CN105872059A - Remote execution method and device - Google Patents
Remote execution method and device Download PDFInfo
- Publication number
- CN105872059A CN105872059A CN201610200642.5A CN201610200642A CN105872059A CN 105872059 A CN105872059 A CN 105872059A CN 201610200642 A CN201610200642 A CN 201610200642A CN 105872059 A CN105872059 A CN 105872059A
- Authority
- CN
- China
- Prior art keywords
- target
- targeted customer
- equations
- information
- execution
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/08—Protocols specially adapted for terminal emulation, e.g. Telnet
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
- H04L63/105—Multiple levels of security
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer And Data Communications (AREA)
- Information Transfer Between Computers (AREA)
Abstract
The embodiment of the invention discloses a remote execution method and device. Corresponding relationship of user information and identification information of second type servers, and private key information corresponding to the user information are pre-stored in a first type server. The first type server receives a remote execution request sent by a target user, judges whether the corresponding relationship of target user information and target identification information is stored in the local or not, searches target private key information corresponding to the target user information in the local if the corresponding relationship is stored in the local, and sends the searched target private key information and a remote execution command to a target second type server; and the target second type server executes the remote execution command after pairing own stored public key information with the target private key information successfully. Visibly, through application of the embodiment of the method and the device, an environment configured with multiple IT operation and maintenance automatic tools is unnecessary, and the access demands of different users specific to different remote servers can be realized.
Description
Technical field
The present invention relates to information technology O&M field, particularly to a kind of remote execution method and device.
Background technology
Along with the development of information technology, O&M is for IT (Information Technology, information technology)
Through becoming ingredient important in information technology.IT O&M, refers to computer hardware, software system
Operation maintenance.
In the face of the business become increasingly complex, in the face of more and more diversified user's request, IT O&M is towards certainly
The direction of dynamicization is developed.IT O&M automatization, i.e. utilizes IT O&M automation tools to computer hardware, soft
The operation maintenance of part system.IT O&M automation tools such as Ansible is capable of accessing the merit of remote server
Can, and control of authority can be carried out for remote access.Wherein, Ansible and other IT O&M automation tools,
It is to carry out control of authority based on SSH for remote access mostly, i.e. PKI is set in remote server,
Arranging private key in home server, only when PKI and private key successful matching, home server could be visited
Ask this remote server.
But, for based on SSH for remotely accessing the IT O&M automation tools carrying out control of authority,
Such as Ansible, when configuring an Ansible environment in home server, can only be arranged at home server
One private key, say, that, it is impossible to for the different user using home server, different authorities is set,
The different user requirements for access to different remote servers can not be met.In prior art, in order to meet difference
User's requirements for access to different remote servers, generally configures multiple Ansible environment in home server,
It is respectively provided with different private keys in each Ansible environment.Application such scheme, needs at multiple Ansible
Switch between environment, very inconvenient, and easily make mistakes.
Summary of the invention
The purpose of the embodiment of the present invention is to provide a kind of remote execution method and device, to meet different user
Requirements for access to different remote servers.
For reaching above-mentioned purpose, the embodiment of the invention discloses a kind of remote execution method, be applied to the first kind
Server, is previously stored with user profile and has access right with described user profile in described first kind server
The corresponding relation of identification information of the Equations of The Second Kind server of limit and private key information corresponding to described user profile;
Described method includes:
Receiving the request that remotely performs that targeted customer sends, described long-range execution request includes mesh to be visited
The target identification information of mark Equations of The Second Kind server, remotely execution order and targeted customer's information;
Judge the local corresponding relation whether storing described targeted customer's information and described target identification information;
If it is, search the target private key information that described targeted customer's information is corresponding;
It is sent to target private key information corresponding for described targeted customer's information and described long-range execution order to have
The described target Equations of The Second Kind server of described target identification information, so that described target Equations of The Second Kind server is by institute
The target private key information stating targeted customer's information corresponding is matched with the public key information self stored, if joined
To success, described target Equations of The Second Kind server performs described long-range execution order.
Optionally, it is also possible to including:
Receive described target Equations of The Second Kind server the described of transmission after performing described long-range execution order remotely to hold
The data output content that line command is corresponding, and described data output content is sent to described targeted customer.
Optionally, the request that remotely performs that the described targeted customer of reception sends, may include that
Remotely perform function by calling, receive the request that remotely performs that targeted customer sends.
Optionally, described reception described target Equations of The Second Kind server sends after performing described long-range execution order
Data output content corresponding to described long-range execution order, and described data output content is sent to described
Targeted customer, may include that
By calling data receiver function, receive described target Equations of The Second Kind server and performing described long-range execution
The data output content that after order, the described long-range execution order of transmission is corresponding, and described data are exported content
It is sent to described targeted customer.
