Lenovo (beijing) Limited

Lenovo (beijing) Co., Ltd.

Vmware, Inc.

Smartisan Digital Co., Ltd.

Zte Corporation

Jianming Fan

Lijun Wang

Jianye Li

Zhimin Li

Shu Liu

Jianfeng Hong

Tablet computer

The disclosure provides an approach for permission checking in virtualized desktop infrastructure (VDI) redirection so that only a rightful owner can access a smart card device. When a user logs in to a remote desktop via a VDI client, a service to access the smart card device is notified of the log in event and the user's account identifier. The service changes ownership and access permissions of a domain socket file used by processes to communicate with the service so only the user account owns and has permission to access the domain socket. The service may also bind, listen to, and receive requests from the domain socket to check users who have opened the domain socket file. In response, the service may determine processes that have opened the file and associated user accounts, as well as generate warnings and/or terminate processes which are not authorized to access the domain socket.

Method and system for preventing unauthorized access to smart card devices in a remote desktop infrastructure

Mobile phone

Growing community of inventors

Beijing, China

Jianming Fan