Concurrent access to a user profile in a layering system

    公开(公告)号:US10601896B2

    公开(公告)日:2020-03-24

    申请号:US15153596

    申请日:2016-05-12

    IPC分类号: H04L29/08 G06F16/10

    摘要: Concurrent access to a user profile in a layering system is provided. When a user logs into a computing device, the server can locate a corresponding user profile to identify which layers should be provided to the user. Rather than sending these layers to the computing device for mounting, the server can mount the layers on the server. Therefore, if a user logs into multiple computing devices, the layering file system and registry filter drivers on those devices can route file system and registry requests to the server where the layers are mounted. Since the layers are mounted to a single device, concurrent access can be provided without the concern of data conflicts.

    Authentication on thin clients using independent devices

    公开(公告)号:US10523665B2

    公开(公告)日:2019-12-31

    申请号:US15423715

    申请日:2017-02-03

    IPC分类号: H04L29/06 H04W12/06

    摘要: Authentication can be performed on thin clients using independent mobile devices. Because many users have smart phones or other similar mobile devices that include biometric scanners, such mobile devices can be leveraged to perform authentication of users as part of logging in to a thin client desktop. A mapping can be created on a central server between a user's mobile device and the user's domain identity. A mapping can also be created between the user's domain identity and the user's thin client desktop. Then, when a user desires to log in to his thin client desktop, the user can employ the appropriate biometric scanner on his mobile device to perform authentication. The central server can then rely on this authentication to identify and log the user into his thin client desktop.

    Renaming a directory that resides on a layered volume

    公开(公告)号:US10409775B2

    公开(公告)日:2019-09-10

    申请号:US15142041

    申请日:2016-04-29

    IPC分类号: G06F16/16

    摘要: A directory that resides on a layered volume can be renamed. A hooking module can be employed to intercept rename requests. The hooking module can query a layering file system filter driver to determine the volume of the source and target of the rename request. If the source and target are on different volumes, thereby indicating that the source is a directory of a layered volume, the hooking module can append a signature to the target which identifies the actual volume of the source. The modified rename request can then be passed to the operating system which will perform its normal operations including verifying that the source and target are on the same volume. During this verification, the layering file system filter driver can detect the appended signature in the target and can inform the operating system that the target is on the volume identified in the signature.

    Supporting multiple clipboard items in a virtual desktop infrastructure environment

    公开(公告)号:US10404797B2

    公开(公告)日:2019-09-03

    申请号:US15448816

    申请日:2017-03-03

    发明人: Nihar Goli

    IPC分类号: G06F15/16 H04L29/08 H04L29/06

    摘要: Multiple clipboard items are supported in a VDI environment. A client clipboard service can monitor the system clipboard to detect when a clipboard item is added to the system clipboard. The client clipboard service can copy any item added to the system clipboard to a client clipboard buffer. The client clipboard service can also interface with a client virtual channel endpoint to send items in the client clipboard buffer to a server virtual channel endpoint. A server clipboard service can then copy the received items to a server clipboard buffer to thereby synchronize the client and server clipboard buffers. The server clipboard service can function in a similar manner to copy items added to the server's system clipboard to the server clipboard buffer and then interface with the server virtual channel endpoint to cause such items to be synchronized back to the client clipboard buffer.

    Securing source devices using a display device filter

    公开(公告)号:US10282540B2

    公开(公告)日:2019-05-07

    申请号:US15488709

    申请日:2017-04-17

    摘要: Source devices can be secured using a display device filter. When a display device is connected to a source device, a display device filter can identify the display device and determine whether it is a trusted display device. If the display device filter determines that the display device is not trusted, it can take a number of actions to minimize the likelihood of harm to the source device. These actions may include preventing the source device from booting, shutting down the source device, locking the source device, blocking access to other devices, and/or notifying an administrator. In this way, a malicious user can be prevented from gaining access to the source device.

