Vmware, Inc.

Omnissa, LLC

Adam Gregory Gross

Dong Wang

Kun Shi

Anthony J Wilkinson

Christopher Rude

Haiou Jiang

Per Olov Larsson

Steven Sigel

Michael Dunn

Ashley Nuttall

Hans Christenson

Joshua Kwan

Tom Elliott

Feng Yan

Jin Yu

David Snowdon

Bo Liu

Zhao Li

Qi Sun

Li Huang

Christian Matthew Leroy

Yingfeng Ou

Sandro Moiron

Jonathan Langmaid

Per Olav Larsson

Timotius Tjahjadi

Sean Samenfeld-Specht

Ming Zhang

A user accesses a remote session, the connection to which is managed by a connection broker, according to a single sign-on (SSO) process. The SSO process includes the user entering his or her credentials and being authenticated to the connection broker. In addition to user authentication, the SSO process includes connection broker authentication to confirm that the connection broker is trustworthy. When the connection broker is authenticated, the user credentials are transmitted to the connection broker in a secure manner and the connection broker forwards them onto a machine hosting the remote session so that the user can be logged into the remote session without entering his or her credentials again.

Single sign on for a remote user session

In one set of embodiments, a Virtual Desktop Infrastructure (VDI) client running on a client device can receive first client-side data from a client telemetry service, where the first client-side data includes information pertaining to a current state of the client device. The VDI client can further retrieve second client-side data including information pertaining to the VDI client and/or a VDI session established between the VDI client and a VDI agent running on a server system, and can aggregate the first client-side data and the second client-side data to produce aggregated client-side data. The VDI client can then transmit the aggregated client-side data to the VDI agent.

Client telemetry framework for virtual desktop infrastructure (VDI)

A system is described for collaborative access to a virtual desktop through separate remote client devices. An owner of the virtual desktop can initiate a session with the virtual desktop through a client on her client device. The owner can request through her client to create a collaborative session, identifying one or more collaborators. Links for joining the virtual desktop can be generated and an invitation can be sent to each collaborator. A collaborator can accept the invitation and a client application can be launched on the collaborator's client and routed to the virtual desktop. Once authorized, collaborators can be connected to the virtual desktop session. Each collaborator in the session may view the GUI of the virtual desktop in her client application. Input control can be managed and delegated to collaborators by the owner of the session.

Collaborative access to virtual desktops

Techniques for optimizing window resize actions for a remoted application are provided, where the remoted application has a server-side window running within a remote desktop of a server system, and where the server-side window is made accessible to a user of a client system as a client-side window displayed in a client desktop of the client system. In one embodiment, the client system can receive from the server system a notification that the server-side window is being resized in the remote desktop, and can determine that the user is currently entering one or more input commands for resizing the server-side window. In response, the client system can send a message to the server system for canceling the resizing of the server-side window. The client system can then allow the user to resize the client-side window via the one or more input commands, while the server-side window remains a fixed size.

Optimizing window resize actions for remoted applications

Techniques for optimizing window move actions for a remoted application are provided, where the remoted application has an application window running within a remote desktop of a server system, and where the application window is made accessible to a user of a client system in the form of a client-side application window displayed in a client desktop of the client system. In one embodiment, the client system can receive from the server system a notification that the application window has begun moving in the remote desktop, and can determine that the user is currently entering one or more input commands for moving the client-side application window in the client desktop. The client system can further send a command to the server system for stopping the movement of the application window in the remote desktop, such that the application window is fixed in a stationary position. The client system can then allow the user to continue moving the client-side application window in the client desktop, while the application window remains in the stationary position in the remote desktop.

Optimizing window move actions for remoted applications

An approach for accessing one or more resources at a virtualized desktop infrastructure (VDI) client running on a client device by a remote virtual machine (VM) is provided. The method includes intercepting, via a VDI agent, a request to access one or more resources at the client device, transferring the request from the remote VM to the client device via a network redirector protocol, and filtering the request to determine if the request complies with one or more rules. For a first resource of the one or more resources, if the request does not comply with any one of one or more first rules of the one or more rules, access to the first resource is denied. If the request complies with the one or more first rules, access to the first resource is granted and a response is sent to the VDI agent via the network redirector protocol.

Access control in the remote device of network redirector

Image scanning and encoding technologies can be utilized to authenticate devices to virtual desktops and to transfer virtual desktop sessions between devices. One device (e.g., PC or laptop) may encode certain information into an image that is displayed on a display screen, while another mobile device equipped with a digital camera (e.g., mobile phone or tablet) can be used to scan the image on the display screen. Once the image is scanned, it can be decoded by the mobile device to get the information encoded in the image (e.g., device ID, session ID, etc.). The information obtained from the image can be used to authenticate a device or to transfer a virtual desktop session between the devices.

Accessing virtual desktops via image scanning

Pushing a virtual desktop session from an authenticated device using image scanning

Authenticating a user to access a virtual machine (VM) stored on a client computing device includes receiving user authentication credentials associated with a certificate, such as a PIN associated with a certificate housed on a smart card. The certificate is associated with a public key and a private key. The technique includes encrypting the VM to be decrypted with an unlock code, and generating a challenge string by encrypting the unlock code using the public key associated with the certificate. The challenge string is a result of encrypting of the unlock code, and the unlock code can be obtained by decrypting the challenge string using the private key. The technique further includes decrypting the challenge string using the private key to retrieve an unlock code associated with the VM, decrypting the VM with the unlock code, and causing the decrypted VM to be executed on the client computing device.

Decrypting an encrypted virtual machine using asymmetric key encryption

Growing community of inventors

Palo Alto, CA, United States of America

Adam Gregory Gross