Dell Products Inc.

Vanguard International Semiconductor Corporation

Ankit Kumar

Gokul Thiruchengode Vajravel

Chia-Hao Lee

Puneet Kaushik

Manoj Kumar

Jyothi Bandakka

Vivek Viswanathan Iyer

Srinivasa Ragavan Rajagopalan

Abhishek Mathur

Daniel Lawrence Hamlin

Chih-Cherng Liao

Ramanujam Kaniyar Venkatesh

Andy A Yiu

Sharad K Patesaria

Ravi Vijaykumar Vanjani

Ajay Baburam Yadav

Application compliance policies can be dynamically updated. An agent can be deployed on user computing devices to monitor application install events to track how frequently users install applications on the user computing devices and whether applicable application compliance policies dictate that such applications should be removed. A policy management service of a management solution can interface with the agents to gather application metrics and use the application metrics to dynamically update the application compliance policies to prevent future removal of one or more applications that are determined to be commonly installed by the users. These dynamic updates could be made on a per-user basis, a per-group basis, or a global basis.

Dynamically updating application compliance policies

Applications can be automatically grouped in a secure workspace environment. An application organizer service can be deployed on a user computing device to intelligently group applications within secure workspaces based on resource requirements, peripheral usage, threat level and/or data sharing characteristics of the applications. The application organizer service may determine these characteristics in a variety of ways including through the monitoring of the applications as they execute inside the secure workspaces.

Automatically grouping applications in a secure workspace environment

An information handling system includes a plurality of containerized applications, a container service, a hardware device, and a host processor to initialize a host service. The container service is associated with the containerized applications. The hardware device is virtualized to the containerized applications. The host processor identifies the hardware device that is virtualized to the containerized applications. The host processor receives a power notification from the container service. Based on the power notification, the host processor changes a power state of the hardware device.

System and method for power management for a universal serial bus type C device used by virtualized and containerized applications

A security client can efficiently authenticate an application during I/O request handling by maintaining a white list that identifies processes that have been created for authenticated applications. The security client can register to be notified when a process is being created. When such a notification is received, the security client can authenticate the application for which the process is being created and then add an entry to the white list that includes the process identifier of the process being created. Then, when the process subsequently generates I/O requests, the security client can use the white list to quickly determine that the process pertains to an authenticated application and allow the I/O requests to modify protected artifacts.

Efficiently authenticating an application during I/O request handling

A semiconductor device includes a substrate, an epitaxial layer, an emitter region, and a collector region. The epitaxial layer is disposed over the substrate and has a first conductivity type. The drift region is disposed in the epitaxial layer and has a second conductivity type that is the opposite of the first conductivity type. The emitter region is disposed in the epitaxial layer outside the drift region. The collector region is disposed in the drift region. The semiconductor device also includes a doped region. The doped region is disposed adjacent to the bottom surface of the drift region and has the first conductivity type.

Semiconductor devices and methods for fabricating the same

Individual interfaces of USB composite devices can be blocked. When a USB device is connected to a host system, a filter driver can be loaded on top of the USB hub driver and can be configured to monitor I/O control (IOCTL) requests that are sent as part of the enumeration process. When the filter driver detects that the USB device is a USB composite device, it can selectively modify the descriptors that the USB composite device reports based on the number of interfaces that will not be blocked. This selective modification of the descriptors enables individual interfaces to be blocked without filtering the USB composite class driver which in turn minimizes or eliminates any conflicts that may otherwise exist.

Blocking individual interfaces of USB composite devices

An overlay optimizer can enhance the functionality of a write filter using an auxiliary overlay. An overlay optimizer can be loaded above a write filter. Based on the configuration of the write filter's overlay, the overlay optimizer can be configured to implement a volatile or persistent auxiliary overlay and then use the auxiliary overlay to selectively cache artifacts. To minimize the likelihood that the consumption of the write filter's overlay will exceed a critical threshold, the overly optimizer can be provided a list of monitored artifacts. The overlay optimizer can employ the list to selectively move monitored artifacts from the write filter's overlay to the auxiliary overlay when the overlay's consumption reaches a threshold. The overlay optimizer may also selectively allow I/O requests generated by particular applications while redirecting I/O requests generated by other applications.

