CN114595005A - Application startup method, device, computer device and storage medium - Google Patents

Abstract

The invention provides a starting method and a device of an application program, computer equipment and a storage medium, wherein the method comprises the following steps: receiving an application program starting request sent to a preset TCP port by a user in the current Windows session environment; determining a user account corresponding to the current Windows session environment according to the application program starting request; and starting the application program through a system account, and displaying the application program in a Windows session environment corresponding to the user account. On one hand, the invention can achieve interaction through the browser and the local desktop application program, and realize the function of opening the local application through the browser under different user environments by using a normal user account; on the other hand, the invention can solve the problem that the application program needing the administrator authority runs in the non-administrator environment, reduce the trouble of Windows popup to users and improve the usability of products. Therefore, the modification cost of the installation files of the application program by software developers can be reduced, and the software delivery efficiency is improved.

Description

Application startup method, device, computer device and storage medium

technical field

The present invention relates to the technical field of Windows operating systems, in particular to a method, device, computer equipment and storage medium for starting an application program.

Background technique

With the continuous update and release of Windows system versions, the security requirements of Windows systems are also getting higher and higher. On the one hand, the Windows system sets an interception function on the browser, which does not allow the browser to directly launch local applications, so as to prevent the operating system from being exposed to malicious attacks in the network environment. On the other hand, some applications have higher requirements for permissions, and their installers have limited their properties to only allow running as administrators, so that ordinary user accounts or temporary access accounts that are not administrators in the operating system cannot start the above-mentioned applications. local application. The above settings bring a lot of inconvenience to the experience of different users.

In the prior art, the above-mentioned applications can be accessed by modifying the business logic. However, to modify the business logic, you need to remove all the code related to privilege escalation or change it to other methods, such as modifying the registry, modifying all operations under the HKEY_LOCAL_MACHINE node to operations for HKEY_CURRENT_USER, etc., the code data involved Large amount, inefficient modification and error-prone.

SUMMARY OF THE INVENTION

The purpose of the present invention is to provide a technical solution that can successfully start a local application program through a browser or other user account of a non-administrator identity in a Windows system, so as to solve the above problems existing in the prior art.

To achieve the above object, the present invention provides a method for starting an application, comprising the following steps:

Receive the application startup request sent by the user to the preset TCP port in the current Windows session environment;

Determine the user account corresponding to the current Windows session environment according to the application startup request;

The application program is started through a system account, and the application program is displayed in the Windows session environment corresponding to the user account.

According to the application startup method provided by the present invention, the step of receiving an application startup request sent by a user in the current Windows session environment includes:

The application startup request is received through a preset TCP port, wherein the startup request is sent by the user through a browser.

According to the application startup method provided by the present invention, the step of determining the user account corresponding to the current Windows session environment according to the application startup request includes:

Obtain the process identifier corresponding to the application startup request of the preset TCP port;

The user account identifier is acquired according to the process identifier.

According to the application startup method provided by the present invention, the step of receiving an application startup request sent by a user in the current Windows session environment includes:

The application program startup request is received by an agent execution program, wherein the startup request is sent by the user by clicking a desktop shortcut of the application program.

According to the application startup method provided by the present invention, after the step of receiving the application startup request sent by the user in the current Windows session environment, the method further includes:

Determine whether the current Windows session environment has the first permission permission to start the application;

In the case that the current Windows session environment does not have the first permission to start the application program, it is determined to start the application program through the system account.

According to the application startup method provided by the present invention, the steps of starting the application program through a system account and displaying the application program in the Windows session environment corresponding to the user account include:

Obtain the second permission permission of the system account relative to the application;

Sending the second permission permission to the user account for the user account to start the application with the second permission permission.

According to the application startup method provided by the present invention, the application startup request is transmitted based on the ECC public-private key mechanism, and the startup request includes any one or more of the following fields: program working directory, program execution path, program Execution parameters, whether to display the interface, and whether to wait for synchronization.

To achieve the above purpose, the present invention also provides a method for starting an application, including:

The startup request receiving module is suitable for receiving the application startup request sent by the user to the preset TCP port in the current Windows session environment;

a user account determination module, adapted to determine the user account corresponding to the current Windows session environment according to the application startup request;

The system account starting module is suitable for starting the application program through the system account, and displaying the application program in the Windows session environment corresponding to the user account.

In order to achieve the above object, the present invention also provides a computer device, comprising a memory, a processor, and a computer program stored in the memory and running on the processor, and the processor implements the steps of the above method when the processor executes the computer program. .