Optionally, it is also possible to including:
By calling condition monitoring function, monitor the execution state of described remote execution method.
Optionally, described reception described target Equations of The Second Kind server sends after performing described long-range execution order
Data output content corresponding to described long-range execution order, and described data output content is sent to described
Targeted customer, may include that
When the execution state monitoring described remote execution method be execution complete time, by calling the first data
Receiver function, receives described target Equations of The Second Kind server described in perform to send after described long-range execution order
The data output content that remotely execution order is corresponding, and described data output content is sent to described target use
Family;
When monitoring the execution state of described remote execution method for, time in performing, connecing by calling the second data
Receive function, receive described target Equations of The Second Kind server perform to send after described long-range execution order described far
Journey holds the data output content that line command is corresponding, and described data output content is sent to described targeted customer.
For reaching above-mentioned purpose, the embodiment of the invention also discloses one and remotely perform device, be applied to first
Class server, is previously stored with user profile and has access with described user profile in described first kind server
The corresponding relation of the identification information of the Equations of The Second Kind server of authority and private key information corresponding to described user profile;
Described device includes:
First receiver module, receives the request that remotely performs that targeted customer sends, in described long-range execution request
Including the target identification information of target Equations of The Second Kind server to be visited, remotely execution order and targeted customer's letter
Breath;
Judge module, is used for judging whether this locality has stored described targeted customer's information and believed with described target identification
The corresponding relation of breath;
Search module, for when described judge module judged result is for being, search described targeted customer's information
Corresponding target private key information;
Sending module, for by target private key information corresponding for described targeted customer's information and described long-range execution
Order is sent to the described target Equations of The Second Kind server with described target identification information, so that described target the
Target private key information corresponding for described targeted customer's information is entered by two class servers with the public key information self stored
Row pairing, if successful matching, described target Equations of The Second Kind server performs described long-range execution order.
Optionally, it is also possible to including:
Second receiver module, is used for receiving described target Equations of The Second Kind server and is performing described long-range execution order
The data that the described long-range execution order of rear transmission is corresponding export content, and described data output content are sent
To described targeted customer.
Optionally, described first receiver module, specifically may be used for:
Remotely perform function by calling, receive the request that remotely performs that targeted customer sends.
Optionally, described second receiver module, specifically may be used for:
By calling data receiver function, receive described target Equations of The Second Kind server and performing described long-range execution
The data output content that after order, the described long-range execution order of transmission is corresponding, and described data are exported content
It is sent to described targeted customer.
Optionally, described device can also include:
Monitoring module, for by calling condition monitoring function, monitors the execution shape of described remote execution method
State.
Optionally, described second receiver module, may include that
First receives submodule, for monitoring the execution shape of described remote execution method when described monitoring module
State is execution when completing, and by calling the first data receiver function, receives described target Equations of The Second Kind server and exists
The data that after performing described long-range execution order, the described long-range execution order of transmission is corresponding export content, and will
Described data output content is sent to described targeted customer;
Second receives submodule, for monitoring the execution shape of described remote execution method when described monitoring module
State is for, time in performing, by calling the second data receiver function, receiving described target Equations of The Second Kind server and holding
The data output content that after the described long-range execution order of row, the described long-range execution order of transmission is corresponding, and by institute
State data output content and be sent to described targeted customer.
From such scheme, first kind server is previously stored with user profile and has with described user profile
There are the corresponding relation of the identification information of the Equations of The Second Kind server of access rights and the private that described user profile is corresponding
Key information;What first kind server reception targeted customer sent includes target Equations of The Second Kind server to be visited
Target identification information, remotely execution order and the request that remotely performs of targeted customer's information;First kind server
Judge the local corresponding relation whether storing targeted customer's information and target identification information, if it is, at this
The target private key information that targeted customer's information is corresponding is searched on ground;The target private key that first kind server will find
Information and remotely execution order are sent to target Equations of The Second Kind server;Self is stored by target Equations of The Second Kind server
Public key information and target private key information successful matching after, perform this and remotely perform order.As can be seen here, should
By illustrated embodiment of the present invention, it is not required to configure the environment of multiple IT O&M automation tools, can realize
The different user requirements for access to different remote servers.
Certainly, arbitrary product or the method for implementing the present invention must be not necessarily required to reach above-described institute simultaneously
There is advantage.
Accompanying drawing explanation
In order to be illustrated more clearly that the embodiment of the present invention or technical scheme of the prior art, below will be to enforcement
In example or description of the prior art, the required accompanying drawing used is briefly described, it should be apparent that, describe below
In accompanying drawing be only some embodiments of the present invention, for those of ordinary skill in the art, do not paying
On the premise of going out creative work, it is also possible to obtain other accompanying drawing according to these accompanying drawings.
