Citrix Systems, Inc.

Getgo, Inc.

Andrew Borzycki

Anil Roychoudhry

Mallikharjuna Reddy Deva

Uday Nandigam Gajendar

Richard James Mazzaferri

Lee Laborczfalvi

Huai Chin

Jeffrey Dale Muir

Nicholas Alexander Bissett

Richard Jason Croft

Pierre Semaan

Nick Bissett

Martin Duursma

Michael Wookey

Donovan Ross Hackett

Hao Wang

Guy Bieber

Methods and systems are disclosed for opening unverified content in a separate, disposable virtualized environment using a temporary virtual machine (VM). In one example, the disclosed method includes intercepting a request to open/access unverified content from a third-party remote server, and comparing the particular information/attributes of the unverified content against predetermined criteria. Then, the user device may connect using a remote presentation protocol to the temporary VM in the separate, disposable environment such that the output of the unverified content may be transported to and displayed in the separate, disposable environment. The connection with the temporary VM may be terminated and the separate, disposable environment may be wiped clean to reduce the risk of malicious code in the unverified content.

Separate, disposable execution environment for accessing unverified content

Aspects described herein allow multiple devices to function as a coherent whole, allowing each device to take on distinct functions that are complementary to one another. Aspects described herein also allow the devices function as a coherent whole when interconnected devices and their respective applications are configured to operate in various operation modes, when management policies are employed to control the operation of the interconnected devices and their respective applications, when transferring content between the interconnected devices and storing the content at those devices, when obtaining access credentials for the interconnected devices that enable the devices to access enterprise resources, when a policy agent applies management policies to control operation of and interaction between the interconnected devices, and when the interconnected devices are used to access an enterprise application store.

Enterprise application store for an orchestration framework for connected devices

Systems and methods for interconnecting devices using an orchestration framework are provided herein. An orchestration framework may be provided, and the orchestration framework may interconnect multiple of devices such that the devices are available to share content and computing activities with one another. The orchestration framework may coordinate interactions between the devices that are interconnected with each other through the orchestration framework. A request to share content may be received from one of the devices. The distribution of the content to one or more of the devices may be managed using the orchestration framework. The content may be a file uploaded to a remote data store, content stored at a clipboard that is accessible to the interconnected devices, or a link.

Orchestration framework for connected devices

Methods and systems for automatic setup and initiation of meeting resources are described herein. A meeting room, area, or resource may be equipped with a camera or other proximity based sensor to determine when a user enters the meeting area. The camera may perform initial recognition of a user, e.g., based on facial or body recognition. The system may then authenticate the user as the meeting organizer using a second recognition technique, e.g., voice recognition. Based on the user authentication, the system may query the meeting organizer's calendar (or other resource) for meeting information, download an associated meeting presentation from cloud storage, initiate meeting (e.g., screen sharing) software, notify any missing attendees that the meeting has begun, and launch the presentation on a shared screen. The meeting organizer may then control the presentation using video and/or voice. All may be completed without the meeting organizer being required to touch anything.

Automated meeting room

Coordinating a computing activity across applications and devices having multiple operation modes in an orchestration framework for connected devices

Single sign-on access in an orchestration framework for connected devices

Sharing content across applications and devices having multiple operation modes in an orchestration framework for connected devices

Controlling device access to enterprise resources in an orchestration framework for connected devices

Managing dynamic policies and settings in an orchestration framework for connected devices

A method for moving an executing process from a source isolation scope to a target isolation scope includes the step of determining that the process is in a state suitable for moving. The association of the process changes from a source isolation scope to a target isolation scope. A rule loads in association with the target isolation scope.

Method and apparatus for moving processes between isolation environments

The present solution reduces the attack surface of a server by selectively opening a server port for listening when a client has been authenticated/authorized via another machine or process, and directed to connect to the server in question. When not selectively listening on a port, the server does not listen or open ports for connections or otherwise minimizes the number of open ports. By selectively listening for connections, the server reduces the opportunity for hackers to attack the server process, and improves the security of the server. The ability to selectively listen on a port at specific times may be combined with additional meta information&#x2014;like ticketing and prior authentication information to help further secure the server. The meta information may identify and ensure that only the correct remote endpoint is allowed to connect via the port. Instead of first listening for connections and then authenticate and authorize the received connection as with typical servers, the present solution first authenticates/authorizes a connection via another machine or process, then listens for an expected and authorized connection.

Systems and methods for enhancing security by selectively opening a listening port when an incoming connection is expected

A method for presenting an aggregate view of native resources includes the step of enumerating a plurality of system-scoped native resources provided by a system scope. A plurality of application-scoped native resources provided by an application isolation scope are enumerated, some of which correspond to some of the plurality of system-scoped resources. For one of the plurality of system-scoped resources, the existence of a corresponding one of the plurality of application-scoped resources is determined and the corresponding one of the plurality of application-scoped resources is included in an aggregate view of native resources.

Method and apparatus for providing an aggregate view of enumerated system resources from various isolation layers

A method and apparatus for virtualizing access to windows includes a hooking mechanism, a window name virtualization engine, and an operating system interface. A request relating to a window from a process executing in the context of a user account is received, the request including a virtual window name. A determination is made for a literal name for the window, using a scope-specific identifier. A request is issued to the operating system including the determined literal window name. A window handle is associated with the determined virtual window name.

Method and apparatus for virtualizing window information

Growing community of inventors

Killara, Australia

Andrew Borzycki