Methods and systems for providing access to a computing environment provided by a virtual machine executing in a hypervisor executing in a terminal services session

• US 8,010,679 B2
• Filed: 11/28/2006
• Issued: 08/30/2011
• Est. Priority Date: 01/24/2006
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Bissett, Nicholas Alexander, Hackett, Donovan Ross, Wookey, Michael, Croft, Richard Jason, Mazzaferri, Richard James, Low, Anthony Edward, Ryman, Paul Adam
• Primary Examiner(s): WASEL, MOHAMED A
• Application Number:
  US11/563,927
• Publication Number:
  US 20070180448A1
• Time in Patent Office: 1,736 Days
• Field of Search: 703/205, 703/208, 703/213, 703/214, 703/218, 703/230, 709217-219, 709/227, 709/228
• US Class Current: 709/227
• CPC Class Codes: G06F 16/748 Hypervideo linking data to content, e.g. by linking an URL to a video object in the context of video distribution systems H04N21/858
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2209/541 Client-server
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 3/1415 with means for detecting differences between the image stored in the host and the images displayed on the displays
• CPC Class Codes: G06F 3/1438 using more than one graphics controller
• CPC Class Codes: G06F 3/1462 with means for detecting differences between the image stored in the host and the images displayed on the remote displays
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/485 Task life-cycle, e.g. stopping, restarting, resuming execution G06F9/4881 takes precedence
• CPC Class Codes: G06F 9/5027 the resource being a machine, e.g. CPUs, Servers, Terminals
• CPC Class Codes: G06F 9/5055 considering software capabilities, i.e. software resources associated or available to the machine
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: G06F 9/5088 involving task migration
• CPC Class Codes: G06F 9/54 Interprogram communication
• CPC Class Codes: G09G 2354/00 Aspects of interface with display user
• CPC Class Codes: G09G 2370/16 Use of wireless transmission of display information
• CPC Class Codes: G09G 2370/22 Detection of presence or absence of input display information or of connection or disconnection of a corresponding information source
• CPC Class Codes: G09G 5/006 Details of the interface to the display terminal specific for a display terminal using a CRT G09G1/167; using a flat panel G09G3/2096; circuits for interfacing with colour displays G09G5/04
• CPC Class Codes: G09G 5/14 : Display of multiple viewports
• CPC Class Codes: H04L 63/0227 : Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 : for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 : Entity profiles
• CPC Class Codes: H04L 63/105 : Multiple levels of security
• CPC Class Codes: H04L 67/02 : based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/08 : specially adapted for terminal emulation, e.g. Telnet
• CPC Class Codes: H04L 67/14 : Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/141 : Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/303 : Terminal profiles
• CPC Class Codes: H04L 67/51 : Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/56 : Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/563 : Data redirection of data network streams
• CPC Class Codes: H04L 67/564 : Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/568 : Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 67/59 : Providing operational support to end devices by off-loading in the network or by emulation, e.g. when they are unavailable
• CPC Class Codes: H04L 69/24 : Negotiation of communication capabilities

Abstract

A method for providing access to a computing environment includes the step of receiving, by a broker machine, a request from a client machine for access to a computing environment, the request including an identification of a user of the client machine. One of a plurality of virtual machines is identified by a session management component, the identified virtual machine providing the requested computing environment. One of a plurality of execution machines is identified, the identified execution machine providing a terminal services session in which a hypervisor executes to provide access to hardware resources required by the identified virtual machine. The hypervisor launches the identified virtual machine. A connection is established between the client machine and the identified virtual machine, via the terminal services session.

Claims

1. A method of providing access to a desktop computing environment, the method comprising the steps of:

(a) receiving, by a broker machine, a request from a client machine for access to the desktop computing environment, the request including an identification of a user of the client machine;

(b) selecting, by a session management component, a virtual machine responsive to the identification of the user of the client machine that can provide the desktop computing environment and an operating system in which to execute the desktop computing environment;

(c) selecting, by the broker machine, an execution machine providing a terminal services session in which a hypervisor executes to provide access to hardware resources required by the virtual machine;

(d) launching, by the broker machine, the virtual machine by into the execution machine, the virtual machine executing the operating system;

(e) launching, by the broker machine, the desktop computing environment into the executing operating system on the execution machine; and

(f) establishing, by the broker machine, a connection between the client machine and the desktop computing environment via the terminal services session.