To achieve the above objects, the present invention also provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, implements the steps of the above method.

Compared with the prior art, the present invention has the following beneficial effects:

1. The present invention can achieve interaction through the browser and the local desktop application program, and realize the function of opening the local application with the normal user account through the browser in different user environments;

2. The present invention can solve the problem that applications requiring administrator authority run in a non-administrator environment, reduce the troubles caused by Windows pop-up windows to users, and improve the usability of the product;

3. The present invention can reduce the software developer's cost of modifying the installation file of the application program and improve the software delivery efficiency.

Description of drawings

1 is a flowchart of Embodiment 1 of a method for starting an application program of the present invention;

2 is a schematic flowchart of determining a user account according to Embodiment 1 of the present invention;

3 is a schematic flowchart of starting an application program through a system account according to Embodiment 1 of the present invention;

4 is a sequence diagram of a method for starting an application program according to Embodiment 1 of the present invention;

FIG. 5 is a schematic diagram of a program module of Embodiment 1 of an application startup device according to the present invention;

FIG. 6 is a schematic diagram of the hardware structure of the first embodiment of the application startup device of the present invention.

Detailed ways

In order to make the objectives, technical solutions and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention, but not to limit the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

Example 1

Referring to FIG. 1 , this embodiment provides a method for starting an application, including the following steps:

S100: Receive an application startup request sent by a user to a preset TCP port in the current Windows session environment.

Windows sessions are made up of process and system objects that represent a user's workstation login session. In layman's terms, Windows assigns a unique session to each logged-in user account. Sessions are isolated from each other and exist independently. For example, after the account admin logs in, open a Firefox browser and select a URL to browse the web. Another account, guest, has also logged in to the system, and the desktop that the account sees after logging in and the desktop of admin are two different desktops, and the Firefox browser interface opened by the admin account cannot be seen.

This step is used to receive a start request for a specific application sent by a user in a specific Windows session environment. The specific content of the startup request may include any one or more of the following fields: program working directory (WorkPath), program execution path (ProcessPath), program execution parameters (Parameter), whether to display the interface (IsShowWindow), whether to wait for synchronization (IsSync) ). Wherein, the start request may be sent by a browser, or may be sent by clicking a shortcut corresponding to the application on the desktop. When the user sends a startup request through the browser, the startup request is transmitted to the preset TCP port based on the HTTP protocol; when the user sends the startup request by clicking the shortcut corresponding to the application on the desktop, the startup request The proxy scheduler (or scheduler) associated with the mode is transmitted to the preset TCP port. The preset TCP port can be the local port 9090, which is dedicated to receiving application startup requests.

In order to ensure data security, the application startup request in this embodiment needs to be encrypted for transmission, and the public and private key mechanism based on ECC (Elliptic Curve Encryption Algorithm) is used to ensure transmission security. The user uses the public key to encrypt the command message, and the Windows service uses the private key to decrypt the data and Excuting an order. The expression of the elliptic curve equation is: y ² =x ² +ax+b(molp), where p is a prime number, a and b are self-defined coefficients, and x and y are the abscissa and ordinate values, respectively. The process of using ECC to generate public and private keys includes first constructing an elliptic curve E, selecting a point G on the curve E as a generator, and finding the order of G as n, where n is a prime number; selecting a private key k (k<n ), generate public key Q=kG; encode G and Q plaintext as M, M is a point on curve E; generate ciphertext 1=M+rQ, ciphertext 2=rG, r is a random number less than n, Text 1 and cipher text 2 are used as private keys. The ECC encryption algorithm can use a smaller key and provide a fairly high level of security, with less computation, faster processing, and less storage space and transmission bandwidth. Encrypting the application startup request through the ECC algorithm can effectively improve data security while ensuring transmission efficiency.

S200: Determine a user account corresponding to the current Windows session environment according to the application startup request.

The purpose of this embodiment is to start a specific application in the current Windows session environment. Those skilled in the art understand that there is a one-to-one correspondence between the Windows session environment and user accounts, and the user accounts may include administrator accounts, ordinary user accounts, Temporary guest accounts, etc. The application can be displayed in the current Windows session environment by starting the application through the corresponding user account. In this embodiment, the process identifier corresponding to the above-mentioned application program startup request of the preset TCP port may be acquired first, and then the user account identifier may be acquired according to the process identifier.

