System and method for streaming application isolation

• US 8,418,236 B1
• Filed: 07/20/2010
• Issued: 04/09/2013
• Est. Priority Date: 04/10/2009
• Status: Expired due to Fees

• Current Assignee: Open Invention Network LLC
• Original Assignee: Open Invention Network LLC
• Inventors: Havemose, Allan
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US12/839,576
• Time in Patent Office: 994 Days
• Field of Search: 726/5, 726/21, 713/169, 713/175
• US Class Current: 726/5
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 65/61 for supporting one-way streaming services, e.g. Internet radio
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

A system, method, computer program and/or computer readable medium for providing streaming of one or more applications from streaming servers onto one or more clients. The computer readable medium includes computer-executable instructions for execution by a processing system. The one or more applications are contained within one or move isolated environments, and the isolated environments are streamed from the servers onto clients. The system may include authentication of the streaming servers and authentication of clients and credentialing of the isolated environments and applications the clients are configured to run. The system may further include encrypted communication between the streaming servers and the clients. The system may further include a management interface where administrators may add, remove and configure isolated environments, configure client policies and credentials, and force upgrades. The streamed isolated environments may be isolated from other applications and the host operating system on the clients and applications within the isolated environments may run without performing an application-installation on the client.

Claims

1. A system for providing application streaming from a host server to one or more clients, the system comprising:

a host server with one or more memory locations configured to store isolated environments, wherein the isolated environments comprise one or more applications;

one or more clients comprising one or more memory locations configured to store an isolated environment infrastructure, one or more isolated environments, and a host operating system, wherein said one or more isolated environments comprise one or more applications;

an update-cache for each isolated environment comprised of records corresponding to each file within the isolated environment; and

an isolated environment client policy manager configured to store client credentials for the one or more clients;

wherein one or more of said isolated environments on the host server are streamed to the one or more clients;

said host server is authenticated using a certificate and said one or more clients validate said host certificate before accepting streaming applications from said host; and

said one or more clients are authenticated against the client policy manager and access to applications and isolated environments are granted based on said client-authentication.

2. The system according to claim 1, wherein the isolated environment client policy manager stores client account records comprising one or more of client login, account holder name, status of account and a list of credentialed isolated environments.

3. The system according to claim 1, wherein authentication of the client credentials is performed by using one of a certificate, a user-id, or a manager.

4. The system according to claim 1, wherein secure socket layer (SSL) encrypted communication is established using said certificate between the one or more clients and the isolated environment of the host server.

5. The system according to claim 1, wherein the client credentials for the one or more clients are validated for access to said isolated environments.

6. The system according to claim 5, wherein non-credentialed isolated environments are removed from the one or more clients.

7. The system according to claim 5, wherein a credentialed isolated environment is updated if it is already installed on the one or more clients.

8. The system according to claim 5, wherein a credentialed isolated environment is installed on the one or more clients if it is not already installed.

9. The system according to claim 1, further comprising:

a graphical user interface configured to provide the one or more clients with an option to select which isolated environment to access.

10. The system according to claim 9, wherein a most recently run isolated environment is automatically selected for access.

11. The system according to claim 1, wherein the one or more clients access at least one local isolated environment without validating credentials against the isolated environment of the host server.

12. The system according to claim 1, wherein the one or more clients are validated against the isolated environment of the host server prior to accessing any isolated environments.

13. The system according to claim 12, wherein the one or more clients access already installed isolated environments without accepting updates from the isolated environment of the host server.

14. The system according to claim 1, wherein the isolated environment client policy manager contains a record with credentialed isolated environments, account information, and a cache sub-system for each of the one or more clients.

15. A system for providing application streaming from a host server to one or more clients, the system comprising:

a host server with one or more memory locations configured to store isolated environments, wherein the isolated environments comprise one or more applications,

one or more clients each comprising one or more memory locations configured to store an isolated environment infrastructure, one or more isolated environments, and a host operating system, wherein said isolated environments comprise one or more applications;

an update-cache for each isolated environment comprised of records corresponding to each file within the isolated environment;

a client policy manager configured to store client credentials for the one or more clients;

and

a management interface wherein an administrator configures client configuration settings and isolated environment host server configuration settings;

wherein one or more of said isolated environments on the host server are streamed to the one or more clients;

said host server is authenticated using a certificate and said one or more clients validate said host certificate before accepting streaming applications from said host; and

said one or more clients are authenticated against the client policy manager and access to applications and isolated environments are granted based on said client-authentication.

16. The system according to claim 15, wherein said client configuration settings comprise one or more of adding and removing credentialed isolated environments, adding and removing clients, forcing a rebuild of client update-caches, setting user-names, and setting account status.

17. The system according to claim 15, wherein the isolated environment host server configuration settings comprise one or more of installing and removing isolated environments, updating isolated environments, rebuilding one or more update caches, setting a compression algorithm, and setting a message digest algorithm.

18. The system according to claim 15, wherein the management interface is provided using a graphical user interface.

19. The system according to claim 15, wherein the management interface is provided using an application programming interface (API).

20. The system according to claim 15, wherein at least one or more applications are streamed to the one or more clients and the one or more clients can access the one or more applications without performing a local installation.