Patent ID: 9674143
Date: 2017-06-06
CPC Classifications: H04L

Claim:
1. A security control apparatus for a cloud-based virtual desktop, comprising: a network control unit for receiving a security protocol-based packet that includes a protocol control header and data, wherein the protocol control header includes a type of data, a hash value of a file, user authority information, user environment information, a protocol name, a protocol virtual channel, a data size, a packet identifier (ID), and clipboard information or printing information, and that is transmitted to and from a cloud-based virtual desktop interaction remote agent unit and a virtual machine of a cloud-based virtual desktop interaction device and blocking network traffic between cloud-based virtual desktop interaction remote agent unit and the virtual machine, depending on received results of checking; a policy checking unit for checking whether the clipboard or printing information extracted from the security protocol-based packet is compliant with control policies, wherein the control policies are classified by Internet Protocol (IP), user, and usable function, and transmitting results of checking to the network control unit; a decryption unit for decrypting encrypted data and transmitting the decrypted data to a security solution interaction unit when the data is encrypted data and the clipboard or printing information is compliant with control policies; and the security solution interaction unit for transmitting the decrypted data to a clipboard solution or a printing solution when it is determined by the policy checking unit that the clipboard or printing information is compliant with the control policies, and transmitting the clipboard or printing information extracted from the security protocol-based packet to an external security solution when it is determined by the policy checking unit that the clipboard or printing information is not compliant with the control policies, and transmitting results of checking by a corresponding security solution to the network control unit, wherein the external security solution includes a malicious file identification solution and a data leakage prevention solution.