The first schematic flow sheet of the remote execution method that Fig. 1 provides for the embodiment of the present invention;
The second schematic flow sheet of the remote execution method that Fig. 2 provides for the embodiment of the present invention;
The third schematic flow sheet of the remote execution method that Fig. 3 provides for the embodiment of the present invention;
The first structural representation remotely performing device that Fig. 4 provides for the embodiment of the present invention;
The second structural representation remotely performing device that Fig. 5 provides for the embodiment of the present invention;
The third structural representation remotely performing device that Fig. 6 provides for the embodiment of the present invention.
Detailed description of the invention
Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is carried out clearly
Chu, be fully described by, it is clear that described embodiment be only a part of embodiment of the present invention rather than
Whole embodiments.Based on the embodiment in the present invention, those of ordinary skill in the art are not making creation
The every other embodiment obtained under property work premise, broadly falls into the scope of protection of the invention.
In order to solve prior art problem, embodiments provide a kind of remote execution method and device,
It is applied to first kind server.Wherein, first kind server can be the home server that user can log in;
Equations of The Second Kind server can be the remote server that user needs to access.First kind server is previously stored with
User profile has the corresponding pass of the identification information of the Equations of The Second Kind server of access rights with described user profile
System and private key information corresponding to described user profile.There is provided the embodiment of the present invention first below is a kind of remote
Cheng Zhihang method is described in detail.
Assume first kind server stores user profile A1 and A1 and there is the Equations of The Second Kind service of access rights
The corresponding relation of identification information A2 of device, user profile B1 and B1 have the Equations of The Second Kind service of access rights
The corresponding relation of identification information B2 of device, user profile C1 and C1 have the Equations of The Second Kind service of access rights
The corresponding relation of the identification information C2 of device, and private key information A3 corresponding to user profile A1, user profile
Private key information C3 that corresponding for B1 private key information B3, user profile C1 are corresponding.
The first schematic flow sheet of the remote execution method that Fig. 1 provides for the embodiment of the present invention,
S101: receive the request that remotely performs that targeted customer sends.Wherein, described long-range execution request is wrapped
Include the target identification information of target Equations of The Second Kind server to be visited, remotely perform to order and targeted customer's information.
Concrete, receive the request that remotely performs that targeted customer sends, can remotely perform function by calling,
Receive the request that remotely performs that targeted customer sends.
In actual applications, remotely performing function can be execute function, and execute function includes as follows
Parameter: the target identification information of target Equations of The Second Kind server to be visited, remotely execution order and targeted customer
Information;That is, int execute (hostname, user, command, sysuser), wherein, hostname can
Thinking the target identification information of target Equations of The Second Kind server, concrete, identification information can be server name etc.;
User can be targeted customer's information of target Equations of The Second Kind server to be accessed;Command can be remotely to hold
Line command;Can also include that sysuser, sysuser are the user's letter in target Equations of The Second Kind server to be visited
Breath.
S102: judge the local corresponding relation whether storing targeted customer's information and target identification information, as
Fruit is, performs S103.
Concrete, if the locally stored corresponding relation having targeted customer's information and target identification information, then table
Show that this targeted customer has the authority accessing the Equations of The Second Kind server with this target identification information;If this locality is not
Storage targeted customer's information and the corresponding relation of target identification information, then it represents that this targeted customer does not access tool
There is the authority of the Equations of The Second Kind server of this target identification information, in this case, do not access target Equations of The Second Kind clothes
Business device.
S103: search the target private key information that targeted customer's information is corresponding.
S104: target private key information corresponding for targeted customer's information and long-range execution order are sent to have mesh
The target Equations of The Second Kind server of mark identification information, so that target Equations of The Second Kind server is corresponding by targeted customer's information
Target private key information match with the public key information self stored, if successful matching, target Equations of The Second Kind
Server performs described long-range execution order.
Illustrated embodiment of the present invention can apply SSH agreement, stores private key, the in first kind server
Storage of public keys in two class servers, after public and private key successful matching, Equations of The Second Kind server performs remotely to perform order.
Illustrate with above-mentioned example, it is assumed that receive targeted customer A send the request that remotely performs, described far
Cheng Zhihang request includes the target identification information A2 of target Equations of The Second Kind server to be visited, remotely performs life
Make (in target Equations of The Second Kind server, such as creating a file) and targeted customer's information A1.
First kind server judges whether this locality stores targeted customer's information A1 and target identification information A2's
Corresponding relation, it is judged that result is yes.The target private key that first kind whois lookup targeted customer's information A1 is corresponding
Information A3, by A3 with remotely perform order (such as in target Equations of The Second Kind server create a file)
It is sent to the target Equations of The Second Kind server with target identification information A2.
