SYSTEMS AND METHODS FOR PROVIDING AUTHENTICATION CREDENTIALS ACROSS APPLICATION ENVIRONMENTS

• US 20070130167A1
• Filed: 12/01/2006
• Published: 06/07/2007
• Est. Priority Date: 12/02/2005
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Day, Jeff, Valdes, Roberto
• Granted Patent: US 7,685,298 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 61/30 Managing network names, e.g. use of aliases or nicknames name-to-address mapping H04L61/45
• CPC Class Codes: H04L 61/301 Name conversion
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms

Abstract

The present invention relates to a system for providing a modified URL from a proxy server to a virtualized computing environment attempting to access a remote resource. The modified URL may contain information which allows a proxy server which receives a request for the URL to generate a request for the remote resource where the request includes any state information necessary to access the resource. After transmitting the request, the proxy server may receive the requested resource; and transmit the resource to the application.

Claims

1. A method for providing access to a resource requested through a proxy server by a virtualized computing environment, wherein the resource is external to the virtualized computing environment'"'"'s server system, said method comprising:

(a) receiving a request from a client identifying an external resource;

(b) transmitting a first request for information corresponding to said external resource;

(c) receiving a first response to said first request, said first response comprising state information;

(d) transmitting to the client a file comprising a URL, said URL identifying said proxy and said external resource;

(e) receiving, from a virtualized computing environment, a request for said URL;

(f) transmitting a second request for said external resource, said request comprising said state information;

(g) receiving a second response to said second request; and

(h) transmitting information corresponding to said second response to said virtualized computing environment.

2. The method of claim 1, further comprising the step of storing said state information.

3. The method of claim 1, wherein step (b) comprises transmitting a first HTTP request for information corresponding to said external resource.

4. The method of claim 1, wherein step (c) comprises receiving a first HTTP response to said first request, said first response comprising state information.

5. The method of claim 4, wherein step (c) comprises receiving a first HTTP response to said first request, said first response comprising information corresponding to a MIME type corresponding to said external resource.

6. The method of claim 4, wherein step (c) comprises receiving a first HTTP response to said first request, said first response comprising an HTTP cookie.

7. The method of claim 6 wherein step (f) comprises transmitting a second request for said external resource, said request comprising state information comprising an HTTP cookie.

8. The method of claim 1, wherein step (d) comprises transmitting to the client, via a presentation-layer protocol, a file comprising a URL, said URL identifying said proxy and said external resource.

9. The method of claim 8, wherein step (d) comprises transmitting, to the client, via ICA, a file comprising a URL, said URL identifying said proxy and said external resource.

10. The method of claim 8, wherein step (d) comprises transmitting, to the client, via RDP, a file comprising a URL, said URL identifying said proxy and said external resource.

11. The method of claim 1, wherein step (h) comprises transmitting, via an ICA connection, information corresponding to said second response to said virtualized computing environment.

12. A computer system for providing access to a resource requested through a proxy server by a virtualized computing environment, wherein the resource is external to the virtualized computing environment'"'"'s server system, said system comprising:

means for receiving a request from a client identifying an external resource;

means for transmitting a first request for information corresponding to said external resource;

means for receiving a first response to said first request, said first response comprising state information;

means for transmitting to the client a file comprising a URL, said URL identifying said proxy and said external resource;

means for receiving, from a virtualized computing environment, a request for said URL;

means for transmitting a second request for said external resource, said request comprising said state information;

means for receiving a second response to said second request; and

means for transmitting information corresponding to said second response to said virtualized computing environment.

13. The system of claim 12, further comprising means for storing said state information.

14. The system of claim 12, wherein said means for transmitting a first request comprise means for transmitting a first HTTP request for information corresponding to said external resource.

15. The system of claim 12, wherein said means for receiving a first response comprise means for receiving a first HTTP response to said first request, said first response comprising state information.

16. The system of claim 15, wherein said means for receiving a first response comprise means for receiving information corresponding to a MIME type corresponding to said external resource.

17. The system of claim 15, wherein said means for receiving a first response comprise means for receiving a response comprising an HTTP cookie.

18. The system of claim 17 wherein said means for transmitting a second request comprise means for transmitting a second request for said external resource, said request comprising state information comprising an HTTP cookie.

19. The system of claim 12, wherein said means for transmitting to the client a file comprise means for transmitting to the client, via a presentation-layer protocol, a file comprising a URL, said URL identifying said proxy and said external resource.

20. The system of claim 19, wherein said means for transmitting to the client a file comprise means for transmitting, to the client, via ICA, a file comprising a URL, said URL identifying said proxy and said external resource.

21. The system of claim 19, wherein said means for transmitting to the client a file comprise means for transmitting, to the client, via RDP, a file comprising a URL, said URL identifying said proxy and said external resource.

22. The system of claim 12, wherein said means for transmitting information corresponding to said second response comprise means for transmitting, via an ICA connection, information corresponding to said second response to said virtualized computing environment.