RDP8.0协议详解：官方技术文档

4星 · 超过85%的资源需积分: 9 103 浏览量更新于2024-07-25 1 收藏 11.47MB PDF 举报

"RDP协议官方文档，涵盖了RDP8.0版本的远程桌面协议，主要涉及基础连接和图形远程渲染技术。文档由微软在2013年7月22日发布，详细阐述了RDP协议的知识产权、技术细节以及实现指南。" RDP（Remote Desktop Protocol）是一种由微软开发的协议，允许用户通过网络从一台计算机远程控制另一台计算机。RDP8.0是该协议的一个重要版本，提供了更高效的数据传输、更好的图形渲染和增强的安全特性。文档中的"Basic Connectivity and Graphics Remoting"部分着重讨论了建立远程连接的基础机制以及如何远程传输和渲染图形内容。这一部分可能包括： 1. **连接流程**：描述了客户端如何与服务器建立RDP连接，包括身份验证、协商会话参数（如颜色深度、音频支持等）和安全层的设置。 2. **压缩和编码技术**：RDP8.0可能引入了更高效的压缩算法，以减少带宽使用并提高远程桌面的响应速度。这可能包括对图像数据的智能压缩和动态调整，以适应网络条件的变化。 3. **图形渲染**：RDP8.0改进了对高分辨率和多显示器的支持，可能还包含对DirectX或OpenGL的优化，以确保远程会话中的图形性能接近本地体验。 4. **安全性**：包括加密方法，如Transport Layer Security (TLS) 或Negotiate Security Layer，确保数据在传输过程中的安全性。可能还包括对身份验证的强化，如集成Windows身份验证和多因素认证支持。 5. **协议扩展**：RDP协议允许通过扩展来增加新功能，RDP8.0可能包含新的扩展，如多触控支持、远程音视频播放等，以提升用户体验。 6. **知识产权声明**：文档中提到了知识产权权利通知，这意味着微软公开了这些协议的规格，允许开发者根据这些规范开发兼容的实现，但需遵守一定的许可条件。 7. **开发和实现指导**：文档可能包含了帮助开发者实现RDP客户端和服务器的详细指南，包括代码示例、接口定义语言（IDLs）和模式定义。这份RDP协议官方文档为开发者和系统管理员提供了一套全面的技术参考，帮助他们理解和实现远程桌面连接，尤其是在考虑性能、安全性和用户体验方面。

16 / 464

[MS-RDPBCGR] — v20130722

Remote Desktop Protocol: Basic Connectivity and Graphics Remoting

Release: Monday, July 22, 2013

1 Introduction

The Remote Desktop Protocol: Basic Connectivity and Graphics Remoting facilitates user interaction

with a remote computer system by transferring graphics display data from the remote computer to

the user and transporting input commands from the user to the remote computer, where the input

commands are replayed on the remote computer. RDP also provides an extensible transport

mechanism which allows specialized communication to take place between components on the user

computer and components running on the remote computer.

Sections 1.8, 2, and 3 of this specification are normative and can contain the terms MAY, SHOULD,

MUST, MUST NOT, and SHOULD NOT as defined in RFC 2119. Sections 1.5 and 1.9 are also

normative but cannot contain those terms. All other sections and examples in this specification are

informative.

1.1 Glossary

The following terms are defined in [MS-GLOS]:

binary large object (BLOB)

domain name (3)

MD5 hash

Message Authentication Code (MAC)

protocol data unit (PDU)

RC4

Remote Desktop Protocol (RDP)

SHA-1 hash

Stock Keeping Unit (SKU)

Transmission Control Protocol (TCP)

Transport Layer Security (TLS)

Unicode

Unicode character

Windows-1252 character set

The following terms are specific to this document:

ANSI character: An 8-bit Windows-1252 character set unit.

ASN.1: Abstract Syntax Notation One. ASN.1 is used to describe a protocol as a sequence of

components, sent in messages. ASN.1 is described in the following specifications: [ITUX660]

for general procedures; [ITUX680] for syntax specification, and [ITUX690] for the Basic

Encoding Rules (BER), Canonical Encoding Rules (CER), and Distinguished Encoding Rules

(DER) encoding rules; and [ITUX691] for the Packed Encoding Rules (PER). Further

background information on ASN.1 is also available in [DUBUISSON].

Basic Encoding Rules (BER): A set of encoding rules for ASN.1 notation, specified in

[ITUX690]. These rules enable the identification, extraction, and decoding of data structures.

Client Data Block: A collection of related client settings that are encapsulated within the user

data of a Generic Conference Control (GCC) Conference Create Request. Only four Client Data

Blocks exist: Core Data, Security Data, Network Data, and Cluster Data. The set of Client Data

Blocks is designed to remain static.

Connection Broker: A service that allows users to reconnect to their existing sessions, enables

the even distribution of session loads among servers, and provides access to virtual desktops

17 / 464

[MS-RDPBCGR] — v20130722

Remote Desktop Protocol: Basic Connectivity and Graphics Remoting

Release: Monday, July 22, 2013

and remote programs. Further background information about Connection Broker is available in

[Anderson].

Desktop Scale Factor: The scale factor (as a percentage) applied to Windows Desktop

Applications.

Device Scale Factor: The scale factor (as a percentage) applied to Windows Store Applications.

Dynamic DST: Dynamic daylight saving time (DST) provides support for time zones whose

boundaries for daylight saving time change from year to year.

Extended Client Data Block: A collection of related client settings that are encapsulated within

the user data of a Generic Conference Control (GCC) Conference Create Request. In contrast

to the static set of Client Data Blocks, the set of Extended Client Data Blocks is designed to

be expanded over time.

Multipoint Communication Service (MCS): A data transmission protocol and set of services

defined by the ITU T.120 standard, specifically [T122] and [T125].