It will be appreciated by persons skilled in the art that illustrated embodiment of the present invention application SSH agreement, this target
Target private key information A3 corresponding for targeted customer's information A1 received is stored by Equations of The Second Kind server with self
Public key information match.If successful matching, then perform described long-range execution order: this target second
Class server is at a locally created file.
In actual applications, private key information can be saved in the NFS share directory of first kind server, should
NFS carries out network transmission communication by cryptographic protocol, it is also possible to carry, in cluster server, takes at cluster
Ensure that, while sharing private key between business device, the safety that private key transmits.It addition, public key information is saved in second
In class server, if Equations of The Second Kind server preserves public key information X, then it represents that match with public key information X
User corresponding to private key information have the authority accessing this Equations of The Second Kind server.Only it is paired in public private key information
In the case of merit, target Equations of The Second Kind server performs this and remotely performs order.
Apply embodiment illustrated in fig. 1 of the present invention, first kind server is previously stored with user profile with described
User profile has corresponding relation and the described user letter of the identification information of the Equations of The Second Kind server of access rights
The private key information that breath is corresponding;What first kind server reception targeted customer sent includes target second to be visited
The target identification information of class server, remotely execution order and the request that remotely performs of targeted customer's information;The
One class server judges the local corresponding relation whether storing targeted customer's information and target identification information, as
Fruit is, searches the target private key information that targeted customer's information is corresponding in this locality;First kind server will find
Target private key information and remotely perform order and be sent to target Equations of The Second Kind server;Target Equations of The Second Kind server
After the public key information that self is stored and target private key information successful matching, perform this and remotely perform order.By
This is visible, applies illustrated embodiment of the present invention, is not required to configure the environment of multiple IT O&M automation tools,
The different user requirements for access to different remote servers can be realized.
The second schematic flow sheet of the remote execution method that Fig. 2 provides for the embodiment of the present invention, Fig. 2 of the present invention
Illustrated embodiment, on the basis of embodiment illustrated in fig. 1, increases S105.
S105: receive that target Equations of The Second Kind server sends after performing remotely to perform order remotely performs order
Corresponding data output content, and data are exported content be sent to targeted customer.
Concrete, receive that target Equations of The Second Kind server sends after performing remotely to perform order remotely performs life
The data output content that order is corresponding, and data are exported content be sent to targeted customer, can be by calling number
According to receiver function, receive that target Equations of The Second Kind server sends after performing remotely to perform order remotely performs life
The data output content that order is corresponding, and data are exported content be sent to targeted customer.
In actual applications, this remotely performs order can be one literary composition of establishment on target Equations of The Second Kind server
Part folders etc. are ordered, it is also possible to for some data of request target Equations of The Second Kind server, such as CPU usage etc..
Also illustrate with above-mentioned example, it is assumed that this remotely performs order for creating on target Equations of The Second Kind server
Building a file, in execution, this remotely performs order, at a locally created literary composition to target Equations of The Second Kind server
After part folder, the data output content that this can remotely perform order corresponding is sent to first kind server.
This first kind server receives these data output content that this target Equations of The Second Kind server sends, and should
Data output content is sent to targeted customer A.
Assume that this remotely performs the order CPU usage for request target Equations of The Second Kind server, target Equations of The Second Kind
In execution, this remotely performs order to server, after obtaining self CPU usage, this can remotely perform life
Data output content (i.e. self CPU usage) of order correspondence are sent to first kind server.
This first kind server receive this target Equations of The Second Kind server send these data output content (i.e. self
CPU usage), and these data output content is sent to targeted customer A.
Apply embodiment illustrated in fig. 2 of the present invention, receive target Equations of The Second Kind server and remotely perform order in execution
Rear transmission remotely perform the data output content that order is corresponding, and data are exported content be sent to target and use
Family, realizes user's requirements for access to remote server further.
The third schematic flow sheet of the remote execution method that Fig. 3 provides for the embodiment of the present invention, Fig. 3 of the present invention
Illustrated embodiment is on the basis of embodiment illustrated in fig. 2, before S105, increases S106: by calling shape
State monitoring function, the execution state of monitoring remote execution method, it is judged that execution state is that execution completes or holds
In row.
S105 may include that S105A and S105B, when monitoring the execution state of remote execution method for holding
When having gone, perform S105A;When during the execution state monitoring remote execution method is to perform, perform
S105B。
S105A: by calling the first data receiver function, receives target Equations of The Second Kind server and remotely holds in execution
The data output content that order is corresponding that send after line command remotely perform, and data are exported content be sent to
Targeted customer.
