公开(公告)号：US09977880B2

公开(公告)日：2018-05-22

申请号：US14517264

申请日：2014-10-17

Applicant: VMware, Inc.

Inventor： Benjamin A. Chambers ,  Matthew David Ginzton

IPC: G06F21/12 ,  G06F21/44 ,  G06F21/10 ,  G06F9/455

CPC classification number: G06F21/121 ,  G06F9/45533 ,  G06F9/45558 ,  G06F21/10 ,  G06F21/44 ,  G06F2009/45587 ,  G06F2221/0746

Abstract: A virtualization system supports secure, controlled execution of application programs within virtual machines. The virtual machine encapsulates a virtual hardware platform and guest operating system executable with respect to the virtual hardware platform to provide a program execution space within the virtual machine. An application program, requiring license control data to enable execution of the application program, is provided within the program execution space for execution within the virtual machine. A data store providing storage of encrypted policy control information and the license control data is provided external to the virtual machine. The data store is accessed through a virtualization system including a policy controller that is selectively responsive to a request received from the virtual machine to retrieve the license control data dependent on an evaluation of the encrypted policy control information.

公开(公告)号：US20140250437A1

公开(公告)日：2014-09-04

申请号：US14278889

申请日：2014-05-15

Applicant: VMware, Inc.

Inventor： Matthew David Ginzton ,  Jeremy Sugerman ,  Ramesh Dharan

IPC: G06F9/455

CPC classification number: G06F9/455 ,  G06F9/45533 ,  G06F9/45558 ,  G06F9/50 ,  G06F9/5005 ,  G06F9/5061 ,  G06F9/5077 ,  G06F2009/45595

Abstract: A remote proxy in a virtualization layer domain establishes a plurality of logical channels via a network connection. The virtualization layer domain is part of a host system in which a set of virtual machines of a virtual machine domain run on a virtualization layer of the virtualization layer domain. The remote proxy receives first information from a first logical channel in plurality of logical channels and second information from a second logical channel in plurality of logical channels through the network connection. Then, the remote proxy determines that the virtual machine domain should process the first information and forwards the first information from the virtualization layer domain to a virtual machine in the set of virtual machines in the virtual machine domain. Also, the remote proxy determines that the virtualization layer domain should process the second information and forwards the second information to the virtualization layer for processing.

Abstract translation: 虚拟化层域中的远程代理通过网络连接建立多个逻辑信道。 虚拟化层域是主机系统的一部分，虚拟机域的一组虚拟机在虚拟化层域的虚拟化层上运行。 远程代理通过网络连接从多个逻辑信道中的第一逻辑信道接收来自第一逻辑信道的第一信息和来自多个逻辑信道中的第二逻辑信道的第二信息。 然后，远程代理确定虚拟机域应该处理第一个信息，并将第一个信息从虚拟化层域转发到虚拟机域中虚拟机集中的虚拟机。 此外，远程代理确定虚拟化层域应处理第二个信息，并将第二个信息转发到虚拟化层进行处理。

公开(公告)号：US09389888B2

公开(公告)日：2016-07-12

申请号：US14278889

申请日：2014-05-15

Applicant: VMware, Inc.

Inventor： Matthew David Ginzton ,  Jeremy Sugerman ,  Ramesh Dharan

IPC: G06F9/455 ,  G06F9/46 ,  G06F15/173 ,  G06F9/50

CPC classification number: G06F9/455 ,  G06F9/45533 ,  G06F9/45558 ,  G06F9/50 ,  G06F9/5005 ,  G06F9/5061 ,  G06F9/5077 ,  G06F2009/45595

Abstract: A remote proxy in a virtualization layer domain establishes a plurality of logical channels via a network connection. The virtualization layer domain is part of a host system in which a set of virtual machines of a virtual machine domain run on a virtualization layer of the virtualization layer domain. The remote proxy receives first information from a first logical channel in plurality of logical channels and second information from a second logical channel in plurality of logical channels through the network connection. Then, the remote proxy determines that the virtual machine domain should process the first information and forwards the first information from the virtualization layer domain to a virtual machine in the set of virtual machines in the virtual machine domain. Also, the remote proxy determines that the virtualization layer domain should process the second information and forwards the second information to the virtualization layer for processing.

