SYSTEMS AND METHODS FOR A VPN ICA PROXY ON A MULTI-CORE SYSTEM

• US 20110162062A1
• Filed: 12/23/2010
• Published: 06/30/2011
• Est. Priority Date: 12/28/2009
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: KUMAR, ARKESH, Ramachandra, Pratap
• Granted Patent: US 9,055,064 B2
• Time in Patent Office: Days
• US Class Current: 726/15
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70

Abstract

The present invention is directed towards systems and methods for sharing licenses across resources via a multi-core intermediary device. A device intermediary to a plurality of clients and a server may grant a license for a virtual private network (VPN) session established by a first core of a plurality of cores of the device with a client. A second core of the plurality of cores may receive a first request from the client to establish an application connection between an application and a server via the VPN session. The second core may send a second request to the first core to share the license of the VPN session responsive to determining that the first core owns the VPN session. The second core may establish the application connection responsive to receiving from the first core a response accepting the second request to share the license of the VPN session.

Claims

1. A method for sharing licenses across resources via a multi-core intermediary device, the method comprising:

(a) granting, by a device intermediary to a plurality of clients and a server, a license for a virtual private network (VPN) session established by a first core of a plurality of cores of the device with a client;

(b) receiving, by a second core of the plurality of cores, from the client a first request to establish an application connection between an application and a server via the VPN session;

(c) sending, by the second core to the first core, a second request to share the license of the VPN session responsive to determining that the first core owns the VPN session; and

(d) establishing, by the second core, the application connection responsive to receiving from the first core a response accepting the second request to share the license of the VPN session.

2. The method of claim 1, wherein step (a) further comprises granting the license from a pool of licenses managed via the device.

3. The method of claim 1, wherein step (a) further comprises establishing the VPN session for a user of a plurality of users for access to a domain.

4. The method of claim 3, wherein step (b) further comprises receiving the first request from the user to access a resource of the domain.

5. The method of claim 1, wherein step (c) further comprises determining, by the second core, from a provisioning list that the first core owns the VPN session.

6. The method of claim 1, wherein step (d) further comprises determining, by the first core, that the first request is for access to the same domain as the VPN session.

7. The method of claim 1, wherein step (d) further comprises updating, by the first core, a provisioning list to identify sharing the license between the VPN session and the application connection.

8. The method of claim 1, further comprising disestablishing, by the second core, the application connection and sending a message to the first core to update the first core'"'"'s provisioning list.

9. The method of claim 1, further comprising maintaining, by the device, a single VPN session for each user in connection with a domain.

10. The method of claim 1, further comprising, receiving by a third core of the plurality of core, a third request to establish a second application connection and establishing, by the third core, the second application connection responsive to receiving from the first core a second response accepting a fourth request to share the license of the VPN session.

11. A system for sharing licenses across resources via a multi-core intermediary device, the system comprising:

a device intermediary to a plurality of clients and a server;

a license manager granting a license for a virtual private network (VPN) session established by a first core of a plurality of cores of the device with a client;

a second core of the plurality of cores of the device receiving from the client a first request to establish an application connection between an application and a server via the VPN session and sending to the first core a second request to share the license of the VPN session responsive to determining that the first core owns the VPN session; and

wherein the second core establishes the application connection responsive to receiving from the first core a response accepting the second request to share the license of the VPN session.

12. The system of claim 11, wherein the license manager manages a pool of licenses for resources accessed via the device.

13. The system of claim 11, wherein the device establishes the VPN session for a user of a plurality of users for access to a domain.

14. The system of claim 13, wherein the device receives the first request from the user to access a resource of the domain.

15. The system of claim 11, wherein the second core determines from a provisioning list that the first core owns the VPN session.

16. The system of claim 11, wherein the first core determines that the first request is for access to the same domain as the VPN session.

17. The system of claim 11, wherein the first core updates a provisioning list to identify sharing the license between the VPN session and the application connection.

18. The system of claim 11, wherein the second core disestablishes the application connection and sends a message to the first core to update the first core'"'"'s provisioning list.

19. The system of claim 11, wherein the device maintains a single VPN session for each user in connection with a domain.

20. The system of claim 11, wherein a third core of the plurality of cores receives a third request to establish a second application connection and establishes the second application connection responsive to receiving from the first core, a second response accepting a fourth request to share the license of the VPN session.