S105B: by calling the second data receiver function, receives target Equations of The Second Kind server and remotely holds in execution
The data output content that order is corresponding that send after line command remotely perform, and data are exported content be sent to
Targeted customer.
In actual applications, condition monitoring function can be status function, and the first data receiver function can be
GetLog function, the second data receiver function can be pullLog function.
The execution state of this remote execution method is monitored, when the method has performed by calling status function
Time, by calling getLog function, receive the total data output content that target Equations of The Second Kind server sends,
And total data data content is sent to targeted customer;When the execution state of the method is for time in performing, lead to
Cross and call pullLog function, receive the real-time part data output content that target Equations of The Second Kind server sends,
And the part data output content that this is real-time is sent to targeted customer.
Apply embodiment illustrated in fig. 3 of the present invention, by calling condition monitoring function, it is possible to monitoring remotely performs
The execution state of method, Consumer's Experience is more preferably;When the execution state of remote execution method be execution complete time,
By calling the first data receiver function, receive target Equations of The Second Kind server and send out after performing remotely to perform order
The data output content that order is corresponding that send remotely perform, and data are exported content be sent to targeted customer;
When the execution state of remote execution method is for time in performing, by calling the second data receiver function, receive mesh
What mark Equations of The Second Kind server sent after performing remotely to perform order remotely performs in the data output that order is corresponding
Hold, and data are exported content be sent to targeted customer, it is achieved that in varied situations, in a different manner
The data output content remotely performing order corresponding is sent to user.
Corresponding with above-mentioned embodiment of the method, the embodiment of the present invention also provides for one and remotely performs device.
The first structural representation remotely performing device that Fig. 4 provides for the embodiment of the present invention, including:
First receiver module 201, receives the request that remotely performs that targeted customer sends, and described long-range performs request
Include the target identification information of target Equations of The Second Kind server to be visited, remotely perform to order and targeted customer
Information;
In actual applications, the first receiver module 201, specifically may be used for:
Remotely perform function by calling, receive the request that remotely performs that targeted customer sends.
Judge module 202, is used for judging whether this locality has stored described targeted customer's information and described target identification
The corresponding relation of information;
Search module 203, for when described judge module 202 judged result is for being, searches described target and use
The target private key information that family information is corresponding;
Sending module 204, for by target private key information corresponding for described targeted customer's information with described remotely hold
Line command is sent to the described target Equations of The Second Kind server with described target identification information, so that described target
Equations of The Second Kind server is by the public key information of target private key information corresponding for described targeted customer's information with self storage
Matching, if successful matching, described target Equations of The Second Kind server performs described long-range execution order.
Apply embodiment illustrated in fig. 4 of the present invention, first kind server is previously stored with user profile with described
User profile has corresponding relation and the described user letter of the identification information of the Equations of The Second Kind server of access rights
The private key information that breath is corresponding;What first kind server reception targeted customer sent includes target second to be visited
The target identification information of class server, remotely execution order and the request that remotely performs of targeted customer's information;The
One class server judges the local corresponding relation whether storing targeted customer's information and target identification information, as
Fruit is, searches the target private key information that targeted customer's information is corresponding in this locality;First kind server will find
Target private key information and remotely perform order and be sent to target Equations of The Second Kind server;Target Equations of The Second Kind server
After the public key information that self is stored and target private key information successful matching, perform this and remotely perform order.By
This is visible, applies illustrated embodiment of the present invention, is not required to configure the environment of multiple IT O&M automation tools,
The different user requirements for access to different remote servers can be realized.
The second structural representation remotely performing device that Fig. 5 provides for the embodiment of the present invention, Fig. 5 of the present invention
Illustrated embodiment is on the basis of embodiment illustrated in fig. 4, it is also possible to including:
Second receiver module 205, is used for receiving described target Equations of The Second Kind server performing and described long-range performs life
The data output content that after order, the described long-range execution order of transmission is corresponding, and described data output content is sent out
Give described targeted customer.
In actual applications, the second receiver module 205, specifically may be used for:
By calling data receiver function, receive described target Equations of The Second Kind server and performing described long-range execution
The data output content that after order, the described long-range execution order of transmission is corresponding, and described data are exported content
It is sent to described targeted customer.
Apply embodiment illustrated in fig. 5 of the present invention, receive target Equations of The Second Kind server and remotely perform order in execution
Rear transmission remotely perform the data output content that order is corresponding, and data are exported content be sent to target and use
Family, realizes user's requirements for access to remote server further.
The third structural representation remotely performing device that Fig. 6 provides for the embodiment of the present invention, Fig. 6 of the present invention
Illustrated embodiment is on the basis of embodiment illustrated in fig. 5, it is also possible to including:
Monitoring module 206, for by calling condition monitoring function, monitors the execution of described remote execution method
State.
