Systems and methods for continuing an operation interrupted from a reconnection between a client and server

• US 7,340,772 B2
• Filed: 06/20/2005
• Issued: 03/04/2008
• Est. Priority Date: 06/13/2001
• Status: Expired due to Term

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Panasyuk, Anatoliy, Treder, Terry, Stone, David Sean, Pedersen, Bradley Jay, Kramer, Andre
• Primary Examiner(s): POLTORAK, PIOTR
• Assistant Examiner(s): POLTORAK, PIOTR
• Application Number:
  US11/157,315
• Publication Number:
  US 20050273513A1
• Time in Patent Office: 988 Days
• Field of Search: 726/10, 726/12, 726/14, 726/15, 726/9, 726/8, 726/7, 726/6, 726/27
• US Class Current: 726/15
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

The invention relates to methods and systems for reconnecting a client and providing user authentication across a reliable and persistent communication session. A first protocol that encapsulates a plurality of secondary protocols is used to communicate over a network. A first protocol service, using the first protocol, provides session persistence and a reliable connection between a client and a server. An operation may be executed or transacted between the client and the server. When there is a disruption in the network connection between the client and the server that interrupts the operation, the connection is automatically reestablished and the operation is continued.

Claims

1. A method for continuing an interrupted operation between a client and a server, the method comprising the steps of:

(a) providing, by a first protocol service, a first connection between a client and the first protocol service, and a second connection between the first protocol service and a server;

(b) initiating, by one of the client or the server, an operation between the client and the server via the first connection and the second connection, the operation comprising one or more network communications via a second protocol between the client and the server;

(c) communicating, by the client, to the first protocol service via the second protocol encapsulated in a first protocol, and the first protocol service communicating to the server using the second protocol;

(d) detecting, by the first protocol service, a disruption in the first connection that interrupts the operation prior to the last network communication of the operation being transacted between the client and the server;

(e) while maintaining the second connection and a state of the operation, re-establishing, by one of the client or the first protocol service, the disrupted first connection via the first protocol; and

(f) continuing, by one of the client or the first protocol service, to complete the operation via the second protocol.

2. The method of claim 1, further comprising communicating, by the client, to the server using a network identifier assigned by a computing device to the client, and the server communicating to the client using the network identifier.

3. The method of claim 1, comprising the first protocol service continuing to complete the operation by transmitting one or more second protocol packets to one of the client or the server.

4. The method of claim 2, wherein the computing device comprises one of the server, a network device, or a Dynamic Host Configuration Protocol server.

5. The method of claim 1, comprising maintaining, by at least one of the first protocol service or the server, the second connection via at least the second protocol used for the user session.

6. The method of claim 1, wherein the second protocol comprises a remote display protocol.

7. The method of claim 6, wherein the remote display protocol comprises one of an Independent Computing Architecture protocol or a Remote Desktop Protocol.

8. The method of claim 6, comprising the server executing an application program on behalf of the client, and transmitting display output generated by the application program to the client.

9. The method of claim 1, comprising encrypting the one or more network communications via the second protocol.

10. The method of claim 1, wherein step (e) further comprises re-establishing the disrupted first connection by using a ticket associated with the client.

11. The method of claim 10, wherein step (e) further comprises authenticating the client via the ticket to re-establish the disrupted first connection.

12. The method of claim 1, wherein the first protocol comprises an application-layer transport protocol.

13. The method of claim 1, wherein the first protocol service comprises one of a tunneling or an application-level proxy.

14. The method of claim 1, comprising re-establishing the disrupted first connection transparently to at least one of the following:

a transport driver interface and at least a presentation layer of a network communication stack,

the second protocol,

a user of the client, and

an application executing on the client.

15. The method of claim 1, comprising re-establishing the disrupted first connection without one of manipulating a transport driver interface or intercepting a communication at the transport driver interface.

16. The method of claim 1, comprising re-establishing the disrupted first connection transparently to an application of the client by a client agent corresponding to the application.

17. The method of claim 1, wherein the client is a non-mobile client.

18. A system for completing an interrupted operation between a client and a server, the system comprising:

a means for providing a first connection between a client and the first protocol service, and a second connection between the first protocol service and a server;

a means for initiating by one of the client or the server an operation between the client and the server via the first connection and the second connection, the operation comprising one or more network communications via a second protocol between the client and the server;

a means for communicating, by the client, to the first protocol service via the second protocol encapsulated in a first protocol, and the first protocol service communicating to the server using the second protocol;

a means for detecting a disruption in the first connection that interrupts the operation prior to the last network communication of the operation being transacted between the client and the server;

a means for re-establishing the disrupted first connection via the first protocol while maintaining the second connection and a state of the operation; and

a means for continuing to complete the operation via the second protocol.

19. The system of claim 18, comprising a means for communicating, by the client, to the server using a network identifier assigned by a computing device to the client, and the server communicating to the client using the network identifier.

20. The system of claim 18, comprising a means for the first protocol service to continue to complete the operation by transmitting one or more second protocol packets to one of the client or the server.

21. The system of claim 19, wherein the computing device comprises one of the sever, a network device, or a Dynamic Host Configuration Protocol server.

22. The system of claim 18, comprising a means for maintaining the second connection via at least the second protocol used for the user session.

23. The system of claim 18, wherein the second protocol comprises a remote display protocol.

24. The system of claim 23, wherein the remote display protocol comprises one of an Independent Computing Architecture protocol or a Remote Desktop Protocol.

25. The system of claim 18, comprising a means for the server to execute an application program on behalf of the client, and transmit display output generated by the application program to the client.

26. The system of claim 18, comprising a means for encrypting the one or more network communications via the second protocol.

27. The system of claim 18, comprising a means for re-establishing the disrupted first connection by using a ticket associated with the client.

28. The system of claim 27, comprising a means for authenticating the client via the ticket to re-establish the disrupted first connection.

29. The system of claim 18, wherein the first protocol comprises an application-layer transport protocol.

30. The system of claim 18, wherein the first protocol service comprises one of a tunneling or an application-level proxy.

31. The system of claim 18, comprising a means for re-establishing the disrupted first connection transparently to at least one of the following:

a transport driver interface and at least a presentation layer of a network communication stack,

the second protocol,

a user of the client, and

an application executing on the client.

32. The system of claim 18, comprising a means for re-establishing the disrupted first connection without one of manipulating a transport driver interface or intercepting a communication at the transport driver interface.

33. The system of claim 18, comprising a means for re-establishing the disrupted first connection transparently to an application of the client by a client agent corresponding to the application.

34. The system of claim 18, wherein the client is a non-mobile client.