Managing a virtualized application workspace on a managed computing device

• US 10,338,969 B2
• Filed: 04/14/2016
• Issued: 07/02/2019
• Est. Priority Date: 12/19/2005
• Status: Active Grant

• Current Assignee: Omnissa, LLC
• Original Assignee: VMware, Inc. (Broadcom, Inc.)
• Inventors: Wilkinson, Anthony J., Benson, Mark, Hayward, Patrick W.
• Primary Examiner(s): Chea, Philip J
• Assistant Examiner(s): Ahmed, Mohammed
• Application Number:
  US15/098,710
• Publication Number:
  US 20160337476A1
• Time in Patent Office: 1,174 Days
• CPC Class Codes: G06F 16/282 Hierarchical databases, e.g. IMS, LDAP data stores or Lotus Notes
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 9/505 considering the load
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: H04L 61/4523 using lightweight directory access protocol [LDAP]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1008 based on parameters of servers, e.g. available memory or workload monitoring of computer activity G06F11/30
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs
• CPC Class Codes: H04L 67/1031 Controlling of the operation of servers by a load balancer, e.g. adding or removing servers that serve requests
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

Methods and systems for providing load balancing are provided. Example embodiments provide a Application Workspace System “AWS” which enables users to access remote server-based applications using the same interface that they use to access local applications, without needing to know where the application is being accessed. In one embodiment, a load balancing message bus is provided that performs load balancing and resource discovery within the AWS. For example, the AWS may use a broadcast message-bus based load balancing to determine which servers to use to launch remote application access requests or to perform session management. This abstract is provided to comply with rules requiring an abstract, and it is submitted with the intention that it will not be used to interpret or limit the scope or meaning of the claims.

Claims

1. A method for managing a virtualized application workspace on a managed computing device, the method comprising:

authenticating a first user and verifying that the first user belongs to a first group maintained by a directory service, based on first user credentials, wherein belonging to a group indicates entitlements;

obtaining the entitlements associated with the authenticated user from the directory service, the entitlements including one or more indications of software available to the authenticated user, and the entitlements further including a list of application family objects associated with the authenticated user, the list comprising a first application family object comprising a first set of rules wherein the first set of rules determines that the first application family object resolves to a local application object that is local to the managed computing device, the list further comprising a second application family object comprising a second set of rules wherein the second set of rules determines that the second application family object resolves to a remote application object that is remote to the managed computing device;

resolving the first set of rules of the first application family object and the second set of rules of the second application family object so as to obtain a result vector that includes indications of application objects that are available to the authenticated user, wherein the result vector comprises (a) the local application object, and (b) the remote application object;

processing the result vector to identify application objects for which installation operations are to be performed, wherein the processing comprises determining that (a) the local application object is local to the managed computing device, or (b) that the remote application object is remote to the managed computing device; and

subsequent to the processing, performing the installation operations to install one or more of the identified application objects on the managed computing device.

2. The method of claim 1, wherein:

the result vector comprises a list of application object vectors corresponding to the list of application family objects.

3. The method of claim 2, wherein processing the results vector comprises:

determining that an application object included in an application object vector associated with an application family object of the list of application family objects comprises a local application.

4. The method of claim 3, further comprising:

responsive to determining that the application object comprises the local application, determining that the application object has an excluded application.

5. The method of claim 4, further comprising:

determining that the excluded application is installed on the managed computing device, and

responsive to determining that the excluded application is installed on the managed computing device, foregoing installing the application object on the managed computing device.

6. The method of claim 3, further comprising:

responsive to determining that a dependent application object exists for the application object, installing the dependent application object.

7. The method of claim 1, wherein performing the installation operations comprises:

receiving a user indication that a first application object included in an application object vector of the list of application object vectors should not be installed; and

responsive to the receiving, determining whether the application object vector includes a second application object included in the application object vector that comprises an alternative to the first application object.

8. The method of claim 7, further comprising:

determining that the second application object comprises a local application that requires an upgrade; and

responsive to determining that the second application object comprises a local application that requires an upgrade, automatically upgrading the local application.

9. The method of claim 1, wherein performing the installation operations comprises:

installing a first application included in the list of application object vectors that is marked as mandatory without any user intervention; and

installing a second application included in the list of application object vectors that is not marked as mandatory after receiving an indication from a user that the second application is to be installed.

