CN115686694A - Automatic screen unlocking method and device for operating system applied to RPA platform - Google Patents

Abstract

The invention discloses an automatic screen unlocking method and device for an operating system of an RPA platform. The method comprises the following steps: receiving user data input by the robot through a calling interface; carrying out process communication with a user login process by using a pipeline technology, pulling up a user session and a desktop according to user data, activating a login interface process, and calling a login certificate to carry out security authentication; and if the security authentication is passed, simulating to log in the operating system according to the user data, and completing unlocking of the operating system. The scheme provided by the invention aims at solving the problem that the operating system unlocks the screen when the RPA process automation robot executes, and uses the system bottom layer security authentication technology to simulate the user to log in for unlocking and locking the screen.

Description

Method and device for automatically unlocking screen of operating system applied to RPA platform

technical field

The present invention relates to the field of communication technology, in particular to a method and device for automatically unlocking a screen of an operating system applied to an RPA platform.

Background technique

With the increasing number of unattended robots, the demand for machines is increasing, and the corresponding data security requirements are becoming more and more stringent. The existing technical solutions are facing the following problems: 1) Poor maintainability: external equipment solutions It is only limited to physical machines and depends on on-site hardware devices; once a high-density robot is deployed, multiple accounts need to be logged in sequentially, which takes a long time; 2) Poor stability: the remote desktop solution needs to provide a machine as a springboard, once the springboard fails , will affect related machines; the WinIO solution relies on peripheral drivers, and is susceptible to external interference due to the long time in the user login process; 3) Poor security: the external device solution will place the physical machine on site, and there will be irrelevant The safety risk of personnel coming into contact with the device, the remote desktop solution springboard machine has the security risk of global impact once it falls; 4) Poor compatibility: each solution can only be realized in a specific environment, the external device solution requires a physical machine, and WinIO is limited by high Version system security policy restrictions, the remote desktop solution needs a springboard machine. Therefore, there is an urgent need for a solution to solve the problems of poor maintainability, poor security, poor stability, and poor compatibility of existing solutions.

Contents of the invention

In view of the above problems, embodiments of the present invention are proposed to provide a method and device for automatically unlocking the screen of an operating system applied to an RPA platform to overcome the above problems or at least partially solve the above problems.

According to an aspect of an embodiment of the present invention, a method for automatically unlocking the screen of an operating system applied to an RPA platform is provided. Login credentials are pre-registered in the operating system, and the method includes:

Receive the user data input by the robot by calling the interface;

Use the pipeline technology to communicate with the user login process, pull up the user session and desktop according to the user data, activate the login interface process, and call the login credential for security authentication;

If the security authentication is passed, the operating system is simulated to be logged in according to the user data to complete the unlocking of the operating system.

According to another aspect of the embodiments of the present invention, an operating system automatic screen unlocking device applied to an RPA platform is provided. Login credentials are pre-registered in the operating system, and the device includes:

The receiving module is suitable for receiving user data input by the robot through calling the interface;

The security authentication module is suitable for process communication with the user login process using pipeline technology, pulls up the user session and desktop according to the user data, activates the login interface process, and invokes the login credential for security authentication;

The unlocking module is suitable for simulating logging in to the operating system according to the user data to complete the unlocking of the operating system if the security authentication is passed.

According to yet another aspect of the embodiments of the present invention, a computing device is provided, including: a processor, a memory, a communication interface, and a communication bus, and the processor, the memory, and the communication interface complete mutual communication through the communication bus;

The memory is used to store at least one executable instruction, and the executable instruction causes the processor to execute the operation corresponding to the method for automatically unlocking the screen of the operating system applied to the RPA platform.

According to still another aspect of the embodiments of the present invention, a computer storage medium is provided, and at least one executable instruction is stored in the storage medium, and the executable instruction causes the processor to execute the corresponding method for automatically unlocking the screen of the operating system applied to the RPA platform as described above. operation.

The solution provided by the present invention aims at the problem of unlocking the screen of the operating system when the RPA process automation robot executes, and uses the security authentication technology at the bottom of the system to simulate user login to unlock and lock the screen. This solution has no physical machine and virtual machine environment restrictions and is compatible with Windows operation The system is XP and above, with high compatibility, and the unlocking process is faster, more stable and safer.