    Optimized data transfer for redirected UASP devices

    公开(公告)号:US10263830B2

    公开(公告)日:2019-04-16

    申请号:US15413089

    申请日:2017-01-23

    摘要: Data transfer can be optimized for redirected UASP devices. When a UASP device is connected to a client terminal that has established a remote session on a server, the VDI can use a network optimal transfer length in place of the actual MAXIMUM TRANSFER LENGTH and OPTIMAL TRANSFER LENGTH of the UASP device. As a result, the server will use the specified network optimal transfer length for requests sent to the redirected UASP device. These requests can therefore be sent to the client in an optimal manner. Then, to optimize the performance of the UASP device, the requests can be split on the client into multiple requests having the OPTIMAL TRANSFER LENGTH and then submitted to the UASP device. In this way, the VDI can optimize the transfer of requests over the network as well as the servicing of requests by the UASP device.

    Isolating a redirected smart card reader to a remote session

    公开(公告)号:US10235189B2

    公开(公告)日:2019-03-19

    申请号:US15341182

    申请日:2016-11-02

    IPC分类号: G06F9/455 G06F9/448 H04L29/08

    摘要: A smart card stub and a smart card proxy can be employed to enable a redirected smart card reader to be accessed within a remote session. To isolate a redirected smart card to a remote session, the smart card stub can be configured to process a response to an application's request to enumerate smart card readers. This processing can include obtaining a session identifier for each enumerated smart card reader and removing any smart card reader from the response if the session identifier of the smart card reader does not match the session identifier of the requesting application. The smart card stub can communicate with a filter driver to obtain the session identifiers employed in this process.

    Cloud based peer assisted updates in a device management environment

    公开(公告)号:US10218780B2

    公开(公告)日:2019-02-26

    申请号:US15133712

    申请日:2016-04-20

    摘要: Peer assisted updates can be provided in a device management environment. When it is desired to deploy an update to a group of managed devices, an update command can be sent to a first set of managed devices in the group instructing these managed devices to download the update. Once these managed devices have downloaded and installed the update, they will notify the management server. In response, the management server can instruct these managed devices to remain awake so that they may each function as a master device or repository for deploying the update to other managed devices in the group. The management server can then send update commands to the other managed devices instructing them to download the update from one of the managed devices that is now acting as a master device. This process can be repeated until all managed devices in the group have been updated.

    Live imaging of a device
    9.
    发明授权

    公开(公告)号:US10185574B2

    公开(公告)日:2019-01-22

    申请号:US15158892

    申请日:2016-05-19

    IPC分类号: G06F9/4401

    摘要: Live imaging of a device can be performed. A client device can include at least two drives that are alternately employed to store the active OS partition. An imaging solution that executes on the active OS partition on a first drive can perform a live imaging process in which a second drive is fully imaged while the user continues to use the client device. Then, once the imaging of the second drive has been completed, the client device can be rebooted to cause the client device to boot from the second drive. In this way, the only downtime that a user may experience due to the imaging process is during the reboot. In a similar manner, when a client device includes only a single available drive, the drive can be divided into two or more sets of one or more partitions that are alternately employed as the active OS partition(s).

    Methods and systems for conducting a remote desktop session via HTML that supports a 2D canvas and dynamic drawing

    公开(公告)号:US10165042B2

    公开(公告)日:2018-12-25

    申请号:US14599226

    申请日:2015-01-16

    摘要: Examples of methods, systems, apparatus, and machine-readable storage media are provided to facilitate access and control of a remote desktop of a remote machine by a web browser at a client device through a transcoding server without installing proprietary plug-ins or protocols on the client device. A transcoding server may translate user input requests from a web browser into input calls compatible with a remote desktop display protocol. The transcoding server may receive remote desktop drawing commands from the remote machine and translate the remote desktop drawing commands into web browser drawing updates compatible with the web browser. A transcoding server may communicate with is web browser via HTTP and communicate with a remote machine via a remote desktop display protocol. A web browser may be an HTML5 browser. A transcoding server may send drawing coordinates to the web browser via an HTTP header and may use long polling.