Remote network access via virtual machine
    1.
    发明授权
    Remote network access via virtual machine 有权
    通过虚拟机远程访问网络

    公开(公告)号:US09392078B2

    公开(公告)日:2016-07-12

    申请号:US11689177

    申请日:2007-03-21

    摘要: A virtual machine project manager creates a generic, i.e., not user-specific, virtual machine image file. Copies of this image file may be distributed to one or more users, each of whom may then use an automated procedure to generate a user-specific virtual machine image file and, thus, a user-specific virtual machine on his/her remote host computer. The generic virtual machine image file may be distributed on computer-readable media, such as a DVD disks, or the file may be stored on a server and downloaded (such as via the Internet) by the users. Each user also receives or downloads a token, which contains a small amount of user-specific information that is used by the automated procedure to provision the generic virtual machine image file for the particular user. A virtual machine accesses a security token connected to a host computer to automatically authenticate or re-authenticate a user, such as when a virtual private network connection is restarted. Substantially identical session identifiers are used by a host computer and a virtual machine, or by two or more virtual machines and, when communicating with an integrated access server. A file server stores virtual machine images that are accessed by a plurality of host computers.

    摘要翻译: 虚拟机项目经理创建一个通用的,即不是用户特定的虚拟机映像文件。 该图像文件的副本可以被分发给一个或多个用户,每个用户然后可以使用自动化过程来生成用户特定的虚拟机映像文件,并且因此来生成他/她的远程主机上的用户特定的虚拟机 。 通用虚拟机映像文件可以分布在诸如DVD盘的计算机可读介质上,或者该文件可以存储在服务器上并由用户下载(诸如经由因特网)。 每个用户还接收或下载令牌,该令牌包含少量用户特定信息,该信息由自动化过程用于为特定用户提供通用虚拟机映像文件。 虚拟机访问连接到主机的安全令牌,以自动对用户进行身份验证或重新验证,例如重新启动虚拟专用网络连接时。 基本相同的会话标识符由主机计算机和虚拟机使用,或由两个或多个虚拟机使用,并且与集成的访问服务器通信时使用。 文件服务器存储由多台主机访问的虚拟机映像。

    Contextually interacting with applications
    2.
    发明授权
    Contextually interacting with applications 有权
    上下文与应用程序交互

    公开(公告)号:US09256462B2

    公开(公告)日:2016-02-09

    申请号:US13399981

    申请日:2012-02-17

    IPC分类号: G06F9/48

    摘要: The present discussion relates to contextually interacting with applications. One example can include a computer that has a set of applications installed thereon. This example can also include a URI manager configured to receive a context-defining URI, the URI manager can be configured to run a sub-set of the applications specified by the context-defining URI and to set a common context for the sub-set of the applications as specified by the context-defining URI.

    摘要翻译: 本讨论涉及与应用的上下文相互作用。 一个示例可以包括其上安装有一组应用的计算机。 该示例还可以包括被配置为接收上下文定义URI的URI管理器,URI管理器可以被配置为运行由上下文定义URI指定的应用的子集,并且为子集设置公共上下文 由上下文定义URI指定的应用程序。

    Methods and apparatus for processing a context change request
    3.
    发明授权
    Methods and apparatus for processing a context change request 失效
    用于处理上下文更改请求的方法和装置

    公开(公告)号:US07818353B2

    公开(公告)日:2010-10-19

    申请号:US12606500

    申请日:2009-10-27

    IPC分类号: G06F17/30

    摘要: A method and apparatus for use in a computer system comprising at least two software applications sharing context, wherein a context change may be requested by a user of at least one of the at least two software applications. In response to the user requesting a change from a first context to a second context, at least one business rule is applied to at least a portion of the first context and/or to at least a portion of the second context to obtain at least one result from the application of the business rule. In response to the at least one result, at least one act is performed selected from the group consisting of: denying the request to change from the first context to the second context; requesting the user to provide information relating to the requested change; and requesting the user to affirm information relating to the requested change.

