Virtual desktop accelerator with enhanced bandwidth usage

• US 9,660,961 B2
• Filed: 09/13/2013
• Issued: 05/23/2017
• Est. Priority Date: 05/03/2013
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: Hanumantharayappa, Raghunandan, Basha P.R., Khader, Krishnamurthy, SAnthosh
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): ALMEIDA, DEVIN E
• Application Number:
  US14/026,297
• Publication Number:
  US 20140331054A1
• Time in Patent Office: 1,348 Days
• CPC Class Codes: H04L 2209/30 Compression, e.g. Merkle-Damgard construction
• CPC Class Codes: H04L 2209/72 Signcrypting, i.e. digital signing and encrypting simultaneously
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

In particular embodiments, a method includes receiving a request for a signature verification. In response to the request, signature data is encrypted. A first data size associated with the signature data is determined. A second data size associated with data of a data packet is determined. The method includes comparing the sum of the first data size and the second data size to a pre-determined data size. When the sum is less than or equal to the pre-determined data size, the encrypted signature data is included in the data packet; and the data packet is transmitted over a network.

Claims

1. A method comprising:

connecting a virtual desktop access (VDA) server and a remote desktop protocol (RDP) server of a server;

establishing an accelerated remote desktop connection via a private network between a client and the server using a first communication protocol, wherein the client comprises a RDP client and a VDA client, and wherein establishing the accelerated remote desktop connection comprises;

waiting for a connection request from a remote desktop protocol client;

intercepting the connection request, by the VDA client;

determining if a remote desktop session associated with the accelerated remote desktop connection is to be bandwidth optimized;

sending an optimized connection request to a network gateway using the first communication protocol, wherein the network gateway comprises a gateway server and a proxy;

receiving a certificate from the network gateway; and

receiving a handshake at the VDA server from the VDA client, wherein the handshake is based on the certificate;

receiving a request via the proxy for a signature verification for authentication of the client with the server;

in response to the request, encrypting signature data;

determining a first data size associated with the encrypted signature data;

determining a second data size associated with data of a data packet;

comparing the sum of the first data size and the second data size to a pre-determined data size associated with the first communication protocol;

including the encrypted signature data and the data in the data packet based on the comparison;

transmitting the data packet over the accelerated remote desktop connection using the first communication protocol;

sending, by the VDA server, a token to the VDA client via a secure tunnel of the gateway;

validating the client by the server based on the token;

accepting, by the server, a second connection via the proxy with the client using a second communication protocol; and

by the server, receiving from and sending data to the client via the proxy, wherein the data is compressed by the VDA server.

2. The method of claim 1, further comprising:

when the sum is greater than the pre-determined data size, transmitting the data packet over the accelerated remote desktop connection.

3. The method of claim 1, wherein the request for a signature verification is received at the client.

4. The method of claim 1, wherein the request for a signature verification is made by the proxy.

5. The method of claim 1, wherein the signature data is encrypted using SSL encryption.

6. The method of claim 1, wherein the pre-determined data size is based at least in part on a maximum transmission unit size of the first communication protocol.

7. The method of claim 6, wherein the first communication protocol is TCP.

8. One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

connect a virtual desktop access (VDA) server and a remote desktop protocol (RDP) server of a server;

establish an accelerated remote desktop connection via a private network between a client and the server using a first communication protocol, wherein the client comprises a RDP client and a VDA client, and wherein establishing the accelerated remote desktop connection comprises;

wait for a connection request from a remote desktop protocol client;

intercept the connection request, by the VDA client;

determine if a remote desktop session associated with the accelerated remote desktop connection is to be bandwidth optimized;

send an optimized connection request to a network gateway using the first communication protocol, wherein the network gateway comprises a gateway server and a proxy;

receive a certificate from the network gateway; and

receive a handshake at the VDA server from the VDA client, wherein the handshake is based on the certificate;

receive a request via the proxy for a signature verification for authentication of the client with the server;

in response to the request, encrypt signature data;

determine a first data size associated with the encrypted signature data;

determine a second data size associated with data of a data packet;

compare the sum of the first data size and the second data size to a pre-determined data size associated with the first communication protocol;

include the encrypted signature data and the data in the data packet based on the comparison;

transmit the data packet over the accelerated remote desktop connection using the first communication protocol;

send, by the VDA server, a token to the VDA client via a secure tunnel of the gateway;

validate the client by the server based on the token;

accept, by the server, a second connection via the proxy with the client using a second communication protocol; and

by the server, receive from and sending data to the client via the proxy, wherein the data is compressed by the VDA server.

9. The media of claim 8, the software further operable when executed to:

when the sum is greater than the pre-determined data size, transmit the data packet over the accelerated remote desktop connection.

10. The media of claim 8, wherein the request for a signature verification is received at the client.

11. The media of claim 8, wherein the request for a signature verification is made by the proxy.

12. The media of claim 8, wherein the signature data is encrypted using SSL encryption.

13. The media of claim 8, wherein the pre-determined data size is based at least in part on a maximum transmission unit size of the first communication protocol.

14. The media of claim 13, wherein the first communication protocol is TCP.

15. A system comprising:

one or more processors; and

a memory coupled to the processors comprising instructions executable by the processors, the processors being operable when executing the instructions to;

connect a virtual desktop access (VDA) server and a remote desktop protocol (RDP) server of a server;

establish an accelerated remote desktop connection via a private network between a client and the server using a first communication protocol, wherein the client comprises a RDP client and a VDA client, and wherein establishing the accelerated remote desktop connection comprises;

wait for a connection request from a remote desktop protocol client;

intercept the connection request, by the VDA client;

determine if a remote desktop session associated with the accelerated remote desktop connection is to be bandwidth optimized;

send an optimized connection request to a network gateway using the first communication protocol, wherein the network gateway comprises a gateway server and a proxy; and

receive a certificate from the network gateway; and

receive a handshake at the VDA server from the VDA client, wherein the handshake is based on the certificate;

receive a request via the proxy for a signature verification for authentication of the client with the server;

in response to the request, encrypt signature data;

determine a first data size associated with the encrypted signature data;

determine a second data size associated with data of a data packet;

compare the sum of the first data size and the second data size to a pre-determined data size associated with the first communication protocol;

include the encrypted signature data and the data in the data packet based on the comparison;

transmit the data packet over the accelerated remote desktop connection using the first communication protocol;

send, by the VDA server, a token to the VDA client via a secure tunnel of the gateway;

validate the client by the server based on the token;

accept, by the server, a second connection via the proxy with the client using a second communication protocol; and

by the server, receive from and sending data to the client via the proxy, wherein the data is compressed by the VDA server.

16. The system of claim 15, the processors further operable when executing the instructions to:

when the sum is greater than the pre-determined data size, transmit the data packet over the accelerated remote desktop connection.

17. The system of claim 15, wherein the request for a signature verification is received at the client.

18. The system of claim 15, wherein the request for a signature verification is made by the proxy.

19. The system of claim 15, wherein the signature data is encrypted using SSL encryption.

20. The system of claim 15, wherein the pre-determined data size is based at least in part on a maximum transmission unit size of a first communication protocol.