公开(公告)号：US10277606B2

公开(公告)日：2019-04-30

申请号：US15910127

申请日：2018-03-02

Applicant: Citrix Systems, Inc.

Inventor： Richard Hayton ,  Georgy Momchilov ,  Gary Barton ,  Andrew Innes

IPC: G06F21/00 ,  H04L29/06 ,  H04W12/06 ,  H04W12/08 ,  G06F21/10 ,  G06F21/62

Abstract: Methods and systems are disclosed for providing approaches to anonymous application wrapping on a mobile device. The methods and systems may include receiving, by a controller service, a request to associate a first application executing on a client device with the controller service, and obtaining, by the controller service, a first application identifier associated with the first application. The methods and systems may also include receiving, by the controller service from an application service, a request for a first service and a conditional application identifier, and configuring, by the controller service and based on the request for the first service, the first application with a second set of one or more policy instructions used to control the first application.

公开(公告)号：US10225363B2

公开(公告)日：2019-03-05

申请号：US15244823

申请日：2016-08-23

Applicant: Citrix Systems, Inc.

Inventor： Joseph Nord ,  Richard Hayton

IPC: H04L29/08 ,  H04L12/24

Abstract: Just in time delivery of a consistent user profile to overlapping user sessions, where a first user session issues a request for a first file of a user profile to a server agent. Upon receiving the request, the server agent retrieves the first file from a base user profile, and just in time delivers the retrieved first file to the first user session. The user, via a second user session executing simultaneously with the first user session, issues a request to the server agent for the first file and a second file of the user profile. Upon receiving the request, the server agent identifies a modified version of the first file in a provisional user profile, retrieves the modified first file from the provisional user profile and the second file from the base user profile, and just in time delivers both files to the second user session.

公开(公告)号：US09628448B2

公开(公告)日：2017-04-18

申请号：US14816000

申请日：2015-08-01

Applicant: Citrix Systems, Inc.

Inventor： Richard Hayton

IPC: G06F21/00 ,  H04L29/06 ,  G06F21/31 ,  G06F21/32 ,  G06F21/41

CPC classification number: H04L63/0428 ,  G06F21/31 ,  G06F21/32 ,  G06F21/41 ,  H04L63/0815 ,  H04L63/0869

Abstract: Methods and systems for authenticating users of client devices to allow access of resources and services in enterprise systems are described herein. An authentication device may validate a user based on authentication credentials received from a client device. Validation data stored by the authentication device, and a corresponding access token transmitted to the client device, may be used to authenticate the user for future resource access requests. A user secret also may be stored by the authentication device and used to validate the user for future resource access requests. Additionally, after validating a user with a first set of authentication credentials, additional sets of credentials for the user may be retrieved and stored at an access gateway for future requests to access other services or resources in an enterprise system.

公开(公告)号：US20160191645A1

公开(公告)日：2016-06-30

申请号：US14585320

申请日：2014-12-30

Applicant: Citrix Systems, Inc.

Inventor： Richard Hayton ,  Chris Mayers

IPC: H04L29/08 ,  H04L12/861 ,  H04L29/06

CPC classification number: H04L67/2842 ,  G06F8/00 ,  G06F9/445 ,  G06F9/4484 ,  G06F9/455 ,  G06F9/50 ,  G06F21/53 ,  G06F21/54 ,  G06F21/71 ,  H04L67/02 ,  H04L67/2819 ,  H04L67/34 ,  H04W12/0027 ,  H04W12/08

Abstract: Aspects described herein are directed toward systems, methods, devices, and non-transitory computer-readable media for containerizing a web application and managing its execution. In example implementations, at least a portion of a web application a resource list identified by that web application is retrieved. The portion of the web application and the resources retrieved are cached at a computing device. The application manager intercepts one or more function calls invoked at the cached portion of the web application and processes the function calls intercepted.

Abstract translation: 本文描述的方面针对用于集中化web应用并管理其执行的系统，方法，设备和非暂时性计算机可读介质。 在示例实现中，检索web应用程序的至少一部分由该web应用程序标识的资源列表。 Web应用程序的部分和检索的资源被缓存在计算设备上。 应用程序管理器拦截在Web应用程序的缓存部分调用的一个或多个函数调用，并处理被拦截的函数调用。

公开(公告)号：US09098687B2

公开(公告)日：2015-08-04

申请号：US13886518

申请日：2013-05-03

Applicant: Citrix Systems, Inc.

