公开(公告)号：US20220321345A1

公开(公告)日：2022-10-06

申请号：US17220459

申请日：2021-04-01

Applicant: VMware, Inc.

Inventor： Tony GANCHEV ,  Plamen DIMITROV

IPC: H04L9/32

Abstract: A method of securely exchanging a session token for a claims-based token by a plug-in integrated into an extensible system includes the steps of: transmitting, to an extensible system server of the extensible system, the session token and a request for a first claims-based token that corresponds to the session token and that is cryptographically signed by an authentication server; acquiring, from the extensible system server, the first claims-based token; transmitting, to the authentication server, the first claims-based token and a request for a second claims-based token; and receiving, from the authentication server, the second claims-based token, wherein the second claims-based token is cryptographically signed by the authentication server, and wherein if the second claims-based token is transmitted to a resource provider server hosting a resource provider service, the resource provider service performs a requested operation on behalf of an interactive user of the extensible system.

公开(公告)号：US20210067504A1

公开(公告)日：2021-03-04

申请号：US16554565

申请日：2019-08-28

Applicant: VMware, Inc.

Inventor： Tony GANCHEV ,  Tihomir MATEEV

IPC: H04L29/06 ,  G06F21/44

Abstract: Plugins are authenticated for purposes of accessing and using application program interfaces (APIs) of a management service of a virtualized computing environment. In an authentication process, each plugin is associated with a session ticket that is unique to the plugin. The session ticket may be in the form of a single-use token that has a finite duration, and which may be used by the plugin to establish a session with the APIs of the management service. Because of the single-use and finite duration constraints of the token, the plugin is unable to use the token for other sessions and other plugins are also unable to use the same token to conduct their own sessions with the management service.

公开(公告)号：US20190392136A1

公开(公告)日：2019-12-26

申请号：US16017959

申请日：2018-06-25

Applicant: VMware, Inc.

Inventor： Tony GANCHEV ,  Plamen DIMITROV ,  Vladimir VELIKOV

IPC: G06F21/53 ,  G06F8/61 ,  G06F9/445

Abstract: The disclosure provides an approach for installing and deploying a plug-in on a computer system so as to extend an extensible software. The plug-in is encapsulated in an installation file recognizable by the extensible software as indicating that the software modules within the installation file should be installed within their own local scope on the extensible software. The approach further provides a method for handling a request for an application programming interface by a service module of an installed plug-in. The method of handling the request includes determining whether the requested API is within a local scope of the service module, and if so, providing the API from the local scope, or otherwise, providing the API from the global scope of the extensible software.

公开(公告)号：US20230229474A1

公开(公告)日：2023-07-20

申请号：US17578451

申请日：2022-01-19

Applicant: VMware, Inc.

Inventor： Plamen DIMITROV ,  Ankur Kumar SHARMA ,  Vladimir VELIKOV ,  Hakan HALIL ,  Andrey KARABELYOV ,  Ivaylo RADEV ,  Tony GANCHEV

IPC: G06F9/455 ,  G06F9/445 ,  G06F21/53 ,  G06F21/54

CPC classification number: G06F9/45558 ,  G06F9/44526 ,  G06F21/53 ,  G06F21/54 ,  G06F2009/45595 ,  G06F2009/45587

Abstract: Example methods and systems to register and manage a plug-in in a virtualized computing environment have been disclosed. One example method includes initiating a deployment process to deploy a virtual appliance configured to host the plug-in, pushing information associated with a user interface on a management entity to the virtual appliance to be one or more Open Virtual Appliance (OVA) environment properties, powering on the virtual appliance and registering and managing the plug-in on the management entity through the UI.

公开(公告)号：US20210011742A1

公开(公告)日：2021-01-14

申请号：US16507035

申请日：2019-07-10

Applicant: VMware, Inc.

Inventor： Tony GANCHEV ,  Plamen DIMITROV ,  Aleksandar MARINOV

IPC: G06F9/445 ,  G06F8/61 ,  G06F9/455 ,  G06F9/451 ,  H04L29/08

Abstract: In an architecture of a virtualized computing system plugins are less tightly integrated with a core user interface of a management server. Rather than being installed and executed at the management server as local plugins, the plugins are served as remote plugins from a plugin server, and may be accessed by a web client through a reverse proxy at the management server. Plugin operations may be executed at the plugin server and/or invoked from a user device where the web client resides. Furthermore, a plugin sandbox and other isolation configurations are provided at the user device, so as to further control access capability and interaction of the plugins.

公开(公告)号：US20220261259A1

公开(公告)日：2022-08-18

申请号：US17734122

申请日：2022-05-02

Applicant: VMware, Inc.

Inventor： Tony GANCHEV ,  Plamen DIMITROV ,  Aleksandar MARINOV

IPC: G06F9/445 ,  G06F8/61 ,  G06F9/451 ,  G06F9/455 ,  H04L67/56

Abstract: In an architecture of a virtualized computing system plugins are less tightly integrated with a core user interface of a management server. Rather than being installed and executed at the management server as local plugins, the plugins are served as remote plugins from a plugin server, and may be accessed by a web client through a reverse proxy at the management server. Plugin operations may be executed at the plugin server and/or invoked from a user device where the web client resides. Furthermore, a plugin sandbox and other isolation configurations are provided at the user device, so as to further control access capability and interaction of the plugins.

公开(公告)号：US20220029979A1

公开(公告)日：2022-01-27

申请号：US17496743

申请日：2021-10-07

Applicant: VMware, Inc.

Inventor： Tony GANCHEV ,  Tihomir MATEEV

IPC: H04L29/06 ,  G06F21/44

Abstract: Plugins are authenticated for purposes of accessing and using application program interfaces (APIs) of a management service of a virtualized computing environment. In an authentication process, each plugin is associated with a session ticket that is unique to the plugin. The session ticket may be in the form of a single-use token that has a finite duration, and which may be used by the plugin to establish a session with the APIs of the management service. Because of the single-use and finite duration constraints of the token, the plugin is unable to use the token for other sessions and other plugins are also unable to use the same token to conduct their own sessions with the management service.