Session manager for secured remote computing

• US 10,050,950 B2
• Filed: 07/16/2015
• Issued: 08/14/2018
• Est. Priority Date: 02/27/2004
• Status: Active Grant

• Current Assignee: Dell Marketing Corporation (Dell Technologies Inc.)
• Original Assignee: Wyse Technology L.L.C. (Dell Technologies Inc.)
• Inventors: Le, Bach H., Rombakh, Oleg
• Primary Examiner(s): Sison, June
• Assistant Examiner(s): Belani, Kishin G
• Application Number:
  US14/801,623
• Publication Number:
  US 20150326551A1
• Time in Patent Office: 1,125 Days
• Field of Search: 726 4
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066

Abstract

A method for managing a session between a local computing device and a remote computing device, in which a session is established between a local computing device and a remote computing device, a lock session signal is transmitted from the remote computing device to the local computing device, a lock session signal is received at the local computing device, and the session is locked, at the local computing device. Furthermore, the user is prompted for identification information at the remote computing device, and the identification information is transmitted from the remote computing device to the local computing device. Moreover, the identification information is received at the local computing device, the identification information is authenticated at the local computing device, and the session is unlocked, at the local computing device.

Claims

1. A computing device, comprising:

a processor enabled to access a memory media;

a network interface accessible to the processor; and

the memory media storing instructions executable by the processor to;

responsive to a predetermined event detected at the computing device, transmit, from the computing device to a second computing device via the network interface, a lock session signal for locking a communications session over a first channel between the computing device and the second computing device, wherein the lock session signal instructs the second computing device to block the first channel;

prompt a user at the computing device for identification information associated with the communications session;

transmit the identification information to the second computing device using a second channel different from the first channel; and

when the identification information is authenticated, receive an unlock session signal from the second computing device indicating that the second computing device has enabled the first channel,

wherein the predetermined event comprises an absence of manual input from the user.

2. The computing device of claim 1, wherein the second channel is an independent computing architecture virtual channel.

3. The computing device of claim 1, wherein the predetermined event further comprises expiration of a predetermined amount of time.

4. The computing device of claim 1, wherein the predetermined event further comprises activation of a screen saver.

5. The computing device of claim 4, wherein the identification information is different from a password for the screen saver.

6. The computing device of claim 1, wherein the memory media further stores instructions to:

allow a session management operation to be triggered locally at the computing device, wherein the session management operation is executed at the second computing device.

7. The computing device of claim 1, wherein the lock session signal instructs the second computing device to block the communication session.

8. A non-transitory computer-readable media encoded with instructions executable by a processor of a computing device to:

responsive to a predetermined event detected at the computing device, transmit, from the computing device to a second computing device via a network interface, a lock session signal for locking a communications session over a first channel between the computing device and the second computing device, wherein the lock session signal instructs the second computing device to block the first channel;

prompt a user at the computing device for identification information associated with the communications session;

transmit the identification information to the second computing device using a second channel different from the first channel; and

when the identification information is authenticated, receive an unlock session signal from the second computing device indicating that the second computing device has enabled the first channel,

wherein the predetermined event comprises an absence of manual input from the user.

9. The computer-readable media of claim 8, wherein the predetermined event further comprises expiration of a predetermined amount of time.

10. The computer-readable media of claim 8, wherein the predetermined event further comprises activation of a screen saver, and wherein the identification information is different from a password for the screen saver.

11. The computer-readable media of claim 8, further comprising instructions to:

allow a session management operation to be triggered locally at the computing device, wherein the session management operation is executed at the second computing device.

12. The computer-readable media of claim 8, wherein the lock session signal instructs the second computing device to block the communication session.

13. The computer-readable media of claim 8, wherein the predetermined event is detected at the computing device using at least one of:

a motion detector, a dedicated short range communication identification device, and a biometric device.

14. A computer-implemented method, comprising:

responsive to a predetermined event detected at a computing device, transmitting, from the computing device to a second computing device via a network interface, a lock session signal for locking a communications session over a first channel between the computing device and the second computing device, wherein the lock session signal instructs the second computing device to block the first channel;

prompting a user at the computing device for identification information associated with the communications session;

transmitting the identification information to the second computing device using a second channel different from the first channel; and

when the identification information is authenticated, receiving an unlock session signal from the second computing device indicating that the second computing device has enabled the first channel,

wherein the predetermined event comprises an absence of manual input from the user.

15. The method of claim 14, wherein the second channel is an independent computing architecture virtual channel.

16. The method of claim 14, wherein the predetermined event further comprises expiration of a predetermined amount of time.

17. The method of claim 14, further comprising:

allowing a session management operation to be triggered locally at the computing device,

wherein the session management operation is executed at the second computing device.

18. The method of claim 14, wherein the lock session signal instructs the second computing device to block the communication session.

19. The method of claim 14, wherein the predetermined event further comprises activation of a screen saver, and wherein the identification information is different from a password for the screen saver.

20. The method of claim 14, wherein the predetermined event is detected at the computing device using at least one of:

a motion detector, a dedicated short range communication identification device, and a biometric device.