Abstract translation: 虚拟化层域中的远程代理通过网络连接建立多个逻辑信道。 虚拟化层域是主机系统的一部分，虚拟机域的一组虚拟机在虚拟化层域的虚拟化层上运行。 远程代理通过网络连接从多个逻辑信道中的第一逻辑信道接收来自第一逻辑信道的第一信息和来自多个逻辑信道中的第二逻辑信道的第二信息。 然后，远程代理确定虚拟机域应该处理第一个信息，并将第一个信息从虚拟化层域转发到虚拟机域中虚拟机集中的虚拟机。 此外，远程代理确定虚拟化层域应处理第二个信息，并将第二个信息转发到虚拟化层进行处理。

公开(公告)号：US11100253B2

公开(公告)日：2021-08-24

申请号：US16285160

申请日：2019-02-25

Applicant: VMware, Inc.

Inventor： Matthew David Ginzton ,  Matthew B. Eccleston ,  Srinivas Krishnamurti ,  Gerald C. Chen ,  Nick Michael Ryan

IPC: G06F12/14 ,  G06F11/30 ,  G06F9/455 ,  G06F21/62 ,  H04L29/06

Abstract: An administrator may set restrictions related to the operation of a virtual machine (VM), and virtualization software enforces such restrictions. There may be restrictions related to the general use of the VM, such as who may use the VM, when the VM may be used, and on what physical computers the VM may be used. There may be similar restrictions related to a general ability to modify a VM, such as who may modify the VM. There may also be restrictions related to what modifications may be made to a VM, such as whether the VM may be modified to enable access to various devices or other resources. There may also be restrictions related to how the VM may be used and what may be done with the VM. Information related to the VM and any restrictions placed on the operation of the VM may be encrypted to inhibit a user from circumventing the restrictions.

公开(公告)号：US09280358B1

公开(公告)日：2016-03-08

申请号：US14303723

申请日：2014-06-13

Applicant: VMware, Inc.

Inventor： Matthew David Ginzton ,  Dustin Michael Byford

IPC: G06F13/00 ,  G06F9/44

CPC classification number: G06F9/4411 ,  G06F9/452

Abstract: A method determines mobile devices for connection to a computer that has an operating system for a user session. Then, the method configures device drivers to enable communication between the operating system and the mobile devices. The operating system is configured to use a first mobile device as a first type of input/output (I/O) device and the operating system is configured to use a second mobile device as a second type of input/output (I/O) device. Also, the method processes communications between the mobile devices and the operating system via the device drivers for the user session. A first type of communication is between the first mobile device and the operating system via the first device driver to use the first mobile device as the first type of I/O device and a second type of communication is between the second mobile device and the operating system via the second device driver to use the second mobile device as the second type of I/O device.

Abstract translation: 一种方法确定用于连接到具有用户会话的操作系统的计算机的移动设备。 然后，该方法配置设备驱动程序以实现操作系统和移动设备之间的通信。 操作系统被配置为使用第一移动设备作为第一类型的输入/输出（I / O）设备，并且操作系统被配置为使用第二移动设备作为第二类型的输入/输出（I / O） 设备。 此外，该方法经由用于用户会话的设备驱动程序来处理移动设备和操作系统之间的通信。 第一类型的通信是通过第一设备驱动器在第一移动设备和操作系统之间，以使用第一移动设备作为第一类型的I / O设备，并且第二类型的通信在第二移动设备和操作之间 系统通过第二设备驱动器将第二移动设备用作第二类型的I / O设备。

公开(公告)号：US10216961B2

公开(公告)日：2019-02-26

申请号：US15008377

申请日：2016-01-27

Applicant: VMware, Inc.

