CN104636678B - The method and system of management and control is carried out under a kind of cloud computing environment to terminal device - Google Patents

Abstract

The invention discloses a method and a system for managing and controlling terminal equipment in a cloud computing environment. The method includes: after the terminal captures the startup interrupt signal, downloading the XEN kernel from the server to the local memory for execution, and then starting and running the XEN virtual machine monitor; the terminal sends the user login information to the server; after passing the verification of the server, receiving After receiving the operating system and application program list returned by the server, the terminal will send the selected operating system and application program to the server after making a selection; after successful login, the terminal will send the collected hardware information and/or software information to the server. The invention satisfies the supervisory function and guarantees safety.

Description

Method and system for managing and controlling terminal equipment in a cloud computing environment

technical field

The present invention relates to the field of computers, in particular to a method and system for managing and controlling terminal equipment in a cloud computing environment.

Background technique

With the rapid development of information science and technology, networks and computers have penetrated into people's daily life, whether enterprises, government agencies or schools are deploying and using more and more computers. Faced with these increasing IT assets, an enterprise needs to be able to effectively manage the hardware assets (number and configuration of machines) and software assets (type and quantity of installed software) of these computers. At the same time, since users are expected to use these devices safely and effectively, it is necessary to monitor and control the system operating status and user activities when necessary. Therefore, how to effectively monitor and manage IT assets is an important issue.

There are two problems with the traditional regulatory approach:

First, the management agent program works inside the operating system, and is easily damaged by users consciously or unconsciously, and is also easily attacked by malicious virus software such as viruses and worms.

Second, cross-device and cross-platform supervision functions cannot be provided, that is, computing devices using different operating systems cannot be supervised.

Contents of the invention

Abbreviations involved in the present invention

EFI: Extensible Firmware Interface, extensible firmware interface;

PXE: Pre-boot Execution Environment, pre-boot operating environment;

VMM: Virtual Machine Monitor, virtual machine monitor;

iSCSI: Internet Small Computer System Interface, Internet small computer interface;

UDP: User Datagram Protocol, User Datagram Protocol.

In view of the above, the present invention proposes a method and system for managing and controlling terminal equipment in a cloud computing environment.

According to one aspect of the present invention, a system for managing and controlling terminal equipment in a cloud computing environment is proposed, including a terminal, and the terminal includes a hardware layer, a firmware layer, a VMM layer, and a user operating system layer, wherein:

The firmware layer, after capturing the startup interrupt signal, downloads the XEN kernel from the server to the local memory for execution, and then starts and runs the XEN virtual machine monitor;

The VMM layer sends user login information to the server, receives the operating system and application program list returned by the server, sends the selected operating system and application program to the server, and sends the collected hardware information and/or software information to the server.

Further, the VMM layer sets a resource management agent, which includes a temporary state storehouse, a first communication interface, a user login service, and a proxy service, wherein:

Temporary state library, which saves various software and hardware information of the current terminal;

The first communication interface sends the hardware information obtained by the hardware information collection module and/or the software information obtained by the user view reconstruction module to the server, and sends the user login information to the server;

User login service, send user login information to the server, receive the operating system and application program list returned by the server, and send the selected operating system and application program list to the server;

Agent service includes hardware information collection module and user view reconstruction module, among which:

The hardware information collection module collects hardware information;

The user view reconstruction module collects software information.

Further, the XEN virtual machine monitor of the VMM layer creates domain 0, and the resource management agent runs in XEN domain 0.

Further, the firmware layer adopts the EFI firmware interface, and captures the startup interrupt signal through the EFI interface.

Further, the proxy service also includes a configuration execution module, which receives hardware and/or software configuration information sent by the server, and invokes a corresponding program to perform configuration operations according to the configuration information.

According to another aspect of the present invention, a system for managing and controlling terminal devices in a cloud computing environment is also proposed, including a server, the server including a startup module, a web management tool, and a resource management center, wherein:

The startup module, when the terminal starts, interacts with the terminal and provides XEN kernel download;

Web management tool, after the terminal is started, call the resource management center;

The resource management center receives the user login information sent by the terminal, returns the operating system and application program list to the terminal after the verification is passed, receives the operating system and application program selected by the terminal, and receives the hardware information and/or software information collected by the terminal .