Inventor： Richard Hayton

IPC: G06F21/00 ,  G06F21/31 ,  G06F21/32 ,  G06F21/41 ,  H04L29/06

CPC classification number: H04L63/0428 ,  G06F21/31 ,  G06F21/32 ,  G06F21/41 ,  H04L63/0815 ,  H04L63/0869

Abstract: Methods and systems for authenticating users of client devices to allow access of resources and services in enterprise systems are described herein. An authentication device may validate a user based on authentication credentials received from a client device. Validation data stored by the authentication device, and a corresponding access token transmitted to the client device, may be used to authenticate the user for future resource access requests. A user secret also may be stored by the authentication device and used to validate the user for future resource access requests. Additionally, after validating a user with a first set of authentication credentials, additional sets of credentials for the user may be retrieved and stored at an access gateway for future requests to access other services or resources in an enterprise system.

Abstract translation: 这里描述了用于验证客户端设备的用户以允许企业系统中的资源和服务的访问的方法和系统。 认证设备可以基于从客户端设备接收到的认证证书来验证用户。 验证设备存储的验证数据和发送到客户端设备的相应的访问令牌可以用于认证用户以备将来的资源访问请求。 用户秘密也可以由认证设备存储，并用于验证用户以备将来的资源访问请求。 另外，在用第一组认证证书验证用户之后，可以检索用户的附加凭证集并将其存储在接入网关中，以供将来请求访问企业系统中的其他服务或资源。

公开(公告)号：US10346622B2

公开(公告)日：2019-07-09

申请号：US15634193

申请日：2017-06-27

Applicant: Citrix Systems, Inc.

Inventor： Gary Barton ,  Richard Hayton ,  Andrew Carnegie Innes ,  Georgy Momchilov

IPC: G06F21/00 ,  G06F21/60 ,  H04L29/06 ,  H04L29/08 ,  G06F9/48 ,  G06F9/54 ,  G06F21/41

Abstract: Methods and systems for communicating information between mobile applications are presented. In some embodiments, a mobile device may determine that a plurality of applications are running on the mobile device. The mobile device may determine that each application of the plurality of applications uses a shared passcode to encrypt information about a persistent state. The mobile device may generate a beacon that includes encrypted state information. The mobile device may maintain state information across the plurality of applications beyond the lifetime of any one of the plurality of applications by transmitting the beacon from a first application to a second application before the first application's lifetime is completed.

公开(公告)号：US20150319174A1

公开(公告)日：2015-11-05

申请号：US14265661

申请日：2014-04-30

Applicant: Citrix Systems, Inc.

Inventor： Richard Hayton ,  Andrew Innes

IPC: H04L29/06

CPC classification number: H04L63/0884 ,  H04L63/0815 ,  H04L63/10 ,  H04L63/205 ,  H04W12/06

Abstract: Methods and systems are disclosed for providing approaches to authenticating and authorizing client devices in enterprise systems via a gateway device. The methods and systems may include passing, by a computing device to an enterprise device, a request transmitted by a client device for access to an enterprise resource, and transmitting, by the computing device, authentication credentials associated with the client device with a request for authorization information associated with the enterprise resource. The methods and systems may also include receiving, by the computing device, the authorization information associated with the enterprise resource, transmitting, by the computing, the request transmitted by the client device for access to the enterprise resource with the received authorization information associated with the enterprise resource, and passing, by the computing device to the client device, information associated with the requested enterprise resource based on the received authorization information associated with the enterprise resource.

Abstract translation: 公开了用于提供通过网关设备对企业系统中的客户端设备进行认证和授权的方法的方法和系统。 方法和系统可以包括由计算设备向企业设备传递由客户端设备发送的用于访问企业资源的请求，以及由计算设备将与客户端设备相关联的认证凭证与请求 与企业资源相关联的授权信息。 所述方法和系统还可以包括由计算设备接收与企业资源相关联的授权信息，通过计算，通过所接收的与所述企业资源相关联的授权信息来传送客户端设备发送的用于访问企业资源的请求 企业资源，并且通过计算设备向客户端设备传递与所请求的企业资源相关联的信息，基于所接收的与企业资源相关联的授权信息。

公开(公告)号：US20140331063A1

公开(公告)日：2014-11-06

申请号：US13886905

申请日：2013-05-03

Applicant: CITRIX SYSTEMS, INC.

