公开(公告)号：US09678780B2

公开(公告)日：2017-06-13

申请号：US14505868

申请日：2014-10-03

Applicant: Citrix Systems, Inc.

Inventor： Manbinder Pal Singh ,  Imtiaz Mohammad ,  Ian Pratt

IPC: G06F9/455 ,  G06F17/30 ,  G06F15/173 ,  G06F21/53 ,  G06F21/62

CPC classification number: G06F9/45558 ,  G06F21/53 ,  G06F21/6218 ,  G06F2009/45587

Abstract: The present invention is directed towards methods and systems for redirecting an access request to an unsecure virtual machine. A computing device may execute a hypervisor hosting a secure virtual machine and an unsecure virtual machine. A control virtual machine, hosted by a hypervisor executing on the computing device, may intercept a request to access an unsecure resource. The unsecure resource may include one of: a file, an application and an uniform resource locator (URL). The control virtual machine may further determine that the request originates from a secure virtual machine executing on the computing device. The control virtual machine may redirect, responsive to the determination, the request to an unsecure virtual machine executing on the computing device, whereupon the unsecure virtual machine may provide access to the requested unsecure resource.

公开(公告)号：US20150026682A1

公开(公告)日：2015-01-22

申请号：US14505868

申请日：2014-10-03

Applicant: Citrix Systems, Inc.

Inventor： Manbinder Pal Singh ,  Imtiaz Mohammad ,  Ian Pratt

IPC: G06F9/455 ,  G06F21/62

CPC classification number: G06F9/45558 ,  G06F21/53 ,  G06F21/6218 ,  G06F2009/45587

Abstract: The present invention is directed towards methods and systems for redirecting an access request to an unsecure virtual machine. A computing device may execute a hypervisor hosting a secure virtual machine and an unsecure virtual machine. A control virtual machine, hosted by a hypervisor executing on the computing device, may intercept a request to access an unsecure resource. The unsecure resource may include one of: a file, an application and an uniform resource locator (URL). The control virtual machine may further determine that the request originates from a secure virtual machine executing on the computing device. The control virtual machine may redirect, responsive to the determination, the request to an unsecure virtual machine executing on the computing device, whereupon the unsecure virtual machine may provide access to the requested unsecure resource.

Abstract translation: 本发明涉及用于将访问请求重定向到不安全的虚拟机的方法和系统。 计算设备可以执行托管安全虚拟机和不安全虚拟机的管理程序。 由在计算设备上执行的管理程序托管的控制虚拟机可以拦截访问不安全资源的请求。 不安全资源可以包括以下之一：文件，应用程序和统一资源定位符（URL）。 控制虚拟机还可以确定请求源于在计算设备上执行的安全虚拟机。 响应于确定，控制虚拟机可以将请求重定向到在计算设备上执行的不安全的虚拟机，由此不安全的虚拟机可以提供对所请求的不安全资源的访问。