RDP协议详解：2018版基本连接与图形远程技术

需积分: 10 175 浏览量更新于2024-07-18 收藏 12.74MB PDF 举报

本文档详细介绍了Microsoft Remote Desktop Protocol (RDP) 的基本连接和图形远程处理功能，发布于2018年9月12日。RDP 是一种标准协议，用于远程访问计算机系统，允许用户在不同地理位置通过网络进行桌面交互。该协议适用于Windows操作系统，并广泛应用于企业环境中的远程工作和管理。文档首先概述了RDP 的版权情况，指出Microsoft 对其发布的开放规格文档享有版权，这些文档不仅包括协议规范、文件格式、数据传输和语言支持，还涵盖了跨协议的交互关系。用户可以根据文档内容开发技术实现，并在自己的产品中使用RDP 技术，同时在必要的范围内分发文档以正确地文档化实施过程。 RDP 的基本连接涉及客户端与服务器之间的通信，客户端使用RDP 客户端软件与RDP 服务器（通常是Windows Server）建立TCP 连接。连接过程中，会通过加密（如TLS/SSL）确保数据安全，同时使用认证机制来验证用户身份，例如密码、证书或智能卡。图形远程处理是RDP 的核心功能，它允许用户在远程计算机上流畅地操作图形密集型应用，如图形设计软件或游戏。这依赖于高质量的视频压缩和解压缩技术，如H.264编码，以及GPU加速，以减少带宽需求并提高响应速度。此外，RDP 也支持多显示器设置，用户可以在本地屏幕上无缝扩展远程桌面。为了优化用户体验，RDP 提供了一系列可配置选项，如调整分辨率、颜色质量、音频和视频设置，以及对键盘、鼠标和触摸输入的支持。此外，RDP 还支持终端服务的管理和策略控制，管理员可以设置访问权限、会话超时等，以确保企业环境的安全性。此文档提供了关于RDP 连接和图形远程处理的深入理解，对于IT专业人员、系统管理员和开发者来说，它是理解和实现远程桌面解决方案不可或缺的参考资料。通过遵循文档中的技术细节，用户可以构建高效、安全的远程工作环境，满足不断变化的业务需求。

16 / 424

[MS-RDPBCGR] - v20180912

Remote Desktop Protocol: Basic Connectivity and Graphics Remoting

Release: September 12, 2018

the static set of Client Data Blocks, the set of Extended Client Data Blocks is designed to be

expanded over time.

input method editor (IME): A process that maps keyboard input to phonetic components (or

other language elements) that are specific to a selected language. IMEs are typically used with

languages for which conventional keyboard representation is difficult or impossible. For

example, East Asian languages are made up of thousands of distinct characters, which makes it

impossible to show all of the characters on a single keyboard. To facilitate composition, the IME

converts keystrokes into the characters of the target language (such as Japanese Katakana or

Simplified Chinese).

MD5 hash: A hashing algorithm, as described in [RFC1321], that was developed by RSA Data

Security, Inc. An MD5 hash is used by the File Replication Service (FRS) to verify that a file on

each replica member is identical.

Message Authentication Code (MAC): A message authenticator computed through the use of a

symmetric key. A MAC algorithm accepts a secret key and a data buffer, and outputs a MAC.

The data and MAC can then be sent to another party, which can verify the integrity and

authenticity of the data by using the same secret key and the same MAC algorithm.

Multipoint Communication Service (MCS): A data transmission protocol and set of services

defined by the ITU T.120 standard, specifically [T122] and [T125].

Network Level Authentication (NLA): Refers to the usage of CredSSP (as defined in [MS-

CSSP]) within the context of an RDP connection to authenticate the identity of a user at the

network layer before the initiation of the RDP handshake. The use of NLA ensures that server

resources are only committed to authenticated users.

Packed Encoding Rules (PER): A set of encoding rules for ASN.1 notation, specified in

[ITUX691]. These rules enable the identification, extraction, and decoding of data structures.

protocol data unit (PDU): Information that is delivered as a unit among peer entities of a

network and that may contain control information, address information, or data. For more

information on remote procedure call (RPC)-specific PDUs, see [C706] section 12.

Quality of Experience (QoE): A subjective measure of a user's experiences with a media service.

RC4: A variable key-length symmetric encryption algorithm. For more information, see

[SCHNEIER] section 17.1.

Remote Desktop: See Remote Desktop Protocol (RDP).

Remote Desktop Protocol (RDP): A multi-channel protocol that allows a user to connect to a

computer running Microsoft Terminal Services (TS). RDP enables the exchange of client and

server settings and also enables negotiation of common settings to use for the duration of the

connection, so that input, graphics, and other data can be exchanged and processed between

client and server.

server authentication: The act of proving the identity of a server to a client, while providing key

material that binds the identity to subsequent communications.

Server Data Block: A collection of related server settings that are encapsulated within the user

data of a Generic Conference Control (GCC) Conference Create Response. Three Server Data

Blocks exist: Core Data, Security Data, and Network Data.

SHA-1 hash: A hashing algorithm as specified in [FIPS180-2] that was developed by the National

Institute of Standards and Technology (NIST) and the National Security Agency (NSA).