Further, the resource management center includes a visual agent, a management resource library, a user authentication service, a management service and a second communication interface, wherein:

Visual agent, providing visual management information and configuration commands for web management tools;

The second communication interface is used to receive hardware information and/or software information sent by the terminal;

Manage the resource library, classify, store and maintain various collected data information;

User authentication service, receiving user login information from the terminal through the second communication interface, querying the management resource library to verify whether the user has login authority, if the authentication is passed, querying and returning the list of operating systems and application programs that the user can use, otherwise, Return login failed;

Management services include authority control module, information collection module and performance monitoring module, among which:

Authority control module, granting different supervision scope and authority level;

The performance monitoring module, after being authorized by the authority control module, sends various types of software and hardware information query requests through the second communication interface;

The information collection module is used to hand over the hardware information and/or software information sent by the terminal to the management resource library for maintenance.

Further, the management service also includes a configuration module, which provides a unified call interface for the visualization agent to process other components’ operation requests for terminal configuration information, and after being authorized by the authority control module, sends the hardware and/or software configuration to the terminal through the second communication interface information, so that the terminal performs corresponding operations according to the configuration information.

According to another aspect of the present invention, a system for managing and controlling terminal devices in a cloud computing environment is also proposed, including any of the above-mentioned terminals and any of the above-mentioned servers.

Further, the terminal and the server communicate by exchanging resource management protocol messages, the protocol messages are transmitted through the UDP protocol, and each message is individually encapsulated in a UDP data packet.

According to another aspect of the present invention, a method for managing and controlling terminal equipment in a cloud computing environment is also proposed, wherein:

After capturing the startup interrupt signal, the terminal downloads the XEN kernel from the server to the local memory for execution, and then starts and runs the XEN virtual machine monitor;

The terminal sends the user login information to the server;

After passing the verification of the server, the terminal receives the operating system and application program list returned by the server, and after the terminal makes a selection, it sends the selected operating system and application program to the server;

After successful login, the terminal sends the collected hardware information and/or software information to the server.

Further, when the terminal receives the hardware and/or software configuration information sent by the server, it invokes a corresponding program to perform a configuration operation according to the configuration information.

Further, the terminal and the server communicate by exchanging resource management protocol messages, the protocol messages are transmitted through the UDP protocol, and each message is individually encapsulated in a UDP data packet.

According to another aspect of the present invention, a method for managing and controlling terminal equipment in a cloud computing environment is also proposed, wherein:

When the terminal starts, the server interacts with the terminal and provides XEN kernel download;

After the terminal is started, the server receives the user login information sent by the terminal, and returns the list of operating systems and applications to the terminal after the verification is passed;

After the terminal is selected, the operating system and application program selected by the terminal are received;

The hardware information and/or software information collected by the terminal is received.

Further, the server sends hardware and/or software configuration information to the terminal, so that the terminal performs corresponding operations according to the configuration information.

The invention completes the software and hardware resource management of the terminal equipment in the cloud computing environment based on the virtual machine technology, satisfies the supervisory function and guarantees the safety.

Description of drawings

The accompanying drawings described here are used to provide a further understanding of the present invention, and constitute a part of the present invention. The schematic embodiments of the present invention and their descriptions are used to explain the present invention, and do not constitute improper limitations to the present invention. In the attached picture:

FIG. 1 is a schematic structural diagram of a system for managing and controlling terminal devices in a cloud computing environment in an embodiment of the present invention.

Fig. 2 is a schematic diagram of the system structure in another embodiment of the present invention.

Fig. 3 shows the resource management protocol packet format in the present invention.

FIG. 4 is a schematic diagram of the interaction flow of the resource management protocol in the present invention.

FIG. 5 is a schematic flowchart of a method for managing and controlling a terminal device in a cloud computing environment in an embodiment of the present invention.

FIG. 6 is a schematic flowchart of a method for managing and controlling a terminal device in a cloud computing environment in another embodiment of the present invention.

detailed description

Various exemplary embodiments of the present invention will now be described in detail with reference to the accompanying drawings. It should be noted that the relative arrangements and numerical values of components and steps set forth in these embodiments do not limit the scope of the present invention unless specifically stated otherwise.

At the same time, it should be understood that, for the convenience of description, the sizes of the various parts shown in the drawings are not drawn according to the actual proportional relationship.

The following description of at least one exemplary embodiment is merely illustrative in nature and in no way taken as limiting the invention, its application or uses.

Techniques, methods and devices known to those of ordinary skill in the relevant art may not be discussed in detail, but where appropriate, such techniques, methods and devices should be considered part of the Authorized Specification.

