Seamless integration of multiple computing environments

• US 8,606,895 B2
• Filed: 01/17/2007
• Issued: 12/10/2013
• Est. Priority Date: 01/17/2006
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Kidaro (Israel) Ltd.
• Inventors: Kohavi, Ran, Oelgiesser, Ran, Levy, Yizhak
• Primary Examiner(s): BAYARD, DJENANE M
• Application Number:
  US12/087,857
• Publication Number:
  US 20090328033A1
• Time in Patent Office: 2,519 Days
• Field of Search: 709/223, 709/224
• US Class Current: 709/223
• CPC Class Codes: G06F 2209/508 Monitor
• CPC Class Codes: G06F 9/5027 the resource being a machine, e.g. CPUs, Servers, Terminals

Abstract

A unification system for integrating multiple computing environments, which are available for simultaneous use by a single user, into a base environment includes a unification supervisor and a plurality of agents, where each agent is associated with a respective computing environment. The unification supervisor monitors information received from the agents regarding the multiple computing environments, and performs centralized direction of the computing environments in accordance with the received information. The centralized direction serves to incorporate the other computing environments into the base environment, and may be guided by policies designed to provide the user with a unified environment. The unification supervisor also issues instructions to the various agents. Each of the agents provides information regarding a respective computing environment to the unification supervisor, and may also manage the respective computing environment as directed by the unification supervisor. The base environment is typically the user'"'"'s endpoint work environment.

Claims

1. A system integrating a first, second, and third computing environment, the first, second, and third computing environments each comprising an operating system, the first, second, and third computing environments being available for simultaneous use by a single user, and the first computing environment supervising unification with the second and third computing environments, comprising:

a computing device comprising a memory, the memory bearing computer-readable instructions that, when executed on the computing device, cause the computing device to at least;

receive, by the second computing environment, user input indicative of changing a setting in the second computing environment;

change the setting in the second computing environment in response to the user input;

send, by the second computing environment, an indication to the first computing environment to change the setting in the first computing environment in response to changing the setting in the second computing environment;

change, by the first computing environment, the setting in the first computing environment in response to receiving the indication from the second computing environment and in response to determining that two-way setting synchronization is set for the second computing environment;

send, by the first computing environment, an indication to the third computing environment to change the setting in the third computing environment upon the creation of the third computing environment and in response to changing the setting in the first computing environment;

change, by the third computing environment, the setting in the third computing environment in response to receiving the indication to the third computing environment;

send, by the first computing environment, an indication to the second computing environment to change a second setting in response to changing the second setting in the first computing environment;

change, by the second computing environment, the setting in the second computing environment in response to receiving the indication to change the second setting;

receive, by the first computing environment, an indication to change a third setting from the third computing environment;

determine, by the first computing environment, not to make the third setting change in response to determining that one-way setting synchronization is set for the third computing environment.

2. The system of claim 1, wherein the second computing environment comprises:

a virtual machine.

3. The system of claim 1, wherein the first computing environment comprises a user host environment and the second computing environment comprises:

a virtual environment running on top of the user host environment.

4. The system of claim 1, wherein at least one of said computing environments comprises a remote desktop.

5. The system of claim 1, wherein the first computing environment executes a first operating system, and the second computing environment executes a second operating system, the first operating system being a different version or type than the second operating system.

6. The system of claim 1, wherein the second computing environment comprises:

an agent that receives the indication from the first computing environment, and changes the setting in the second computing environment in response to receiving the indication.

7. The system of claim 1, wherein the memory further bears computer-readable instructions that, when executed on the computing device, cause the computing device to at least:

receive, by the first computing environment, a request from the third computing environment to access data of the second computing environment;

tag the data with tag comprising an identifier of a computing environment on which the data was created or last modified, or an external source of the data;

determine, by the first computing environment, based on the identifier of the second computing environment, to allow the third computer to access the data; and

allow, by the first computing environment, the third computing environment to access the data.

8. The system of claim 1, wherein the memory further bears computer-readable instructions that, when executed on the computing device, cause the computing device to at least:

incorporate, by the first computing environment, a second file system of the second computing environment into a first file system of the first computing environment;

receive, by the first computing environment, a request from the third computing environment to access a file of the first file system;

determine, by the first computing environment, that the requested file is a file of the second file system; and

permit, by the first computing environment, the third computing environment to access the requested file.

9. The system of claim 8, wherein the computer-readable instructions that, when executed on the computing device, cause the computing device to at least permit, by the first computing environment, the third computing environment to read or write the requested file further cause the computing device to at least:

determine, by the first computing environment, that the third computing environment has permission to access the requested file.

10. The system of claim 9, wherein the computer-readable instructions that, when executed on the computing device, cause the computing device to at least permit, by the first computing environment, the third computing environment to read or write the requested file further cause the computing device to at least:

convert, by the first computing environment;

the requested file from a first file type to a second file type; and

permit, by the first computing environment, the third computing environment to access the requested file in the second file type.