    摘要翻译: 一种在包括至少两个共享上下文的软件应用的计算机系统中使用的方法和装置,其中上下文改变可由所述至少两个软件应用中的至少一个的用户请求。 响应于用户请求从第一上下文到第二上下文的改变,至少一个业务规则被应用于第一上下文的至少一部分和/或应用于第二上下文的至少一部分以获得至少一个 来自业务规则的应用。 响应于至少一个结果,执行从包括以下的组中选择的至少一个动作:拒绝从第一上下文改变到第二上下文的请求; 请求用户提供与所请求的变更相关的信息; 并请求用户确认与所请求的改变有关的信息。

    Augmenting a Virtual Machine Hosting Environment from within a Virtual Machine
    5.
    发明申请
    Augmenting a Virtual Machine Hosting Environment from within a Virtual Machine 失效
    从虚拟机中增加虚拟机托管环境

    公开(公告)号:US20090019436A1

    公开(公告)日:2009-01-15

    申请号:US12062610

    申请日:2008-04-04

    IPC分类号: G06F9/445

    摘要: Systems and methods augment a virtual machine (computer) hosting environment from within a virtual machine. A communication channel between the virtual machine and the player is used to send instructions to the player to load and execute requested software modules. Requests to load and execute the modules may originate in the corporate network and may be issued by the corporate network administrator. If a requested module is not stored on the host computer, the virtual machine may upload the module, via the communication channel, to the player. The uploaded module may, for example: (a) install a required upgrade in the host operating system; (b) execute virus checking software on the host computer; or (c) install a corporate network-provided secure printing module that enables software being executed by the host computer to print on devices connected to the host computer.

    摘要翻译: 系统和方法从虚拟机中增加虚拟机(计算机)托管环境。 虚拟机和播放器之间的通信信道用于向播放器发送指令以加载和执行所请求的软件模块。 加载和执行模块的请求可能来自公司网络,可能由公司网络管理员发出。 如果所请求的模块未被存储在主计算机上,则虚拟机可以通过通信信道将模块上传到播放器。 上传的模块可以例如:(a)在主机操作系统中安装所需的升级; (b)在主机上执行病毒检测软件; 或(c)安装公司网络提供的安全打印模块,使得由主计算机执行的软件能够在连接到主计算机的设备上进行打印。

    Context management with audit capability

    公开(公告)号:US20050165790A1

    公开(公告)日:2005-07-28

    申请号:US11072866

    申请日:2005-03-04

    IPC分类号: G06F19/00 G06F21/00 G06F7/00

    摘要: A context management framework is given that provides in various embodiments, numerous advantages over previously-existing systems. In some instances, an architecture having a centralized storage location coupled to a context manager is provided for servicing and logging context events from a plurality of sources. This type of system uses a synchronization scheme to perform orderly storage and retrieval of data to and from the centralized storage location. In other instances, information stored in the centralized storage location or signals from the context manager are used to achieve an auditing capability for reviewing and acting on context data events and gestures. Selective blocking or allowance of impending context gestures or data-access events is accomplished based on a rule set or lookup table containing rules or other data to make such access-control decisions. Access to private data and other security measures may thus be implemented using the teachings presented herein. Furthermore, a communication paradigm, using a Web-proxy, which identifies ordinarily-unidentified applications to a context manager is provided according to some embodiments of the invention.

    Methods and apparatus for managing user access to a computing environment
    8.
    发明授权
    Methods and apparatus for managing user access to a computing environment 失效
    管理用户访问计算环境的方法和设备

    公开(公告)号:US07984064B2

    公开(公告)日:2011-07-19

    申请号:US13040352

    申请日:2011-03-04

    申请人: David Fusari

    发明人: David Fusari

    IPC分类号: G06F17/30

    摘要: Methods and apparatus for controlling user access to a computing environment are provided. In one embodiment, a method performed by a user is provided for gaining access to at least one computing device. The method comprises gaining access to the at least one computing device at a first time by providing credential information to the at least one computing device to authenticate the user's identity to the at least one computing device; presenting to the at least one computing device a physical device comprising identifying information to associate the physical device with the user authenticated by the credential information; and gaining access to the at least one computing device at a subsequent time by presenting the physical device to the at least one computing device without providing the credential information.

