Citrix Systems, Inc.

Jacob Jared Summers

Georgy Momchilov

Christopher M Fleck

Manbinder Pal Singh

Rachelle Tobkes

Mukund Ingale

Julian Petrov

Rakesh Kumar

Harsh Shah

Todd Giebler

Modesto Tabares

Jeroen Mattijs Van Rotterdam

Daniel George Wing

Joseph Nord

Chakravarthi Valicherla

John McBride

Yufeng Shi

Jyoti Mathur

Amy Haworth

Sabarish Nadarajan

Methods, systems, and computer-readable media for peer to peer discovery of remote applications are presented. A client device may discover available remote peers and remotely access applications hosted thereon. The client device may send a discovery message over a network and locate one or more peer devices with available remote access. The peer device may respond with a list including applications installed and currently executing application instances that the client device may remotely access. The peer device may dynamically generate the list based on analyzing applications installed on the peer device and application instances executing on the peer device. The client device may initiate remote access of a selected application hosted on the peer device. The peer device may execute the selected application in a remote mode by hooking input and output interfaces associated with the application, and the application may be executed in a shadow desktop environment. These and other features will be discussed further herein.

Peer to peer remote application discovery

A computing device may include a memory and a processor configured to cooperate with the memory to determine, based upon at least one multimedia filter running at a first client computing device, a uniform resource locator (URL) associated with a media cloud source of a video being streamed to the first client computing device using a source filter, and playback control data associated with the video being streamed to the first client computing device. The processor may also cause a second client computing device to independently stream the video from the media cloud source based upon the determined URL, and play the video at the second client computing device synchronously with playback of the video at the first client computing device based upon the playback control data, with the first client computing device being the controller for playback of the video at the second client computing device.

Virtual computing system providing local screen sharing from hosted collaboration applications and related methods

Described embodiments provide systems and methods for contextual confidence scoring-based access control. The systems and methods can include one or more processors configured to receive a request from the client device to access an item of content. The one or more processors can select a first subset of authentication techniques. The authentication techniques identifiable with a score. The one or more processors can determine that a sum of the scores of the selected first subset of the authentication techniques exceeds a threshold. The one or more processors can transmit, to the client device, one or more authentication requests utilizing the selected first subset of authentication techniques. The one or more processors can provide, responsive to successful authentication by the client device, access to the item of content to the client device.

Method and system for contextual access control

Methods and systems for resource allocation using data from a variety of systems are described herein. A plurality of periods of time for using one or more resources may be identified based on a user request. Data indicative of locations of one or more users over one or more time periods may be received. Such data may be from an application other than a calendar application. Anticipated locations of the one or more users may be determined based on the data received. A resource of the one or more resources may be selected based on a distance between the resource and the anticipated locations of the one or more users. Based on detecting a change to the data, a new resource may be selected.

Dynamic resource allocation

Described embodiments provide systems and methods for context aware frictionless authentication. A server may determine authentication method information, contextual scores and contextual weights of a device, in connection with a user request to access a resource via the device. The authentication method information may include a weight and a completion duration for each of a plurality of authentication methods available via the device. The server may determine an authentication score for each of the plurality of authentication methods using the authentication method information, the contextual scores and the contextual weights of the device. The server may identify a first authentication method from the plurality of authentication methods, according to the determined authentication score. The server may authenticate the user request via the first authentication method using a first device that supports the first authentication method.

Method and system for context aware frictionless authentication based on authentication scores

A computing device, method, and computer-readable medium storing instructions for determining user availability for one or more messaging applications are provided. For example, the computing device includes a processor for receiving user activity information from a client device including system interaction information and scheduled activity information for a user of the client device. The system interaction information includes information related to the user's current interaction with applications in the distributed workspace and the scheduled activity information includes information pulled from, for example, a calendar and/or scheduling application associated with the user. The processor processes the user activity information to determine a current user status for the user and output the current user status for the user of the client device to additional users of the one or more messaging applications. Based upon the current user status, messages from additional users of the messaging applications are filtered appropriately.

Intelligent status and engagement system

Techniques for encrypting keyboard data prior to its being received by an operating system of an endpoint device, reducing the possibility of unencrypted keyboard data being logged by a keylogger application running on the endpoint device. The techniques employ an encryption filter communicably coupled between a keyboard and the endpoint device. The encryption filter receives unencrypted keyboard data from the keyboard, encrypts the keyboard data, and provides the encrypted keyboard data to the operating system of the endpoint device. The techniques can be employed in association with a back-end data processing center of a security standard compliant organization, which can receive the encrypted keyboard data from the endpoint device, and decrypt the keyboard data for use on a host system. In this way, access and/or storage of unencrypted keyboard data at the endpoint device can be avoided.