11. The system of claim 9, wherein the computer-readable instructions that, when executed on the computing device, cause the computing device to at least determine, by the first computing environment, that the third computing environment has permission to access the requested file further cause the computing device to at least:

determine that the third computing environment has permission to access the requested file based on a file type of the requested file, a folder of the requested file, a drive type of the requested file, a path of the requested file, a user of the requested file, an environment the requested file was created in, an environment the requested file was last modified in, or a tag of the requested file.

12. The system of claim 1, wherein the memory further bears computer-readable instructions that, when executed on the computing device, cause the computing device to at least:

receive, by the first computing environment, second user input indicative of an operation;

determine, by the first computing environment, to delegate the operation to the second computing environment; and

send, by the first computing environment, a second indication to the second computing environment to perform the operation, such that the second computing environment performs the operation in response to receiving the second indication.

13. The system of claim 12, wherein the computer-readable instructions that, when executed on the computing device, cause the computing device to at least determine, by the first computing environment, to delegate the operation to the second computing environment further cause the computing device to at least:

determine to delegate the operation in accordance with an access policy.

14. The system of claim 12, wherein the memory further bears computer-readable instructions that, when executed on the computing device, cause the computing device to at least:

receive, by the first computing environment, third user input indicative of a second operation to be performed in the second computing environment;

determine, by the first computing environment, that the second computing environment is unsuitable to perform the second operation; and

prevent, by the first computing environment, the second operation from being performed in the second computing environment.

15. The system of claim 12, wherein the computer-readable instructions that, when executed on the computing device, cause the computing device to at least determine, by the first computing environment, to delegate the operation to the second computing environment further cause the computing device to at least:

determine to delegate the operation based on a file name of a file corresponding to the operation, a file extension of a file corresponding to the operation, a file content of a file corresponding to the operation, a file owner of a file corresponding to the operation, a drive type of a file corresponding to the operation, a file type of a file corresponding to the operation, an access permissions of a file corresponding to the operation, or a tag of a file corresponding to the operation.

16. The system of claim 12, wherein the operation comprises:

a web access operation; and

wherein the computer-readable instructions that, when executed on the computing device, cause the computing device to at least determine, by the first computing environment, to delegate the operation to the second computing environment further cause the computing device to at least;

determine to delegate the operation based on a domain, an address format, a protocol, an access permissions, a tag, or a communication characteristic of the operation.

17. The system of claim 1, wherein the memory further bears computer-readable instructions that, when executed on the computing device, cause the computing device to at least:

receive, by the first computing environment, second user input indicative of transferring data from the second computing environment to the third computing environment;

determine, by the first computing environment, to transfer the data in accordance with a data transfer policy; and

transfer, by the first computing environment, the data from the second computing environment to the third computing environment in accordance with the data transfer policy.

18. The system of claim 17, wherein the computer-readable instructions that, when executed on the computing device, cause the computing device to at least transfer, by the first computing environment, the data from the second computing environment to the third computing environment in accordance with the data transfer policy further cause the computing device to at least:

transform the data from a first data type to a second data type before transferring the data.

19. The system of claim 17, wherein the computer-readable instructions that, when executed on the computing device, cause the computing device to at least transfer, by the first computing environment, the data from the second computing environment to the third computing environment in accordance with the data transfer policy further cause the computing device to at least:

perform a copy operation, a paste operation, a drag and drop operation, a printing operation, or a user settings synchronization.

20. The system of claim 17, further comprising:

transforming the data from a first data type to a second data type before transferring the data.

21. The system of claim 17, wherein the memory further bears computer-readable instructions that, when executed on the computing device, cause the computing device to at least:

receive, by the first computing environment, third user input indicative of transferring second data from the second computing environment to the third computing environment;

determine, by the first computing environment, to block transferring the second data in accordance with the data transfer policy; and

block, by the first computing environment, transferring the second data in accordance with the data transfer policy.

22. The system of claim 1, wherein the computer-readable instructions that, when executed on the computing device, cause the computing device to at least send, by the first computing environment, an indication to change the setting in the second computing environment, such that the second computing environment changes the setting in the second computing environment in response to receiving the indication further cause the computing device to at least:

send an indication to change the setting on a per-environment basis.

23. The system of claim 1, wherein the computer-readable instructions that, when executed on the computing device, cause the computing device to at least send, by the first computing environment, an indication to change the setting in the second computing environment, such that the second computing environment changes the setting in the second computing environment in response to receiving the indication further cause the computing device to at least:

send an indication to change the setting on a per-setting basis.

