Citrix Systems, Inc.

Other

Juan C Rivera

Julian Petrov

Leo C Singleton, Iv

Nitin Desai

Modesto Tabares

Christopher M Fleck

Timothy J Corbett

Tim Corbett

Christopher W Midgley

David Sean Stone

Jitendra Deshpande

Ashwin Suresh

Derek Piasecki

Ning Ye

Sridhar Mullapudi

Mohit Arora

David Stone

Iv Leo C Singleton

Methods, systems, and computer-readable media for transferring hosted web browser sessions between browser servers are described herein. In various embodiments, a broker service may create a browser server pool from a plurality of browser servers. The broker service may connect a client agent with a first web browser session in a first browser server in the browser server pool. The broker service, responsive to a determination that the first web browser session needs to be transferred to a second browser server in the browser server pool, may request and receive a session context from the first web browser session, launch a second web browser session in the second browser server, initialize the second web browser session with the session context from the first web browser session, transfer the client agent from the first web browser session to the second web browser session, and terminate the first web browser session.

Browser server session transfer

Described embodiments provide systems and methods for providing data loss prevention via an embedded browser. An interprocess communication (IPC) manager may interface with an embedded browser to control the transfer of data from a first application to a second application in accordance with a policy. The IPC manager may detect a command to store data accessed on the first application via the embedded browser and store the data onto a secure container. The secure container may be dedicated to the embedded browser. The IPC manager may subsequently detect a command to retrieve data from the secure container and to replicate the data onto the second application. The IPC manager may determine a policy to apply to the data. The policy may specify whether the data from the first application is permitted to be replicated onto the second application. The IPC manager may subsequently replicate the data on the second application.

Systems and methods for providing data loss prevention via an embedded browser

A computer system includes a virtual server to provide virtual computing sessions, and a client device to access one of the virtual computing sessions via a communications network. The client device includes a wireless transceiver connected to a cellular network. A server communicates with the client device via the cellular network based on the client device losing connectivity to the communications network. The cellular network provides a backup communications channel for the server to restore connectivity for the client device to access one of the virtual computing sessions via the communications network.

Desktop virtualization with a dedicated cellular network connection for client devices

A computer system includes a client device, and a server configured to monitor a status of a virtual computing session for failure, with the virtual computing session being accessed by the client device. The server redirects the client device to a backup virtual computing session based on failure of the virtual computing session, and updates a state of the backup virtual computing session to match a previous state of the virtual computing session prior to failure.

Automatic restore for a failed virtual computing session

Systems and methods for classification of log data at the source into sets of critical and non-critical data. Critical data may be indexed and processed normally, while non-critical data may be provided to and stored by the cloud-based log aggregation system without indexing, at significantly lower cost in terms of processing and storage. In the event that non-critical data is required for troubleshooting or analysis, the non-critical data may be indexed dynamically on request. Because the non-critical data is stored at the cloud-based log aggregation system, it may be quickly indexed and added to the critical data, without additional consumption of bandwidth or delays due to transmission. Dynamic selection and classification of critical and non-critical data may thus allow an enterprise to balance costs and availability of indexed data.

Approach for a controllable trade-off between cost and availability of indexed data in a cloud log aggregation solution such as splunk or sumo

A computer system is provided. The computer system includes a memory, a network interface, and at least one processor coupled to the memory and the network interface. The processor is configured to receive, via the network interface, a request for a computing session; determine a security score for the computing session; identify a virtual resource designated to support computing sessions having the security score; and establish the computing session with the virtual resource.

Security risk load balancing systems and methods

Methods, systems, and computer-readable media for creating and managing cloud servers and services using a multi-tenant multi-session catalog with machine-level isolation are described herein. In one or more embodiments, a cloud service provider may receive requests from one or more tenants for predefined numbers of servers. The cloud service provider may initialize a plurality of servers, wherein the plurality of servers is less than a sum of the totality of server requests, and create a catalog of unassigned servers of the plurality of servers. Responsive to a logon request from a user of a tenant, the cloud service provider may assign a server from the catalog of unassigned servers to the tenant, remove the server from the catalog of unassigned servers, broker the user of the tenant to connect to the server, and limit access to the server to only users of the tenant.

Multi-tenant multi-session catalogs with machine-level isolation

A computing system includes an enterprise server providing an application, a mobile computing device having sensor capabilities registered with the enterprise server, and a client computing device operated by a user to access the application. The user is to request a capability of the application. The enterprise server is configured to compare the requested capability of the application to the registered sensor capabilities of the mobile computing device. If the requested capability of the application can be performed by the mobile computing device, then the enterprise server is configured to provide a notification to the mobile computing device requesting permission for the mobile computing device to provide access to the sensor capability corresponding to the requested capability of the application. The mobile computing device performs the requested capability of the application after permission is granted.

Extension of mobile device sensor capabilities into an application

Methods, systems, and computer-readable media for redirecting a web browser application for secure web browsing are described herein. In various embodiments, a user web browser application executing within a secure network may request the content of a website outside of the secure network. In response to the request, an address translation service may redirect the user web browser application to a redirector service to respond to the request. In response to the request, the redirector service may request a hosted web browser application that may be able to navigate to the requested website. In further response to the request, the redirector service may send, to the user web browser application, a client agent which may display the output generated by a hosted web browser application within the user web browser application.

Redirector for secure web browsing

Systems and methods that provide a hierarchical display to a user based on a position of the user's focus are described herein. The position of the user's focus may be determined by tracking, for example, a position of the user's eyes, a position of a mouse cursor within the display, a position of an application window within the display, or a combination thereof. Based on the position of the user's focus, the display may be divided into multiple display regions, and the display regions may be ranked, such as by prioritizing a display region that the user is focusing on. Display quality (e.g., transmission rate, image resolution, degree of image compression, etc.) of the display regions may be determined based on the rank of the display regions, thereby providing higher display/image quality to regions based on what the user is actively looking at.

Hierarchical display

A method for dynamically associating, by a server, access rights with a resource includes the step of receiving, by the server, a request for a resource from a client. The server requests, from a policy engine, an identification of a plurality of access rights to associate with the resource, the plurality of access rights identified responsive to an application of a policy to the client. The server associates the resource with the plurality of access rights via a rights markup language. The server transmits the resource to the client with the identification of the associated plurality of access rights. An application program on the client makes an access control decision responsive to the associated plurality of access rights. The application program provides restricted access to the resource responsive to the access control decision.

Method and system for dynamically associating access rights with a resource

Described herein are methods and systems for selectively synchronizing locally stored data with data stored in a cloud storage repository. A client application can synchronize a portion of the locally or remotely stored content by choosing to synchronize data that is frequently used, data that is marked as priority data or data that was modified or otherwise accessed during a predetermined period of time. Other selective synchronization optimizations include predictively synchronizing data or content associated with frequently use or priority data and synchronizing data according to a priority score.

Growing community of inventors

Fort Lauderdale, FL, United States of America

Juan C Rivera