In all examples shown and discussed herein, any specific values should be construed as illustrative only, and not as limiting. Therefore, other examples of the exemplary embodiment may have different values.

It should be noted that like numerals and letters denote like items in the following figures, therefore, once an item is defined in one figure, it does not require further discussion in subsequent figures.

Cloud computing is a kind of computing that provides services to users. Its goal is to let users not need to know the calculation process and service details when the system provides services to users, but only care about whether the system can provide the required services and service quality. As a computing model of service sharing, cloud computing has incomparable advantages over traditional computing models in terms of system deployment, management and maintenance, and security.

The present invention proposes a method and system for managing and controlling terminal equipment in a cloud computing environment, and realizes remote resource management based on virtual machine technology. In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be described in further detail below in conjunction with specific embodiments and with reference to the accompanying drawings.

FIG. 1 is a schematic structural diagram of a system for managing and controlling terminal devices in a cloud computing environment in an embodiment of the present invention. The system includes terminals and servers.

After capturing the startup interrupt signal, the terminal downloads the XEN kernel from the server to the local memory for execution, and then starts and runs the XEN virtual machine monitor. The terminal sends the user login information to the server, and the server performs verification. After the verification is passed, for example, according to the user name and password, the server returns the list of operating systems and application programs to the terminal. The terminal makes a selection, and sends the selected operating system and application program list to the server. Among them, the operating system and application programs are always on the server, and the client can use the network storage located on the server through the iSCSI protocol. At this time, the server may provide the data access service for the terminal. The terminal collects hardware information and/or software information and sends it to the server, and the server controls the information of the terminal.

A schematic structural diagram of the terminal is also shown in FIG. 1 . The terminal has no operating system and supporting tools and applications on it, and does not need secondary storage such as hard disks, and is only responsible for calculation and input and output. The operating system and application program used by the terminal are stored in the server of the distributed network for unified management and maintenance by the server, that is, the operating system and application program resources of the client are always located on the server, so the server knows the resources used by the terminal and Resource information can be easily obtained. The functional hierarchy of the terminal is divided into hardware layer, firmware layer, virtual machine monitor (VMM) layer and user operating system layer from bottom to top.

When the terminal starts, after the PXE protocol solidified in EFI in the firmware layer captures the startup interrupt signal, it downloads the XEN kernel to the local memory for dynamic scheduling and execution. The firmware layer uses EFI technology to effectively shield the differences of the hardware platform and provide an open interface standard for the upper operating system. Hardware control can be carried out by calling the motherboard and operating system interfaces provided by EFI.

The domain 0 created by the XEN VMM (XEN is an open source virtual machine monitor) of the VMM layer can manage and schedule other user operating systems and manage and configure software and hardware resources. At this point, the resource management agent running in XEN domain 0 starts to run, sends user login information to the server, receives the operating system and application program list returned by the server, and sends the selected operating system and application program list to the server. After that, domain 0 will intercept all I/O access requests of the operating system to the local disk, and forward the I/O requests to the server through the iSCSI protocol, that is, access the network storage device on the server through the iSCSI protocol. The resource management agent collects hardware information and/or software information and sends them to the server.

In the present invention, the operation of collecting information occurs in domain 0, rather than within the operating system of the user domain. In addition, the terminal adopts the EFI firmware interface, which has more powerful functions than the traditional BIOS interface, and can obtain more hardware status.

A schematic structural diagram of the server is also shown in FIG. 1 . The server includes a startup module, a web management tool and a resource management center.

The server is the entire information processing and task scheduling center, responsible for the monitoring and management of the terminal and the server. When the terminal starts, the server interacts with the terminal through the startup module and provides XEN kernel download. After startup, the resource management center component is invoked through the web management tool to monitor and configure the software and hardware of the terminal. The server stores and manages resources such as programs and data for the storage resource provider, is responsible for responding to data requests from the terminal, and dynamically transfers the systems, tools and applications required by the terminal to the terminal's memory for execution, and is not responsible for Computational work requested by the user.

The present invention runs the software and hardware resource management tool (that is, the resource management agent) in the VMM under the operating system of the terminal device instead of running in the user operating system space, thereby enabling cross-platform and cross-device supervision without Like traditional management agent software, it will be accidentally deleted by users or destroyed and controlled by viruses, Trojan horses, etc.

