Citrix Systems, Inc.

Other

Leo C Singleton, Iv

Georgy Momchilov

Avijit Gahtori

Kevin Woodmansee

Jitendra Deshpande

Hubert Divoux

Yuri Kolesnikov

Mukund Ingale

Juan C Rivera

Simon Frost

Roberto Valdes

Xavier Gallardo

Steven N Short

Manbinder Pal Singh

Thomas Michael Kludy

Ricardo Fernando Feijoo

Kenneth Bell

Andrew John Ogle

Felipe Leon

Andy Cooper

Sam Arun Seeniraj

Bala Swaminathan

Luis Garcia Menchaca

Paul C Browne

Balasubramanian Swaminathan

Jason Willoughby

Mukesh Garg

Sheldon Lachambre

Vikramjeet Singh Sandhu

Paul W Browne

Himanshu Agarwal

Vivek Koni Raghuveer

Sebastian Tomasz Amrogowicz

Alan Goldman

Harsh Murarka

Sridhar Mullapudi

Aditya Ranjan

Santosh Gummunur Chiranjeevi Sampath

Gabriel Avila

Nitin D Mehta

William T G Charnell

A method may include storing and updating published resource entitlements for a plurality of client devices at a computing device. The method may also include using a plurality of virtual delivery appliances to receive connection requests from the client devices, with the connection requests including connection leases having associated resource entitlements the client devices are respectively permitted to access, and request validation of the connection leases from the computing device. At the computing device, responsive to validation requests from the virtual delivery appliances, the connection leases may be compared to the updated published resource entitlements and validated based thereon. At the virtual delivery appliances, the client devices may be provided with access to virtual sessions corresponding to the published resource entitlements responsive to the virtual session request validations from the computing device.

System and method for validating virtual session requests

A computing device includes a memory and a processor configured to cooperate with the memory to receive a connection lease and a token from a client device, with the token being generated responsive to the client device completing multi-factor authentication (MFA) with a provider of MFA. The processor further verifies, responsive to unavailability of the provider of MFA, that the client device has previously performed MFA based upon the token, and connect the client device to a computing session with use of the connection lease and responsive to the verification that the client device has performed MFA.

Computing session multi-factor authentication

A virtualization server may include a memory and a processor cooperating therewith to operate a virtual session controller configured to assign virtual sessions to a plurality of different client devices. Each virtual session may be running on a virtual machine from among a plurality of different virtual machines and having a respective user profile associated therewith stored at a cloud computing service, and the cloud computing service may be distributed over a plurality of different geographic locations and configured to store the user profiles and backups thereof at different geographic locations. The controller may further receive the user profiles from the cloud computing service and, as client devices are assigned virtual sessions on different virtual machines, roam the user profiles to the different virtual machines, and synchronize local profile changes during the virtual sessions on different virtual machines back to the user profiles stored at the cloud computing service.

Computing system providing cloud-based user profile management for virtual sessions and related methods

A technique provides access to content within a computing environment. The technique involves identifying a network address to a resource which is currently blocked from being accessed via the network address due to operation of a content filter. The technique further involves, based on previously accessed content, modifying the operation of the content filter to unblock access to the resource via the network address. The technique further involves, after the operation of the content filter is modified to unblock access to the resource via the network address, permitting access to the resource via the network address.

Providing access to content within a computing environment

A method includes receiving a request from a client device to establish a first computing session for a first resource hosted on a virtual machine (VM). The method includes generating a session transfer key for accessing a second resource provided by a second resource provider. The method includes issuing instructions, to the VM that hosts the first resource, for establishing a second computing session to host the second resource, wherein the instructions include a mapping of the session transfer key to a session identifier. The method includes providing the instructions to the client device to establish the second computing session for the second resource without input for the second resource from the user of the client device. The establishment of the second computing session being between the VM and the second resource provider and based on the mapping of the session transfer key to the session identifier.

Method and system for sharing user configuration data between different computing sessions

A computer system configured to identify errors in a session launch initiated by a client application is provided. The computer system includes a memory and at least one processor coupled to the memory. The at least one processor is configured to receive one or more events from one or more applications or devices involved in the session launch, wherein an event of the one or more events comprises information from an application or device call (e.g., an application programming interface (API) call) communicated during the session launch, the information comprising destination information; build a primary Directed Acyclic Graph (DAG) based on the information from the API call; determine an error identifier based on the primary DAG; retrieve a troubleshooting recommendation from a library based on the error identifier; and send the troubleshooting recommendation to the client application.