2. The method of claim 1, wherein step (b) further comprises launching, by the broker machine, the session management component.

3. The method of claim 1, wherein step (b) further comprises launching, by the broker machine, the session management component in a terminal services session executing on the broker machine.

4. The method of claim 1, wherein

step (a) further comprises receiving, by the broker machine, the request including a type of virtual machine;

and

step (b) further comprises selecting, by the session management component, the virtual machine responsive to the request for the type of virtual machine.

5. The method of claim 1, wherein

step (a) further comprises receiving, by the broker machine, the request including a type of desktop computing environment;

and

step (b) further comprises selecting, by the session management component, the virtual machine responsive to the request for the type of desktop computing environment.

6. The method of claim 1, wherein step (c) further comprises provisioning, by the hypervisor, the hardware resources on the-execution machine for use by the-virtual machine.

7. The method of claim 1, wherein step (c) further comprises partitioning, by the hypervisor, the hardware resources on the execution machine for use by the virtual machine.

8. The method of claim 1, wherein step (c) further comprises selecting, by the broker machine, the execution machine responsive to an identification of hardware resources required by the-virtual machine.

9. The method of claim 1, wherein step (f) further comprises providing a proxy for communication between the client machine and the desktop computing environment.

10. The method of claim 1, wherein step (d) further comprises launching, by the broker machine, the virtual machine into the hypervisor on the execution machine.

11. The method of claim 1, wherein step (f) further comprises establishing, by the broker machine, the connection between the client machine and the desktop computing environment via the terminal services session using a presentation layer protocol.

12. An apparatus for providing access to a desktop computing environment, the apparatus comprising:

a server including a virtual machine management component and a session management component, the session management component having an identification component, an execution component, and a management component, wherein the virtual machine management component selects a virtual machine that can provide;

the desktop computing environment requested by a user at a client machine;

an operating system in which to execute the desktop computing environment; and

transmitting an identification of the virtual machine to the identification component, wherein the identification component receives from the virtual machine management component the identification of the virtual machine and selects an execution machine providing a terminal services session in which a hypervisor executes to provide access to hardware resources required by the virtual machine;

the execution component, providing;

provisioning the virtual machine;

launching the virtual machine into the execution machine, the virtual machine executing the operating system; and

launching the desktop computing environment into the executing operating system on the execution machine; and

the management component establishes a connection between the client machine and the desktop computing environment via the terminal services session.

13. The apparatus of claim 12, wherein the identification component receives from the virtual machine management component the identification of the virtual machine.

14. The apparatus of claim 12, wherein the identification identified execution component launches the virtual machine into the hypervisor executing on the identified execution machine.

15. The apparatus of claim 12, wherein the identification component further comprises a transceiver receiving that receives an identification of the user of the client machine and transmitting transmits the identification of the user to the virtual machine management component.

16. The apparatus of claim 12, wherein the identification component further comprises a transceiver receiving that receives an identification by the user of the client machine of a type of desktop computing environment requested and transmitting transmits the identification of the type of desktol2 computing environment requested to the virtual machine management component.

17. The apparatus of claim 12, wherein the identification component further comprises a transceiver receiving that receives an identification by the user of the client machine of a type of virtual machine requested and transmits the identification of the type of virtual machine requested to the virtual machine management component.

18. The apparatus of claim 12, wherein the identification component further comprises a transceiver receiving that receives an identification of a type of desktop computing environment requested and transmitting transmits the identification of the type of desktop computing environment requested to the virtual machine management component.

19. The apparatus of claim 12, wherein the identification component further comprises a transceiver receiving that receives an identification of a type of virtual machine requested and transmits the identification of the type of virtual machine requested to the virtual machine management component.

20. The apparatus of claim 12, wherein the virtual machine management component selects the virtual machine responsive to an identification of the user of the client machine.

21. The apparatus of claim 12, wherein the virtual machine management component selects the virtual machine responsive to an identification of a type of desktop computing environment requested.

22. The apparatus of claim 12, wherein the virtual machine management component selects the virtual machine responsive to an identification of a type of virtual machine requested.

23. The apparatus of claim 12, wherein the management component establishes the connection between the client machine and the desktop computing environment via a terminal services session using a presentation layer protocol.