Those skilled in the art understand that the Windows API function is an application programming interface in the Windows operating system, and the above steps of determining the user account can be implemented by calling the Windows API function. In this embodiment, a list of all TCP port entities in Windows can be obtained through the Windows native API function GetExtendedTCPTable, the entity structure type in the entity list is PMibTcpTableOwnerPID, and the structure contains two key fields: dwLocalPort (TCP port) and dwOwningPid ( Process ID), through this structure, the process ID corresponding to the specified TCP port number can be obtained; secondly, the Windows session ID corresponding to the process ID can be reversely checked through the Windows local function ProcessIdToSessionId, thus realizing the function of reverse checking the Windows session ID of the TCP port. . FIG. 2 shows a schematic flowchart of determining a user account according to Embodiment 1 of the present invention. As shown in Figure 2, after obtaining the specified TCP port number, obtain a list of all local ports in Windows, and traverse the local port list to determine whether the specified preset TCP port is included; if the specified preset TCP port is included in the local port list , the process ID in the port entity is obtained, and the Windows session ID is obtained according to the process ID, where the Windows session ID is the user account. If the specified preset TCP port is not included in the local port list, it means that the user has not sent an application startup request in the current Windows session environment. At this time, monitoring can be continued until the specified preset TCP port is found in the local port list.

S300: Start the application program through a system account, and display the application program in the Windows session environment corresponding to the user account.

In the case of determining the user account, this step starts the application program through the account number, thereby ensuring that the application program can be run and displayed in the corresponding Windows session environment. As mentioned above, some applications have high setting permissions. For example, only users with an administrator account are allowed to start the application, which causes other user accounts that are not administrators to be unable to start the application. In order to solve this problem, this embodiment can first determine whether the current Windows session environment has the first permission to start the application program; if so, directly use the current user account to start the application program; if not, obtain the system The account is relative to the second permission permission of the application program, and the second permission permission is sent to the determined user account, so that the user account can start the application program through the second permission permission. The system account can be the SYSTEM process that comes with the Windows system. According to the Windows system regulations, the rights of the SYSTEM process are higher than the rights of the administrator.

FIG. 3 is a schematic flowchart of launching an application through a system account according to Embodiment 1 of the present invention. As shown in FIG. 3 , the specific code execution process of step S300 may include querying the Token corresponding to the desktop application session through WTSQueryUserToken (first permission), if the Token (first permission permission) of the desktop application cannot be obtained, directly obtain the Token (second permission permission) of the token of the local service process; secondly, copy the Token (second permission permission) information through DuplicateTokenEx And rename it to DuplicateToken, set the Windows session ID corresponding to DuplicateToken through SetTokenInformation, use CreateEnvironmentBlock to create the environment control block of the session, and finally use CreateProcessAsUser to open the application of command transmission in the specified session.

As mentioned above, when a user sends a startup request by clicking the shortcut corresponding to the application on the desktop, the startup request is transmitted to the preset TCP through the proxy scheduler (or scheduler) associated with the shortcut. port. The scheduler in this embodiment may have two operation modes, one is directly integrated in the software in the form of SDK+lib to run, and the other is an independent executable program that starts a designated desktop application through a given parameter. For unmaintained products, it is only necessary to repackage the installation package of the old product, integrate the Windows session recognition device, the shortcut of the application directly points to the scheduler and configure the original application path to complete the release of the product. , and truly achieve zero code release. For some products with independent maintenance teams, the SDK corresponding to the scheduler can be integrated to start some applications or programs that require administrator privileges.

FIG. 4 shows a sequence diagram of a method for starting an application program according to Embodiment 1 of the present invention. As shown in FIG. 4 , when a user sends a request to start an application for a specific application, the request is first sent to the program scheduler. The program scheduler sends TCP command data packets to the TCP data parsing module. After receiving the TCP command data packet, the TCP data parsing module parses the data packet, the IP address and the port number, and identifies the Windows session corresponding to the current user account through the session identification module according to the parsed port number, and uses the identified Windows session ID ( i.e. user account) returns the TCP data parsing module. Next, the TCP data parsing module sends the TCP data packet and the Windows session ID to the execution module, so that the execution module starts the application based on the current Windows session ID.

To sum up, this embodiment obtains the TCP source port number of the client application through the local TCP service, then obtains the corresponding process ID by scanning the local port number list, and then obtains its Windows session, thereby realizing the Winodws service on the System account Mode Opens the specified application in the mode of the session the client is in. On the one hand, this embodiment provides support for the interaction between a browser and an application program, and the function of opening a local application can be completed under the browser through an HTTP request. On the other hand, the present embodiment solves the problem that the software required to be run by the administrator can be run under the non-administrator by starting the application program through the Winodw service, thereby effectively improving the user's application experience.

