Microsoft Technology Licensing, LLC

Zhigu Holdings Limited

Vladimir Stoyanov

Rajneesh Mahajan

Nadim Y Abdo

Makarand V Patwardhan

Joy Chik

Nelly L Porter

Costin Hagiu

Sridhar Sankuratri

Mahesh Sharad Lotlikar

Casey J Dvorak

Zardosht Kasheff

B Anil Kumar

Nelamangal Krishnaswamy Srinivas

Wilhelm R Schmieder

Tong L Wynn

Voicu Anton Albu

Chung Lang Dai

Damien Gerard Saint Macary

Ahmed Tolba

Gaurav Daga

Lihua Zhu

Sriram Sampath

Michael V Sliger

Clark David Nicholson

Ivan Brugiolo

Huei Chung Wang

Hon Luu

Srinivasa Reddy Neerudu

Mahadeva K Alladi

Artem Belkine

Kan Qiu

Ahmed M Tolba

Christian Cruz Montoya

Jeff B Widergren

Gautam Swaminathan

Gustavo Hernando Catalano-fonseca

David Belanger

Alp Emre Kanlikilicer

Tong Wynn

The techniques disclosed herein provide an enhanced single sign-on flow for secure computing resources, such as a virtual machine or hosted applications. In some configurations, the techniques process different types of security data, e.g., credentials, tokens, certificates, and reference objects at specific computing entities of a system to provide a single sign-on flow for providing access to secure computing resources from a client computing device. In one illustrative example, a select type of security data, such as a certificate, is generated from a token and a claim at a particular computing resource, such as an agent operating on a virtual machine. In another example, a signed version of the certificate can be stored and verified at the virtual machine. By generating certificates at such particular computing resources, the computing resource can verify a person's credentials using a secure single sign-on flow without requiring the person to provide credentials multiple times.

Enhance single sign-on flow for secure computing resources

The present disclosure provides systems and method for redirecting control of a client side connected USB device from the client to the server in a remote system. Specifically, the present disclosure creates a simulated USB device at the server. The simulated USB device is treated as a proxy for a redirected USB device at the client. The client side redirected USB device is not treated as the USB device but, rather, acts as a pass through to facilitate communication between requesting applications and the client connected device. The simulated USB device allows an application to send requests for a local device to the simulated USB device at the server. The simulated USB device then processes the requests and forwards the requests to the local device connected to the client.

USB device redirection for remote systems

Format negotiation for media remoting involves at least one media data format. In an example embodiment, a media format negotiation for playing media data is begun between a server and a client. The media data format is transferred from the server to the client. A notification that indicates if an attempt at the client to construct a media topology responsive to the media data format was a success or a failure is transferred from the client to the server. Whether and/or how the media data is to be transferred from the server to the client may be impacted by the notification.

Format negotiation for media remoting scenarios

Device redirection for remote systems

An invention is disclosed for compressing data. In embodiments of the invention, input data is processed to determine one or more hints, or meta-data about how to compress the data. These hints may be produced based on the contents of the data itself, or by the process which generated the data. A hint may comprise an indication that a portion of the data matches another portion of the data, an indication that the portion of the data should not be compressed by an associated compressor, or an indication that the portion of the data should be compressed normally by the associated compressor. The source data and these hints may then be sent to a compressor, which traverses both the source data and the hints, and encodes the source data accordingly to produce an encoded data output stream.

Data compressor using hints

Techniques for presenting changing visual content, including video, animation and so on, as an overlay are discussed. Changing visual content, included in a visual presentation, may be identified from other visual elements included in the visual presentation. The changing visual content may be manipulated based on available resources associated with presenting the changing visual content as an overlay for a client.

Changing visual content communication

Methods and systems for delivering screen content to a client device are disclosed. One method includes, for each of a plurality of coding units corresponding to screen regions included in a screen at a particular time, classifying screen content included in the coding unit as having a content type selected from among a plurality of content types, at least one of the content types comprising a screen image type, and, based on a determination that the screen content has a screen image type, applying a progressive standards-based encoding to the screen content of that coding unit. The method also includes transmitting encoded screen content for each of the screen regions to the client device.

Screen map and standards-based progressive codec for screen content coding

In various embodiments, a remote client is allowed to access at least a part of a connection service located on alternate sources other than the primary remote presentation server. In some embodiments, the remote presentation virtual channels may be split into multiple connections with the purpose of allowing better flow control. Some embodiments may be implemented in a virtual machine environment for cases in which the data to be transferred through a data channel is located in the host virtual machine partition but the remote endpoint is located on the guest virtual machine partition.

Multi-link remote protocol

High Fidelity remoting can be enabled by loading a hybrid remote session in a computer system. The hybrid remote session can include components loaded in a console session and components loaded in a remote session.

Hybrid remote sessions

Example embodiments of the present disclosure provide techniques for efficiently processing and transmitting graphics data when sub-regions of the screen represented by the graphics data are updated at different relative update rates. In an embodiment, when the screen is divided into tiles and a plurality of the tiles have been determined as being changed, some of the sublevels resulting from the image transform may not be encoded and transmitted. The decoding process may use zeroes for any data not received. The rendering subsystem may render the image with the partial data, and the remaining data may be received in subsequent transmissions.

Real-time compression with GPU/CPU

An invention is disclosed for efficiently processing and transmitting graphics data in a remote desktop environment. In embodiments of the invention, a connection is established between a remote desktop server computer and a remote desktop client computer. The remote desktop server computer may process graphics data representative of a remote user desktop. The remote desktop server computer may divide the remote desktop screen in data regions and portions. The remote desktop server computer may then encode and transmit each region to the remote desktop client computer at a certain quality that may be adjusted progressively across the screen frames. The remote desktop server computer may also stop encoding and transmitting the portions of the data region that would not be visible to a user when the region is rendered on a display. The remote desktop user experiences an image quality gradually improving with each frame containing information about the image.

Cross-frame progressive spoiling support for reduced network bandwidth usage

An extensible remote display infrastructure is described that provides support for a competitive multi-vendor development environment. Application functionality may be partitioned to suit the needs of a given application and client-side functionality may be packaged in dynamic virtual channel plug-ins for remote display clients. Interactive coupling between the remote display clients and the dynamic virtual channel plug-ins may be facilitated by remote display client extensibility repositories. The remote display client extensibility repositories may be located within a communication infrastructure aspect of the extensible remote display infrastructure and, in particular, at a static virtual channel level. Dynamic virtual channel plug-ins may register properties, functionality and/or components with remote display client extensibility repositories at available granularity.

Extensible remote display infrastructure with dynamic virtual channels

A remote access system connects a server computer with one or more client computers, where devices are connected locally at the client computers. The devices are recognized by the client computers and a device driver is provided for each connected and recognized device. A virtual driver is created at the server computer from information specific to the device, such that the virtual driver acts as an actual driver to an application on the server computer. The application through the virtual driver is able to recognize and provide commands to the connected device.

Plug and play device redirection for remote systems

Growing community of inventors

Redmond, WA, United States of America

Vladimir Stoyanov