Inventor： Matthew David Ginzton ,  Matthew B. Eccleston ,  Srinivas Krishnamurti ,  Gerald C. Chen ,  Nick Michael Ryan

IPC: G06F12/14 ,  G06F11/30 ,  G06F9/455 ,  G06F21/62 ,  H04L29/06

Abstract: An administrator may set restrictions related to the operation of a virtual machine (VM), and virtualization software enforces such restrictions. There may be restrictions related to the general use of the VM, such as who may use the VM, when the VM may be used, and on what physical computers the VM may be used. There may be similar restrictions related to a general ability to modify a VM, such as who may modify the VM. There may also be restrictions related to what modifications may be made to a VM, such as whether the VM may be modified to enable access to various devices or other resources. There may also be restrictions related to how the VM may be used and what may be done with the VM. Information related to the VM and any restrictions placed on the operation of the VM may be encrypted to inhibit a user from circumventing the restrictions.

公开(公告)号：US08812876B1

公开(公告)日：2014-08-19

申请号：US13853766

申请日：2013-03-29

Applicant: VMware, Inc.

Inventor： Matthew David Ginzton ,  Matthew B. Eccleston ,  Srinivas Krishnamurti ,  Gerald C. Chen ,  Nick Michael Ryan

IPC: G06F12/14 ,  G06F11/30 ,  G06F9/455 ,  G06F21/62 ,  H04L29/06

CPC classification number: G06F21/6281 ,  G06F9/45558 ,  G06F12/1408 ,  G06F21/121 ,  G06F21/602 ,  G06F2009/45587 ,  G06F2221/0704 ,  G06F2221/2107 ,  H04L63/0236

Abstract: An administrator may set restrictions related to the operation of a virtual machine (VM), and virtualization software enforces such restrictions. There may be restrictions related to the general use of the VM, such as who may use the VM, when the VM may be used, and on what physical computers the VM may be used. There may be similar restrictions related to a general ability to modify a VM, such as who may modify the VM. There may also be restrictions related to what modifications may be made to a VM, such as whether the VM may be modified to enable access to various devices or other resources. There may also be restrictions related to how the VM may be used and what may be done with the VM. Information related to the VM and any restrictions placed on the operation of the VM may be encrypted to inhibit a user from circumventing the restrictions.

Abstract translation: 管理员可以设置与虚拟机（VM）的操作有关的限制，虚拟化软件会强制执行这些限制。 可能存在与VM的一般使用有关的限制，例如可以使用VM的VM，可以使用VM以及可以在什么物理计算机上使用VM。 可能存在与修改VM的一般能力相关的类似限制，例如可能修改VM的人。 还可能存在与对VM进行什么修改有关的限制，例如VM是否可被修改以允许访问各种设备或其他资源。 还可能存在与VM的使用方式有关的限制，以及可能对VM做什么。 与VM相关的信息和对VM的操作的任何限制可以被加密，以阻止用户规避限制。

公开(公告)号：US09390286B2

公开(公告)日：2016-07-12

申请号：US14340506

申请日：2014-07-24

Applicant: VMware, Inc.

Inventor： Matthew David Ginzton ,  Matthew B. Eccleston ,  Srinivas Krishnamurti ,  Gerald C. Chen ,  Nick Michael Ryan

IPC: G06F12/14 ,  G06F11/30 ,  G06F9/455 ,  G06F21/62 ,  H04L29/06

CPC classification number: G06F21/6281 ,  G06F9/45558 ,  G06F12/1408 ,  G06F21/121 ,  G06F21/602 ,  G06F2009/45587 ,  G06F2221/0704 ,  G06F2221/2107 ,  H04L63/0236

Abstract: An administrator may set restrictions related to the operation of a virtual machine (VM), and virtualization software enforces such restrictions. There may be restrictions related to the general use of the VM, such as who may use the VM, when the VM may be used, and on what physical computers the VM may be used. There may be similar restrictions related to a general ability to modify a VM, such as who may modify the VM. There may also be restrictions related to what modifications may be made to a VM, such as whether the VM may be modified to enable access to various devices or other resources. There may also be restrictions related to how the VM may be used and what may be done with the VM. Information related to the VM and any restrictions placed on the operation of the VM may be encrypted to inhibit a user from circumventing the restrictions.