Vmware, Inc.

Omnissa, LLC

Airwatch LLC

Yuping Wei

Yunxia Cheng

Wenlong Shao

Yong Ma

Jinxing Hu

Yueting Zhang

Qiao Huang

Jian Mu

Lin Lv

Qian Jack Liu

Jian Ken Song

Yunfei San

Guoxin Liu

YiQun Yun

Lizhu Zhang

Ke Xiao

Felix Yan

Kejing Meng

Donghai Han

Bo Liu

Ming Zhao

Lu Liu

Wei Hu

Xu Wang

Kun Shi

Qiong Wang

Hongsheng Li

Yuan Ma

Haiou Jiang

Hao Bai

Gang Si

Dong Zhao

Xinghua Hu

Li-Zhu Zhang

Lina Li

Wenshuo Chen

An Min Gong

Aaron Hou

Tang Jia

Yueting Zhange

Bruce Lian Xu

Bo Steven Liu

Disclosed are various embodiments for facilitating user interaction with one time password user interfaces within an authentication application. A QR code can be detected in a UI obtained from an authentication service, and TOTPs generated so that they can be inserted into a context menu generated within the UI of the authentication application.

Time-based one time password user interfaces

The disclosure provides for transitioning application windows between local and remote desktops. Example implementations include opening a first file with a first application to generate a first application window on a first desktop window on a user display; based at least on a trigger event for transitioning the first application window from the first desktop window to a second desktop window, determining whether a second application is available for the second desktop window to produce a version of the first application window; and based at least on the second application being available: transferring the first file across a network to become a second file; and opening the second file with the second application to generate a second application window on the second desktop window, the second application window replacing the first application window on the user display. The transition may go either direction.

Transitioning application windows between local and remote desktops

Techniques for implementing 3DI API redirection for VDI desktops are provided. In one set of embodiments, a server system can intercept a call to a 3D API made by a 3D application running within a VM on the server system, where the VM hosts a desktop that is presented to a user of a client system. The server system can determine metadata associated with the call, where the metadata including a name of the 3D API and one or more input parameter values to the call, and can transmit the metadata to the client system. In response, the client system can reconstruct the call to the 3D API using the metadata and execute the call using one or more physical GPUs residing on the client system.

3D API redirection for virtual desktop infrastructure using a client-side shadow window

Embodiments are described for placing a watermark over application windows in a desktop. For each application window that is opened in the desktop, the system can determine whether the application requires a watermark, for example, based on a predefined list that specifies which applications require watermarks. For each application window that requires a watermark, a uncovered watermark region can be calculated where the watermark will appear. An overlay can be placed over the application windows, for example in a top-level window that does not receive mouse and keyboard inputs, and the watermark can be drawn in the overlay over the location of the uncovered watermark region of each application. As a result, watermarks can be placed over a plurality of specified application windows in an efficient and convenient manner.

Per-window digital watermark for desktop applications

Example methods and systems are provided for cross-cloud connectivity checks. One example method may include detecting a first connectivity check packet that is addressed from a first virtualized computing instance deployed in a first cloud environment; and determining that the first connectivity check packet is destined for a second virtualized computing instance in a second cloud environment reachable via the network device. The method may also comprise: generating a second connectivity check packet by modifying the first connectivity check packet to include one or more indicators that a connectivity check is required along a datapath towards the second virtualized computing instance in the second cloud environment. The method may further comprise: sending the second connectivity check packet to cause one or more observation points along the datapath to, based on the one or more indicators, generate and send report information associated with the second connectivity packet.

Cross-cloud connectivity checks

3D API redirection for virtual desktop infrastructure

A virtual desktop can be remoted to a client device by transmitting a video stream using a video coding format, such as H.264, where higher resolution video can be streamed than natively supported by the encoder or decoder. The encoder framebuffer is divided into a plurality of equal size child buffers, each child buffer is assigned an identifier for identifying the child buffer. Padding pixels can be added to the child buffers to make the child buffer size acceptable for the video coding format. The child buffers are encoded using the video coding format and the encoded frames are transmitted to a client. On the decoder side, the encoded child frames are decoded, padding pixels are removed, and the data is used to update corresponding child buffers in a framebuffer on the client display system.

Split framebuffer encoding

Various examples for providing multiple instances of a client application in operating systems that limit execution of the client application to a single process are disclosed. A client device can include an operating system natively configured to generate a single process for an execution of the client application on the client device. A client application can be configured to, in the single process, generate sub-processes for execution of separate instances of the client application. The client application can include at least one user interface that permits creation of, termination of, or toggling between various instances of the client application.

Multiple application instances in operating systems that utilize a single process for application execution

Techniques are described for enabling a client device having an established virtual desktop session to seamlessly handoff the virtual desktop session to other nearby client devices without the need for the user to manually disconnect the client and re-enter authentication information. The session transfer may be performed using a short-range wireless connectivity protocol, such as BTLE, where the client device having an established virtual desktop session operates in sender mode and broadcasts session handoff messages to nearby receiver devices within a valid range. Another client device operating in receiver mode may accept the session handoff message including session information associated with the virtual desktop session and initiate the transfer of the virtual desktop session without the need for the user to re-authenticate to the server.

Virtual desktop client connection continuity

A method of connecting to a remote virtual application is carried out at a remote desktop client. The steps of the method include transmitting a request for virtual application connection information, receiving, in response to the request, a path to an executable file, a name or identifier of a remote display protocol, and an indication of a protocol configuration associated with a first virtual application, and causing the executable file for the first virtual application to be launched in a virtual computing instance and accessing the first virtual application using the remote display protocol and the protocol configuration.

Adapting remote display protocols to remote applications

Disclosed are methods and apparatus for isolating a connection between a client machine and a remote desktop application running on a virtual machine (VM), the remote desktop application providing a virtual desktop to the client machine. The VM is configured to execute the remote desktop application and one or more other applications. The connection between the client machine and the remote desktop application, for exchanging remote desktop protocol data, is provided by using a first virtual network interface card (VNIC) on the VM, where the first VNIC is exclusively accessible by the remote desktop application and inaccessible to the one or more other applications. Another connection between a remote server and one of the one or more other applications is provided using a second VNIC on the VM, in response to the remote desktop application receiving an indication from the virtual desktop to execute the one application.

Network isolation in virtual desktop infrastructure

An example method is provided for a computing device, coupled to a first display and a second display, to conceal sensitive information on a display. The method may comprise in response to detecting sensitive information in a desktop shown on the first display, generating a replacement image that conceals the detected sensitive information in the desktop and sending the replacement image to the second display for display. Otherwise, a mirror image of the desktop shown on the first display may be sent to the second display for display.

Concealing sensitive information on a display

A method is provided to perform enhanced image encoding in a virtual desktop infrastructure (VDI) environment that includes a client device having a first graphical user interface (GUI) and a server device having a second GUI associated with the first GUI. One example method may include receiving, from the client device, user interface (UI) events based on which the first GUI is to be updated, and obtaining, by an agent on the server device, UI information relating to a UI element on the second GUI. The method may further include determining, by the agent on the server device, an encoding configuration for an encoder based at least in part on the UI information, encoding image data of the second GUI based on the encoding configuration, and sending encoded image data to the client device to update the first GUI on a screen of the client device.

Enhanced image encoding in a virtual desktop infrastructure environment

Growing community of inventors

Beijing, China

Yuping Wei