Microsoft Technology Licensing, LLC

Clark David Nicholson

Michael Richard Fortin

William Jefferson Westerinen

Cenk Ergan

John M Parchem

Dean L DeWhitt

Michael James Zwilling

Mark Joseph Zbikowski

Hanumantha Rao Kodavalla

Nathan Steven Obr

Patrick L Stemen

Rajeev Y Nagar

Therron Powell

Robert C Elmer

Surenda Verma

Dan Teodosiu

Robert Wilhelm Schmieder

Emily Nicole Hill

David Jaroslav Sebesta

Mohamed Belali

Cort Whitney Stinnett

Mehmet Iyigun

Neil Scott Fishman

Nelamangal Krishnaswamy Srinivas

Jack Creasey

Richard P Lewis

Kentaro Toyama

Adrian Mark Chandley

Charles Patrick Thacker

Jai Srinivasan

Vladimir Stoyanov

Emily Nicole Wilson

Jay Beavers

Jason Michael Anderson

Christopher Allen Schoppa

Kanchan Mitra

Artem Belkine

Kaushik Barat

Shaun Wiley

Serdar Unal

Michael Thomas Gahrns

W Jeff Westerinen

Haifeng Zhou

Christian Cruz Montoya

Michael Y Tsang

Wes Witt

Zhiyuan Zhao

Daniel Teodosiu

Gustavo Hernando Catalano-fonseca

David Belanger

Vladimir Kostadinov Stoyanov

Dean L Dewhitt

The techniques disclosed herein provide an enhanced single sign-on flow for secure computing resources, such as a virtual machine or hosted applications. In some configurations, the techniques process different types of security data, e.g., credentials, tokens, certificates, and reference objects at specific computing entities of a system to provide a single sign-on flow for providing access to secure computing resources from a client computing device. In one illustrative example, a select type of security data, such as a certificate, is generated from a token and a claim at a particular computing resource, such as an agent operating on a virtual machine. In another example, a signed version of the certificate can be stored and verified at the virtual machine. By generating certificates at such particular computing resources, the computing resource can verify a person's credentials using a secure single sign-on flow without requiring the person to provide credentials multiple times.

Enhance single sign-on flow for secure computing resources

In order to provide a more efficient persistent storage device, one or more long-term storage media are included along with a non-volatile memory. In one embodiment, one portion of the non-volatile memory is used as a write buffer and a read cache for writes and reads to the long-term storage media. Interfaces are provided for controlling the use of the non-volatile memory as a write buffer and a read cache. Additionally, a portion of the non-volatile memory is used to provide a direct mapping for specified sectors of the long-term storage media. Descriptive data regarding the persistent storage device is stored in another portion of the non-volatile memory.

Non-volatile memory cache performance improvement

Embodiments are directed to providing direct access to graphical user interface (GUI) frame buffers and to associating input hardware with a login session. In one scenario, a computer system registers a plug-in software module with a remote desktop client. The registering includes requesting one or more frame buffers rendered for display on a computer system display. The computer system determines that a session has been established between a computer system user and the remote desktop client. The computer system then receives the requested frame buffers and displays the frame buffers on the computer system display and/or sends the received frame buffers to various registered third parties.

Implementing previously rendered frame buffer information in a customized GUI display

A multi-user computer system may distribute user windows across multiple monitors. Some of the user windows may span two or more monitors. Some user windows may share a monitor. Each user window may be associated with a set of user input devices for each user. The user window configuration may be changed on the fly by an administrative user, who may reposition, rotate, scale, or perform other changes to the windows.

Dynamic distribution of client windows on multiple monitors

A first device and a second device are each assigned an IP address that is used to exchange messages with the other device. The first device stores the IP address for the second device. A new IP address may be assigned to the first device when it reestablishes a network connection following a location change or other network reconnection. The first device detects when a new IP address has been assigned. The first device then sends a hello message directly to the second device comprising the new IP address assigned to the first device. The new IP address allows the second device to find the first device without requiring network location services such as DNS. The first device may further include authentication credentials in the hello message to verify the new IP address.

Persistent connection between network devices

A method includes determining if a server supporting an application and a client having remote desktop access to the server are on a same physical computing device. Upon determining that the server and the client are on the same physical computing device, graphics data related to the application is stored from the server to shared memory that is accessible by the server and by the client. Information to enable the client to retrieve the graphics data stored by the server in the shared memory is communicated from the server to the client.

Selective use of shared memory for remote desktop application

A shared resource computing (SRC) system that provides a mechanism for creating a shared session among individual sessions is described. In an ad hoc peer model, a session is created by individual users. One individual session assumes an administrative session role and invites other user sessions to join the shared session. Local environments from the individual sessions are published and the resources of the individual sessions form linked device groups that allow the resources to be aggregated for the shared session.

Administrative interface for managing shared resources

Described are a main host system of the client computer, and a network event notification system, including a networking subsystem that communicates with a network server to act as a proxy for the client computer when the main host system of the client computer is in a sleep state. The networking subsystem may await a synchronization packet initiated by the network server, or may occasionally poll the network server to determine whether data is available. To this end, the computing device operates an associated network subsystem while the main host system of the computing device is in a sleep state, and receives data via the network subsystem indicating that content is available. Policy is then invoked to determine whether to wake at least part of the main host system to handle the content. A target duty cycle mechanism also controls the average power consumption during wake and sleep cycling.

Network event notification and delivery

Described herein are various techniques and principles for determining how to assign control of peripherals and assigning control of peripherals. In some embodiments, determining how to assign control of peripherals comprises reviewing connections of peripherals to the computing device and evaluating rules to determine management points in the connections. In some cases, the connections of peripherals to the computing device may be organized into a hierarchy corresponding to a hierarchy of physical connections of the peripherals, including physical connections of peripherals located remote from the computing device and possibly connected through another computing device. When management points are identified among the connections, control of peripherals associated with the management points may be assigned in the same way. For example, access rights to each of the peripherals may be assigned to a same user session.

Rule-based assignment of control of peripherals of a computing device

Described are a main host system of the client computer, and a network event notification system, including a networking subsystem that communicates with a network server to act as a proxy for the client computer when the main host system of the client computer is in a sleep state. The networking subsystem may await a synchronization packet initiated by the network server, or may occasionally poll the network server to determine whether data is available. To this end, the computing device operates an associated network subsystem while the main host system of the computing device is in a sleep state, and receives data via the network subsystem indicating that content is available to the computing device. Policy is then invoked policy to determine whether to wake at least part of the main host system to handle the content. A target duty cycle mechanism is also provided to control the average power consumption during wake and sleep cycling.

Embodiments include a main host system of the client computer, and a network event notification system, including a networking subsystem that communicates with a network server to act as a proxy for the client computer when the main host system of the client computer is in a sleep state. The networking subsystem awaits a synchronization packet initiated by the network server, or polls the network server to determine whether data is available. The computing device operates an associated network subsystem while the main host system of the computing device is in a sleep state, and receives data via the network subsystem indicating that content is available to the computing device. Policy is then invoked to determine whether to wake at least part of the main host system to handle the content. A target duty cycle mechanism is also provided to control the average power consumption during wake and sleep cycling.

Growing community of inventors

Seattle, WA, United States of America

Clark David Nicholson