Systems and methods for maintaining a session between a client and host service

• US 7,502,726 B2
• Filed: 06/20/2005
• Issued: 03/10/2009
• Est. Priority Date: 06/13/2001
• Status: Expired due to Fees

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Stone, David Sean, Panasyuk, Anatoliy, Treder, Terry, Pedersen, Bradley Jay, Kramer, Andre
• Primary Examiner(s): PHAN, THAI Q
• Application Number:
  US11/158,156
• Publication Number:
  US 20050246445A1
• Time in Patent Office: 1,359 Days
• Field of Search: 703/22, 703/27, 709224-227, 726/15, 726/7, 726/8
• US Class Current: 703/22
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

The invention relates to methods and systems for reconnecting a client and providing user authentication across a reliable and persistent communication session. A first protocol that encapsulates a plurality of secondary protocols is used to communicate over a network. A first protocol service, using the first protocol, provides session persistence and a reliable connection between a client and a host service. When there is a disruption in the network connection between a client and a host service, the connection is reestablished and the user'"'"'s session with the host service is maintained through the connection being reestablished.

Claims

1. A method for maintaining a session between a client and a host service, the method comprising the steps of:

(a) providing, by a first protocol service, a first connection between a client and the first protocol service, and a second connection between the first protocol service and a first server;

(b) establishing a user session via a second protocol between an application of the client and a host service via the first connection and the second connection;

(c) communicating, by the client, to the first protocol service via the second protocol encapsulated in a first protocol, and the first protocol service communicating to the host service using the second protocol;

(d) detecting, by the first protocol service, a disruption in the first connection interrupting the user session;

(e) while maintaining the second connection and user session related information, re-establishing, by at least one of the client or the first protocol service, the disrupted first connection via the first protocol; and

(f) continuing the user session between the application of the client and the host service via the second protocol.

2. The method of claim 1, comprising communicating, by the client, to the host service using a network identifier assigned by a computing device to the client, and the host service communicating to the client using the network identifier.

3. The method of claim 2, wherein the computing device comprises one of a server, a network device, or a Dynamic Host Configuration Protocol server.

4. The method of claim 1, comprising re-establishing, by at least one of the client or the first protocol service, the disrupted first connection without one of re-opening or closing the user session associated with the second protocol.

5. The method of claim 1, comprising maintaining, by at least one of the first protocol service or the server, the second connection via the second protocol used by the application for the user session.

6. The method of claim 1, comprising re-establishing the first connection using the same protocol used by the application of the client to communicate with one of the first protocol service or the server.

7. The method of claim 1, wherein the second protocol comprises a remote display protocol.

8. The method of claim 7, wherein the remote display protocol comprises one of the Independent Computing Architecture protocol or the Remote Desktop Protocol.

9. The method of claim 1, comprising the host service executing an application program on behalf of the client, and transmitting display output generated by the application program to the client.

10. The method of claim 1, comprising encrypting communications via the second protocol.

11. The method of claim 1, wherein step (e) further comprises re-establishing the user session by using a ticket associated with the client.

12. The method of claim 11, wherein step (e) further comprises authenticating the client via the ticket to re-establish the disrupted first connection.

13. The method of claim 1, wherein the first protocol comprises an application-layer transport protocol.

14. The method of claim 1, wherein the first protocol service comprises one of a tunneling or an application-level proxy.

15. The method of claim 1, comprising re-establishing the disrupted first connection transparently to at least one of the following:

a transport driver interface and at least a presentation layer of a network communication stack,

the second protocol,

a user of the client, and

an application executing on the client.

16. The method of claim 1, comprising re-establishing the disrupted first connection without one of manipulating a transport driver interface, or intercepting a communication at the transport driver interface.

17. The method of claim 1, comprising re-establishing the disrupted first connection transparently to the application of the client by a client agent corresponding to the application.

18. The method of claim 1, wherein the client is a non-mobile client.

19. A system for maintaining a session between a client and a host service, the system comprising:

a means for providing a first connection between a client and a first protocol service, and a second connection between the first protocol service and a first server;

a means for establishing a user session via a second protocol between an application of the client and a host service via the first connection and the second connection;

a means for communicating, by the client, to the first protocol service via the second protocol encapsulated in a first protocol, and the first protocol service communicating to the host service using the second protocol;

means for detecting a disruption in the first connection interrupting the user session;

means for re-establishing the disrupted first connection via the first protocol while maintaining the second connection and user session related information; and

means for continuing the user session between the application of the client and the host service via the second protocol.

20. The system of claim 19, comprising a means for communicating, by the client, to the host service using a network identifier assigned by a computing device to the client, and the host service communicating to the client using the network identifier.

21. The system of claim 20, wherein the computing device comprises one of a server, a network device, or a Dynamic Host Configuration Protocol server.

22. The system of claim 19, comprising a means for re-establishing the disrupted first connection without one of re-opening or closing the user session associated with the second protocol.

23. The system of claim 19, comprising a means for maintaining, by at least one of the first protocol service or the server, the second connection via the second protocol used by the application for the user session.

24. The system of claim 19, comprising a means for re-establishing the first connection using the same protocol used by the application of the client to communicate with one of the first protocol service or the server.

25. The system of claim 19, wherein the second protocol comprises a remote display protocol.

26. The system of claim 25, wherein the remote display protocol comprises one of the Independent Computing Architecture protocol or the Remote Desktop Protocol.

27. The system of claim 19, comprising a means for the host service to execute an application program on behalf of the client, and transmit display output generated by the application program to the client.

28. The system of claim 19, comprising a means for encrypting communications via the second protocol.

29. The system of claim 19, comprising a means for re-establishing the user session by using a ticket associated with the client.

30. The system of claim 29, comprising a means for authenticating the client via the ticket to re-establish the disrupted first connection.

31. The system of claim 19, wherein the first protocol comprises an application-layer transport protocol.

32. The system of claim 19, wherein the first protocol service comprises one of a tunneling or an application-level proxy.

33. The system of claim 19, comprising a means for re-establishing the disrupted first connection transparently to at least one of the following:

a transport driver interface and at least a presentation layer of a network communication stack,

the second protocol,

a user of the client, and

an application executing on the client.

34. The system of claim 19, comprising a means for re-establishing the disrupted first connection without one of manipulating a transport driver interface, or intercepting a communication at the transport driver interface.

35. The system of claim 19, comprising a means for re-establishing the disrupted first connection transparently to the application of the client by a client agent corresponding to the application.

36. The system of claim 19, wherein the client is a non-mobile client.