Citrix Systems, Inc.

Getgo, Inc.

Michael Wookey

Richard Jason Croft

Anthony Edward Low

Nicholas Alexander Bissett

Donovan Ross Hackett

Scott Mooney

Richard James Mazzaferri

Anil Roychoudhry

Paul Adam Ryman

Andrew Borzycki

Jeffrey Dale Muir

Elizabeth Thapliyal

Stephen Parry-Barwick

AnneMarie Lock

A technique for facilitating online collaboration among users of client machines allows multiple users to work together and concurrently on a set of documents. In response to a request from a user, a server opens a document in a software application running on the server and virtualizes the software application to the client machines. Multiple users can then operate the software application from the respective client machines to edit the document via remote control. The server multiplexes pointer input from the client machines to provide pointer input to the software application from one user at a time. Multiplexing of pointer input takes place seamlessly and automatically in response to user activity with respect to the virtualized software application.

Collaborative online document editing

A method for enabling a feature provided by a first presentation layer protocol, within a session established according to a second presentation layer protocol includes intercepting, by a hooking component executing on a first machine, a request, by an operating system executing on the first machine, for an indication whether the first machine established a session with a second machine according to a first presentation layer protocol. The method includes determining that the first machine established a session according to a second presentation layer protocol. The method includes identifying a type of a function within the operating system that generated the request for the indication. The method includes indicating that the first machine established the session according to the first presentation layer protocol, responsive to the identification of the type. The method includes enabling functionality provided for use in sessions established according to the first presentation layer protocol.

Methods and systems for enabling features provided by a first presentation layer protocol in a session implemented according to a second presentation layer protocol

A method and system for preventing a local display device from, displaying data generated by a remote computing device is described. The system includes a local agent for facilitating a remote session; an operating system generating a request to enable a display device controlled by a display adapter; and a filter executing in a driver and in communication with the local agent, the filter intercepting the request generated by the operating system. The filter transmits the request to the local agent when a remote user is active or to the display adapter when the remote user is inactive. The filter will transmits a signal to the operating system that the display adapter has enabled the display device when the filter transmits the request to at least one of the local agent and the display adapter.

Methods and systems for preventing a local display device from displaying data generated by a remote computing device

Various aspects as described herein are directed to systems, method, apparatuses, and software for intercepting requests to copy content, paste content, clip content, cut content, or perform a print screen operation, and either allowing the requested operation to occur or preventing the operation depending upon whether the content is sourced from a streamed application or a non-streamed application, and/or depending upon a streamed application-based policy. This may be performed by, for instance, hooking an appropriate function call to the operating system.

Controlling information disclosure during application streaming and publishing

A method and system for preventing a local display device from displaying data generated by a remote computing device is described. The system includes a local agent for facilitating a remote session; an operating system generating a request to enable a display device controlled by a display adapter; and a filter executing in a driver and in communication with the local agent, the filter intercepting the request generated by the operating system. The filter transmits the request to the local agent when a remote user is active or to the display adapter when the remote user is inactive. The filter will transmits a signal to the operating system that the display adapter has enabled the display device when the filter transmits the request to at least one of the local agent and the display adapter.

A method for making a hypermedium page interactive, the hypermedium page displayed by a network browser, includes the step of selecting a hyperlink on the hypermedium page displayed on a client machine, the hyperlink identifying a desired computing resource. A hyperlink configuration file is retrieved, the hyperlink configuration file corresponding to the hyperlink and identifying a server machine. A client agent is started on the client machine. The client agent creates, via a terminal services session, a communication link to a virtual machine executing on the server identified by the hyperlink configuration file, the virtual machine executed by a hypervisor executing in the terminal services session provided by an operating system executing on the server. The client agent receives data from the virtual machine and displays, on the client machine, the received data without intervention by the network browser.

Methods and systems for interacting, via a hypermedium page, with a virtual machine executing in a terminal services session

The present solution reduces the attack surface of a server by selectively opening a server port for listening when a client has been authenticated/authorized via another machine or process, and directed to connect to the server in question. When not selectively listening on a port, the server does not listen or open ports for connections or otherwise minimizes the number of open ports. By selectively listening for connections, the server reduces the opportunity for hackers to attack the server process, and improves the security of the server. The ability to selectively listen on a port at specific times may be combined with additional meta information&#x2014;like ticketing and prior authentication information to help further secure the server. The meta information may identify and ensure that only the correct remote endpoint is allowed to connect via the port. Instead of first listening for connections and then authenticate and authorize the received connection as with typical servers, the present solution first authenticates/authorizes a connection via another machine or process, then listens for an expected and authorized connection.

Systems and methods for enhancing security by selectively opening a listening port when an incoming connection is expected

A method for providing access to a computing environment includes the step of receiving, by a broker machine, a request from a client machine for access to a computing environment, the request including an identification of a user of the client machine. One of a plurality of virtual machines is identified by a session management component, the identified virtual machine providing the requested computing environment. One of a plurality of execution machines is identified, the identified execution machine providing a terminal services session in which a hypervisor executes to provide access to hardware resources required by the identified virtual machine. The hypervisor launches the identified virtual machine. A connection is established between the client machine and the identified virtual machine, via the terminal services session.

Methods and systems for providing access to a computing environment provided by a virtual machine executing in a hypervisor executing in a terminal services session

Growing community of inventors

Epping, Australia

Michael Wookey