Inventor： Richard Hayton

IPC: G06F21/62

CPC classification number: H04L9/0838 ,  G06F21/46 ,  H04L9/0863 ,  H04L9/0894 ,  H04L2209/34

Abstract: Methods and systems for disrupting password attacks using compression are described. A user password may be stored on a mobile computing device. The password may be compressed, for example, using a Huffman compression algorithm, and may be subsequently encrypted using a short secret as a key. The user password may be stored as the compressed and encrypted key. The compressed and encrypted password may be stored such that a brute force password attack, for example, using every possible short secret, would reveal too may possible matches to allow an attacker to select the real password.

Abstract translation: 描述了使用压缩破坏密码攻击的方法和系统。 用户密码可以存储在移动计算设备上。 密码可以被压缩，例如使用霍夫曼压缩算法，并且可以使用短秘密作为密钥进行加密。 用户密码可以存储为压缩和加密的密钥。 可以存储压缩和加密的密码，使得暴力密码攻击（例如，使用每个可能的短秘密）也将显露可能的匹配以允许攻击者选择真实密码。

公开(公告)号：US20140297824A1

公开(公告)日：2014-10-02

申请号：US14015245

申请日：2013-08-30

Applicant: Citrix Systems, Inc.

Inventor： Kevin Batson ,  Richard Hayton

IPC: H04L29/08

CPC classification number: H04L63/105 ,  G06F9/44505 ,  G06F21/10 ,  G06F21/629 ,  G06F2221/2141 ,  H04L63/08 ,  H04L63/0815 ,  H04L63/20 ,  H04L67/10 ,  H04W12/06 ,  H04W12/08

Abstract: Methods, systems, and computer-readable media for providing an application store are presented. In some embodiments, a request for updated policy information for at least one application may be received at an application store from a policy agent. Based on receiving the request, it may be determined, at the application store, whether one or more policies for the at least one application have been updated. Based on determining that the one or more policies for the at least one application have been updated, at least one policy update may be provided to the policy agent.

Abstract translation: 提出了用于提供应用程序存储的方法，系统和计算机可读介质。 在一些实施例中，可以在应用商店从策略代理接收对于至少一个应用的更新的策略信息的请求。 基于接收到请求，可以在应用商店确定是否更新了针对至少一个应用的一个或多个策略。 基于确定所述至少一个应用的一个或多个策略已经被更新，可以向策略代理提供至少一个策略更新。

公开(公告)号：US20130297700A1

公开(公告)日：2013-11-07

申请号：US13888689

申请日：2013-05-07

Applicant: Citrix Systems, Inc.

Inventor： Richard Hayton ,  Kevin Batson

IPC: G06Q10/10

CPC classification number: G06Q10/10

Abstract: Described herein is an enterprise system including an enterprise social platform associated with an application store platform, which is accessible by a computing device in a secure manner. The enterprise social platform stores information indicating user roles within the enterprise and provides at least one social networking feature to a group of users that are associated based on the roles, where the social networking feature is associated with an enterprise application store. An application catalog system of the enterprise application store platform includes sets of enterprise applications that are available for selection by enterprise users, and the application catalog system provides access to selected enterprise applications. An application store storage system includes a plurality of files associated with each one of the plurality of applications, wherein the plurality of files includes enterprise customized application templates, enterprise application usage information, application evaluation information, application recommendations, or an application support forum. An application store management system presents selected ones of the files to a user within the enterprise social platform based on the user's membership in the group of users.

Abstract translation: 这里描述的是包括与应用商店平台相关联的企业社交平台的企业系统，其可由安全的方式由计算设备访问。 企业社交平台存储指示企业内的用户角色的信息，并且向基于角色相关联的一组用户提供至少一个社交网络特征，其中社交网络特征与企业应用商店相关联。 企业应用商店平台的应用程序目录系统包括可供企业用户选择的企业应用程序集，应用程序目录系统提供对所选企业应用程序的访问。 应用商店存储系统包括与多个应用中的每一个相关联的多个文件，其中多个文件包括企业定制应用模板，企业应用使用信息，应用评估信息，应用建议或应用支持论坛。 应用商店管理系统基于用户在用户组中的成员资格向企业社交平台内的用户呈现选定的文件。