Second receiver module 205 can include that the first reception submodule 205A and second receives submodule 205B.
First receives submodule 205A, for monitoring the execution of described remote execution method when monitoring module 206
State is execution when completing, and by calling the first data receiver function, receives described target Equations of The Second Kind server
The data output content that the described long-range execution order of transmission is corresponding after performing described long-range execution order, and
Described data output content is sent to described targeted customer;
Second receives submodule 205B, for monitoring holding of described remote execution method when monitoring module 206
Row state is for, time in performing, by calling the second data receiver function, receiving described target Equations of The Second Kind server
The data output content that the described long-range execution order of transmission is corresponding after performing described long-range execution order, and
Described data output content is sent to described targeted customer.
Apply embodiment illustrated in fig. 6 of the present invention, by calling condition monitoring function, it is possible to monitoring remotely performs
The execution state of method, Consumer's Experience is more preferably;When the execution state of remote execution method be execution complete time,
By calling the first data receiver function, receive target Equations of The Second Kind server and send out after performing remotely to perform order
The data output content that order is corresponding that send remotely perform, and data are exported content be sent to targeted customer;
When the execution state of remote execution method is for time in performing, by calling the second data receiver function, receive mesh
What mark Equations of The Second Kind server sent after performing remotely to perform order remotely performs in the data output that order is corresponding
Hold, and data are exported content be sent to targeted customer, it is achieved that in varied situations, in a different manner
The data output content remotely performing order corresponding is sent to user.
It should be noted that in this article, the relational terms of such as first and second or the like be used merely to by
One entity or operation separate with another entity or operating space, and not necessarily require or imply these
Relation or the order of any this reality is there is between entity or operation.And, term " includes ", " comprising "
Or its any other variant is intended to comprising of nonexcludability, so that include the mistake of a series of key element
Journey, method, article or equipment not only include those key elements, but also other including being not expressly set out
Key element, or also include the key element intrinsic for this process, method, article or equipment.Do not having
In the case of more restrictions, statement " including ... " key element limited, it is not excluded that including described wanting
Process, method, article or the equipment of element there is also other identical element.
Each embodiment in this specification all uses relevant mode to describe, phase homophase between each embodiment
As part see mutually, what each embodiment stressed is the difference with other embodiments.
For device embodiment, owing to it is substantially similar to embodiment of the method, so the comparison described
Simply, relevant part sees the part of embodiment of the method and illustrates.
One of ordinary skill in the art will appreciate that all or part of step realizing in said method embodiment
The program that can be by completes to instruct relevant hardware, and described program can be stored in computer-readable
Take in storage medium, the storage medium obtained designated herein, such as: ROM/RAM, magnetic disc, CD etc..
The foregoing is only presently preferred embodiments of the present invention, be not intended to limit protection scope of the present invention.
All any modification, equivalent substitution and improvement etc. made within the spirit and principles in the present invention, are all contained in
In protection scope of the present invention.
Claims (12)
1. a remote execution method, it is characterised in that be applied to first kind server, the described first kind takes
Business device is previously stored with the mark that user profile has the Equations of The Second Kind server of access rights with described user profile
The corresponding relation of knowledge information and private key information corresponding to described user profile;Described method includes:
Receiving the request that remotely performs that targeted customer sends, described long-range execution request includes mesh to be visited
The target identification information of mark Equations of The Second Kind server, remotely execution order and targeted customer's information;
Judge the local corresponding relation whether storing described targeted customer's information and described target identification information;
If it is, search the target private key information that described targeted customer's information is corresponding;
It is sent to target private key information corresponding for described targeted customer's information and described long-range execution order to have
The described target Equations of The Second Kind server of described target identification information, so that described target Equations of The Second Kind server is by institute
The target private key information stating targeted customer's information corresponding is matched with the public key information self stored, if joined
To success, described target Equations of The Second Kind server performs described long-range execution order.
Method the most according to claim 1, it is characterised in that also include:
Receive described target Equations of The Second Kind server the described of transmission after performing described long-range execution order remotely to hold
The data output content that line command is corresponding, and described data output content is sent to described targeted customer.
Method the most according to claim 1, it is characterised in that it is remote that described reception targeted customer sends
Cheng Zhihang asks, including:
Remotely perform function by calling, receive the request that remotely performs that targeted customer sends.
Method the most according to claim 2, it is characterised in that described reception described target Equations of The Second Kind takes
In the business device data that the described long-range execution order of transmission is corresponding after performing described long-range execution order output
Hold, and described data output content is sent to described targeted customer, including:
By calling data receiver function, receive described target Equations of The Second Kind server and performing described long-range execution
The data output content that after order, the described long-range execution order of transmission is corresponding, and described data are exported content
It is sent to described targeted customer.