The above description is only an overview of the technical solutions of the embodiments of the present invention. In order to better understand the technical means of the embodiments of the present invention, it can be implemented according to the contents of the description, and in order to make the above and other purposes, features and The advantages can be more obvious and understandable, and the specific implementation manners of the embodiments of the present invention are enumerated below.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiment. The drawings are only for the purpose of illustrating the preferred embodiments and are not considered as limiting the embodiments of the present invention. Also throughout the drawings, the same reference numerals are used to designate the same components. In the attached picture:

Fig. 1A shows the flow chart of the method for automatically unlocking the screen of the operating system applied to the RPA platform provided by the embodiment of the present invention;

FIG. 1B is a schematic diagram of the functional architecture of the automatic unlocking screen of the operating system applied to the RPA platform provided by the embodiment of the present invention;

FIG. 1C is a schematic diagram of the operation of the user login agent during the unlocking process of the operating system;

FIG. 2 shows a schematic structural diagram of an operating system automatic screen unlocking device applied to an RPA platform provided by an embodiment of the present invention;

Fig. 3 shows a schematic structural diagram of a computing device provided by an embodiment of the present invention.

Detailed ways

Exemplary embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present invention are shown in the drawings, it should be understood that the invention may be embodied in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided for more thorough understanding of the present invention and to fully convey the scope of the present invention to those skilled in the art.

FIG. 1A shows a flowchart of a method for automatically unlocking a screen of an operating system applied to an RPA platform provided by an embodiment of the present invention. Login credentials are pre-registered in the operating system, as shown in Figure 1A, the method includes the following steps:

Step S101, receiving user data input by the robot through calling the interface.

The method for automatically unlocking the screen of the operating system applied to the RPA platform provided by this embodiment is deployed in the form of a Windows service (Windows Service) resident process, which is applicable to operating systems of Windows XP and above versions, and provides a standard interface to the robot for its Call, the robot can input user data by calling the standard interface provided, for example, user account number and user password, the user login agent (user login Agent) is set in the Windows service, so the robot sends the input user data to the user login agent , the user login agent receives the user data input by the robot through calling the interface. The purpose of receiving user data here is to simulate user login based on the user data to unlock the operating system.

Step S102, using the pipeline technology to communicate with the user login process, pull up the user session and desktop according to the user data, activate the login interface process, and call the login credential for security authentication.

Figure 1B is a schematic diagram of the functional architecture of the automatic unlocking screen of the operating system applied to the RPA platform provided by the embodiment of the present invention. As shown in Figure 1B, the Windows service includes the user login Agent, and the user login Agent receives the input from the robot through the calling interface. After the user data, according to the current system version, process communication with the user login process (Winlogn.exe) through the pipeline technology (Windows Pipeline), and pull up the corresponding user session (Session) and desktop (Desktop) according to the user account and user password , activate the login interface process (Logonui.exe) and call the login credentials through the information in the registry (Regedit) for security authentication.

Wherein, the login credential is a key for simulating the automatic unlocking device, and the security login mechanism based on the operating system depends on this credential. The login credential (Credential) is a library file (dll file) generated based on the fusion of the graphic identification and verification technology (GINA) and the credential provider technology (Credential Provider technology). GINA is adapted to XP and Win2003, and Credential Provider is adapted to Win Vista\ Win2008 and above.

When registering, use the registration software provided by the device with the account of the system administrator to complete the automatic registration. The program will automatically select the corresponding registration method according to different operating system versions.

In step S103, if the security authentication is passed, the operating system is simulated to log in according to the user data, and the unlocking of the operating system is completed.

If the security authentication is passed, the operating system is simulated to be logged in according to the user data, and the operating system is unlocked to create a multi-user session (Session). Based on the session, the desktop layer is created and maintained (Desktop Layout), and the robot can capture the UI interface with computer vision. , Mouse and keyboard events.

Figure 1C is a schematic diagram of the operation of the user login agent during the unlocking process of the operating system. As shown in Figure 1B, the unlocking process of the operating system is mainly divided into the following steps:

1) Credentials registration: On the premise of registering the login credentials, when Windows starts, it will register the login credentials itself according to the registry information;

2) Identity verification: the robot sends an unlock request, and sends user data (including user account number and user password) to the user login Agent through process communication (IPC) or remote communication Socket, and the user login Agent checks the received user data. The data is authenticated to ensure that the requested user account is consistent with the user to which the robot belongs, and unauthorized unlocking is blocked;

3) System callback: write the user account number and user password into the memory, and trigger the system user login security process to call back the Agent credential authentication function;

4) Credential authentication: After the system callback is successful, rely on the currently registered login credentials for security authentication, and combine the obtained user account and user password to log in to the system and complete the unlocking;

5) Unlock notification: After the unlock is successful, the unlock result will be fed back to the robot.

