摘要：【中文】本发明公开一种堡垒机的ukey映射方法，通过ukey驱动替换，将ukey相关信息发送至堡垒机服务器，堡垒机进一步将ukey驱动及信息映射到windows虚拟主机，创建相应的虚拟ukey端，运维用户电脑的ukey端与堡垒机的虚拟ukey端进行ukey驱动数据的交互，从而堡垒机实现对远程运维用户ukey的认证；并且可以有效提高一个用户下多个ukey以及一个目标被多人运维场景下，ukey认证的效率和安全性，从而进一步提高运维效率。 【EN】The invention discloses a ukey mapping method of a fortress machine, which comprises the steps of sending ukey related information to a fortress machine server through ukey drive replacement, further mapping the ukey drive and the information to a windows virtual host by the fortress machine, creating a corresponding virtual ukey end, and performing ukey drive data interaction between the ukey end of an operation and maintenance user computer and the virtual ukey end of the fortress machine, so that the fortress machine realizes the authentication of a remote operation and maintenance user ukey; and the ukey authentication efficiency and the ukey authentication safety can be effectively improved under the condition that a plurality of ukey users are under one user and a target is operated and maintained by a plurality of users, so that the operation and maintenance efficiency is further improved.

摘要：【中文】本发明公开一种基于RDP远程协议的实现协同运维的方法，并且基于该方法提出一种堡垒机（安全运维管理）系统，运维用户通过Mstsc客户端连接至代理程序，代理程序连接至被运维设备，当运维用户发起协助请求且协助用户接受协助请求后，协助用户也通过Mstsc客户端连接至代理程序；代理程序将Mstsc客户端的输入数据发送至被运维设备，将被运维设备返回的展示数据发送至Mstsc客户端，并且根据RDP协议格式解析数据，实现运维用户与协助用户的远程图像保持实时一致，从而实现了协同运维，提高运维效率。 【EN】The invention discloses a method for realizing cooperative operation and maintenance based on an RDP (remote data protocol), and provides a bastion machine (safe operation and maintenance management) system based on the method.A user of operation and maintenance is connected to an agent program through an Mstsc client, the agent program is connected to an operated and maintained device, and when the user of operation and maintenance initiates an assistance request and the user of assistance receives the assistance request, the user of assistance is also connected to the agent program through the Mstsc client; the agent program sends the input data of the Mstsc client to the operated and maintained equipment, sends the display data returned by the operated and maintained equipment to the Mstsc client, and analyzes the data according to the RDP protocol format to realize real-time consistency of the remote images of the operation and maintenance user and the assistant user, so that cooperative operation and maintenance are realized, and operation and maintenance efficiency is improved.

摘要：【中文】本发明公开一种堡垒机的UKEY代理实现方法，包括：向运维端请求UKEY信息；接收运维端返回的UKEY信息并存入共享内存区；从共享内存区取出UKEY信息进行显示；从运维端选定待映射的UKEY；将新建的虚拟主机账户与密码及UKEY信息发至运维端，监听并转发UKEY交互信息；当接收到断开当前会话请求时，终止当前UKEY的映射过程并清空共享内存的对应UKEY信息。实现了UKEY从不同的运维端映射至相对应的映射端，保证UKEY高效管理，为后续的UKEY认证提供了较佳的实施方式。 【EN】The invention discloses a UKEY agent implementation method of a fort machine, which comprises the following steps: requesting UKEY information from an operation and maintenance terminal; receiving UKEY information returned by the operation and maintenance terminal and storing the UKEY information into a shared memory area; extracting UKEY information from the shared memory area for display; selecting a UKEY to be mapped from an operation and maintenance terminal; sending the newly-built virtual host account, the password and the UKEY information to an operation and maintenance terminal, and monitoring and forwarding the UKEY interaction information; and when a request for disconnecting the current session is received, terminating the mapping process of the current UKEY and emptying the corresponding UKEY information of the shared memory. The method and the device realize the mapping of the UKEY from different operation and maintenance terminals to the corresponding mapping terminal, ensure the high-efficiency management of the UKEY and provide a better implementation mode for the subsequent authentication of the UKEY.