Techniques for managing terminal services sessions

• US 8,326,993 B2
• Filed: 04/29/2005
• Issued: 12/04/2012
• Est. Priority Date: 04/29/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Bernardi, Ara, Parsons, John E. Jr., Lotlikar, Mahesh Sharad, Bahl, Ritu
• Primary Examiner(s): MACILWINEN, JOHN MOORE JAIN
• Application Number:
  US11/119,407
• Publication Number:
  US 20060248180A1
• Time in Patent Office: 2,776 Days
• Field of Search: 709/227
• US Class Current: 709/227
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066

Abstract

Techniques relating to managing terminal services scenarios are described. In one instance, a process establishes a new terminal services session having a session configuration consistent with a permitted terminal services session configuration. The process also monitors whether the new terminal services session configuration remains consistent with the permitted terminal services session configuration.

Claims

1. A method comprising:

detecting, by a connection manager, an incoming connection from a client to establish a requested terminal services session, the incoming connection requesting one of a plurality of session types for the requested session, the plurality of session types comprising;

a rich terminal services session allowing the client to access a majority of available functions; and

a limited terminal services session allowing the client to access a minority of available functions;

communicating the incoming connection to a session manager to establish a new terminal services session corresponding to the requested terminal services session;

initializing a terminal services enforcement component, the enforcement component comprising an enforcement core enumerating a plurality of local sessions, the local sessions each having a permitted terminal services configuration according to a licensing policy and a corresponding session configuration according to a corresponding terminal services (TS) license and consistent with the permitted terminal services configuration, the corresponding session configuration related at least in part to the requested session type, wherein the licensing policy and TS license are created by the enforcement core;

binding the client to the new terminal services session according to agreed conditions between the client and the corresponding TS license communicated to the connection manager via the session manager;

establishing the new terminal services session having a session configuration consistent with the corresponding TS license, wherein the session manager associates the corresponding TS license to the new session and the enforcement component changes the state of the TS license to reflect the association; and

monitoring whether the session configuration of the new terminal services session remains consistent with the session configuration of the corresponding TS license.

2. A method as recited in claim 1, wherein said establishing further comprises the connection manager:

receiving a user credential responsive to a user-authentication request for a new terminal services session having a given configuration; and

,

authorizing the new terminal services session if a permitted terminal services session corresponding to the given configuration is available.

3. A method as recited in claim 2, wherein said receiving comprises receiving the request through one of a first type port configured for rich terminal services sessions or a second type port configured for limited terminal services sessions.

4. A method as recited in claim 2, in an event that corresponding permitted sessions are unavailable, negotiating to free an individual corresponding permitted session.

5. A method as recited in claim 2, wherein said authorizing comprises:

enabling the new terminal services session configuration;

determining if a permitted terminal services session corresponding to the given configuration is available; and

,

disabling the new terminal services session if no corresponding configuration is available.

6. A method as recited in claim 2, wherein said authorizing comprises:

determining if a permitted terminal services session corresponding to the given configuration is available; and

,

responsive to said determining, enabling the new terminal services session if a corresponding configuration is available.

7. A method as recited in claim 1, further comprising:

retrieving session type data from a licensing source, wherein the licensing source provides information relating to one or more restrictions associated with the requested session type and an authorized number of sessions for that session type.

8. A method as recited in claim 1, wherein the enforcement component is initialized responsive to detection of a first incoming connection.

9. A method as recited in claim 1 further comprising responsive to said monitoring, terminating the new terminal services session in an event that the new terminal services session configuration does not remain consistent with the corresponding session configuration of the corresponding TS license.