Method the most according to claim 2, it is characterised in that also include:
By calling condition monitoring function, monitor the execution state of described remote execution method.
Method the most according to claim 5, it is characterised in that described reception described target Equations of The Second Kind takes
In the business device data that the described long-range execution order of transmission is corresponding after performing described long-range execution order output
Hold, and described data output content is sent to described targeted customer, including:
When the execution state monitoring described remote execution method be execution complete time, by calling the first data
Receiver function, receives described target Equations of The Second Kind server described in perform to send after described long-range execution order
The data output content that remotely execution order is corresponding, and described data output content is sent to described target use
Family;
When monitoring the execution state of described remote execution method for, time in performing, connecing by calling the second data
Receive function, receive described target Equations of The Second Kind server perform to send after described long-range execution order described far
Journey holds the data output content that line command is corresponding, and described data output content is sent to described targeted customer.
7. a long-range execution device, it is characterised in that be applied to first kind server, the described first kind takes
Business device is previously stored with the mark that user profile has the Equations of The Second Kind server of access rights with described user profile
The corresponding relation of knowledge information and private key information corresponding to described user profile;Described device includes:
First receiver module, receives the request that remotely performs that targeted customer sends, in described long-range execution request
Including the target identification information of target Equations of The Second Kind server to be visited, remotely execution order and targeted customer's letter
Breath;
Judge module, is used for judging whether this locality has stored described targeted customer's information and believed with described target identification
The corresponding relation of breath;
Search module, for when described judge module judged result is for being, search described targeted customer's information
Corresponding target private key information;
Sending module, for by target private key information corresponding for described targeted customer's information and described long-range execution
Order is sent to the described target Equations of The Second Kind server with described target identification information, so that described target the
Target private key information corresponding for described targeted customer's information is entered by two class servers with the public key information self stored
Row pairing, if successful matching, described target Equations of The Second Kind server performs described long-range execution order.
Device the most according to claim 7, it is characterised in that also include:
Second receiver module, is used for receiving described target Equations of The Second Kind server and is performing described long-range execution order
The data that the described long-range execution order of rear transmission is corresponding export content, and described data output content are sent
To described targeted customer.
Device the most according to claim 7, it is characterised in that described first receiver module, specifically uses
In:
Remotely perform function by calling, receive the request that remotely performs that targeted customer sends.
Device the most according to claim 8, it is characterised in that described second receiver module, specifically uses
In:
By calling data receiver function, receive described target Equations of The Second Kind server and performing described long-range execution
The data output content that after order, the described long-range execution order of transmission is corresponding, and described data are exported content
It is sent to described targeted customer.
11. devices according to claim 8, it is characterised in that described device also includes:
Monitoring module, for by calling condition monitoring function, monitors the execution shape of described remote execution method
State.
12. devices according to claim 11, it is characterised in that described second receiver module, including:
First receives submodule, for monitoring the execution shape of described remote execution method when described monitoring module
State is execution when completing, and by calling the first data receiver function, receives described target Equations of The Second Kind server and exists
The data that after performing described long-range execution order, the described long-range execution order of transmission is corresponding export content, and will
Described data output content is sent to described targeted customer;
Second receives submodule, for monitoring the execution shape of described remote execution method when described monitoring module
State is for, time in performing, by calling the second data receiver function, receiving described target Equations of The Second Kind server and holding
The data output content that after the described long-range execution order of row, the described long-range execution order of transmission is corresponding, and by institute