Fig. 2 is a schematic diagram of the system structure in another embodiment of the present invention. The system cooperates with the resource management agent working on the terminal and the resource management center working on the server to complete the function of resource management and control.

As shown in FIG. 2 , the VMM layer of the terminal sets a resource management agent, and the resource management agent includes a temporary state store, a first communication interface, a user login service and a proxy service.

The temporary state store is used to save various software and hardware information of the current terminal.

The first communication interface interacts with the server through the resource management protocol, sends user login information and software and hardware information, and receives configuration commands from the server.

The user login service sends the user login information to the server, receives the operating system and application program list returned by the server, and sends the selected operating system and application program list to the server. Thereafter, domain 0 will intercept all I/O access requests of the operating system to the local disk, and forward the I/O requests to the server through the iSCSI protocol.

The agent service is the core component of the resource management agent, including the hardware information collection module,

User view reconstruction module, report processing module and configuration execution module. in:

The hardware information collection module is responsible for the acquisition of hardware information, calls the relevant interface services provided by EFI, and can obtain the real-time hardware configuration and operation status of the current computing device, such as CPU, memory, voltage, temperature and speed, etc.

The user view reconstruction module reconstructs the user file system view based on the user view reconstruction method. Since the virtual machine monitor can obtain the block-level content of the user virtual device, the user view reconstruction module can reconstruct the entire user file system by reading the content stored in the user virtual device. The user view reconstruction module can access the memory content used by the user. With the assistance of the above-mentioned reconstructed user file system, the user view reconstruction module can reconstruct the view of the memory of the user operating system. By analyzing the process control block in the view, you can get the status of the process currently running by the user, that is, obtain software information.

After the report processing module classifies and organizes the collected software and hardware information, it sends it to the server through the first communication interface. The report processing module can periodically send hardware and/or software information. The report processing module can judge whether there is an abnormal event according to the collected software and hardware information, and if so, send an abnormal report to the server. When the server receives the exception report, there are two types of processing methods: 1. Automatically send configuration instructions to the client, and the configuration execution module of the client calls the relevant functional components to complete the configuration again. 2. The server does not perform any operation, but prompts the administrator that there is an exception, and waits for the administrator to solve it.

The configuration execution module is an independent program for configuring a specific parameter, and there may be multiple configuration execution components. After receiving the hardware and/or software configuration information sent by the server, the configuration execution module invokes a corresponding program to perform configuration operations according to the configuration information.

As shown in Figure 2, the resource management center on the server includes a visual agent, a management resource library, a second communication interface, user authentication service and management service.

The visual proxy consists of a series of user APIs, providing visual management information and configuration commands for web management tools.

The second communication interface receives hardware information and/or software information sent by the terminal, and sends configuration commands.

The management resource library is the data center of management information, which classifies, stores and maintains various data information collected, and provides the required information resources according to the needs of each functional component. The management resource library includes three categories: (i) user information, including user name, user password, user group, user operating system list, user service priority, user current operating status, and various user attribute information. (ii) Device hardware information, including CPU type, main frequency, temperature, memory size, available memory value, total amount of hard disk, idle value of hard disk, network traffic, power supply voltage, etc. (iii) System software information, including the type of operating system currently in use, installed applications, and system processes at runtime, etc.

The user authentication service receives user login information from the terminal through the second communication interface, and queries the management resource library to verify whether the user has login authority. If the authentication is passed, query and return the list of operating systems and applications that the user can use, otherwise, return login failure.

As the core component of the resource management center, the management service is responsible for various management tasks, including authority control module, information collection module, performance monitoring module, configuration module and coordination module. Wherein, after being authorized by the authority control module, the performance monitoring module can send a query request to the first communication interface of the terminal through the second communication interface; The second communication interface sends configuration information to the first communication interface of the terminal. Each module will be described in detail below.

The authority control module grants different supervisory scopes and authority levels. Authority control includes two aspects of querying resource status and remote configuration. The resource status of the client is saved on the server, and the permission control module is responsible for checking whether the administrator's request has permission; the remote configuration can only be sent to the client for execution after being checked and authorized by the permission control module. That is, when a new supervision request occurs, the command needs to be checked and authorized by the authority control module before being sent to the network.

The performance monitoring module is responsible for regularly sending various types of software and hardware information query requests.

The information collection module receives and analyzes the monitoring report sent by the terminal, including hardware information and/or software information, and submits the parsed data to the management resource library for maintenance.

