwarder unit and the second forwarder unit; The processor chain includes a traffic encryption module, a traffic compression module, a rate negotiation module, and a routing load module; The traffic encryption module and the traffic compression module are enabled when the main control module and the proxy module are located in subnets across regions; The rate negotiation module and the routing load module are enabled when remotely controlling multiple devices in multiple subnets simultaneously.

13. The remote terminal assistance device according to claim 1, characterized in that, The interaction module communicates with the main control module through a front-end and back-end communication protocol; The interaction module is integrated using the communication protocol provided by the main control module.

14. A control method for a remote terminal auxiliary device according to any one of claims 1 to 13, characterized in that, Including: In the enhanced assistance mode, the interaction module receives an initial input instruction through an interaction interface and sends it to the main control module; After receiving the initial input instruction, the main control module performs format conversion on the initial input instruction to obtain a corresponding command in a unified format and forwards it to the proxy module; it is also used to send the device data stream returned by the proxy module to the interaction module; After receiving the corresponding command in a unified format, the proxy module interacts with the device through a remote access protocol supported by the device and returns the obtained device data stream to the main control module; The main control module sends the device data stream returned by the proxy module to the interaction module; The interaction module converts the device data stream sent by the main control module into a visual interface.

15. An electronic device, characterized in that, It includes the remote terminal auxiliary device according to any one of claims 1 to 13.

Images