Enhancing write filter features using an auxiliary overlay

The amount of data that is written to disk is minimized when an overlay optimizer is used in conjunction with a write filter to prevent the overlay from becoming full. An overlay optimizer minifilter can be used to intercept writes that were initiated by the overlay optimizer's request to commit files cached in the write filter's overlay to thereby extract only the modified portions of the files that are actually stored in the overlay. The overlay optimizer minifilter can then write these modified portions of the files, as opposed to the entire files, in the overlay cache. Directory change notifications are also enabled when a write filter is employed as well as in other multi-volume filter environments.

Minimizing data written to disk and enabling directory change notifications in multi-volume filter environments

An overlay optimizer can be configured to accelerate the moving of files from an overlay and to atomically move files from the overlay. To accelerate the moving of files from the overlay, the overlay optimizer can continuously monitor the consumption of the overlay. If the consumption exceeds an optimized threshold, the overlay optimizer can cause the file system cache to be invalidated to thereby release handles to any closed files that are still cached. To move files atomically from the overlay, the overlay optimizer can be configured to handle attempts to open a file by determining whether the file is in the process of being moved from the overlay. If so, the overlay optimizer can detect which stage the move process has reached and can dynamically adapt the move process to enable the attempt to open the file to be completed successfully and in a consistent manner.

Accelerating and atomically moving files in an overlay optimizer

Resource utilization can be intelligently managed in desktop virtualization environments. Utilization of client and server resources can be tracked during sessions that are established to access desktops. Machine learning models can be applied to the client and server resource utilization to create policies that define configuration settings for dynamically optimizing sessions based on the current utilization of resources during the sessions.

Intelligently managing resource utilization in desktop virtualization environments

Cache hits are increased for URBs that target a redirected USB device. When a virtual bus driver in a VDI environment queues an IRP for an URB that targets the redirected USB device, it can ensure that the IRP and therefore the URB is completed on the same processor that originated the URB. This can be accomplished in both NUMA and non-NUMA multiprocessor environments.

Increasing cache hits for USB request blocks that target a redirected USB device

A security client can provide security features in write filter environments. To prevent improper modifications to a protected volume, the security client can be employed to differentiate between direct I/O requests and reparsed I/O requests that are directed to a shadow volume and to block any direct I/O requests. Alternatively or additionally, the security client can be configured to determine whether an I/O request that is directed to the shadow volume targets an artifact in the write filter's exclusion list, and if not, block the I/O request. Alternatively or additionally, the security client can be configured to monitor registry operations to determine whether a modifying registry operation targets the write filter's persistent shadow registry hive, and if so, allow the modifying registry operation only if it targets a registry key in the write filter's exclusion list.

Providing security features in write filter environments

File commit and commit-delete operations can be successfully completed in environments that employ an overlay optimizer to enhance the performance of a write filter. The overlay optimizer can be structured into upper and lower instances relative to the write filter. The upper instance can cause files to be moved from the write filter's overlay into an overlay cache to thereby optimize the performance of the overlay. To prevent the failure of commit and commit-delete operations that target files that have been moved to the overlay cache, the lower instance can be configured to detect when the write filter is attempting to perform a commit or commit-delete operation and can modify the processing of such operations to cause them to be completed successfully even though the files targeted by the operations do not exist in the write filter's overlay.

Handling file commit and commit-delete operations in an overlay optimizer

HTML5 multimedia redirection is implemented. When a multimedia application is started, a hooking library can be injected to enable the hooking library to modify the application's interactions with the Microsoft Media Foundation multimedia platform. These modifications include causing only a redirecting MFT to be enumerated so that the application will employ the redirecting MFT in the topology of a media pipeline created to play HTML5 video and/or audio. These modifications also include handling playback controls to synchronize the playback that is occurring on the client with the media session on the server.

HTML5 multimedia redirection

Authentication devices can be intelligently redirected in a VDI environment to thereby ensure that the redirected authentication devices remain available for authentication even after a remote session has been locked. This intelligent redirection of authentication devices can be accomplished in a way that only requires server-side modifications and that is agnostic to the remoting protocol used to establish the remote session.

Growing community of inventors

Deoghar, India

Ankit Kumar