公开(公告)号：US11457007B2

公开(公告)日：2022-09-27

申请号：US17015567

申请日：2020-09-09

Applicant: Citrix Systems, Inc.

Inventor： Tom Kludy

IPC: H04L29/06 ,  H04L9/40 ,  H04L9/30

Abstract: Methods, systems, computer-readable media, and apparatuses method for performing single sign on for a user device to the Internet. User sign-in credentials including an identity token of the user are received by a hosted desktop from the user device, including an indication that the user is attempting to access a website. The website is authorized as a trusted website by a network authorization node, and the website is issued a one-time-use token. A web browser of the hosted desktop receives an application provided by the website to cause the web browser to call the hosted desktop to initiate single sign on. Authenticity of the one-time-use token is requested by a daemon process, and the website's public key is obtained. Upon verifying authenticity of the web site, the identity token of the user is passed to the website, to enable the website to establish single sign on with the user.

公开(公告)号：US11456861B2

公开(公告)日：2022-09-27

申请号：US16878840

申请日：2020-05-20

Applicant: CITRIX SYSTEMS, INC.

Inventor： Georgy Momchilov ,  Hubert Divoux ,  Roberto Valdes

IPC: H04L29/06 ,  H04L9/08 ,  H04L9/40 ,  H04L9/32 ,  G06F9/455 ,  H04L12/66 ,  H04L12/46 ,  H04L67/02 ,  H04L67/125 ,  H04L67/141 ,  H04L9/14 ,  H04L9/30 ,  H04L67/01 ,  H04L67/63

Abstract: A computing system may include a client device configured to remotely access virtual computing sessions, and a virtual delivery appliance configured to connect the client device to the virtual computing sessions. The client device and the virtual delivery appliance may share a symmetric encryption key and encrypt data communications exchanged therebetween with the symmetric encryption key. The system may further include a gateway appliance configured to relay the encrypted communications between the client device and the virtual delivery appliance, the gateway appliance not having the symmetric key and being unable to decrypt the encrypted communications relayed between the virtual delivery appliance and the client device.

公开(公告)号：US20220300630A1

公开(公告)日：2022-09-22

申请号：US17205241

申请日：2021-03-18

Applicant: Citrix Systems, Inc.

Inventor： Manbinder Pal Singh

IPC: G06F21/62

Abstract: In one aspect, the present disclosure relates to a method including: determining whether first data representative of a first string of content used by a user to access an application is present within the data structure having positions that contain values representative of strings of content; responsive to determination that the first data is not present within the data structure, retrieving a value from an index using a key associated with the user, the value being derived from positions in the data structure that contain values representative of a second string of content previously used by the user to access the application; decrementing the values of the positions in the data structure representative of the second string of content to remove second data representative of the second string of content from the data structure; and adding the first data representative of the first string of content to the data structure.

公开(公告)号：US11451635B2

公开(公告)日：2022-09-20

申请号：US17170136

申请日：2021-02-08

Applicant: Citrix Systems, Inc.

Inventor： Yedong Yu ,  Shutian Yao ,  Yajun Yao

IPC: G06F15/16 ,  H04L67/141 ,  H04L67/145 ,  G06F21/84 ,  G06F9/451 ,  H04L67/02 ,  H04L67/01

Abstract: Techniques are disclosed for providing secure resume of sessions such as, for example, application sessions. An example methodology implementing the techniques includes receiving, by a computing device, a request to resume a session, the session being hosted on a remote computer system and accessible by the computing device to enable display of content of the session via the computing device. The method also includes initiating one or more actions on the remote computer system to prevent content of the session from being visible on the computing device in response to resumption of the session and resuming the session on the remote computer system such that the content of the session is hidden from view within a display of the computing device as a result of the initiation of the one or more actions.

公开(公告)号：US11451500B2

公开(公告)日：2022-09-20

申请号：US17091678

申请日：2020-11-06

Applicant: Citrix Systems, Inc.

Inventor： Ke Xu ,  Zhipan Liu

IPC: G06F15/16 ,  H04L51/18 ,  H04L9/40 ,  H04L67/143 ,  H04L51/043 ,  H04L67/141 ,  H04L51/224

Abstract: Systems and methods of controlling a state of electronic messaging applications are provided. A system detects a launch of a network application via an embedded browser. The network application is associated with a session identifier of a user. The system identifies one or more electronic messaging applications on a client device of the user. The system transmits, responsive to the launch of the network application associated with the session identifier, an instruction to one or more servers managing the one or more electronic messaging applications to control a state of the one or more electronic messaging applications.

