Methods and systems for assigning access control levels in providing access to resources via virtual machines

A method for granting levels of access to a resource according to information gathered about client machines, the method comprising:

• receiving, by a policy engine, a first request for access to a resource from a user at a first client machine;
• directing, by the policy engine, a first collection agent to gather information about the first client machine;
• granting, by the policy engine, the first client machine a first level of access to the resource responsive to application of a policy to the information about the first client machine, the first level chosen from a plurality of levels of access;
• selecting, by a broker machine, a first virtual machine that can provide a first desktop computing environment with the resource according to the first granted level of access and a first operating system in which to execute the first desktop computing environment;
• selecting, by the broker machine, a first execution machine executing a first hypervisor providing access to hardware resources required by the first virtual machine;
• launching, by the broker machine, the first virtual machine into the first execution machine, the first virtual machine executing the first operating system;
• launching, by the broker machine, the first desktop computing environment with the resource according to the first granted level of access into the first executing operating system on the first execution machine;
• establishing, by the broker machine, a first connection between the client machine and the first desktop computing environment with the resource according to the first granted level of access;
• receiving, by the policy engine, a second request for access to the resource from the user at a second client machine;
• directing, by the policy engine, a second collection agent to gather information about the second client machine;
• granting, by the policy engine, the second client machine a second level of access to the resource responsive to application of the policy to the information about the second client machine, the second level chosen from the plurality of levels of access
• selecting, by the broker machine, a second virtual machine that can provide a second desktop computing environment with the resource according to the second granted level of access and a second operating system in which to execute the second desktop computing environment;
• selecting, by the broker machine, a second execution machine executing a second hypervisor providing access to hardware resources required by the second virtual machine;
• launching, by the broker machine, the second virtual machine into the second execution machine, the second virtual machine executing the second operating system;
• launching, by the broker machine, the second desktop computing environment with the resource according to the second granted level of access into the second executing operating system on the second execution machine;
• and
• establishing, by the broker machine, a second connection between the client machine and the second desktop computing environment with the resource according to the second granted level of access.