Network Level Authentication (NLA): Refers to the usage of CredSSP (as defined in [MS-

CSSP]) within the context of an RDP connection to authenticate the identity of a user at the

network layer before the initiation of the RDP handshake. The use of NLA ensures that server

resources are only committed to authenticated users.

Packed Encoding Rules (PER): A set of encoding rules for ASN.1 notation, specified in

[ITUX691]. These rules enable the identification, extraction, and decoding of data structures.

Remote Desktop: See Remote Desktop Protocol (RDP).

Server Authentication: The act of proving the identity of a server to a client, while providing

key material that binds the identity to subsequent communications.

Server Data Block: A collection of related server settings that are encapsulated within the user

data of a Generic Conference Control (GCC) Conference Create Response. Three Server Data

Blocks exist: Core Data, Security Data, and Network Data.

MAY, SHOULD, MUST, SHOULD NOT, MUST NOT: These terms (in all caps) are used as

described in [RFC2119]. All statements of optional behavior use either MAY, SHOULD, or

SHOULD NOT.

1.2 References

References to Microsoft Open Specifications documentation do not include a publishing year because

links are to the latest version of the documents, which are updated frequently. References to other

documents include a publishing year when one is available.

A reference marked "(Archived)" means that the reference document was either retired and is no

longer being maintained or was replaced with a new document that provides current implementation

details. We archive our documents online [Windows Protocol].

1.2.1 Normative References

We conduct frequent surveys of the normative references to assure their continued availability. If

you have any issue with finding a normative reference, please contact dochelp@microsoft.com. We

will assist you in finding the relevant information. Please check the archive site,

http://msdn2.microsoft.com/en-us/library/E4BD6494-06AD-4aed-9823-445E921C9624, as an

additional source.

18 / 464

[MS-RDPBCGR] — v20130722

Remote Desktop Protocol: Basic Connectivity and Graphics Remoting

Release: Monday, July 22, 2013

[ITUX660] ITU-T, "Open Systems Interconnection - Procedures for the Operation of OSI Registration

Authorities: General Procedures and Top Arcs of the ASN.1 Object Identifier Tree", Recommendation

X.660, August 2004, http://www.itu.int/ITU-T/studygroups/com17/oid/X.660-E.pdf

[ITUX680] ITU-T, "Abstract Syntax Notation One (ASN.1): Specification of Basic Notation",

Recommendation X.680, July 2002, http://www.itu.int/ITU-T/studygroups/com17/languages/X.680-

0207.pdf

[ITUX690] ITU-T, "ASN.1 Encoding Rules: Specification of Basic Encoding Rules (BER), Canonical

Encoding Rules (CER) and Distinguished Encoding Rules (DER)", Recommendation X.690, July 2002,

http://www.itu.int/ITU-T/studygroups/com17/languages/X.690-0207.pdf

[ITUX691] ITU-T, "ASN.1 Encoding Rules: Specification of Packed Encoding Rules (PER)",

Recommendation X.691, July 2002, http://www.itu.int/ITU-T/studygroups/com17/languages/X.691-

0207.pdf

[MS-CSSP] Microsoft Corporation, "Credential Security Support Provider (CredSSP) Protocol".

[MS-DTYP] Microsoft Corporation, "Windows Data Types".

[MS-ERREF] Microsoft Corporation, "Windows Error Codes".

[MS-RDPEA] Microsoft Corporation, "Remote Desktop Protocol: Audio Output Virtual Channel

Extension".

[MS-RDPEGDI] Microsoft Corporation, "Remote Desktop Protocol: Graphics Device Interface (GDI)

Acceleration Extensions".

[MS-RDPELE] Microsoft Corporation, "Remote Desktop Protocol: Licensing Extension".

[MS-RDPERP] Microsoft Corporation, "Remote Desktop Protocol: Remote Programs Virtual Channel

Extension".

[MS-RDPNSC] Microsoft Corporation, "Remote Desktop Protocol: NSCodec Extension".

[MS-RDPRFX] Microsoft Corporation, "Remote Desktop Protocol: RemoteFX Codec Extension".

[RFC2104] Krawczyk, H., Bellare, M., and Canetti, R., "HMAC: Keyed-Hashing for Message

Authentication", RFC 2104, February 1997, http://www.ietf.org/rfc/rfc2104.txt

[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC

2119, March 1997, http://www.rfc-editor.org/rfc/rfc2119.txt

[RFC2246] Dierks, T., and Allen, C., "The TLS Protocol Version 1.0", RFC 2246, January 1999,

http://www.ietf.org/rfc/rfc2246.txt

[RFC4346] Dierks, T., and Rescorla, E., "The Transport Layer Security (TLS) Protocol Version 1.1",

RFC 4346, April 2006, http://www.ietf.org/rfc/rfc4346.txt

[RFC5246] Dierks, T., and Rescorla, E., "The Transport Layer Security (TLS) Protocol Version 1.2",

RFC 5246, August 2008, http://www.ietf.org/rfc/rfc5246.txt

[SCHNEIER] Schneier, B., "Applied Cryptography, Second Edition", John Wiley and Sons, 1996,

ISBN: 0471117099.

If you have any trouble finding [SCHNEIER], please check here.

[SSL3] Netscape, "SSL 3.0 Specification", http://tools.ietf.org/html/draft-ietf-tls-ssl-version3-00

19 / 464

[MS-RDPBCGR] — v20130722

Remote Desktop Protocol: Basic Connectivity and Graphics Remoting

Release: Monday, July 22, 2013

If you have any trouble finding [SSL3], please check here.

[T122] ITU-T, "Multipoint communication service - Service definition", Recommendation T.122,

February 1998, http://www.itu.int/rec/T-REC-T.122/en