State data output content and be sent to described targeted customer.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201610200642.5A CN105872059B (en) | 2016-03-31 | 2016-03-31 | A kind of remote execution method and device |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201610200642.5A CN105872059B (en) | 2016-03-31 | 2016-03-31 | A kind of remote execution method and device |
Publications (2)
Publication Number | Publication Date |
---|---|
CN105872059A true CN105872059A (en) | 2016-08-17 |
CN105872059B CN105872059B (en) | 2019-08-09 |
Family
ID=56627105
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201610200642.5A Active CN105872059B (en) | 2016-03-31 | 2016-03-31 | A kind of remote execution method and device |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN105872059B (en) |
Cited By (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN107204843A (en) * | 2017-04-11 | 2017-09-26 | 北京奇艺世纪科技有限公司 | A kind of public-key process method and apparatus |
CN107342999A (en) * | 2017-07-04 | 2017-11-10 | 郑州云海信息技术有限公司 | A kind of system and method based on agent protection certificate is strengthened |
CN109728957A (en) * | 2019-01-31 | 2019-05-07 | 网宿科技股份有限公司 | A kind of method and device of interactive mode O&M |
CN112333244A (en) * | 2020-10-16 | 2021-02-05 | 济南浪潮数据技术有限公司 | Cluster mutual trust method, system, equipment and computer readable storage medium |
Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101119368A (en) * | 2007-08-14 | 2008-02-06 | 北京佳讯飞鸿电气股份有限公司 | Method for implementing wireless network safety communication |
CN101453394A (en) * | 2007-12-03 | 2009-06-10 | 华为技术有限公司 | Method, system and equipment for access control |
US20120084663A1 (en) * | 2010-10-05 | 2012-04-05 | Citrix Systems, Inc. | Display Management for Native User Experiences |
CN102571698A (en) * | 2010-12-17 | 2012-07-11 | ***通信集团公司 | Access authority control method, system and device for virtual machine |
CN103051628A (en) * | 2012-12-21 | 2013-04-17 | 微梦创科网络科技(中国)有限公司 | Method and system for obtaining authentication token based on servers |
-
2016
- 2016-03-31 CN CN201610200642.5A patent/CN105872059B/en active Active
Patent Citations (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101119368A (en) * | 2007-08-14 | 2008-02-06 | 北京佳讯飞鸿电气股份有限公司 | Method for implementing wireless network safety communication |
CN101453394A (en) * | 2007-12-03 | 2009-06-10 | 华为技术有限公司 | Method, system and equipment for access control |
US20120084663A1 (en) * | 2010-10-05 | 2012-04-05 | Citrix Systems, Inc. | Display Management for Native User Experiences |
CN102571698A (en) * | 2010-12-17 | 2012-07-11 | ***通信集团公司 | Access authority control method, system and device for virtual machine |
CN103051628A (en) * | 2012-12-21 | 2013-04-17 | 微梦创科网络科技(中国)有限公司 | Method and system for obtaining authentication token based on servers |
Cited By (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN107204843A (en) * | 2017-04-11 | 2017-09-26 | 北京奇艺世纪科技有限公司 | A kind of public-key process method and apparatus |
CN107204843B (en) * | 2017-04-11 | 2020-10-27 | 北京奇艺世纪科技有限公司 | Public key processing method and device |
CN107342999A (en) * | 2017-07-04 | 2017-11-10 | 郑州云海信息技术有限公司 | A kind of system and method based on agent protection certificate is strengthened |
CN109728957A (en) * | 2019-01-31 | 2019-05-07 | 网宿科技股份有限公司 | A kind of method and device of interactive mode O&M |
CN109728957B (en) * | 2019-01-31 | 2021-08-03 | 网宿科技股份有限公司 | Interactive operation and maintenance method and device |
CN112333244A (en) * | 2020-10-16 | 2021-02-05 | 济南浪潮数据技术有限公司 | Cluster mutual trust method, system, equipment and computer readable storage medium |
Also Published As
Publication number | Publication date |
---|---|
CN105872059B (en) | 2019-08-09 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN110535831B (en) | Kubernetes and network domain-based cluster security management method and device and storage medium | |
CN105430108B (en) | Test environment access method and proxy server | |
CN112448856B (en) | Method and system for providing public network access for external through intranet kubernets | |
CN102045337A (en) | Apparatus and methods for managing network resources | |
CN103477322B (en) | Web data is transmitted between operating system environment | |
CN105872059A (en) | Remote execution method and device | |
CN106878135A (en) | A kind of connection method and device | |
RU2008138577A (en) | NETWORK SYSTEM | |
CN112491616B (en) | Information configuration method, device, electronic equipment and storage medium | |
CN101621527B (en) | Method, system and device for realizing safety certificate based on Portal in VPN | |
CN109541955A (en) | Smart home device management method and system | |
CN109388462A (en) | Report sharing method, device, computer equipment and storage medium | |
CN103716400A (en) | Method and system for achieving mobile working based on virtual machine | |
CN107592360B (en) | Internet of things data aggregation method and system based on hybrid cloud | |
CN103796343B (en) | M2M gateway devices and its application process | |
CN106936935B (en) | Remote control method and device | |
CN104239125A (en) | Object processing method, distributive file system and client device | |
CN102612030B (en) | Wireless access collocation method and system, radio reception device, terminal | |
EP3029917B1 (en) | Method for telecommunication device monitoring | |
CN103259785B (en) | The authentication method of virtual token and system | |
CN103092721B (en) | Application backing up method, electronic equipment and system | |
CN107147651B (en) | Gray level publishing system and publishing method thereof | |
CN104735174A (en) | HTTP transparent proxy implementing method and device | |
CN105245507A (en) | Communication link establishing method and device | |
CN102164121A (en) | Information processing apparatus, information processing method, and program |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |