Methods and systems for selecting a method for execution, by a virtual machine, of an application program

• US 8,341,732 B2
• Filed: 01/18/2007
• Issued: 12/25/2012
• Est. Priority Date: 01/24/2006
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Croft, Richard Jason, Low, Anthony Edward, Mazzaferri, Richard James, Pedersen, Bradley J.
• Primary Examiner(s): Simitoski, Michael
• Application Number:
  US11/624,403
• Publication Number:
  US 20070180450A1
• Time in Patent Office: 2,168 Days
• Field of Search: 726/21, 726/26, 718/1, 718/104, 713/164
• US Class Current: 726/21
• CPC Class Codes: G06F 16/748 Hypervideo linking data to content, e.g. by linking an URL to a video object in the context of video distribution systems H04N21/858
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2209/541 Client-server
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06F 3/1415 with means for detecting differences between the image stored in the host and the images displayed on the displays
• CPC Class Codes: G06F 3/1438 using more than one graphics controller
• CPC Class Codes: G06F 3/1462 with means for detecting differences between the image stored in the host and the images displayed on the remote displays
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/485 Task life-cycle, e.g. stopping, restarting, resuming execution G06F9/4881 takes precedence
• CPC Class Codes: G06F 9/5027 the resource being a machine, e.g. CPUs, Servers, Terminals
• CPC Class Codes: G06F 9/5055 considering software capabilities, i.e. software resources associated or available to the machine
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: G06F 9/5088 involving task migration
• CPC Class Codes: G06F 9/54 Interprogram communication
• CPC Class Codes: G09G 2354/00 Aspects of interface with display user
• CPC Class Codes: G09G 2370/16 Use of wireless transmission of display information
• CPC Class Codes: G09G 2370/22 Detection of presence or absence of input display information or of connection or disconnection of a corresponding information source
• CPC Class Codes: G09G 5/006 Details of the interface to the display terminal specific for a display terminal using a CRT G09G1/167; using a flat panel G09G3/2096; circuits for interfacing with colour displays G09G5/04
• CPC Class Codes: G09G 5/14 : Display of multiple viewports
• CPC Class Codes: H04L 63/0227 : Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0428 : wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 : for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/08 : for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 : Entity profiles
• CPC Class Codes: H04L 63/105 : Multiple levels of security
• CPC Class Codes: H04L 67/02 : based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/08 : specially adapted for terminal emulation, e.g. Telnet
• CPC Class Codes: H04L 67/14 : Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/141 : Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/303 : Terminal profiles
• CPC Class Codes: H04L 67/51 : Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/56 : Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/563 : Data redirection of data network streams
• CPC Class Codes: H04L 67/564 : Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/568 : Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 67/59 : Providing operational support to end devices by off-loading in the network or by emulation, e.g. when they are unavailable
• CPC Class Codes: H04L 69/24 : Negotiation of communication capabilities

Abstract

A method for selecting a method of execution for an application includes the step of receiving credentials. A plurality of applications available to a client machine is enumerated responsive to the received credentials. A request to execute an enumerated application is received. One of a predetermined number of methods for executing the requested application is selected responsive to a policy, the predetermined number of methods including a method for executing the requested application in a computing environment provided by a virtual machine.

Claims

1. A method for selecting a method of execution for an application program, the method comprising:

(a) receiving user credentials;

(b) enumerating a plurality of applications available to a client machine responsive to the received user credentials;

(c) receiving a request to execute an enumerated application; and

(d) selecting, by a broker machine, one of a plurality of predetermined methods for executing the requested application, responsive to a policy, the plurality of predetermined methods including a method for executing, on the client machine or on a remote machine, the requested application in a desktop computing environment provided by a virtual machine by

i) selecting the method of execution responsive to the policy based on at least the received user credentials;

ii) selecting the virtual machine that can provide the desktop computing environment and an operating system in which to execute the desktop computing environment;

iii) selecting an execution machine executing a hypervisor providing access to hardware resources required by the virtual machine;

iv) launching the virtual machine into the execution machine, the virtual machine executing the operating system;

iv) launching the desktop computing environment into the executing operating system on the execution machine; and

vi) launching the requested application into the desktop computing environment.

2. The method of claim 1, further comprising the step of providing access information associated with the requested application, the access information generated responsive to the selected method.

3. The method of claim 1, wherein step (a) further comprises receiving user credentials associated with a user of a client machine.

4. The method of claim 1, wherein step (c) further comprises receiving a request to execute an enumerated application, the enumerated application comprising a plurality of application files.

5. The method of claim 1, wherein launching the requested application in the desktop computing environment further comprises:

streaming the requested application to the virtual machine; and

executing the requested application in the desktop computing environment launched into the virtual machine.

6. The method of claim 5, wherein selecting the virtual machine further comprises evaluating the virtual machine.

7. The method of claim 6, wherein selecting the virtual machine further comprises determining to stream the requested application responsive to the evaluation.

8. The method of claim 5, wherein streaming the requested application to the virtual machine further comprises streaming to the virtual machine one of a plurality of files comprising the requested application.

9. The method of claim 5, further comprising providing application-output data generated by the executing application via a presentation level protocol.

10. The method of claim 5, further comprising providing application output data generated by the executing application via an Independent Computing Architecture presentation level protocol or a Remote Desktop Windows presentation level protocol or an XWindows presentation level protocol.

11. The method of claim 5, wherein selecting the virtual machine further comprises identifying a virtual machine responsive to an evaluation of the client machine.

12. The method of claim 5, wherein selecting the virtual machine further comprises selecting the virtual machine responsive to a policy.

13. The method of claim 1, wherein selecting the virtual machine further comprises identifying a version of the requested application to execute.

14. The method of claim 13, wherein selecting the virtual machine further comprises selecting the virtual machine responsive to the identified version of the requested application and provisioning the virtual machine to execute the identified version of the requested application.

15. The method of claim 13, wherein selecting the virtual machine further comprises identifying a template from which to provision the virtual machine, the template selected responsive to the identified version of the requested application.

16. The method of claim 1, wherein step (a) further comprises the steps of:

receiving a request from a client machine for access to a resource;

gathering, by a collection agent, user credentials; and

receiving the gathered user credentials.

17. The method of claim 16, wherein gathering user credentials further comprises gathering user credentials by executing at least one script on the local machine.

18. The method of claim 16, wherein gathering user credentials further comprises gathering user credentials associated with a user of the client machine.

19. The method of claim 16, wherein receiving the gathering user credentials further comprises evaluating the client machine responsive to the received user credentials.

20. An apparatus that selects a method of execution for an application program, the apparatus comprising:

a transceiver receiving user credentials associated with a user of a client machine, transmitting an enumeration of a plurality of applications available to the user of the client machine, responsive to the received user credentials, and receiving a request to execute an enumerated application;

a server agent selecting one of a plurality of predetermined methods for executing the requested application, responsive to a policy, the plurality of predetermined methods including a method for executing, on the client machine or on a remote machine, the requested application in a desktop computing environment provided by a virtual machine;

an identification component;

an execution component; and

a management component;

wherein the method for executing the requested application in the desktop computing environment provided by the virtual machine includes

i) selecting the method of execution responsive to the policy based on at least the received user credentials;

ii) selecting, by the virtual machine management component, the virtual machine that can provide the desktop computing environment and an operating system in which to execute the desktop computing environment;

iii) selecting, by the identification component, an execution machine executing a hypervisor providing access to hardware resources required by the virtual machine;

iv) launching, by the execution component, the virtual machine into the execution machine, the virtual machine executing the operating system;

v) launching, by the execution component, the desktop computing environment into the executing operating system on the execution machine;

vi) launching the requested application into the desktop computing environment; and

vi) establishing, by the management component, a connection between the client machine and the desktop computing environment.

21. The apparatus of claim 20, further comprising a policy engine.

22. The apparatus of claim 21, wherein the policy engine applies a policy to the received user credentials.

23. The apparatus of claim 21, wherein the policy engine makes an access control decision, responsive to the received user credentials.

24. The apparatus of claim 23, wherein the server agent selects one of the plurality of predetermined methods for executing the requested application, responsive to the access control decision.

25. The apparatus of claim 20, wherein the server agent streams the requested application to the selected virtual machine for execution.

26. The apparatus of claim 20, wherein the server agent selects a method for streaming the requested application to the client machine.

27. The apparatus of claim 20, wherein the selected virtual machine provides resource-output data generated by the execution of the application in the desktop computing environment via a presentation level protocol.

28. The apparatus of claim 20, wherein the identification component identifies the virtual machine responsive to an evaluation of the client machine.

29. The apparatus of claim 20, wherein the identification component identifies the virtual machine responsive to an evaluation of the requested resource application.

30. The apparatus of claim 20, wherein the identification component selects the virtual machine responsive to a policy.

31. The apparatus of claim 20, wherein the identification component further comprises identifying identifies a template from which to provision the virtual machine, the template selected responsive to an evaluation of the requested application.

32. The apparatus of claim 20, wherein the identification component receives from the virtual machine management component the identification of the virtual machine.

33. The apparatus of claim 20, wherein the identification component receives an identification of the execution machine.

34. The apparatus of claim 20, wherein the execution component further comprises a means for launching the identified selected virtual machine into the hypervisor.

35. The apparatus of claim 20, further comprising a collection agent gathering user credentials associated with the client machine.

36. The apparatus of claim 20, further comprising a collection agent gathering user credentials associated with the user of the client machine.

37. The apparatus of claim 36, wherein the server agent determines to stream one of a plurality of files comprising the requested application to the virtual machine responsive to an evaluation of the gathered user credentials.

38. The apparatus of claim 20, wherein the management component provides an internet protocol address associated with the identified selected virtual machine to the client machine.

39. The apparatus of claim 20, wherein the management component provides an internet protocol address associated with the execution machine to the client machine.

40. The apparatus of claim 20, wherein the management component provides a proxy for communication between the client machine and the virtual machine.

41. The apparatus of claim 20, wherein the management component establishes the connection between the client machine and the desktop computing environment using a presentation-layer protocol.

42. A non-transitory nonvolatile computer-readable medium encoded with instructions that, when executed by a computer-implemented system, cause the computer-implemented system to:

(a) enumerate a plurality of applications available to a client machine responsive to received user credentials; and

(b) upon receiving a receiving a request to execute a requested application from among the plurality of applications, select one of a plurality of predetermined methods for executing the requested application, responsive to a policy, the plurality of predetermined methods including a method for executing, on the client machine or on a remote machine, the requested application in a desktop computing environment provided by a virtual machine by

i) selecting the method of execution responsive to the policy based on at least the received user credentials;

ii) selecting the virtual machine that can provide the desktop computing environment and an operating system in which to execute the desktop computing environment;

iii) selecting an execution machine executing a hypervisor providing access to hardware resources required by the virtual machine;

iv) launching the virtual machine into the execution machine, the virtual machine executing the operating system;

v) launching the desktop computing environment into the executing operating system on the execution machine; and

vi) launching the requested application into the desktop computing environment.