Hypori, Inc.

International Business Machines Corporation

Motive Communications, Inc.

Motive, Inc.

Intelligent Waves LLC

Bluespace Software Corporation

Brian Jay Vetter

Justin Philip Marston

Francis X Sullivan

Mohammad Salman Dhedhi

Rajesh P Gopi

Thomas William Bereiter

Michael R McNally

Galib F Arrieta

Phani Achanta

Robert D Lee

Patrick Turley

John J E Turek

David Sundstrom

Sanjay Mijar

John Joseph Turek

German Sergio Goldszmidt

Metin Feridun

Stuart L Jarriel

Carey L Jung

A Wade Cohn

Arjun Chopra

Terrimane Shon Pritchett

Muhammad Irfan Azam

To provision a client application on a client device, a user may be provided with a QR code, a one-time password, or a manual entry page for starting a credential provisioning process via a credential provisioning service provided by a credential provisioning server in a secure network. The client application may include information on trusted servers operating in the secure network. The credential provisioning server may operate to perform a sequence of actions to verify user credentials and determine, based on rules applicable to the user, the client device, or a combination thereof, whether the client application is to be provisioned on a client device. If so, the credential provisioning server may operate to generate a key pair, obtain a signed certificate, encrypt them, and send them to the client device such that the client application can use them to establish a mutual secure connection with a trusted server.

System, method and computer program product for credential provisioning in a mobile device platform

Some embodiments may facilitate boot-specific key access to perform cryptographic operations. A first boot record and a second boot record may be generated independently in response to a request to boot a virtual device. The first and second boot records may be compared and in response to a match between the first boot record and the second boot record, an identify certificate may be obtained. Authorization to access and use a key for cryptographic operations may be obtained in response to a verification of the identity certificate by a cryptographic processor.

Boot-specific key access in a virtual device platform

Latency experienced by a user of a client device may be reduced by preloading virtual devices in anticipation of a connection request from the client device. For example, a plurality of virtual devices may be partially loaded prior to a connection request from a client device. In response to the connection request from the client device, a user associated with the client device may be identified and user profile information associated with the user may be retrieved. Based on the retrieved user profile information associated with the user, a virtual device, from among the plurality of preloaded virtual devices, may be loaded, such that the loading of the virtual device is complete and is specific to the user of the client device.

Preloading of virtual devices in anticipation of a connection request from a physical device

In certain embodiments, a change to a display resolution (or other display configuration) to be used at a physical device may be effectuated without the need to reboot a virtual device associated with the physical device. In some embodiments, a display resolution for a portion of a virtual device user interface of a virtual device is determined based on display configuration information corresponding to a first physical device (e.g., a display resolution of the first physical device). The portion of the virtual device user interface is configured based on the determined display resolution, and the configured portion is sent to the first physical device. In some embodiments, in response to obtaining second display configuration information from a second physical device, the portion of the virtual device user interface is resized (e.g., without rebooting the virtual device), and the resized portion is sent to the second physical device.

Dynamic resizing of a portion of a virtual device user interface

Embodiments disclosed herein can allow a user of mobile device in a network environment to switch between using public network services and using private network services. To access private network services, a virtualization cloud client application running on mobile device connects to a virtualized device hosted in virtualization cloud and brokers access to private network services as well as local device functions. Embodiments disclosed herein provide a system, method, and computer program product for capturing touch events for a virtual mobile device platform and relaying the captured touch events to the virtual mobile device platform while ensuring that movements and speed of touch events are accurately represented at the virtual mobile device platform.

System, method and computer program product for capturing touch events for a virtual mobile device platform

Embodiments disclosed herein can allow a user of mobile device in a network environment to switch between using public network services and using private network services. To access private network services, a virtualization cloud client application running on mobile device connects to a virtualized device hosted in virtualization cloud and brokers access to private network services as well as local device functions. Embodiments disclosed herein provide a system, method, and computer program product for improving network latency by bypassing elements or functions on a remote virtual machine. Examples of this approach include moving elements of the user interface from the remote virtual machine to the local physical device, bypassing a media player on a virtual machine, and bypassing certain telephone functions on a virtual machine and instead performing those functions on the physical device.

System, method and computer program product providing bypass mechanisms for a virtual mobile device platform

Embodiments disclosed herein can match a virtual display configuration to a physical display configuration. A method may include receiving from a physical device a physical device display configuration; generating a list of display configurations compatible with the physical display configuration, the generating a list including determining best matches of display geometries, aspect ratio, and density; providing the list to the physical device; and implementing a selected member of the list as a virtual device display on the physical device.

System, method and computer product for user performance and device resolution settings

Systems, methods and computer program products for providing notifications to physical devices when they are disconnected from corresponding virtual devices. In one embodiment, a system includes a host server executing a virtual device, and a notification server. A notification manager on the virtual device receives notifications and forwards them to the notification server when the physical device is not connected to the virtual device. The notification server stores the notifications and also stores a set of filters. The notification server identifies user, group and location information from a token of the physical device, retrieves notifications for the user and selects filters based on the information from the token. The notification server applies the filters to the notifications to produce sanitized notification information, and forwards this sanitized notification information to the physical device.

System, method and computer program product for providing notifications from a virtual device to a disconnected physical device

Embodiments disclosed herein provide a system, method, and computer program product for generating remote views in a virtual mobile device platform. In one embodiment, events from a physical mobile device are sent to a distant virtual device. The virtual device creates views based on the received events. Graphical attributes of one or more of the created views are captured and sent to the physical mobile device. Remote views are generated at the physical mobile device based on the attributes received from the virtual device.

System, method and computer program product for generating remote views in a virtual mobile device platform

Systems, methods and computer program products that enable efficient roaming of virtual mobile devices. In one embodiment, multiple PoP locations having a set of common master images are maintained. A communication from a mobile device received at a central facility identifies a user, a location and a type of the mobile device. The central facility determines performance measures for the PoP locations and identifies a preferred PoP location in response to the communication. If the preferred PoP location has available capacity, the central facility directs the preferred PoP location to provision resources and instantiate a virtual device from a selected master image corresponding to the mobile device. If the preferred PoP location persistently stores a user data volume for the user, the virtual device is attached to the stored user data volume. Otherwise, data is transferred from the user's data volume to a cache attached to the virtual device.

Growing community of inventors

Austin, TX, United States of America

Brian Jay Vetter