# US 2022/0035642 A1 · Desktop as a service system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2022/0035642 A1 - Document ID: US20220035642A1 - Status: Published application - Kind: A1 - Application number: 17/032,001 - Filed: 2020-09-25 - Published: 2022-02-03 - Earliest claimed: 2020-08-01 - Assignees: Citrix Systems, Inc. - Applicants: Citrix Systems, Inc. - Inventors: Alan Goldman; Michael J. Sabin; Radhesham Shah; Leo C. Singleton; Kireeti A. Valicherla - Web page: https://patentgrep.com/patent/US20220035642A1 ## CPC - G06F 9/452: {Remote windowing, e.g. X-Window System, desktop virtualisation (protocols for virtual reality H04L67/131)} - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06Q 30/016: After-sales - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06F 2009/45562: {Creating, deleting, cloning virtual machine instances} - G06F 2009/45595: {Network integration; Enabling network access in virtual machine instances} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A computer system configured to autonomously provision at least a portion of a desktop as a service (DaaS) system is provided. The computer system includes a memory, a network interface, and a processor configured to receive, via the network interface, a request to add a catalog of virtual desktops to an account associated with a tenant of the computing service, and transmit, in response to reception of the request, a plurality of requests to the computing service. The plurality of requests comprise at least one request to create a first virtual network associated with the tenant within the computing service, at least one request to connect the first virtual network to a second virtual network within the computing service, and at least one request to create the catalog within the computing service. ## Claims ### Claim 1 A computer system configured to autonomously provision at least a portion of a desktop as a service (DaaS) system via a computing service, the computer system comprising: a memory; a network interface; and at least one processor coupled to the memory and the network interface and configured to: receive, via the network interface, a request to add a catalog of virtual desktops to an account associated with a tenant of the computing service, and transmit, in response to reception of the request, a plurality of requests to the computing service, the plurality of requests comprising: at least one request to create a first virtual network associated with the tenant within the computing service, at least one request to connect the first virtual network to a second virtual network within the computing service, and at least one request to create the catalog within the computing service. ### Claim 2 (depends on 1) The computer system of claim 1, the tenant being a first tenant and the at least one processor being further configured to: receive, via the network interface, at least one request to add at least one catalog to at least one account associated with a second tenant of the computing service, the second tenant being distinct from the first tenant; and transmit, in response to reception of the at least one request, at least one plurality of requests to the computing service, the at least one plurality of requests comprising: at least one request to create at least one virtual network associated with the second tenant within the computing service, at least one request to connect the at least one virtual network to the second virtual network, and at least one request to create the at least one catalog within the computing service. ### Claim 3 (depends on 2) The computer system of claim 2, the second virtual network being associated with and administered by a third tenant distinct from the first tenant and the second tenant. ### Claim 4 (depends on 3) The computer system of claim 3, the memory storing: first account information associating the first tenant with a first account within the computing service; second account information associating the second tenant with a second account with the computing service; and third account information associating the third tenant with a third account with the computing service, the first account information, the second account information, and the third account information being distinct from one another. ### Claim 5 (depends on 1) The computer system of claim 1, the plurality of requests further comprising: at least one request to create a connector, the connector being configured to couple one or more virtual desktops to a virtualization infrastructure; and at least one request to connect the connector to the first virtual network. ### Claim 6 (depends on 1) The computer system of claim 1, the plurality of requests further comprising at least one request to configure one or more security rules of the first virtual network. ### Claim 7 (depends on 1) The computer system of claim 1, the second virtual network providing connectivity to a directory service. ### Claim 8 (depends on 7) The computer system of claim 7, the tenant being a first tenant, the second virtual network being administered by and associated with a second tenant distinct from the first tenant, and the directory service being administered by and associated with the second tenant. ### Claim 9 (depends on 8) The computer system of claim 8, the directory service storing objects for virtual machines and connectors and omitting objects for users. ### Claim 10 (depends on 1) The computer system of claim 1, the at least one processor being further configured to: transmit, to the computing service, at least one request to create a virtual desktop based on a master image specified in the catalog; and transmit, to the computing service, at least one request to connect the virtual desktop to the first virtual network. ### Claim 11 (depends on 1) The computer system of claim 1, the at least one processor being further configured to: receive, via the network interface, a troubleshooting request to add a bastion to the first virtual network; and transmit, in response to reception of the troubleshooting request, a one or more requests to the computing service, the one or more