The configuration module manages the configuration information of the terminal. All read and write operations of configuration information need to be completed through the configuration module. It provides a unified call interface for the visual agent to process other components’ operation requests for terminal configuration information. After authorization by the authority control module , sending hardware and/or software configuration information to the terminal through the second communication interface, so that the terminal performs corresponding operations according to the configuration information.

The coordination module is the scheduler of the resource management center, which is used to coordinate the processing process of each module to ensure that each module cooperates to complete the monitoring and management of the terminal according to the prescribed process, and to ensure the safe use of user systems and equipment.

In an embodiment of the present invention, the resource management agent and the resource management center communicate by exchanging resource management protocol messages. In order to reduce the complexity of the protocol and improve the efficiency, the protocol message is transmitted through the UDP protocol, and each message is individually encapsulated in a UDP data packet. FIG. 3 shows the format of the resource management protocol data packet in the present invention.

The message header is the unified header structure of the resource management protocol data unit, including the sender, receiver, message type, and message length of the message.

The body of the message includes hardware information and software information, which are used to describe the information of the management object transmitted in the protocol, including the type, quantity, data length, and data content of the management object. In order to improve the scalability of the protocol, the specific types of parameters are not specified, and users can customize parameter types in combination with actual applications.

The protocol supports seven message formats: Search, Ready, Register, Update, Set, Response, and Trap. Among them, the Search message is used by the resource management agent to send the user name and password to the resource management center, requesting to connect and obtain the list of operating systems and applications; the Ready message is used by the resource management center to reply to the resource management agent about the operating systems and applications available to the user program list; the Register message is used by the resource management agent to select and confirm the obtained operating system and application program list; the Update message is used by the resource management agent to update the current real-time software and hardware status information to the resource management center; the Set message is used for The resource management center sets the status of the terminal; the Response message is used for the resource management agent and the resource management center to respond to the received message; the Trap message is used for the resource management agent to report abnormalities.

FIG. 4 is a schematic diagram of the interaction flow of the resource management protocol in the present invention. Including the following interaction process:

Request to connect. After the terminal is powered on and started, the PXE protocol pre-resident in the EFI will capture the terminal's startup interrupt signal, and download the XEN domain 0 to the local memory to run. After the user enters the login information, the resource management agent in domain 0 encrypts the user login information and terminal device information, encapsulates it into a Search message, and sends it to the resource management center for login verification.

verify. After receiving the user connection request, the resource management center verifies the received login information. After the verification is passed, the resource management center encapsulates the list of operating systems and application programs corresponding to the user in a Ready message and sends it back to the terminal. Otherwise, sending verification fails.

confirm. The resource management agent receives the Ready message and checks the content of the message. If the authentication is passed, the resource management agent sends the selected operating system and application program list to the resource management center through the Register message, and the resource management center uses the iSCSI protocol to provide block-level data access services for the terminal. If you have not passed the authentication, you need to log in again according to the prompts.

renew. After the user successfully logs in, the resource management agent running in domain 0 regularly collects the hardware information of the current terminal through the service interface provided by EFI, and uses the user view reconstruction module to obtain the system process table, and periodically sends Update reports to the resource management center. file to update the device information and system information of the terminal, that is, software and hardware information.

set up. When the resource management center needs to set the software and hardware configuration of the terminal, it will send a Set message to the terminal. After the terminal receives it, it first checks whether all the setting operations in the message can be completed. If yes, the terminal performs a corresponding operation and sends a Response message; if not, the terminal does not perform any operation, but only sends a Response message to the resource management center.

Report an exception. When the resource management agent detects that an abnormal event occurs, it sends a Trap message to the resource management center for reporting.

The present invention is applicable to terminals based on XEN virtual machines and EFI firmware, and of course also applicable to terminals based on other types of virtual machines. It should be understood by those skilled in the art that this is only for example and should not be construed as a limitation of the present invention.

The resource management agent in the present invention runs in the VMM under the operating system and does not run in the user operating system space, so it can perform cross-platform and cross-device supervision, and will not be mistaken by users like traditional management agent software. Deleted or destroyed and controlled by viruses, Trojan horses, etc.

In the present invention, the resource management agent running in the virtual machine invokes the relevant interface services provided by EFI to obtain the real-time hardware configuration and operating status of the current computing device, and reconstructs the user file system view and the current system by adopting a method based on user view reconstruction process.

The invention completes the data communication between the resource management agent and the resource management center through the resource management protocol, and supports user authentication, system status update and setting.