    摘要翻译: 提供了用于控制用户对计算环境的访问的方法和装置。 在一个实施例中,提供由用户执行的方法用于访问至少一个计算设备。 所述方法包括:通过向所述至少一个计算设备提供凭证信息来首次获得对所述至少一个计算设备的访问,以向所述至少一个计算设备认证所述用户的身份; 向所述至少一个计算设备呈现物理设备,所述物理设备包括识别用于将所述物理设备与由所述凭证信息认证的用户相关联的信息; 以及在随后的时间通过向所述至少一个计算设备呈现所述物理设备而不提供所述凭证信息来获得对所述至少一个计算设备的访问。

    Methods and apparatus for verifying context participants in a context management system in a networked environment
    9.
    发明授权
    Methods and apparatus for verifying context participants in a context management system in a networked environment 失效
    用于验证网络环境中的上下文管理系统中的上下文参与者的方法和装置

    公开(公告)号:US07660845B2

    公开(公告)日:2010-02-09

    申请号:US10632690

    申请日:2003-08-01

    申请人: David Fusari

    发明人: David Fusari

    IPC分类号: G06F15/16

    摘要: Methods and apparatus related to context management in a networked environment are provided. According to one aspect, a technique is provided for facilitating communication between a client and a context management (CM) server, comprising establishing a network connection between the client and the CM server to enable communication, and maintaining the connection for the period of time during which the context is maintained. According to another aspect, a requested change in at least one aspect of a context is facilitated by publishing a change decision from the context management server to the participant applications. In another aspect, a technique is employed to verify that a remote application is emulated on the same client as at least one other application in a context by receiving from the client and the remote application server information that uniquely identifies the client. In a further aspect, a technique is employed for verifying that two remote applications are emulated on a same client by receiving information from the remote applications that uniquely identifies the client on which they are emulated.

    摘要翻译: 提供了与网络环境中的上下文管理相关的方法和设备。 根据一个方面,提供了一种用于促进客户端和上下文管理(CM)服务器之间的通信的技术,包括在客户端和CM服务器之间建立网络连接以实现通信,并且在一段时间内维持连接 上下文保持。 根据另一方面,通过从上下文管理服务器向参与者应用发布改变决定来促进上下文的至少一个方面的所请求的改变。 在另一方面,采用一种技术来验证远程应用程序是通过从客户机和远程应用程序服务器上唯一标识客户端的信息在上下文中与至少一个其他应用程序在同一客户端上仿真的。 在另一方面,采用一种技术来验证两个远程应用程序是通过从远程应用程序接收信息来模拟的,该远程应用程序唯一地标识出在其上进行仿真的客户端。

    METHODS AND APPARATUS FOR PERFORMING CONTEXT MANAGEMENT IN A NETWORKED ENVIRONMENT
    10.
    发明申请
    METHODS AND APPARATUS FOR PERFORMING CONTEXT MANAGEMENT IN A NETWORKED ENVIRONMENT 失效
    在网络环境中执行上下文管理的方法和设备

    公开(公告)号:US20090307311A1

    公开(公告)日:2009-12-10

    申请号:US12540731

    申请日:2009-08-13

    申请人: David Fusari

    发明人: David Fusari

    IPC分类号: G06F15/16

    摘要: Methods and apparatus related to context management in a networked environment are provided. According to one aspect, a technique is provided for facilitating communication between a client and a context management (CM) server, comprising establishing a network connection between the client and the CM server to enable communication, and maintaining the connection for the period of time during which the context is maintained. According to another aspect, a requested change in at least one aspect of a context is facilitated by publishing a change decision from the context management server to the participant applications. In another aspect, a technique is employed to verify that a remote application is emulated on the same client as at least one other application in a context by receiving from the client and the remote application server information that uniquely identifies the client. In a further aspect, a technique is employed for verifying that two remote applications are emulated on a same client by receiving information from the remote applications that uniquely identifies the client on which they are emulated.

    摘要翻译: 提供了与网络环境中的上下文管理相关的方法和设备。 根据一个方面,提供了一种用于促进客户端和上下文管理(CM)服务器之间的通信的技术,包括在客户端和CM服务器之间建立网络连接以实现通信,并且在一段时间内维持连接 上下文保持。 根据另一方面,通过从上下文管理服务器向参与者应用发布改变决定来促进上下文的至少一个方面的所请求的改变。 在另一方面,采用一种技术来验证远程应用程序是通过从客户机和远程应用程序服务器上唯一标识客户端的信息在上下文中与至少一个其他应用程序在同一客户机上仿真的。 在另一方面,采用一种技术来验证两个远程应用程序是通过从远程应用程序接收信息来模拟的,该远程应用程序唯一地标识出在其上进行仿真的客户端。