Isolating a redirected smart card reader to a remote session
AssigneeWyse Technology L.L.C.
InventorsGokul Thiruchengode Vajravel, Ramanujam Kaniyar Venkatesh
Life of this patent
Estimating the term…
Abstract
A smart card stub and a smart card proxy can be employed to enable a redirected smart card reader to be accessed within a remote session. To isolate a redirected smart card to a remote session, the smart card stub can be configured to process a response to an application's request to enumerate smart card readers. This processing can include obtaining a session identifier for each enumerated smart card reader and removing any smart card reader from the response if the session identifier of the smart card reader does not match the session identifier of the requesting application. The smart card stub can communicate with a filter driver to obtain the session identifiers employed in this process.
Claims20
A method, implemented on a server in a virtual desktop infrastructure environment, for isolating a redirected smart card reader to a remote session, the method comprising:
- receiving, at a smart card stub that is executing in a remote session, a response to a function call that was made by an application executing in the remote session to enumerate smart card readers;
- accessing a list of smart card readers included in the response;
- for each smart card reader identified in the list:
- (1) querying a filter driver to obtain a session identifier for the smart card reader;
- and
- (2) removing the smart card reader from the list if the obtained session identifier is different than a session identifier of the application;
- and
- relaying the response to the application after removing any smart card readers with different session identifiers from the list.
One or more computer storage media storing computer executable instructions which when executed on a server implement a smart card stub that executes in a remote session and is configured to isolate a redirected smart card reader to the remote session by performing the following:
- receiving, from a smart card proxy, responses to smart card API calls that are made by applications executing in the remote session;
- for each response, determining whether the response enumerates smart card readers that are available on the sever;
- and
- when it is determined that a response enumerates smart card readers that are available on the server, modifying the response to remove any smart card readers that are not redirected to the remote session in which the smart card stub is executing.
A virtual desktop infrastructure configured to be executed on a server comprising:
- a smart card stub that is configured to execute in a remote session;
- a smart card proxy that is configured to execute in session 0, wherein the smart card stub passes smart card function calls to the smart card proxy and the smart card proxy passes responses to the smart card function calls to the smart card stub;
- and
- a filter driver that is configured to execute on a smart card driver stack;
- wherein, when the smart card stub receives a response from the smart card proxy that enumerates smart card readers, the smart card stub communicates with the filter driver to identify a session identifier associated with each enumerated smart card, and wherein the smart card stub removes from the response any smart card reader associated with a session identifier that is different than a session identifier of an application to which the response is directed.
Dependencies are inferred from the claim text.