Please continue to refer to FIG. 5, which shows an application startup device. In this embodiment, the application startup device 50 may include or be divided into one or more program modules, and one or more program modules are stored stored in the storage medium and executed by one or more processors to complete the present invention and implement the above application startup method. The program module referred to in the present invention refers to a series of computer program instruction segments capable of accomplishing specific functions, and is more suitable for describing the execution process of the application program startup device 50 in the storage medium than the program itself. The following description will specifically introduce the functions of each program module in this embodiment:

A startup request receiving module 51 is adapted to receive an application startup request sent by a user to a preset TCP port under the current Windows session environment;

A user account determination module 52, adapted to determine a user account corresponding to the current Windows session environment according to the application startup request;

The system account starting module 53 is adapted to start the application program through the system account, and display the application program in the Windows session environment corresponding to the user account.

According to the application startup device 50 provided in this embodiment, the startup request receiving module 51 includes:

A browser startup unit 511, adapted to receive the application startup request through a preset TCP port, wherein the startup request is sent by the user through a browser;

The agent program starting unit 512 is adapted to receive the application program starting request through an agent executing program, wherein the starting request is sent by the user by clicking the desktop shortcut of the application program.

According to the application startup device 50 provided in this embodiment, the user account determination module 52 includes:

A process identification determining unit 521, adapted to obtain a process identification corresponding to the application startup request of the preset TCP port;

The user identification determining unit 522 is adapted to obtain the user account identification according to the process identification.

According to the application startup device 50 provided in this embodiment, the system account startup module 53 includes:

The first authority judgment unit 531 is adapted to judge whether the current Windows session environment has the first authority permission to start the application;

The system account determining unit 532 is adapted to determine to start the application program through the system account when the current Windows session environment does not have the first permission permission to start the application program;

The second permission obtaining unit 533 obtains the second permission permission of the system account relative to the application;

The second permission enabling unit 534 sends the second permission permission to the user account, so that the user account can start the application program through the second permission permission.

To sum up, this embodiment obtains the TCP source port number of the client application through the local TCP service, then obtains the corresponding process ID by scanning the local port number list, and then obtains its Windows session, thereby realizing the Winodws service on the System account Mode Opens the specified application in the mode of the session the client is in. On the one hand, this embodiment provides support for the interaction between a browser and an application program, and the function of opening a local application can be completed under the browser through an HTTP request. On the other hand, the present embodiment solves the problem that the software required to be run by the administrator can be run under the non-administrator by starting the application program through the Winodw service, thereby effectively improving the user's application experience.

This embodiment also provides a computer device, such as a smart phone, a tablet computer, a notebook computer, a desktop computer, a rack server, a blade server, a tower server, or a cabinet server (including independent servers, or A server cluster composed of multiple servers), etc. The computer device 60 in this embodiment at least includes but is not limited to: a memory 61 and a processor 62 that can be communicatively connected to each other through a system bus, as shown in FIG. 6 . It should be noted that FIG. 6 only shows the computer device 60 having components 61-62, but it should be understood that implementation of all of the illustrated components is not required, and more or less components may be implemented instead.

In this embodiment, the memory 61 (ie, a readable storage medium) includes a flash memory, a hard disk, a multimedia card, a card-type memory (eg, SD or DX memory, etc.), random access memory (RAM), static random access memory (SRAM), Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), Programmable Read Only Memory (PROM), Magnetic Memory, Magnetic Disk, Optical Disk, etc. In some embodiments, the memory 61 may be an internal storage unit of the computer device 60 , such as a hard disk or memory of the computer device 60 . In other embodiments, the memory 61 may also be an external storage device of the computer device 60, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, flash memory card (Flash Card), etc. Of course, the memory 61 may also include both the internal storage unit of the computer device 60 and its external storage device. In this embodiment, the memory 61 is generally used to store the operating system and various application programs installed on the computer device 60 , for example, the program code of the application program startup device 50 in the first embodiment. In addition, the memory 61 can also be used to temporarily store various types of data that have been output or will be output.

The processor 62 may be a central processing unit (CPU), a controller, a microcontroller, a microprocessor, or other data processing chips in some embodiments. The processor 62 is typically used to control the overall operation of the computer device 60 . In this embodiment, the processor 62 is used for running the program code or processing data stored in the memory 61, for example, the starting device 50 for running the application program, so as to realize the method for starting the application program in the first embodiment.