10. A managed computing device for managing a virtualized application workspace, the managed computing device comprising:

a memory storing a node manager; and

a processor configured to execute the node manager to;

authenticate a first user and verify that the first user belongs to a first group maintained by a directory service, based on first user credentials, wherein belonging to a group indicates entitlements;

obtain the entitlements associated with the authenticated user from the directory service, the entitlements including one or more indications of software available to the authenticated user, and the entitlements further including a list of application family objects associated with the authenticated user, the list comprising a first application family object comprising a first set of rules wherein the first set of rules determines that the first application family object resolves to a local application object that is local to the managed computing device, the list further comprising a second application family object comprising a second set of rules wherein the second set of rules determines that the second application family object resolves to a remote application object that is remote to the managed computing device;

resolve the first set of rules of the first application family object and the second set of rules of the second application family object so as to obtain a result vector that includes indications of application objects that are available to the authenticated user, wherein the result vector comprises (a) the local application object, and (b) the remote application object;

process the result vector to identify application objects for which installation operations are to be performed, wherein the processing comprises determining that (a) the local application object is local to the managed computing device, or (b) that the remote application object is remote to the managed computing device; and

subsequent to the processing, perform the installation operations to install one or more of the identified application objects on the managed computing device.

11. The managed computing device of claim 10, wherein:

the result vector comprises a list of application object vectors corresponding to the list of application family objects.

12. The managed computing device of claim 11, wherein processing the results vector comprises:

determining that an application object included in an application object vector associated with an application family object of the list of application family objects comprises a local application.

13. The managed computing device of claim 12, wherein executing the node manager further causes the processor to:

responsive to determining that the application object comprises the local application, determine that the application object has an excluded application.

14. The managed computing device of claim 13, wherein executing the node manager further causes the processor to:

determine that the excluded application is installed on the managed computing device, and

responsive to determining that the excluded application is installed on the managed computing device, forego installing the application object on the managed computing device.

15. The managed computing device of claim 12, wherein executing the node manager further causes the processor to:

responsive to determining that a dependent application object exists for the application object, install the dependent application object.

16. The managed computing device of claim 10, wherein performing the installation operations comprises:

receiving a user indication that a first application object included in an application object vector of the list of application object vectors should not be installed; and

responsive to the receiving, determining whether the application object vector includes a second application object included in the application object vector that comprises an alternative to the first application object.

17. The managed computing device of claim 16, wherein executing the node manager further causes the processor to:

determine that the second application object comprises a local application that requires an upgrade; and

responsive to determining that the second application object comprises a local application that requires an upgrade, automatically upgrade the local application.

18. The managed computing device of claim 10, wherein performing the installation operations comprises:

installing a first application included in the list of application object vectors that is marked as mandatory without any user intervention; and

installing a second application included in the list of application object vectors that is not marked as mandatory after receiving an indication from a user that the second application is to be installed.

19. A non-transitory computer-readable medium storing instructions that, when executed by a processor, causes the processor to perform a method for managing a virtualized application workspace on a managed computing device, the method comprising:

authenticating a first user and verifying that the first user belongs to a first group maintained by a directory service, based on first user credentials, wherein belonging to a group indicates entitlements;

obtaining the entitlements associated with the authenticated user from the directory service, the entitlements including one or more indications of software available to the authenticated user, and the entitlements further including a list of application family objects associated with the authenticated user, the list comprising a first application family object comprising a first set of rules wherein the first set of rules determines that the first application family object resolves to a local application object that is local to the managed computing device, the list further comprising a second application family object comprising a second set of rules wherein the second set of rules determines that the second application family object resolves to a remote application object that is remote to the managed computing device;

resolving the first set of rules of the first application family object and the second set of rules of the second application family object so as to obtain a result vector that includes indications of application objects that are available to the authenticated user, wherein the result vector comprises (a) the local application object, and (b) the remote application object;

processing the result vector to identify application objects for which installation operations are to be performed, wherein the processing comprises determining that (a) the local application object is local to the managed computing device, or (b) that the remote application object is remote to the managed computing device; and

subsequent to the processing, performing the installation operations to install one or more of the identified application objects on the managed computing device.

20. The non-transitory computer-readable medium of claim 19, wherein:

the result vector comprises a list of application object vectors corresponding to the list of application family objects.