In an optional embodiment of the present invention, the method also includes:

Use hook technology to capture the system state of the operating system, for example, call the system event function to obtain the system state marked by the system event;

Determine whether the system status is the login status;

If not, use the pipeline technology to communicate with the user login process, pull up the user session and desktop according to the user data, activate the login interface process, and call the login credential for security authentication;

If so, authenticate the user data used to log into the operating system;

If the verification fails, use the pipeline technology to communicate with the user login process, pull up the user session and desktop according to the user data, activate the login interface process, and call the login credential for security authentication;

If the verification is passed, the unlocking result is fed back to the robot.

Specifically, the Windows service includes the capture system state agent (capture system state Agent), and the capture system state Agent binds the operating system login, lock screen by calling functions provided by Wtsapi32.dll and User32.dll in the application program interface (Win32 API). and other events, mark the event changes, and determine the system state through the marked events.

After capturing the system state of the operating system, it is necessary to judge whether the system state is the login state, if not, use the pipeline technology to communicate with the user login process, pull up the user session and desktop according to the user data, activate the login interface process, and call Login credentials for security authentication;

If so, authenticate the user data used to log in to the operating system, mainly to shield unauthorized unlocking and ensure that the requested user account is consistent with the user to which the robot belongs;

If the verification fails, use the pipeline technology to communicate with the user login process, pull up the user session and desktop according to the user data, activate the login interface process, and call the login credential for security authentication;

If the verification is passed, the unlocking result is fed back to the robot.

In an optional embodiment of the present invention, after the robot receives the feedback of the unlocking result, it performs the operation according to the preset robot process, and waits for the robot to complete the execution, and then needs to perform the lock screen operation, in order to ensure that the operating system If there is an external display, the user-related systems will be exposed, reducing security; since the user's session and desktop will occupy a certain amount of CPU and memory, the lock screen operation can save system resources.

The method also includes: receiving a screen lock request sent by the robot, and calling a screen lock function in response to the screen lock request, so as to complete the locking of the operating system.

The Windows service includes a user lock screen agent (user lock screen Agent), which calls a lock screen function LockWorkStation through an application program interface (Win32API) to implement locking of the operating system.

Before the lock screen operation, the system state of the operating system can also be captured first. If the system state indicates that the current event of the operating system needs to be responded to, the lock screen function LockWorkStation can be called through the application program interface (Win32 API) to realize the lock of the operating system. .

The automatic unlocking screen solution of the operating system applied to the RPA platform provided by this embodiment mainly uses GINA, Credential Providers, and Winlogon technologies to adapt to various versions of the system, provides Windows Service for robots to call, and uses Windows Pipline, Win32 API, and Regedit technologies to complete The underlying data interaction finally realizes the automatic unlocking of the operating system by the robot.

Compared with the prior art, the solution provided by this embodiment has the following advantages:

1) Only the administrator needs to run the installation program to register the login credentials, and the robots in all users of the modified machine can directly call to initiate the login and unlock the system without the assistance of peripheral devices, which improves the maintainability.

2) The automatic unlocking process is based on the login credentials of the Windows underlying security authentication technology, and is installed and registered by the administrator. The user account and password to log in are provided by the robot, which is more secure and reliable.

3) It is resident and stable in the form of Windows service, the response speed of pipeline communication is fast, and the user account is instantly unlocked, which is more stable and reliable.

4) Support WindowsXP and above versions, and support density robots, no restrictions on physical machines and virtual machines, no security policy restrictions, and improved compatibility.

The solution provided by the present invention aims at the problem of unlocking the screen of the operating system when the RPA process automation robot executes, and uses the security authentication technology at the bottom of the system to simulate user login to unlock and lock the screen. This solution has no physical machine and virtual machine environment restrictions and is compatible with Windows operation The system is XP and above, with high compatibility, and the unlocking process is faster, more stable and safer.

FIG. 2 shows a schematic structural diagram of an operating system automatic screen unlocking device applied to an RPA platform provided by an embodiment of the present invention. Login credentials are pre-registered in the operating system. As shown in FIG. 2 , the device includes: a receiving module 201 , a security authentication module 202 , and an unlocking module 203 .

