Abstract: PC is a widely used typical fat terminal, but its drawbacks are gradually emerging, so it needs downsizing. Cloud computing is a new technology in recent years, and desktop cloud is a typical application of cloud computing, and also a downsizing program of traditional fat terminal in the future. Aiming at the security problem of desktop cloud, firstly, it briefly introduces the system architecture and network structure of desktop cloud. Then, it designs an end-to-end security framework, and explains the function of each component using the idea of layered defense and defense in depth. Finally, it analyzes the principle and characteristics of main safety measures of desktop cloud. In the paper, the security protection system of desktop cloud is very practical in practical application, and the effect is obvious, but it still needs to be improved and perfected.

Key words: desktop cloud, double factor authentication, fingerprint authentication, security domain, 802.1X

摘要： PC是一种应用广泛的典型胖终端，但是其弊端也逐渐显现，需要瘦身.云计算是近些年新兴的信息技术，桌面云是云计算的一种典型应用，也是未来传统胖终端的一种瘦身方案.针对桌面云的安全性问题，首先，简述了桌面云的系统架构与网络结构.然后，采用分层防御与纵深防御的思想，设计了一种端到端的安全防护框架，并说明了各个组成部分的功能.最后，分析了桌面云主要安全防护措施的实现原理与特点.阐述的桌面云安全防护体系方案在实际应用中很实用，效果明显，不过仍需要改进与完善.

关键词: 桌面云, 双因子认证, 指纹认证, 安全域, 802.1X