Transmission Control Protocol (TCP): A protocol used with the Internet Protocol (IP) to send

data in the form of message units between computers over the Internet. TCP handles keeping

17 / 424

[MS-RDPBCGR] - v20180912

Remote Desktop Protocol: Basic Connectivity and Graphics Remoting

Release: September 12, 2018

track of the individual units of data (called packets) that a message is divided into for efficient

routing through the Internet.

Transport Layer Security (TLS): A security protocol that supports confidentiality and integrity of

messages in client and server applications communicating over open networks. TLS supports

server and, optionally, client authentication by using X.509 certificates (as specified in [X509]).

TLS is standardized in the IETF TLS working group.

Unicode: A character encoding standard developed by the Unicode Consortium that represents

almost all of the written languages of the world. The Unicode standard [UNICODE5.0.0/2007]

provides three forms (UTF-8, UTF-16, and UTF-32) and seven schemes (UTF-8, UTF-16, UTF-16

BE, UTF-16 LE, UTF-32, UTF-32 LE, and UTF-32 BE).

Unicode character: Unless otherwise specified, a 16-bit UTF-16 code unit.

MAY, SHOULD, MUST, SHOULD NOT, MUST NOT: These terms (in all caps) are used as defined

in [RFC2119]. All statements of optional behavior use either MAY, SHOULD, or SHOULD NOT.

1.2 References

Links to a document in the Microsoft Open Specifications library point to the correct section in the

most recently published version of the referenced document. However, because individual documents

in the library are not updated at the same time, the section numbers in the documents may not

match. You can confirm the correct section numbering by checking the Errata.

1.2.1 Normative References

We conduct frequent surveys of the normative references to assure their continued availability. If you

have any issue with finding a normative reference, please contact dochelp@microsoft.com. We will

assist you in finding the relevant information.

[International] Dr. International, "Developing International Software (2nd Edition)", Microsoft Press,

2003, ISBN: 0735615837.

[ITUX691] ITU-T, "ASN.1 Encoding Rules: Specification of Packed Encoding Rules (PER)",

Recommendation X.691, July 2002, http://www.itu.int/ITU-T/studygroups/com17/languages/X.691-

0207.pdf

[MS-CSSP] Microsoft Corporation, "Credential Security Support Provider (CredSSP) Protocol".

[MS-DTYP] Microsoft Corporation, "Windows Data Types".

[MS-ERREF] Microsoft Corporation, "Windows Error Codes".

[MS-RDPEA] Microsoft Corporation, "Remote Desktop Protocol: Audio Output Virtual Channel

Extension".

[MS-RDPEGDI] Microsoft Corporation, "Remote Desktop Protocol: Graphics Device Interface (GDI)

Acceleration Extensions".

[MS-RDPELE] Microsoft Corporation, "Remote Desktop Protocol: Licensing Extension".

[MS-RDPEMT] Microsoft Corporation, "Remote Desktop Protocol: Multitransport Extension".

[MS-RDPERP] Microsoft Corporation, "Remote Desktop Protocol: Remote Programs Virtual Channel

Extension".

[MS-RDPEUDP] Microsoft Corporation, "Remote Desktop Protocol: UDP Transport Extension".

18 / 424

[MS-RDPBCGR] - v20180912

Remote Desktop Protocol: Basic Connectivity and Graphics Remoting

Release: September 12, 2018

[MS-RDPNSC] Microsoft Corporation, "Remote Desktop Protocol: NSCodec Extension".

[MS-RDPRFX] Microsoft Corporation, "Remote Desktop Protocol: RemoteFX Codec Extension".

[RFC2104] Krawczyk, H., Bellare, M., and Canetti, R., "HMAC: Keyed-Hashing for Message

Authentication", RFC 2104, February 1997, http://www.ietf.org/rfc/rfc2104.txt

[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC

2119, March 1997, http://www.rfc-editor.org/rfc/rfc2119.txt

[RFC2246] Dierks, T., and Allen, C., "The TLS Protocol Version 1.0", RFC 2246, January 1999,

http://www.rfc-editor.org/rfc/rfc2246.txt

[RFC4346] Dierks, T., and Rescorla, E., "The Transport Layer Security (TLS) Protocol Version 1.1",

RFC 4346, April 2006, http://www.ietf.org/rfc/rfc4346.txt

[RFC4648] Josefsson, S., "The Base16, Base32, and Base64 Data Encodings", RFC 4648, October

2006, http://www.rfc-editor.org/rfc/rfc4648.txt

[RFC5246] Dierks, T., and Rescorla, E., "The Transport Layer Security (TLS) Protocol Version 1.2",

RFC 5246, August 2008, http://www.ietf.org/rfc/rfc5246.txt

[SCHNEIER] Schneier, B., "Applied Cryptography, Second Edition", John Wiley and Sons, 1996, ISBN:

0471117099, http://www.wiley.com/WileyCDA/WileyTitle/productCd-0471117099.html

[SSL3] Netscape, "SSL 3.0 Specification", November 1996, https://tools.ietf.org/html/draft-ietf-tls-ssl-

version3-00

[T122] ITU-T, "Multipoint communication service - Service definition", Recommendation T.122,

February 1998, http://www.itu.int/rec/T-REC-T.122/en