FIG. 5 is a schematic flowchart of a method for managing and controlling a terminal device in a cloud computing environment in an embodiment of the present invention. The method includes the following steps:

Step 51 , after capturing the startup interrupt signal, the terminal downloads the XEN kernel from the server to the local memory for execution, and then starts and runs the XEN virtual machine monitor.

Step 52, the terminal sends the user login information to the server for verification.

Step 53: After passing the verification by the server, the terminal receives the list of operating systems and application programs returned by the server, and after the terminal makes a selection, sends the selected operating system and application programs to the server.

Step 54, after successfully logging in, the terminal sends the collected hardware information and/or software information to the server, so that the server can manage and control the information of the terminal.

Wherein, when the terminal receives the hardware and/or software configuration information sent by the server, it invokes the corresponding program to perform the configuration operation according to the configuration information.

FIG. 6 is a schematic flowchart of a method for managing and controlling a terminal device in a cloud computing environment in another embodiment of the present invention. The method includes the following steps:

Step 61, when the terminal starts, the server interacts with the terminal and provides XEN kernel download.

Step 62, after the terminal is started, the server receives the user login information sent by the terminal, and returns the list of operating systems and application programs to the terminal after the verification is passed.

Step 63, when the terminal is selected, receive the operating system and application program selected by the terminal.

Step 64, receiving hardware information and/or software information sent by the terminal, so as to manage and control the information of the terminal.

Wherein, the server sends hardware and/or software configuration information to the terminal, so that the terminal performs corresponding operations according to the configuration information.

The invention runs the software and hardware resource management tool in the virtual machine monitor under the terminal equipment operating system instead of running in the user operating system space, and completes the monitoring and management of the software and hardware resources of the terminal equipment. It can provide cross-device and cross-platform supervision functions, that is, it can supervise computing devices using different operating systems. It will not be attacked by malicious virus software such as viruses and worms, as well as users' conscious and unconscious damage.

So far, the present invention has been described in detail. Certain details well known in the art have not been described in order to avoid obscuring the inventive concept. Based on the above description, those skilled in the art can fully understand how to implement the technical solutions disclosed herein.

The method and apparatus of the invention may be implemented in many ways. For example, the method and device of the present invention can be realized by software, hardware, firmware or any combination of software, hardware, and firmware. The above sequence of steps used in the method is for illustration only, and the steps of the method of the present invention are not limited to the sequence specifically described above unless specifically stated otherwise. Furthermore, in some embodiments, the present invention can also be implemented as programs recorded in recording media including machine-readable instructions for realizing the method according to the present invention. Thus, the present invention also covers a recording medium storing a program for executing the method according to the present invention.

Although some specific embodiments of the present invention have been described in detail through examples, those skilled in the art should understand that the above examples are for illustration only, rather than limiting the scope of the present invention. Those skilled in the art will appreciate that modifications can be made to the above embodiments without departing from the scope and spirit of the invention. The scope of the invention is defined by the appended claims.

Claims (15)