10. A computer-readable storage media comprising computer-executable instructions that, when executed, perform acts, comprising:

detecting, by a connection manager, an incoming connection from a client to establish a requested terminal services session, the incoming connection requesting one of a plurality of session types for the requested session, the plurality of session types comprising;

a rich terminal services session allowing the client to access a majority of available functions; and

a limited terminal services session allowing the client to access a minority of available functions;

communicating the incoming connection to a session manager to establish a new terminal services session corresponding to the requested terminal services session;

initializing a terminal services enforcement component, the enforcement component comprising an enforcement core enumerating a plurality of local sessions, the local sessions each having a permitted terminal services configuration according to a licensing policy and a corresponding session configuration according to a corresponding terminal services (TS) license and consistent with the permitted terminal services configuration, the corresponding session configuration related at least in part to the requested session type, wherein the licensing policy and TS license are created by the enforcement core;

binding the client to the new terminal services session according to agreed conditions between the client and the corresponding TS license communicated to the connection manager via the session manager;

establishing the new terminal services session having a session configuration consistent with the corresponding TS license, wherein the session manager associates the corresponding TS license to the new session and the enforcement component changes the state of the TS license to reflect the association;

monitoring the session configuration of the new terminal services session; and

taking an action in an event that the session configuration of the new terminal services session diverges from the session configuration of the corresponding TS license.

11. The computer-readable storage media of claim 10, wherein the monitoring comprises monitoring what applications are accessible on the terminal services session.

12. The computer-readable storage media of claim 10, wherein the monitoring comprises:

ascertaining what applications are accessible on the terminal services session;

determining what applications are permitted on the terminal services session; and

comparing the accessible applications to the permitted applications.

13. The computer-readable storage media of claim 12, further comprising:

receiving a request for the new terminal services session having a given configuration through one of a first type port configured for rich terminal services sessions or a second type port configured for limited terminal services sessions;

authorizing the new terminal services session if a permitted terminal services session corresponding to the given configuration is available, wherein said authorizing comprises determining a total number of corresponding permitted sessions and whether any of the corresponding permitted sessions are available, in an event that corresponding permitted sessions are unavailable, negotiating to free an individual corresponding permitted session; and

wherein the ascertaining is accomplished by a first component and wherein the first component is configured to generate a signal from time to time which indicates that the first component is functioning and further comprising terminating the terminal services session responsive to not receiving the signal for a pre-determined period of time.

14. The computer-readable storage media of claim 10, wherein the taking an action comprises terminating the terminal services session.

15. A system comprising:

a server comprising one or more processors and a memory, the server communicatively coupled to one or more clients via a network,

a terminal services component and a terminal services enforcement component;

the terminal services component comprising a connection manager and a session manager, wherein;

the connection manager is configured to detect an incoming connection from one or more clients to one of a plurality of ports and to communicate the incoming connection request to the session manager;

the session manager is configured to establish a new session responsive to the incoming connection, wherein the new session is configured according to a session type requested by the one or more clients of a plurality of session types and a corresponding session configuration according to a terminal services (TS) license, the corresponding session configuration related at least in part to the requested session type, wherein the new session is associated with the TS license, and the plurality of session types comprising;

a rich terminal services session allowing the one or more clients to access a majority of available functions; and

a limited terminal services session allowing the one or more clients to access a minority of available functions;

the terminal services enforcement component comprising an enforcement core configured to ensure that the TS license issued for each corresponding session is consistent with a permitted session configuration according to a licensing policy; and

the enforcement core terminating the terminal services session if the terminal services session deviates from the corresponding session configuration according to the TS license.

16. A system as recited in claim 15, the enforcement core comparing the established terminal services session configuration to available licensed terminal services session configurations to determine if the established terminal services session complies with an available individual licensed terminal services session configuration.

17. A system as recited in claim 16, further comprising a licensing source, wherein the enforcement component retrieves session type data from the licensing source.

18. A system as recited in claim 15, wherein the enforcement core is configured to ascertain applications accessible to the terminal services session based on the TS license.

19. A system as recited in claim 18, wherein the enforcement core is further configured to compare the accessible application to applications available in the permitted configuration.

20. A system as recited in claim 15, wherein the enforcement core is further configured to monitor applications accessible to the terminal services session, wherein the enforcement core is configured to terminate the terminal services session if the monitoring means does not communicate with the terminating means within a pre-established period of time.