Citrix Systems, Inc.

Other

Derek Thorslund

Vladimir Vysotsky

Georgy Momchilov

Stephen S Wilson

Daljit Singh

Nivedita Ojha

Terry Noel Treder

Justin Bullard

Franklyn Peart

Brad Anderson

Stephen Wilson

Virtual application and desktop delivery may be optimized by supplying application metadata and user intent to the device between a client and a server hosting resources for the delivery. The data packets used to deliver the virtual application or desktop may be also tagged with references to the application. By supplying the metadata and tagging packets with the metadata, an intermediary network device may provide streams of data packets at the target QoS. In addition, the device may apply network resource allocation rules (e.g., firewalls and QoS configuration) for redirected content retrieved by the client out of band relative to a virtual channel such as the Internet. The network resource allocation rules may differ for different types of resources accessed. The device may also control a delivery agent on the server to modify communication sessions established through the virtual channels based on network conditions.

Systems and methods for managing streams of packets via intermediary devices

A technique uses a managed computing device to extend management control by an organization to IoT (Internet of Things) devices in a local environment of the computing device. The computing device discovers any local IoT devices and participates in a communication with a server to bring one or more of the IoT devices under management control. In some examples, extending management control involves enrolling selected IoT devices into a management framework of the organization and directing communications between the server and the respective IoT devices through the managed device, which provides a point-of-presence for administering management of the selected IoT devices in the local environment.

Extending management control to IoT devices

A technique for performing authentication includes a first device receiving security data from a second device that shares its network connection with the first device. The first device applies the security data received from the second device when requesting authentication to a secured resource on the network. For example, the security data may include a token code or other data that may be used as a token, such as identification information about the second device.

Authenticating to secured resource via coupled devices

Described embodiments provide systems and methods for selectively encrypting and decrypting portions of a network flow by intermediary devices. A first device may identify a protocol used by a network flow traversing the first device via one or more packets of the protocol. The first device may determine that a level of encryption for the network flow meets a predetermined threshold. The first device may receive networks packets to be communicated between a sender and a receiver. The packets may include a first portion that is encrypted and a second portion that has clear text information. The first device may encrypt the second portion of the one or more packets. The first device may forward the network packets with the first portion and the encrypted second portion via a tunnel to a second device for decryption of the encrypted second portion for forwarding to the receiver.

Selective encryption of tunneled encrypted traffic

A technique for managing communications over a network maintains multiple network paths simultaneously, exchanging the same data redundantly through the network paths and allowing a receiver to select one of the network paths as its source of data. In the event that a first, currently-selected network path becomes weak, for example, the receiver automatically and seamlessly switches its source of data to a second network path, while the first network path remains operational.

Maintaining continuous network service

Systems and methods for remotely displaying three dimensional graphical data, include a local computing machine that communicates with a remote computing machine via a connection. An application executing on the local computing machine, generates three dimensional graphics commands which are intercepted and transferred to either the remote computing machine or a computing element on the local computing machine. Determining where to transfer the three dimensional graphics commands requires: an analysis of the application to obtain application specific characteristics; an analysis of the remote computing machine to obtain the capabilities of the remote computing machine; an analysis of the local computing machine to obtain the capabilities of the local computing machine; and an analysis of the connection to determine characteristics of the connection. A determination is made in response to obtaining the application characteristics, the remote computing machine capabilities, the local computing machine capabilities and the connection characteristics.

Growing community of inventors

San Jose, CA, United States of America

Derek Thorslund