1. A system for managing and controlling terminal equipment under a cloud computing environment, comprising a terminal, the terminal comprising a hardware layer, a firmware layer, a virtual machine monitor (VMM) layer and a user operating system layer, characterized in that: The firmware layer, after capturing the startup interrupt signal, downloads the XEN kernel from the server to the local memory for execution, and then starts and runs the XEN virtual machine monitor; The VMM layer sends user login information to the server, receives the operating system and application program list returned by the server, sends the selected operating system and application program to the server, and sends the collected hardware information and/or software information to the server. 2. according to the system that terminal equipment is managed and controlled under the cloud computing environment described in claim 1, it is characterized in that: The VMM layer sets a resource management agent, which includes a temporary state storehouse, a first communication interface, a user login service, and a proxy service, wherein: Temporary state library, which saves various software and hardware information of the current terminal; The first communication interface sends the hardware information obtained by the hardware information collection module and/or the software information obtained by the user view reconstruction module to the server, and sends the user login information to the server; User login service, send user login information to the server, receive the operating system and application program list returned by the server, and send the selected operating system and application program list to the server; Agent service includes hardware information collection module and user view reconstruction module, among which: The hardware information collection module collects hardware information; The user view reconstruction module collects software information. 3. according to the system that terminal equipment is managed and controlled under the cloud computing environment described in claim 2, it is characterized in that: The XEN virtual machine monitor of the VMM layer creates domain 0, and the resource management agent runs in XEN domain 0. 4. according to the system that terminal equipment is managed and controlled under the cloud computing environment described in claim 1, it is characterized in that: The firmware layer adopts the EFI firmware interface, and captures the startup interrupt signal through the EFI firmware interface. 5. according to the system that terminal equipment is managed and controlled under the cloud computing environment described in claim 2, it is characterized in that: The proxy service also includes a configuration execution module, which receives the hardware and/or software configuration information sent by the server, and invokes the corresponding program to perform configuration operations according to the configuration information. 6. A system for managing and controlling terminal equipment in a cloud computing environment, comprising a server, the server comprising a startup module, a web management tool and a resource management center, characterized in that: The startup module, when the terminal starts, interacts with the terminal and provides XEN kernel download; Web management tool, after the terminal is started, call the resource management center; The resource management center receives the user login information sent by the terminal, returns the operating system and application program list to the terminal after the verification is passed, receives the operating system and application program selected by the terminal, and receives the hardware information and/or software information collected by the terminal . 7. according to the system that terminal equipment is managed and controlled under the cloud computing environment described in claim 6, it is characterized in that: The resource management center includes a visual agent, a management resource library, a user authentication service, a management service and a second communication interface, wherein: Visual agent, providing visual management information and configuration commands for web management tools; The second communication interface is used to receive hardware information and/or software information sent by the terminal; Manage the resource library, classify, store and maintain various collected data information; User authentication service, receiving user login information from the terminal through the second communication interface, querying the management resource library to verify whether the user has login authority, if the authentication is passed, querying and returning the list of operating systems and application programs that the user can use, otherwise, Return login failed; Management services include authority control module, information collection module and performance monitoring module, among which: Authority control module, granting different supervision scope and authority level; The performance monitoring module, after being authorized by the authority control module, sends various types of software and hardware information query requests through the second communication interface; The information collection module is used to hand over the hardware information and/or software information sent by the terminal to the management resource library for maintenance. 8. The system for managing and controlling the terminal equipment under the cloud computing environment according to claim 7, characterized in that: The management service also includes a configuration module, which provides a unified call interface for the visual agent to process other components' operation requests for terminal configuration information. After being authorized by the authority control module, it sends hardware and/or software configuration information to the terminal through the second communication interface. so that the terminal performs corresponding operations according to the configuration information. 9. A system for managing and controlling terminal equipment in a cloud computing environment, characterized in that it includes the terminal according to any one of claims 1 to 5 and the server according to any one of claims 6 to 8. 10. The system for managing and controlling the terminal equipment under the cloud computing environment according to claim 9, characterized in that: The terminal and the server communicate by exchanging resource management protocol messages, the protocol messages are transmitted through the UDP protocol, and each message is individually encapsulated in a UDP data packet. 11. A method for controlling terminal equipment in a cloud computing environment, characterized in that: After capturing the startup interrupt signal, the terminal downloads the XEN kernel from the server to the local memory for execution, and then starts and runs the XEN virtual machine monitor; The terminal sends the user login information to the server; After passing the verification of the server, the terminal receives the operating system and application program list returned by the server, and after the terminal makes a selection, it sends the selected operating system and application program to the server; After successful login, the terminal sends the collected hardware information and/or software information to the server. 12. The method for managing and controlling terminal equipment in a cloud computing environment according to claim 11, characterized in that: When the terminal receives the hardware and/or software configuration information sent by the server, it invokes a corresponding program to perform configuration operations according to the configuration information. 13. The method for managing and controlling terminal equipment in a cloud computing environment according to claim 11 or 12, characterized in that: The terminal and the server communicate by exchanging resource management protocol messages, the protocol messages are transmitted through the UDP protocol, and each message is individually encapsulated in a UDP data packet. 14. A method for controlling terminal equipment in a cloud computing environment, characterized in that: When the terminal starts, the server interacts with the terminal and provides XEN kernel download; After the terminal is started, the server receives the user login information sent by the terminal, and returns the list of operating systems and applications to the terminal after the verification is passed; After the terminal is selected, the operating system and application program selected by the terminal are received; The hardware information and/or software information collected by the terminal is received. 15. The method for managing and controlling terminal equipment in a cloud computing environment according to claim 14, characterized in that: The server sends hardware and/or software configuration information to the terminal, so that the terminal performs corresponding operations according to the configuration information.