# US 2021/0243245 A1 · Redirection of usb devices from hardware isolated virtual desktop infrastructure clients > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0243245 A1 - Document ID: US20210243245A1 - Status: Published application - Kind: A1 - Application number: 16/780,137 - Filed: 2020-02-03 - Published: 2021-08-05 - Earliest claimed: 2020-02-03 - Assignees: Dell Products L.P. - Applicants: Dell Products L.P. - Inventors: Gokul Thiruchengode Vajravel; Jyothi Bandakka; Ramanujam Venkatesh - Web page: https://patentgrep.com/patent/US20210243245A1 ## CPC - H04L 67/148: Migration or transfer of sessions - G06F 9/4411: {Configuring for operating with peripheral devices; Loading of device drivers} - G06F 9/452: {Remote windowing, e.g. X-Window System, desktop virtualisation (protocols for virtual reality H04L67/131)} - G06F 9/45533: {Hypervisors; Virtual machine monitors} - H04L 67/08: specially adapted for terminal emulation, e.g. Telnet - H04L 67/14: Session management (for real-time applications in data packet communications networks H04L65/1066) - H04L 67/563: Data redirection of data network streams - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract USB devices can be redirected from hardware isolated VDI clients. When a VDI client is run in a hardware isolated environment, a notification service can also be run in the hardware isolated environment to enable a USB device that is not accessible within the hardware isolated environment to be redirected to a server on which the VDI client has established a remote session. In some cases, an agent can also be employed in the hardware isolated environment to temporarily redirect the USB device to the hardware isolated environment for use in establishing the remote session before the USB device is redirected to the server. Similar techniques can be employed to redirect a USB device to a hardware isolated environment so that the USB device can be accessed by an application running in the hardware isolated environment. ## Claims ### Claim 1 A method for enabling a USB device that is connected to a client terminal to be accessed within a remote session that a virtual desktop infrastructure (VDI) client establishes on a server when the VDI client runs in a hardware isolated environment on the client terminal, the method comprising: receiving, at a notification service that runs in the hardware isolated environment, connection information for the remote session that the VDI client has established on the server; sending, by the notification service, the connection information for the remote session to a proxy that runs on the client terminal outside the hardware isolated environment; employing, by the proxy, the connection information for the remote session to redirect the USB device to the server to thereby cause the USB device to become accessible within the remote session. ### Claim 2 (depends on 1) The method of claim 1, wherein the connection information for the remote session includes an IP address of the server and a port number of an agent that runs on the server. ### Claim 3 (depends on 1) The method of claim 1, wherein the notification service receives the connection information for the remote session from the VDI client via a virtual channel. ### Claim 4 (depends on 1) The method of claim 1, wherein the hardware isolated environment is a virtual machine. ### Claim 5 (depends on 1) The method of claim 1, further comprising: receiving, at the notification service, a notification that the remote session has terminated; sending, by the notification service, a corresponding notification to the proxy; and in response to the corresponding notification, causing, by the proxy, the USB device to be returned to the client terminal. ### Claim 6 (depends on 1) The method of claim 1, wherein the VDI client runs in a browser in the hardware isolated environment. ### Claim 7 (depends on 1) The method of claim 1, further comprising: sending, by an agent that runs in the hardware isolated environment, connection information for the hardware isolated environment to the proxy; employing, by the proxy, the connection information for the hardware isolated environment to redirect the USB device to the hardware isolated environment to thereby cause the USB device to become accessible within the hardware isolated environment. ### Claim 8 (depends on 7) The method of claim 7, wherein the proxy redirects the USB device to the hardware isolated environment prior to redirecting the USB device to the server. ### Claim 9 (depends on 8) The method of claim 8, wherein the notification service receives the connection information for the remote session while the USB device is redirected to the hardware isolated environment. ### Claim 10 One or more computer storage media storing computer executable instructions which when executed on a client terminal implement a method for enabling a USB device that is connected to a client terminal to be accessed within a remote session that a virtual desktop infrastructure (VDI) client establishes on a server when the VDI client runs in a hardware isolated environment on the client terminal, the method comprising: in response to the VDI client establishing the remote session on the server, receiving, at a notification service that runs in the hardware isolated environment, connection information for the remote session; sending, by the notification service, the connection information for the remote session to a proxy that runs on the client terminal outside the hardware isolated environment; employing, by the proxy, the connection information for the remote session to redirect the USB device to the server to thereby cause the USB device to become accessible within the remote session. ### Claim 11 (depends on 10) The computer storage media of claim 10, wherein the method further comprises: prior to the VDI client establishing the remote session, sending, by an agent that runs in the hardware isolated environment, connection information for the hardware isolated environment to the proxy; employing, by the proxy, the connection information for the hardware isolated environment to redirect the USB device to the hardware isolated environment to thereby cause the USB device to become accessible within the hardware isolated environment such that the VDI client can employ the USB device to establish the remote session. ### Claim 12 (depends on 11) The computer storage media of claim 11, wherein the USB device is an authentication device. ### Claim 13 (depends on 10) The computer storage media of claim 10, wherein the method further comprises: ceasing, by the proxy, the redirection of the USB device to the hardware isolation environment in response to receiving the connection information for the remote session. ### Claim 14 A method for enabling a USB device that is connected to a client terminal to be accessed when an application runs in a hardware isolated environment on the client terminal, the method comprising: in conjunction with the hardware isolated environment being created on the client terminal, running an agent in the hardware isolated environment; sending, by the agent, connection information for the hardware isolated environment to a proxy that runs on the client terminal outside the hardware isolated environment; and employing, by the proxy, the connection information to redirect the USB device to the hardware isolated environment to thereby cause the USB device to become accessible to an application that runs in the hardware isolated environment. ### Claim 15 (depends on 14) The method of claim 14, wherein the application is a VDI client, the method further comprising: receiving, at a notification service that runs in the hardware isolated environment, connection information for a remote session that the VDI client has established on a server; sending, by the notification service, the connection information for the remote session to the proxy; employing, by the proxy, the connection information for the remote session to redirect the USB device to the server to thereby cause the USB device to become accessible within the remote session. ### Claim 16 (depends on 15) The method of claim 15, wherein the proxy redirects the USB device to the hardware isolated environment to enable the VDI client to employ the USB device to establish the remote session and then redirects the USB device to the server. ### Claim 17 (depends on 15) The method of claim 15, wherein the USB device is an authentication device. ### Claim 18 (depends on 15) The method of claim 15, further comprising: receiving, at the notification service, a notification that the remote session has terminated; sending, by the notification service, a corresponding notification to the proxy; and in response to the corresponding notification, causing, by the proxy, the USB device to be returned to the client terminal. ### Claim 19 (depends on 14) The method of claim 14, wherein the USB device comprises a USB host controller. ### Claim 20 (depends on 14) The method of claim 14, wherein the hardware isolated environment is a virtual machine and the application is a browser.