The receiving module 201 is adapted to receive user data input by the robot through calling the interface;

The security authentication module 202 is adapted to use the pipeline technology to communicate with the user login process, pull up the user session and desktop according to the user data, activate the login interface process, and call the login credential for security authentication;

The unlocking module 203 is adapted to simulate logging in to the operating system according to user data to complete the unlocking of the operating system if the security authentication is passed.

Optionally, the device further includes: a capture module adapted to capture the system state of the operating system by using hook technology;

A judging module, adapted to judge whether the system status is a login status;

The security authentication module is also suitable for: if the system status is not the login status, use the pipeline technology to communicate with the user login process, pull up the user session and desktop according to the user data, activate the login interface process, and call the login credential for security authentication;

The identity verification module is suitable for authenticating the user data used to log into the operating system if the system state is a login state;

The security authentication module is also suitable for: if the authentication fails, use the pipeline technology to communicate with the user login process, pull up the user session and desktop according to the user data, activate the login interface process, and call the login credentials for security authentication.

Optionally, the capture module is further adapted to: call a system event function to obtain a system state marked by a system event.

Optionally, the device further includes: a screen-locking module adapted to receive a screen-locking request sent by the robot, and respond to the screen-locking request to call a screen-locking function to complete the locking of the operating system.

Optionally, the login credential is a library file generated based on the fusion of graphical identification and verification technology and credential provision technology.

The solution provided by the present invention aims at the problem of unlocking the screen of the operating system when the RPA process automation robot executes, and uses the security authentication technology at the bottom of the system to simulate user login to unlock and lock the screen. This solution has no physical machine and virtual machine environment restrictions and is compatible with Windows operation The system is XP and above, with high compatibility, and the unlocking process is faster, more stable and safer.

The embodiment of the present invention provides a non-volatile computer storage medium, the computer storage medium stores at least one executable instruction, and the computer executable instruction can execute the operating system applied to the RPA platform in any of the above method embodiments Auto unlock screen method.

FIG. 3 shows a schematic structural diagram of a computing device provided by an embodiment of the present invention, and the specific embodiment of the present invention does not limit the specific implementation of the computing device.

As shown in FIG. 3 , the computing device may include: a processor (processor), a communication interface (Communications Interface), a memory (memory), and a communication bus.

Wherein: the processor, the communication interface, and the memory complete the mutual communication through the communication bus. The communication interface is used to communicate with network elements of other devices such as clients or other servers. The processor is configured to execute the program, and specifically may execute the relevant steps in the above embodiment of the method for automatically unlocking the screen of the operating system applied to the RPA platform for the computing device.

Specifically, the program may include program code including computer operation instructions.

The processor may be a central processing unit CPU, or an ASIC (Application Specific Integrated Circuit), or one or more integrated circuits configured to implement the embodiments of the present invention. The one or more processors included in the computing device may be of the same type, such as one or more CPUs, or may be different types of processors, such as one or more CPUs and one or more ASICs.

Memory for storing programs. The memory may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.

The program may specifically be used to make the processor execute the method for automatically unlocking the screen of the operating system applied to the RPA platform in any of the above method embodiments. For the specific implementation of each step in the program, refer to the corresponding steps and corresponding descriptions in the units in the above-mentioned embodiment of the automatic unlocking screen of the operating system applied to the RPA platform, and details are not repeated here. Those skilled in the art can clearly understand that for the convenience and brevity of description, the specific working process of the above-described devices and modules can refer to the corresponding process description in the foregoing method embodiments, and details are not repeated here.

The algorithms or displays presented herein are not inherently related to any particular computer, virtual system, or other device. Various generic systems can also be used with the teachings based on this. The structure required to construct such a system is apparent from the above description. Furthermore, embodiments of the present invention are not directed to any particular programming language. It should be understood that various programming languages can be used to implement the contents of the embodiments of the present invention described herein, and the above description of specific languages is for disclosing the best implementation mode of the embodiments of the present invention.

In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure the understanding of this description.