requests comprising: at least one request to create the bastion, at least one request to connect the bastion to the first virtual network, and at least one request to update security rules applicable to the first virtual network to enable external access to the bastion. ### Claim 12 (depends on 1) The computer system of claim 1, the at least one processor being further configured to: receive, via the network interface, a build request to build a master image, the build request specifying an image upon which to base the master image; and transmit, in response to reception of the build request, a one or more requests to the computing service, the one or more requests comprising: at least one request to create a virtual machine, at least one request to reimage the virtual machine using an image specified in the build request, at least one request to connect the virtual machine to the first virtual network, and at least one request to update security rules applicable to the first virtual network to enable external access to the virtual machine. ### Claim 13 (depends on 1) The computer system of claim 1, further comprising the computing service, the computing service being an infrastructure as a service (IaaS) system. ### Claim 14 (depends on 13) The computer system of claim 13, the plurality of requests being a plurality of application programming interface calls to the IaaS system. ### Claim 15 A method of autonomously provisioning at least a portion of a desktop as a service (DaaS) system, the method comprising: receiving, via a network interface, a request to add a catalog of virtual desktops to an account associated with a tenant of a computing service, and transmitting, in response to reception of the request, a plurality of requests to a computing service, the plurality of requests comprising: at least one request to create a first virtual network associated with the tenant within the computing service, at least one request to connect the first virtual network to a second virtual network within the computing service, at least one request to create the catalog within the computing service, at least one request to create a connector, the connector being configured to couple one or more virtual desktops to a virtualization infrastructure, and at least one request to connect the connector to the first virtual network. ### Claim 16 (depends on 15) The method of claim 15, the tenant being a first tenant, the method further comprising: receiving, via the network interface, at least one request to add at least one catalog to at least one account associated with a second tenant of the computing service, the second tenant being distinct from the first tenant; and transmitting, in response to reception of the at least one request, at least one plurality of requests to the computing service, the at least one plurality of requests comprising: at least one request to create at least one virtual network associated with the second tenant within the computing service, at least one request to connect the at least one virtual network to the second virtual network, the second virtual networking being associated with and administered by a third tenant distinct from the first tenant and the second tenant, and at least one request to create the at least one catalog within the computing service. ### Claim 17 (depends on 15) The method of claim 15, further comprising: transmitting, to the computing service, at least one request to create a virtual desktop based on a master image specified in the catalog; and transmitting, to the computing service, at least one request to connect the virtual desktop to the first virtual network. ### Claim 18 A non-transitory computer readable medium storing executable sequences of instructions to autonomously provision at least a portion of a desktop as a service (DaaS) system, the sequences of instructions comprising instructions to: receive, via a network interface, a request to add a catalog of virtual desktops to an account associated with a tenant of a computing service, and transmit, in response to reception of the request, a plurality of requests to a computing service, the plurality of requests comprising: at least one request to create a first virtual network associated with the tenant within the computing service, at least one request to connect the first virtual network to a second virtual network within the computing service, at least one request to create the catalog within the computing service, at least one request to create a connector, the connector being configured to couple one or more virtual desktops to a virtualization infrastructure, and at least one request to connect the connector to the first virtual network. ### Claim 19 (depends on 18) The non-transitory computer readable medium of claim 18, the tenant being a first tenant, the sequences of instructions further comprising instructions to: receive, via the network interface, at least one request to add at least one catalog to at least one account associated with a second tenant of the computing service, the second tenant being distinct from the first tenant; and transmit, in response to reception of the at least one request, at least one plurality of requests to the computing service, the at least one plurality of requests comprising: at least one request to create at least one virtual network associated with the second tenant within the computing service, at least one request to connect the at least one virtual network to the second virtual network, the second virtual networking being associated with and administered by a third tenant distinct from the first tenant and the second tenant, and at least one request to create the at least one catalog within the computing service. ### Claim 20 (depends on 18) The non-transitory computer readable medium of claim 18, the sequences of instructions further comprising instructions to: transmit, to the computing service, at least one request to create a virtual desktop based on a master image specified in the catalog; and transmit, to the computing service, at least one request to connect the virtual desktop to the first virtual network.