Remoting application across a network using draw commands with an isolator application

Patent metadata

Field	Value
Publication number	US-12093429-B2
Application number	US-202318333285-A
Country	US
Kind code	B2
Filing date	Jun 12, 2023
Priority date	Feb 4, 2019
Publication date	Sep 17, 2024
Grant date	Sep 17, 2024

Abstract

A client device instantiates an isolator application. A request to instantiate a remote application in a server device is sent by the isolator application instance. The isolator application instance receives, from the remote application instance, draw commands and position information that correspond to the draw commands. The isolator application instance renders one or more portions of output based on the draw commands and the position information.

First claim

What is claimed is:

1. A method, comprising:
receiving, by a server from an isolator application instance executing on a client device, a request to instantiate a remote application in the server;
instantiating an instance of the remote application in the server, wherein the server is remotely located, separate, and distinct from the client device;
configuring a secure connection between the remote application instance and the isolator application instance; and
providing, via the secure connection between the remote application instance and the isolator application instance, first draw commands and first position information that corresponds to the first draw commands to cause the isolator application instance to render one or more portions of output of the remote application instance based on the first draw commands and the first position information.

2. The method of claim 1 , further comprising:
receiving, by the server from the isolator application instance on the client device, an indicator of an input from a user of the client device; and
providing, by the remote application instance to the isolator application instance, second draw commands and second position information that corresponds to the second draw commands, the second draw commands and the second position information being associated with a modified output of the remote application instance to cause the isolator application instance to render one or more portions of the modified output of the remote application instance based on the second draw commands and the second position information.

3. The method of claim 1 , further comprising:
receiving, by the server from the isolator application instance on the client device, an indicator of an input from a user of the client device, the input indicating the one or more portions of the output of the remote application instance to be locally printed by the client device; and
providing, by the remote application instance to the isolator application instance, a file that provides a visual representation of the one or more portions of the output of the remote application instance, wherein the client device causes a printing device that is communicably coupled to the client device to print the visual representation of the one or more portions of the output of the remote application instance based on the file.

4. The method of claim 1 , further comprising:
receiving, by the server from the isolator application instance on the client device, an indicator of an input from a user of the client device, the input indicating the one or more portions of the output of the remote application instance to be locally stored; and
providing, by the remote application instance to the isolator application instance, a file that provides a visual representation of the one or more portions of the output of the remote application instance, wherein the isolator application instance on the client device stores the file on another non-transitory computer-readable medium that is communicably coupled to the client device.

5. The method of claim 1 , further comprising:
receiving, by the server from the isolator application instance on the client device, an indicator of an input from a user of the client device; and
providing, by the remote application instance to the isolator application instance, content in the one or more portions of the output of the remote application instance, wherein the isolator application instance stores the content in a clipboard buffer of the client device to enable the client device to paste the stored content in one or more other applications instantiated on the client device.

6. The method of claim 1 , wherein instantiating the instance of the remote application in the server further comprises:
determining characteristics of the request and characteristics of a requested application for the remote application instance;
determining graphics level to use for transporting rendering data to the client device based on the determined characteristics of the request and determined characteristics of the requested application; and
transmitting, to the client device, a response packet in response to the request, the response packet including one or more resources to configure the isolator application instance to connect to the remote application instance, the one or more resources including graphic libraries available for the determined graphics level.

7. The method of claim 1 , further comprising:
receiving, by the server from the isolator application instance on the client device, an indicator of an extension having an instance installed on the isolator application instance;
configuring an instance of the extension on the remote application instance on the server;
receiving, by the server from the isolator application instance on the client device, an indicator of a detected user input from a user of the client device to the extension instance installed on the isolator application instance; and
causing the extension instance on the remote application instance on the server to mirror the extension instance installed on the isolator application instance based on the detected user input.

8. A non-transitory machine-readable storage medium that provides instructions that, when executed by a processor, cause operations to be performed comprising:
receiving, by a server from an isolator application instance executing on a client device, a request to instantiate a remote application in the server;
instantiating an instance of the remote application in the server, wherein the server is remotely located, separate, and distinct from the client device;
configuring a secure connection between the remote application instance and the isolator application instance; and
providing, via the secure connection between the remote application instance and the isolator application instance, first draw commands and first position information that corresponds to the first draw commands to cause the isolator application instance to render one or more portions of output of the remote application instance based on the first draw commands and the first position information.

9. The non-transitory machine-readable storage medium of claim 8 , wherein the operations further comprise:
receiving, by the server from the isolator application instance on the client device, an indicator of an input from a user of the client device; and
providing, by the remote application instance to the isolator application instance, second draw commands and second position information that corresponds to the second draw commands, the second draw commands and the second position information being associated with a modified output of the remote application instance to cause the isolator application instance to render one or more portions of the modified output of the remote application instance based on the second draw commands and the second position information.

10. The non-transitory machine-readable storage medium of claim 8 , wherein the operations further comprise:
receiving, by the server from the isolator application instance on the client device, an indicator of an input from a user of the client device, the input indicating the one or more portions of the output of the remote application instance to be locally printed by the client device; and
providing, by the remote application instance to the isolator application instance, a file that provides a visual representation of the one or more portions of the output of the remote application instance, wherein the client device causes a printing device that is communicably coupled to the client device to print the visual representation of the one or more portions of the output of the remo

Assignees

• Cloudflare Inc

Inventors

• Buzbee Benjamin
• Koenig Killian
• Sundberg Trevor
• Conrad Michael
• Remington Darren
• Harnett David

Classifications

• H04L63/1441

  Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002) · CPC title

• H04L63/1416

  Event detection, e.g. attack signature detection · CPC title

• G06F21/53

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• G06F11/3656

  using a specific debug interface · CPC title

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title