This embodiment also provides a computer-readable storage medium, such as a flash memory, a hard disk, a multimedia card, a card-type memory (for example, SD or DX memory, etc.), random access memory (RAM), static random access memory (SRAM), only Read-only memory (ROM), Electrically Erasable Programmable Read-Only Memory (EEPROM), Programmable Read-Only Memory (PROM), magnetic memory, magnetic disk, optical disk, server, App application mall, etc., on which computer programs are stored, When the program is executed by the processor, the corresponding function is realized. The computer-readable storage medium of this embodiment is used to store the application startup device 50, and when executed by the processor, implements the application startup method of the first embodiment.

The above-mentioned serial numbers of the embodiments of the present invention are only for description, and do not represent the advantages or disadvantages of the embodiments.

Any description of a process or method in the flowcharts or otherwise described herein may be understood to represent a module, segment or portion of code comprising one or more executable instructions for implementing a specified logical function or step of the process , and the scope of the preferred embodiments of the invention includes alternative implementations in which the functions may be performed out of the order shown or discussed, including performing the functions substantially concurrently or in the reverse order depending upon the functions involved, which should It is understood by those skilled in the art to which the embodiments of the present invention belong.

Those of ordinary skill in the art can understand that all or part of the steps carried by the methods of the above embodiments can be completed by instructing relevant hardware through a program, and the program can be stored in a computer-readable medium, and the program can be stored in a computer-readable medium. When executed, one or a combination of the steps of the method embodiment is included.

In the description of this specification, reference to the terms "one embodiment," "some embodiments," "example," "specific example," or "some examples", etc., means a specific feature described in connection with the embodiment or example, A structure, material, or feature is included in at least one embodiment or example of the present invention. In this specification, schematic representations of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the particular features, structures, materials or characteristics described may be combined in any suitable manner in any one or more embodiments or examples.

From the description of the above embodiments, those skilled in the art can clearly understand that the method of the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course can also be implemented by hardware, but in many cases the former is better implementation.

The above are only preferred embodiments of the present invention, and are not intended to limit the scope of the present invention. Any equivalent structure or equivalent process transformation made by using the contents of the description and drawings of the present invention, or directly or indirectly applied in other related technical fields , are similarly included in the scope of patent protection of the present invention.

Claims (10)

1. A method for starting an application program is characterized by comprising the following steps:

receiving an application program starting request sent to a preset TCP port by a user in the current Windows session environment;

determining a user account corresponding to the current Windows session environment according to the application program starting request;

and starting the application program through a system account, and displaying the application program in a Windows session environment corresponding to the user account.

2. The method for starting the application program according to claim 1, wherein the step of receiving the application program starting request sent by the user in the current Windows session environment comprises:

and receiving the application program starting request through a preset TCP port, wherein the starting request is sent by the user through a browser.

3. The method for starting the application program according to claim 2, wherein the step of determining the user account corresponding to the current Windows session environment according to the application program starting request comprises:

acquiring a process identifier corresponding to the application program starting request of the preset TCP port;

and acquiring the user account identification according to the process identification.

4. The method for starting the application program according to claim 1, wherein the step of receiving the application program starting request sent by the user in the current Windows session environment comprises:

receiving the application program starting request through an agent executive program, wherein the starting request is sent by the user through clicking a desktop shortcut of the application program.

5. The method for starting application programs according to claim 4, wherein after the step of receiving the application program starting request sent by the user in the current Windows session environment, the method further comprises:

judging whether the current Windows session environment has first permission to start the application program;

and determining to start the application program through the system account under the condition that the current Windows session environment does not have first permission for starting the application program.

6. The method for starting the application program according to claim 5, wherein the step of starting the application program through a system account and displaying the application program in a Windows session environment corresponding to the user account comprises:

acquiring a second permission of the system account relative to the application program;

and sending the second permission to the user account so that the user account can start the application program through the second permission.

7. The method for starting the application program according to any one of claims 1 to 6, wherein the application program start request is transmitted based on a public and private key mechanism of ECC, and the start request includes any one or more of the following fields: program working directory, program execution path, program execution parameter, whether to display interface and whether to synchronously wait.

8. A method for starting an application program, comprising:

the starting request receiving module is suitable for receiving an application program starting request sent to a preset TCP port by a user in the current Windows session environment;

the user account determining module is suitable for determining a user account corresponding to the current Windows session environment according to the application program starting request;

and the system account starting module is suitable for starting the application program through a system account and displaying the application program in a Windows session environment corresponding to the user account.

9. A computer arrangement comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the processor implements the steps of the method according to any of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the steps of the method of any one of claims 1 to 7.

Images