Encryption of keyboard data to avoid being read by endpoint-hosted keylogger applications

Methods, systems, and computer-readable media for providing remote access to applications executing on a host device are presented. Aspects described herein may enable a host device to provide remote access to applications executing in a user session by hooking one or more APIs (or other interfaces) associated with an application instance and a window composition module. Dynamically assigned ports may be generated and used to allow a client device to provide remote user input to an application instance operating in a remote access mode. One or more APIs associated with the application instance may be hooked to provide the remote user input to an input queue of the application instance, bypassing an operating system input queue in some embodiments. APIs associated with the application instance and the window composition module may be hooked to allow the host device to recognize window textures generated by the application instance. These recognized window textures may be sent to the remote client device. As a result, according to some aspects, a host device may enable remote access to the application instance by providing remote input to the application instance and forwarding output from the application instance to the remote client device. These and other features will be discussed further herein.

Providing remote access to applications through interface hooks

Techniques are provided for modifying a list of Traversal Using Relays around Network Address Translators (TURN) servers within a host application. A custom-modified browser is configured to add and/or remove TURN servers underneath a variety of host applications, including, for example, JavaScript WebRTC applications. In some cases, certain applications are permitted and/or denied use of certain TURN servers, based on local administrative policy. In accordance with another embodiment of the present disclosure, a host application can be configured or otherwise modified to use certain TURN servers on certain networks, for example, to prevent traffic from using a TURN server outside a General Data Protection Regulation (GDPR) region.

Modification of application-provided turn servers

A computing system may include a first client computing device configured to locally generate a first local graphics surface, and a second client computing device configured to locally generate a second local graphics surface. A collaboration cloud computing service may cooperate with the first and second client devices to capture the first graphics surface from the first client device and share the first graphics surface from the first client device within the second graphics surface of the second client device, determine a media cloud source and playback control data associated with a video to be displayed in the first graphics surface of the first client device, and cause the second client computing device to independently stream the video from the media cloud source and play the video within the shared first graphics surface synchronously with playback of the video at the first client device based upon the playback control data.

Systems and methods for obtaining access to a session with a remote cloud service server. The methods comprising: receiving, by a first client computing device, a user unique identifier from a mobile device located in proximity to the first client computing device; and performing facial recognition operations by the first client computing device subsequent to the reception of the user unique identifier. The facial recognition operations comprise: capturing an image of the mobile device's user; and analyzing the image to obtain a user name associated with the facial features represented therein. A determination is made as to whether the user name matches the user unique identifier. If so, a first session with the remote cloud service server is automatically launched.

Systems and methods for providing remote desktop access

A system may include a fixed communications device and a mobile communications device each configured to wirelessly communicate at a first frequency and also at a second frequency higher than the first frequency. The fixed communications device and the mobile communications device may cooperate to establish a wireless link via the second frequency, exchange a location signal via the first frequency responsive to establishing the wireless link, communicate via the wireless link using the second frequency and determine respective transmit and receive delays associated with transmission and reception of the location signal via the first frequency, and determine a distance between the fixed communications device and the mobile communications device based upon a time of arrival of the location signal, the transmit and receive delays, and a signal speed associated with the second frequency.

System for determining distance between fixed and mobile endpoints and related methods

A computing system may include first and second client computing devices each configured to generate a respective local graphics surface. A virtualization server may be configured to run a virtual collaboration application for the first client computing device hosted in a virtual computing session, and to generate a virtual graphics surface from the local graphics surface of the first client computing device within the virtual computing session. A collaboration cloud computing service may cooperate with the second client computing device and the virtual collaboration application at the virtualization server to share the virtual graphics surface within the local graphics surface of the second client computing device.

Methods and systems are disclosed for transmitting data from a host computing device to a client computing device. This data may include graphical data, which may require additional processing by a renderer, such as a graphical processing unit (GPU), prior to being transmitted. Upon being forwarded to a specialized hardware component that, for example, may combine a GPU with a controller and one or more network interfaces, the graphical data may be rendered, packetized and transmitted without being provided to a system memory of the host computing device or otherwise involving the host computing device. Data packets including rendered graphical data may be generated by a second processor, different from the host processor of the host computing device.

Growing community of inventors

Coral Springs, FL, United States of America

Jacob Jared Summers