# US 11,451,635 B2 · Secure session resume > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,451,635 B2 - Document ID: US11451635B2 - Status: Granted - Kind: B2 - Application number: 17/170,136 - Filed: 2021-02-08 - Published: 2022-06-30 - Granted: 2022-09-20 - Earliest claimed: 2020-12-30 - Assignees: Citrix Systems, Inc. - Applicants: Citrix Systems, Inc. - Inventors: Yedong Yu; Shutian Yao; Yajun Yao - Web page: https://patentgrep.com/patent/US11451635B2 ## CPC - H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) - G06F 9/452: {Remote windowing, e.g. X-Window System, desktop virtualisation (protocols for virtual reality H04L67/131)} - G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine - G06F 21/84: output devices, e.g. displays or monitors - H04L 67/01: Protocols - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04L 67/08: specially adapted for terminal emulation, e.g. Telnet - H04L 67/145: avoiding end of session, e.g. keep-alive, heartbeats, resumption message or wake-up for inactive or interrupted session - H04L 67/148: Migration or transfer of sessions - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Techniques are disclosed for providing secure resume of sessions such as, for example, application sessions. An example methodology implementing the techniques includes receiving, by a computing device, a request to resume a session, the session being hosted on a remote computer system and accessible by the computing device to enable display of content of the session via the computing device. The method also includes initiating one or more actions on the remote computer system to prevent content of the session from being visible on the computing device in response to resumption of the session and resuming the session on the remote computer system such that the content of the session is hidden from view within a display of the computing device as a result of the initiation of the one or more actions. ## Claims ### Claim 1 A method comprising: receiving, by a computing device, a request to resume a session, the session being hosted on a remote computer system and accessible by the computing device to enable display of content of the session via the computing device; initiating one or more actions on the remote computer system to prevent content of the session from being visible on the computing device in response to resumption of the session, the one or more actions based on a rule, wherein the rule defines a type of session for which the rule applies and a resume method indicating a manner in which to launch a secure resume of the type of session; and resuming the session on the remote computer system such that the content of the session is hidden from view within a display of the computing device as a result of the initiation of the one or more actions. ### Claim 2 (depends on 1) The method of claim 1, wherein the content of the session includes content being displayable by an application or a group of applications executable on the remote computer system. ### Claim 3 (depends on 1) The method of claim 1, wherein initiating one or more actions on the remote computer system is based on a presence of a flag. ### Claim 4 (depends on 1) The method of claim 1, further comprising receiving an approval for resumption of the session, the approval comprising a flag for use in determining the one or more actions. ### Claim 5 (depends on 4) The method of claim 4, wherein the approval for the resumption of the session is based on one or more rules. ### Claim 6 (depends on 1) The method of claim 1, wherein the one or more actions includes minimizing at least one running application associated with the session. ### Claim 7 (depends on 1) The method of claim 1, wherein the one or more actions includes displaying a desktop window of the session. ### Claim 8 (depends on 7) The method of claim 7, wherein the desktop window is maximized to fill the display of the computing device. ### Claim 9 (depends on 1) The method of claim 1, wherein the one or more actions includes terminating execution of at least one running application associated with the session and launching execution of the terminated at least one application associated with the session. ### Claim 10 (depends on 1) The method of claim 1, wherein the one or more actions includes starting at least one application associated with the session with its initial application page. ### Claim 11 A method comprising: detecting, by a computing device, an input to unlock the computing device; determining one or more actions to prevent a display of data on the computing device in response to the input to unlock of the computing device, the one or more actions based on a rule, wherein the rule defines a type of session for which the rule applies and a resume method indicating a manner in which to launch a secure resume of the type of session; initiating the one or more determined actions on the computing device to prevent display of the data on the computing device in response to unlock of the computing device; and presenting a user interface on a display of the computing device without display of the data within the display and in response to the initiation of the one or more determined actions. ### Claim 12 (depends on 11) The method of claim 11, wherein the detected input is one of an upward swipe motion, a downward swipe motion, a zoom in motion, depressing a control button on the computing device, or depressing a hotkey. ### Claim 13 (depends on 11) The method of claim 11, wherein the one or more determined actions includes minimizing at least one application running on the computing device. ### Claim 14 (depends on 11) The method of claim 11, wherein the one or more determined actions includes displaying a desktop window on the computing device. ### Claim 15 A computing device comprising: a memory; and one or more processors in communication with the memory and configured to, detect an input to unlock the computing device; determine one or more actions to prevent a display of data on the computing device in response to the input to unlock of the computing device, the one or more actions based on a rule, wherein the rule defines a type of session for which the rule applies and a resume method indicating a manner in which to launch a secure resume of the type of session; initiate the one or more determined actions on the computing device to prevent display of the data on the computing device in response to unlock of the computing device; and present a user interface on a display of the computing device without display of the data within the display and in response to the initiation of the one or more determined actions. ### Claim 16 (depends on 15) The computing device of claim 15, wherein the detected input is one of an upward swipe motion, a downward swipe motion, a zoom in motion, depressing a control button on the computing device, or depressing a hotkey. ### Claim 17 (depends on 15) The computing device of claim 15, wherein the one or more actions includes minimizing at least one application running on the client device. ### Claim 18 (depends on 15) The computing device of claim 15, wherein the one or more actions includes displaying a desktop window on the display of the client device. ### Claim 19 (depends on 15) The computing device of claim 15, wherein to unlock the computing device comprises to display a blurred desktop on the display of the computing device, and the one or more actions includes displaying the desktop to be visible on the display of the computing device.