Similarly, it should be understood that in the above description of the exemplary embodiments of the present invention, various features of the embodiments of the present invention are sometimes grouped together in order to simplify the embodiments of the present invention and facilitate understanding of one or more of the various inventive aspects. in a single embodiment, figure, or description thereof. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed embodiments of the invention require more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art can understand that the modules in the device in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. Modules or units or components in the embodiments may be combined into one module or unit or component, and furthermore may be divided into a plurality of sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings) and any method or method so disclosed may be used in any combination, except that at least some of such features and/or processes or units are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will understand that although some embodiments herein include some features included in other embodiments but not others, combinations of features from different embodiments are meant to be within the scope of the invention. And form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

The various component embodiments of the present invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art should understand that a microprocessor or a digital signal processor (DSP) may be used in practice to implement some or all functions of some or all components according to the embodiments of the present invention. Embodiments of the present invention can also be implemented as a device or apparatus program (eg, computer program and computer program product) for performing a part or all of the methods described herein. Such a program implementing an embodiment of the present invention may be stored on a computer-readable medium, or may be in the form of one or more signals. Such a signal may be downloaded from an Internet site, or provided on a carrier signal, or provided in any other form.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. Embodiments of the invention can be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means can be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. does not indicate any order. These words can be interpreted as names. The steps in the above embodiments, unless otherwise specified, should not be construed as limiting the execution order.

Claims (10)

1. An automatic screen unlocking method of an operating system applied to an RPA platform, wherein login credentials are registered in the operating system in advance, and the method comprises the following steps:

receiving user data input by the robot through a calling interface;

carrying out process communication with a user login process by using a pipeline technology, pulling up a user session and a desktop according to user data, activating a login interface process, and calling a login certificate to carry out security authentication;

and if the user passes the safety authentication, simulating to log in the operating system according to the user data, and completing unlocking of the operating system.

2. The method of claim 1, wherein the method further comprises:

capturing the system state of an operating system by utilizing a hook technology;

judging whether the system state is a login state or not;

if not, process communication is carried out with the user login process by using a pipeline technology, a user session and a desktop are pulled up according to user data, a login interface process is activated, and the login certificate is called for security authentication;

if so, performing identity authentication on user data for logging in the operating system;

if the verification fails, process communication is carried out with the user login process by using a pipeline technology, a user session and a desktop are pulled up according to user data, a login interface process is activated, and the login credentials are called for safety authentication.

3. The method of claim 2, wherein capturing the system state of the operating system using hooking techniques further comprises:

and calling a system event function to acquire the system state of the system event mark.

4. The method according to any one of claims 1-3, wherein the method further comprises: and receiving a screen locking request sent by the robot, responding to the screen locking request, and calling a screen locking function to complete the locking of the operating system.

5. The method of any of claims 1-3, wherein the login credentials are library files generated based on a graphical identification and authentication technique and a fusion of credential provisioning techniques.

6. An operating system automatic screen unlocking device applied to an RPA platform, wherein login credentials are registered in the operating system in advance, and the device comprises:

the receiving module is suitable for receiving user data input by the robot through the calling interface;

the safety authentication module is suitable for carrying out process communication with a user login process by utilizing a pipeline technology, pulling up a user session and a desktop according to user data, activating a login interface process, and calling the login credentials to carry out safety authentication;

and the unlocking module is suitable for simulating to log in the operating system according to the user data if the security authentication is passed, so as to finish unlocking the operating system.

7. The apparatus of claim 6, wherein the apparatus further comprises:

a capture module adapted to capture a system state of an operating system using hook technology;

the judging module is suitable for judging whether the system state is a login state or not;

the security authentication module is further adapted to: if the system state is not the login state, process communication is carried out with a user login process by using a pipeline technology, a user session and a desktop are pulled up according to user data, a login interface process is activated, and the login credential is called to carry out security authentication;

the identity authentication module is suitable for performing identity authentication on user data for logging in the operating system if the system state is a login state;

the security authentication module is further adapted to: if the verification fails, process communication is carried out with the user login process by using a pipeline technology, a user session and a desktop are pulled up according to user data, a login interface process is activated, and the login credentials are called for safety authentication.

8. The apparatus of claim 7, wherein the capture module is further adapted to: and calling a system event function to acquire the system state of the system event mark.

9. A computing device, comprising: the system comprises a processor, a memory, a communication interface and a communication bus, wherein the processor, the memory and the communication interface complete mutual communication through the communication bus;

the memory is used for storing at least one executable instruction, and the executable instruction causes the processor to execute the operation corresponding to the automatic screen unlocking method of the operating system applied to the RPA platform, as claimed in any one of claims 1-5.

10. A computer storage medium having at least one executable instruction stored therein, the executable instruction causing a processor to perform operations corresponding to the method for automatically unlocking a screen by an operating system applied to an RPA platform according to any one of claims 1 to 5.

Images