System and methods to detect faulty components during session launch

Methods, systems, computer-readable media, and apparatuses may provide password encryption for hybrid cloud services. A workspace cloud connector internally residing with an entity may intercept user credentials associated with an internal application being transmitted to an external cloud service. The workspace cloud connector may generate an encryption key and encrypt the user credentials via a reversible encryption methodology. The workspace cloud connector may encrypt the encryption key using an irreversible encryption methodology (e.g., use a hashing function to produce a first hash). The workspace cloud connector may transmit the encrypted user credentials and the first hash to a virtual delivery agent via a first path (e.g., via the external cloud service). In response, the workspace cloud connector may receive an address of the virtual delivery agent and, using the address, may send the encryption key to the virtual delivery agent via a second path different from the first path.

Password encryption for hybrid cloud services

A computing device may include a memory and a processor cooperating with the memory to generate connection leases for a plurality of client devices. The client devices may be configured to request virtual computing sessions from virtual delivery appliances in accordance with respective connection leases. Virtual delivery appliances within a first group may be configured to operate during off-peak hours, and virtual delivery appliances within a second group different than the first group may be configured not to operate during the off-peak hours. The processor may generate each connection lease to include at least one of the virtual delivery appliances from the first group.

Computer system providing virtual computing sessions through virtual delivery agent leasing with enhanced power savings and connectivity and related methods

Methods, systems, computer-readable media, and apparatuses may provide for the intermediated retrieval of applications on a network. A computing device may be configured to receive an application from an application server on a network. Based on, for example, the network conditions between the computing device and the application server, the computing device may query a plurality of intermediary servers. Based on a decision that, for example, the network conditions between the computing device, application server, and a selected intermediary server are better than the network conditions between the computing device and the application server, the computing device may cause the application to be retrieved by a host application of the selected intermediary server. The host application may process and transmit the application to the computing device. The computing device may display the processed application and transmit user input corresponding to the processed application to the intermediary server.

Intermediated retrieval of networked content

A computer system is provided. The computer system includes a memory and a processor coupled to the memory. The processor is configured to receive a first message from an identity provider, the first message including an arbitrary identifier generated by the identity provider, the arbitrary identifier being incompatible with a dependent process that is reliant upon the identity provider; encode, in response to reception of the first message, the arbitrary identifier into an encoded identifier that is compatible with the dependent process; and transmit a second message including the encoded identifier to the dependent process.

Adaptive identification systems and methods

Aspects described herein relate to methods, devices and systems that allow for a client device, as part of a remote access or cloud-based network environment, to map external user identities to desktops and applications. Local user accounts can be dynamically generated on a virtual delivery agent. A mapping of the local user account to an external identity can be secured using signed tokens and maintained by a broker machine that allocates resources for the deployment of particular applications to the client device from the virtual delivery agent. This allows for the removal of any dependency on an Active Directory for maintaining user identities or federated sign-on services, greatly simplifying the management of user identities within the system and allowing for greater compatibility across client devices.

Local mapped accounts in virtual desktops

Methods and systems for providing services using mixed instance catalogs are described herein. A catalog may comprise a plurality of first virtual machines and a plurality of second virtual machines. The capacity of a first virtual machine may be larger than the capacity of a second virtual machine. Connection requests to access a service associated with the catalog may be distributed among the plurality of first virtual machines and the plurality of second virtual machines.

Mixed instance catalogs

A virtual delivery appliance may include a memory and a processor configured to cooperate with the memory to connect client computing devices with virtual computing sessions provided by a host computing device(s) based upon respective connection leases each including an ordered list of virtual delivery appliances, with at least some of the client computing devices having different ordered lists of virtual delivery appliances. Each client computing device may be configured to request a new session from the virtual delivery appliances in the ordered list in descending order until receiving a connection with a new virtual computing session. The processor may be further configured to re-direct new session requests received from the client computing devices to lower virtual delivery appliances in the ordered list when existing virtual computing sessions for the client computing devices are already active with the host computing device(s) associated with the lower virtual delivery appliances.

Computer system and methods providing virtual computing session connections and re-directs based upon ordered list of virtual delivery agents

A method can include receiving, by a high-availability (HA) service running in a data center having a plurality of virtual machines (VMs) and a hypervisor, credentials for the hypervisor and a list of VMs, the hypervisor credentials and the list of VMs received from a power and capacity management (PCM) service, the PCM service configured to selectively power VMs from the list of VMs on and off; sending, from the HA service to the PCM service, a health check request to determine if the PCM service is able of selectively power the VMs from the list of VMs on and off; and in response to determining the PCM service is unable to selectively power the VMs from the list of VMs on and off, powering on, by the HA service, one or more of the VMs from the list of VMs using the hypervisor credentials received from the PCM service.

High-availability for power-managed virtual desktop access

Growing community of inventors

Fort Lauderdale, FL, United States of America

Leo C Singleton, Iv