System and method to redirect hardware secure USB storage devices in high latency VDI environments
AssigneeDell Products L.P.
InventorsGokul T. Vajravel, Ramanujam Kaniyar Venkatesh
Life of this patent
Estimating the term…
Abstract
In certain information handling system environments, physical devices connected to a client are redirected to a server or other information handling system. Requests to a virtualized hardware secure device may not be accessible due to the latency of the network. A server may request that a locking application of a CDROM driver (or interface) unlock a secured disk interface/logical unit of a redirected hardware secure device. The locking application validates a user entered password. Once unlocked the secured disk interface/logical unit is accessible via an associated file system stack at the server.
Claims20
A method comprising:
- receiving, at a server, a disk arrival notification that a hardware secure universal serial bus (USB) storage device has been coupled to a client, wherein the hardware secure USB storage device comprises a chip for handling encryption of data;
- issuing a command by a proxy server of the server to a virtual disk enumerator to create a virtual disk associated with the hardware secure USB storage device;
- loading a disk driver and compact disk read-only memory (CDROM) driver as interfaces to the virtual disk;
- loading a file system stack associated with the disk driver;
- loading a CDROM file system stack associated with the CDROM driver;
- executing a locking application, wherein the locking application resides in the CDROM driver;
- receiving by the locking application a hardware secure password;
- validating by the locking application the hardware secure password;
- and
- unlocking a secured disk interface of the virtual disk, based at least in part, on the validating the hardware secure password.
A system comprising:
- a first server;
- one or more central processing units for processing information of the first server;
- a memory of the first server communicatively coupled to the one or more central processing units;
- and
- one or more modules that comprise instructions stored in the memory, the instructions, when executed by the one or more processing units, operable to perform operations comprising:
- receiving, at the server, a disk arrival notification that a hardware secure universal serial bus (USB) storage device has been coupled to a client, wherein the hardware secure USB storage device comprises a chip for handling encryption of data;
- issuing a command by a proxy server of the server to a virtual disk enumerator to create a virtual disk associated with the hardware secure USB storage device;
- loading a disk driver and compact disk read-only memory (CDROM) driver as interfaces to the virtual disk;
- loading a file system stack associated with the disk driver;
- loading a CDROM file system stack associated with the CDROM driver;
- executing a locking application, wherein the locking application resides in the CDROM driver;
- receiving by the locking application a hardware secure password;
- validating by the locking application the hardware secure password;
- and
- unlocking a secured disk interface of the virtual disk, based at least in part, on the validating the hardware secure password.
One or more computer-readable non-transitory storage media embodying software operable when executed by one or more computer systems to:
- receive, at a server, a disk arrival notification that a hardware secure universal serial bus (USB) storage device has been coupled to a client, wherein the hardware secure USB storage device comprises a chip for handling encryption of data;
- issue a command by a proxy server of the server to a virtual disk enumerator to create a virtual disk associated with the hardware secure USB storage device;
- load a disk driver and compact disk read-only memory (CDROM) driver as interfaces to the virtual disk;
- load a file system stack associated with the disk driver;
- load a CDROM file system stack associated with the CDROM driver;
- execute a locking application, wherein the locking application resides in the CDROM driver;
- receive by the locking application a hardware secure password;
- validate by the locking application the hardware secure password;
- and
- unlock a secured disk interface of the virtual disk, based at least in part, on the validating the hardware secure password.
Dependencies are inferred from the claim text.