Intelligent redirection of authentication devices
AssigneeDell Products L.P.
InventorsGokul Thiruchengode Vajravel, Ankit Kumar
Life of this patent
Estimating the term…
Abstract
Authentication devices can be intelligently redirected in a VDI environment to thereby ensure that the redirected authentication devices remain available for authentication even after a remote session has been locked. This intelligent redirection of authentication devices can be accomplished in a way that only requires server-side modifications and that is agnostic to the remoting protocol used to establish the remote session.
Claims20
A method, implemented by an agent that executes on a server in a virtual desktop infrastructure environment, for intelligently redirecting an authentication device, the method comprising:
- in conjunction with redirecting an authentication device from a client device to the server to allow the authentication device to be accessed by applications executing within a remote session on the server, registering with an operating system on the server to receive notifications of state changes of the remote session;
- receiving, from the operating system, a notification that the remote session has been locked;
- in response to the notification that the remote session has been locked, instructing a client-side proxy to cause the authentication device to no longer be redirected to the server but to be connected locally at the client device to thereby allow the authentication device to be used on the client device to unlock the remote session;
- and
- in response to the remote session being unlocked, causing the authentication device to again be redirected from the client device to the server.
The method of claim 4, wherein the authentication device comprises a smart card.
A method, implemented in a virtual desktop infrastructure environment, for intelligently redirecting an authentication device, the method comprising:
- in response to an authentication device being connected to a client device while the client device has established a remote session on a server, redirecting the authentication device to the server to enable the authentication device to be accessed from within the remote session;
- receiving, by an agent executing on the server, a notification of a state change of the remote session, the notification being received while the authentication device is redirected to the server;
- determining that the notification of the state change indicates that the remote session has been locked;
- sending, by the agent, a notification that instructs a proxy executing on the client device to cease the redirection of the authentication device;
- and
- in response to the notification received from the agent, causing, by the proxy, the authentication device to be locally connected to the client device rather than being redirected to the server.
One or more computer storage media storing computer-executable instructions which when executed by one or more processors implement a method for intelligently redirecting an authentication device, the method comprising:
- in response to an authentication device being connected to a client device while the client device has established a remote session on a server, redirecting the authentication device to the server to enable the authentication device to be accessed from within the remote session;
- receiving, by an agent executing on the server, a notification of a state change of the remote session, the notification being received while the authentication device is redirected to the server;
- determining that the notification of the state change indicates that the remote session has been locked;
- sending, by the agent, a notification that instructs a proxy executing on the client device to cease the redirection of the authentication device;
- in response to the notification received from the agent, causing, by the proxy, the authentication device to be locally connected to the client device rather than being redirected to the server;
- while the authentication device is locally connected to the client device, employing the authentication device to provide authentication information for unlocking the remote session;
- and
- in response to the remote session being unlocked, again redirecting the authentication device to the server.
Dependencies are inferred from the claim text.