Virtual desktop accelerator support for network gateway

Patent metadata

Field	Value
Publication number	US-9485233-B1
Application number	US-201213668176-A
Country	US
Kind code	B1
Filing date	Nov 2, 2012
Priority date	Nov 2, 2012
Publication date	Nov 1, 2016
Grant date	Nov 1, 2016

Abstract

The subject disclosure relates to a method for initiating an accelerated desktop session between a client device and a remote server. In some aspects, the method includes steps for receiving a request, from a client device, to initiate a second connection with a server using a second communication protocol, in response to the request, facilitating a validation of the client device by forwarding a token received from the client device to the server and receiving, from the server, an indication that the client device has been properly validated. In certain aspects, the method further comprises steps for initiating the second connection between the client device and the server using the second communication protocol, based on the indication that the client device has been properly validated. A client device and computer-readable medium are also provided.

First claim

What is claimed is:

1. A non-transitory machine-readable medium encoded with instructions executable to perform a method, the method comprising:
when a first connection between a client device and a server using a first transport layer protocol is established, receiving a request, from the client device, to initiate a second connection between the client device and the server using a second transport layer protocol different from the first transport layer protocol;
in response to the request, facilitating a validation of the client device by forwarding a token received from the client device to the server;
receiving, from the server, an indication that the client device has been properly validated;
establishing the second connection between the client device and the server using the second transport layer protocol, based on the indication that the client device has been properly validated, wherein the first connection and the second connection are concurrently active when the second connection is established; and
after the second connection is established, closing the first connection while maintaining the second connection,
wherein the second transport layer protocol is UDP Plus.

2. The machine-readable medium of claim 1 , wherein the token received from the client device comprises one or more of, authentication information for the client device and identification information for the server.

3. The machine-readable medium of claim 1 , wherein the method further comprises:
initiating the second connection, including initializing port forwarding from a UDP port of a proxy to a predetermined port of the server.

4. The machine-readable medium of claim 1 , wherein the method further comprises:
receiving a command, from the client device, to close the second connection;
updating a table based on the command, wherein the table comprises data related to one or more remote desktop sessions; and
closing the second connection in response to the command.

5. A proxy comprising:
one or more processors; and
a computer-readable medium comprising instructions stored therein, which when executed by the processors, cause the processors to perform operations comprising:
when a first connection between a client device and a server using a first transport layer protocol is established, receiving a request, from the client device, to establish a second connection between the client device and the server using a second transport layer protocol different from the first transport layer protocol;
in response to the request, facilitating a validation of the client device by forwarding a token received from the client device to the server;
receiving, from the server, an indication that the client device has been properly validated;
establishing the second connection between the client device and the server using the second transport layer protocol, based on the indication that the client device has been properly validated, wherein the first connection and the second connection are concurrently active when the second connection is established; and
after the second connection is established, closing the first connection while maintaining the second connection,

wherein the second transport layer protocol is UDP Plus.

6. The proxy of claim 5 , wherein the token received from the client device comprises one or more of, authentication information for the client device and identification information for the server.

7. The proxy of claim 5 , wherein the operations further comprise:
initiating the second connection, including: initializing port forwarding from a UDP port of a proxy to a predetermined port of the server.

8. The proxy of claim 5 , wherein the operations further comprise:
receiving a command, from the client device, to close the second connection;
updating a table based on the command, wherein the table comprises data related to one or more remote desktop sessions; and
closing the second connection in response to the command.

9. A computer-implemented method, the method comprising:
when a first connection between a client device and a server using a first transport layer protocol is established, receiving a request, from the client device, to establish a second connection between the client device and the server using a second transport layer protocol different from the first transport layer protocol;
in response to the request, facilitating a validation of the client device by forwarding a token received from the client device to the server;
receiving, from the server, an indication that the client device has been properly validated;
establishing the second connection between the client device and the server using the second transport layer protocol, based on the indication that the client device has been properly validated, wherein the first connection and the second connection are concurrently active when the second connection is established; and
after the second connection is established, closing the first connection while maintaining the second connection,
wherein the second transport layer protocol is UDP Plus.

10. The computer-implemented method of claim 9 , wherein the token received from the client device comprises one or more of, authentication information for the client device and identification information for the server.

11. The computer-implemented method of claim 9 , further comprising:
initiating the second connection, including initializing port forwarding from a UDP port of a proxy to a predetermined port of the server.

12. The computer-implemented method of claim 9 , wherein the method further comprises:
receiving a command, from the client device, to close the second connection;
updating a table based on the command, wherein the table comprises data related to one or more remote desktop sessions; and
closing the second connection in response to the command.

13. The machine-readable medium of claim 1 , wherein the first transport layer protocol is a transmission control protocol (TCP).

14. The proxy of claim 5 , wherein the first transport layer protocol is a transmission control protocol (TCP).

15. The computer-implemented method of claim 9 , wherein the first transport layer protocol is a transmission control protocol (TCP).

Assignees

• Wyse Tech Inc
• Wyse Technology Llc

Inventors

• Basha P R Khader
• Krishnamurthy Santhosh
• Bhaskar Manish

Classifications

• H04L63/16

  Implementing security features at a particular protocol layer · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/168

  above the transport layer · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title