Microsoft Technology Licensing, LLC

John E Parsons, Jr

Joy Chik

Ido Miles Ben-Shachar

Scott Field

Nadim Y Abdo

Adam J Overton

Ara Bernardi

Wilhelm R Schmieder

Alvin Loh

Brian M Tallman

Paul J Leach

Cristian Marius Ilac

Costin Hagiu

Sriram Sampath

Makarand V Patwardhan

Tad Dennis Brockway

Mahesh Sharad Lotlikar

Meher P Malakapalli

Gennady Medvinsky

Kamen Kamenov Moutafov

Robert K Leitman

Ritu Bahl

Tarek Bahaa El-Din Mahmoud Kamel

Mohamed Bouchet

Mohamed Emad El Din Fathalla

Techniques relating to managing terminal services scenarios are described. In one instance, a process establishes a new terminal services session having a session configuration consistent with a permitted terminal services session configuration. The process also monitors whether the new terminal services session configuration remains consistent with the permitted terminal services session configuration.

Techniques for managing terminal services sessions

A workstation including a host machine and a plurality of consoles directly connected to the host machine. Each of the consoles are configured as a separate console, and each of the consoles include a respective input device adapted to receive input from a user and a respective output device adapted to provide output to the user. A method provided herein includes configuring the host machine to support a plurality of users concurrently on a plurality of consoles, and connecting each of the consoles directly to the host machine so as to enable direct communication therebetween.

Multi-console workstations concurrently supporting multiple users

A credential security support provider (Cred SSP) is provided that enables any application to securely delegate a user's credentials from the client, via client side Security Support Provider (SSP) software, to a target server, via server side SSP software in a networked computing environment. The Cred SSP of the invention provides a secure solution that is based in part upon a set of policies, including a default policy that is secure against a broad range of attacks, which are used to control and restrict the delegation of user credentials from a client to a server. The policies can be for any type of user credentials and the different policies are designed to mitigate a broad range of attacks so that appropriate delegation can occur for given delegation circumstances, network conditions, trust levels, etc. Additionally, only a trusted subsystem, e.g., a trusted subsystem of the Local Security Authority (LSA), has access to the clear text credentials such that neither the calling application of the Cred SSP APIs on the server side nor the calling application of the Cred SSP APIs on the client side have access to clear text credentials.

Policy driven, credential delegation for single sign on and secure access to network resources

A portable graphics encoder connects with one or more protocol decoder devices based on a particular communication protocol. The portable graphics encoder is not specific to any particular operating system. The portable graphics encoder receives protocol decoder device commands such as input instructions that determine higher-level graphics commands that are sent to the one or more protocol decoder devices. The higher-level graphics commands are extracted from graphics sources such as application programs. The portable graphics encoder encodes the higher-level graphics commands according to a format defined by the communication protocol, and the encoded higher-level graphics commands are sent to the one or more protocol decoder devices.

Encoding for remoting graphics to decoder device

Systems and methods are described that provide terminal services through a firewall. In one implementation, data is wrapped with an RPC-based protocol, wherein the data to be wrapped is configured according to a stream-based protocol consistent with establishing a server/client relationship. The RPC-based protocol is then layered over HTTPS. The wrapped data is then passed through the firewall.

Enabling terminal services through a firewall

A method and system of operating a remote terminal by a terminal server caches representation data of glyphs to be displayed on the remote terminal to reduce the amount of glyph data that have to be transmitted to the remote terminal through a network connection. The glyph caching is performed on a level of text fragments each of which includes a plurality of glyphs. The remote terminal stores a fragment cache for caching fragments and glyph caches for caching individual glyphs. Each entry in the fragment cache contains data indicating where the glyph data for the glyphs of the fragment are stored in the glyph caches. When the terminal server receives a request to display a text fragment on the remote terminal, it checks whether that fragment is cached at the remote terminal. If so, the terminal server sends a fragment index to the client identifying the entry in the fragment cache for that fragment. The terminal client retrieves the information in the fragment cache entry and then retrieves the glyph data for the glyphs of the fragment from the glyph cache, and displays them on the remote terminal. A tuning device uses a counter mode encryption cipher to encrypt counters associated with media content in order to protect the media content when it is sent to requesting device or controller. The encrypted counters are decrypted in order to consume the media content. The controller may send particular direction to the tuning device as to how the media content, encrypted counters, and other associated data are sent to the controller.

System and method of caching glyphs for display by a remote terminal

A method and system of operating a remote terminal by a terminal server caches representation data of glyphs to be displayed to reduce the amount of glyph data transmitted through a network connection. The remote terminal stores a fragment cache for caching fragments and glyph caches for caching individual glyphs. Each entry in the fragment cache contains data indicating where the glyph data for the glyphs of the fragment are stored in the glyph caches. When the terminal server receives a request to display a text fragment on the remote terminal, it checks whether that fragment is cached at the remote terminal. If so, the terminal server sends a fragment index to the client identifying the entry in the fragment cache for that fragment. The terminal client retrieves the information in the fragment cache entry and the glyph cache and displays them on the remote terminal.

Upon successfully authenticating a client device with a server system, the client device and server system share auto-reconnect data. Upon subsequently losing and re-establishing communications with the server system, the client sends an auto-authenticate request to the server. The auto-authenticate request includes a session verifier that is based at least in part on the shared auto-reconnect data. The server validates the session verifier. If the validation is successful, the server automatically re-authenticates the client device.

Automatic re-authentication

Systems and methods for enumerating applications by a remote client computer are described. The applications are deployed in an Intranet. The remote client computer is external to the Intranet. In one aspect, a remote application discovery request is sent to a Web service. The Web service is deployed on a remote applications publication (RAP) Web server in the Intranet. The remote application discovery request is sent to the Web service by the remote client computer via a public network that connects the remote client computer to the Web server. Responsive to sending the remote application discover request, a discovery response from the Web service is received. The discovery response identifies at least one application installed on the Intranet for terminal server (TS) based access by a user of the remote client computer.

Growing community of inventors

Sammamish, WA, United States of America

John E Parsons, Jr