Method and system for providing terminal view access of a client device in a secure network

A system for providing terminal view access of a client device in a secure enterprise network, the system comprising:

• a first message receiver in a first gateway device communicatively coupled to a plurality of first client devices in a first secure enterprise network, the message receiver configured for receiving a request from a first client device within the first secure enterprise network, the request for at least one of providing terminal view access of the first client device in the first secure enterprise network to a second client device in a second secure enterprise network, and providing terminal view access of the second client device in the second secure enterprise network to the first client device in the first secure enterprise network, wherein the second secure enterprise network is an independently operated entity from the first secure enterprise network;
• a first session manager component in the first gateway device configured for performing by the first gateway device a security check on the request to enforce a security policy of the first secure enterprise network prior to sending the request to a second gateway device communicatively coupled to a plurality of second client devices including the second client device in the second secure enterprise network;
• a second message receiver in the second gateway device configured for receiving the request from the first gateway device;
• a second session manager component in the second gateway device configured for performing a security check on the request to enforce a security policy of the second secure enterprise network, wherein the first and second session manager components are configured for establishing by the first gateway device and the second gateway device a secure data transport channel between the second client device and the first client device via the first gateway device and the second gateway device, wherein the data transport channel is configured to transport terminal view data and to communicatively connect the first client device and the second client device over at least one of a public network, a private network and a firewall via the first and second gateway devices;
• and
• a first terminal view data manager in the first gateway device and a second terminal view data manager in the second gateway device, the first and second terminal view data managers configured for receiving terminal view data from at least one of the first client device and the second client device via the data transport channel, the terminal view data corresponding to a desktop associated with at least one of the first client device and the second client device, respectively, and for providing the terminal view data received from at least one of the first client device and the second client device to at least one of the second client device and the first client device, respectively, via the data transport channel so that terminal view data is shared between first and second client devices across first and second secure enterprise networks after security policies of each secure enterprise network are enforced, wherein the second session manager component is further configured for authenticating the second client device and determining that the second client device is authorized to at least one of receive terminal view data associated with the first client device within the first secure enterprise network, and provide terminal view data associated with the second client device to the first client device based on the security policy of the second secure enterprise network.

A non-transitory computer readable medium containing a computer program, executable by a machine, for providing terminal view access of a client device in a secure enterprise network, the computer program comprising executable instructions for:

• receiving by a first gateway device communicatively coupled to a plurality of first client devices in a first secure enterprise network a request from a first client device within the first secure enterprise network, the request for at least one of providing terminal view access of the first client device in the first secure enterprise network to a second client device in a second secure enterprise network, and providing terminal view access of the second client device in the second secure enterprise network to the first client device in the first secure enterprise network, wherein the second secure enterprise network is an independently operated entity from the first secure enterprise network;
• performing by the first gateway device a security check on the request to enforce a security policy of the first secure enterprise network prior to sending the request to a second gateway device communicatively coupled to a plurality of second client devices including the second client device in the second secure enterprise network;
• in response to receiving by the second gateway device the request from the first gateway device, performing by the second gateway device a security check on the request to enforce a security policy of the second secure enterprise network;
• establishing by the first gateway device and the second gateway device a secure data transport channel between the second client device and the first client device via the first gateway device and the second gateway device, wherein the data transport channel is configured to transport terminal view data and to communicatively connect the first client device and the second client device over at least one of a public network, a private network and a firewall via the first and second gateway devices;
• receiving by the first and second gateway devices terminal view data from at least one of the first client device and the second client device via the data transport channel, the terminal view data corresponding to a desktop associated with at least one of the first client device and the second client device, respectively;
• and
• providing by the first and second gateway devices the terminal view data received from at least one of the first client device and the second client device to at least one of the second client device and the first client device, respectively, via the data transport channel so that terminal view data is shared between first and second client devices across first and second secure enterprise networks after security policies of each secure enterprise network are enforced, wherein performing the security check by the second gateway device includes authenticating the second client device and determining that the second client device is authorized to at least one of receive terminal view data associated with the first client device within the first secure enterprise network and provide terminal view data associated with the second client device based on the security policy of the second secure enterprise network.