公开(公告)号：US11449213B1

公开(公告)日：2022-09-20

申请号：US17448084

申请日：2021-09-20

Applicant: Citrix Systems, Inc.

Inventor： Qing Dai

IPC: G06F3/0486 ,  G06F9/451 ,  G06F3/0481

Abstract: A computer system is provided. The computer system includes a memory, a user interface, and a processor coupled to the memory and the user interface. The at least one processor is configured to render, via the user interface, a first representation of the computer system and a second representation of a remote computer system distinct from the computer system; receive, via the user interface, input initiating a drag-and-drop operation of a digital resource provided by the remote computer system; detect entry of a cursor effectuating the drag-and-drop operation into the first representation; confine the cursor to a portion of the first representation; move a target proxy window to encompass the portion of the first representation; and free the cursor to continue effectuation of the drag-and-drop operation.

公开(公告)号：US20220292180A1

公开(公告)日：2022-09-15

申请号：US17735409

申请日：2022-05-03

Applicant: Citrix Systems, Inc.

Inventor： Abhishek Chauhan

IPC: G06F21/45 ,  G06F16/27

Abstract: Data from a SaaS application may be stored and accessed locally, enabling SaaS data to be interacted with, regardless of connectivity, while providing secure authentication when offline. When online, a user may perform an authentication procedure and provide credentials to an application server, which may provide an authentication token for access to secure data or applications. The authentication token and user credentials may be cached locally. When offline or experiencing intermittent connectivity, if user provided credentials match the cached credentials, then the client application may retrieve the cached authentication token and allow the embedded browser to resume utilizing the network application and/or data; while if the new credentials do not match the previously provided and cached credentials, access may be denied. Thus, the embedded browser may perform authentication agnostic to whether the device is online or offline at that time, requiring no changes to the browser or network application.

公开(公告)号：US11445002B2

公开(公告)日：2022-09-13

申请号：US16252801

申请日：2019-01-21

Applicant: CITRIX SYSTEMS, INC.

Inventor： Shashidhar Ramareddy ,  Georgy Momchilov ,  Ankur Mittal

IPC: G06F9/44 ,  G06F16/955 ,  H04L67/01 ,  G06F9/451 ,  G06F16/27 ,  H04L41/12 ,  H04L69/04

Abstract: A computing system may include a server, and a client computing device in communication with the server. The server may be configured to provide a corresponding virtual desktop instance for the client computing device. The computing system may include a local device to be coupled to a given client computing device and to be operable in a given virtual desktop instance associated with the given client computing device, thereby generating client initialization packets. The server may be configured to generate a server mapping table. The given client computing device may be configured to generate a client mapping table, replace a client packet with a client mapping ID number to define compressed client initialization packets, and send the compressed client initialization packets to the server. The server may be configured to replace the client mapping ID number with the client packet in the compressed client initialization packets based upon the server mapping table.

公开(公告)号：US20220276757A1

公开(公告)日：2022-09-01

申请号：US17448084

申请日：2021-09-20

Applicant: Citrix Systems, Inc.

Inventor： Qing Dai

IPC: G06F3/0486 ,  G06F3/0481 ,  G06F9/451

Abstract: A computer system is provided. The computer system includes a memory, a user interface, and a processor coupled to the memory and the user interface. The at least one processor is configured to render, via the user interface, a first representation of the computer system and a second representation of a remote computer system distinct from the computer system; receive, via the user interface, input initiating a drag-and-drop operation of a digital resource provided by the remote computer system; detect entry of a cursor effectuating the drag-and-drop operation into the first representation; confine the cursor to a portion of the first representation; move a target proxy window to encompass the portion of the first representation; and free the cursor to continue effectuation of the drag-and-drop operation.

公开(公告)号：US11431754B2

公开(公告)日：2022-08-30

申请号：US16730304

申请日：2019-12-30

Applicant: Citrix Systems, Inc.

Inventor： Nivedita Ojha ,  Stephen Wilson ,  Derek Thorslund

IPC: H04L9/40 ,  H04W36/30 ,  H04L41/0668 ,  H04L41/0681 ,  H04L41/5019 ,  H04L45/00 ,  H04L45/24 ,  H04L45/28 ,  H04W24/04 ,  H04W12/63 ,  H04W88/04 ,  G06F8/65 ,  G06F21/56 ,  H04W76/15

Abstract: A technique for performing authentication includes a first device receiving security data from a second device that shares its network connection with the first device. The first device applies the security data received from the second device when requesting authentication to a secured resource on the network. For example, the security data may include a token code or other data that may be used as a token, such as identification information about the second device.