24. The system of claim 1, wherein the memory further bears computer-readable instructions that, when executed on the computing device, cause the computing device to at least:

receive, at the base computing environment, second user input at an application icon of the first computing environment indicative of executing an application corresponding to the application icon;

send, by the base computing environment, an indication to the second computing environment indicative of executing the application; and

execute, the second computing environment, the application.

25. The system of claim 1, wherein the memory further bears computer-readable instructions that, when executed on the computing device, cause the computing device to at least:

receive, by the base computing environment, an indication of a second desktop of the second computing environment; and

display, by the base computing environment, the second desktop incorporated with a first desktop of the first computing environment.

26. The system of claim 25, wherein the computer-readable instructions that, when executed on the computing device, cause the computing device to at least display, by the base computing environment, the second desktop incorporated with a first desktop of the first computing environment further cause the computing device to at least:

combine a first active window of the first desktop and a second active window of the second desktop into an integrated visual image.

27. The system of claim 26, wherein the computer-readable instructions that, when executed on the computing device, cause the computing device to at least combine a first active window of the first desktop and a second active window of the second desktop into an integrated visual image further cause the computing device to at least:

combine the first active window and the second active window out of band.

28. The system of claim 25, wherein the memory further bears computer-readable instructions that, when executed on the computing device, cause the computing device to at least:

combine a second taskbar of the second desktop into a first taskbar of the first desktop.

29. The system of claim 25, wherein the computer-readable instructions that, when executed on the computing device, cause the computing device to at least display, by the base computing environment, the second desktop incorporated with a first desktop of the first computing environment image further cause the computing device to at least:

display a tray icon of the first desktop and a tray icon of the second desktop in a tray icons area of the first computing environment.

30. A method for integrating a first, second, and third computing environment, the first, second, and third computing environments each comprising an operating system, the first, second, and third computing environments being available for simultaneous use by a single user, and the first computing environment supervising unification with the second and third computing environments, comprising:

receiving, by the first computing environment, user input indicative of changing a setting in the first computing environment;

changing the setting in the first computing environment in response to the user input;

sending, by the first computing environment, an indication to the second computing environment to change the setting in the second computing environment in response to changing the setting in the first computing environment;

changing, by the second computing environment, the setting in the second computing environment in response to receiving the indication;

sending, by the first computing environment, an indication to the third computing environment to change the setting in the third computing environment in response to determining that the third computing environment has been created, and after changing the setting in the first computing environment;

changing, by the third computing environment, the setting in the third computing environment in response to receiving the indication;

sending, by the second computing environment, an indication to the first computing environment to change a second setting in response to changing the second setting in the second computing environment;

changing, by the first computing environment, the setting in the first computing environment in response to receiving the indication to change the second setting and in response to determining that two-way setting synchronization is set for the second computing environment;

receiving, by the first computing environment, an indication to change a third setting from the third computing environment; and

determining, by the first computing environment, not to make the third setting change in response to determining that one-way synchronization is set for the third computing environment.

31. The method of claim 30, wherein the second computing environment comprises:

a virtual machine.

32. The method of claim 30, wherein the first computing environment comprises a user host environment and the second computing environment comprises:

a virtual environment running on top of the user host environment.

33. The method of claim 30, further comprising:

incorporating, by the first computing environment, a second file system of the second computing environment into a first file system of the first computing environment;

receiving, by the first computing environment, a request from the third computing environment to access a file of the first file system;

determining, by the first computing environment, that the requested file is a file of the second file system; and

permitting, by the first computing environment, the third computing environment to access the requested file.

34. The method of claim 30, further comprising:

receiving, by the first computing environment, second user input indicative of an operation;

determining, by the first computing environment, to delegate the operation to the second computing environment; and

sending, by the first computing environment, a second indication to the second computing environment to perform the operation, such that the second computing environment performs the operation in response to receiving the second indication.

35. The method of claim 30, further comprising:

receiving, by the first computing environment, second user input indicative of transferring data from the second computing environment to a third computing environment;

determining, by the first computing environment, to transfer the data in accordance with a data transfer policy; and

transferring, by the first computing environment, the data from the second computing environment to the third computing environment in accordance with the data transfer policy.

36. The method of claim 30, further comprising:

receiving, at the base computing environment, second user input at an application icon of the first computing environment indicative of executing an application corresponding to the application icon;

sending, by the base computing environment, an indication to the second computing environment indicative of executing the application; and

executing, the second computing environment, the application.

37. The method of claim 30, further comprising:

receiving, by the base computing environment, an indication of a second desktop of the second computing environment; and

displaying, by the base computing environment, the second desktop incorporated with a first desktop of the first computing environment.

38. A computer-readable storage medium excluding signals for integrating a first, second, and third computing environment, the first, second, and third computing environments each comprising an operating system, the first, second, and third computing environments being available for simultaneous use by a single user, and the first computing environment supervising unification with the second and third computing environments, bearing computer-readable instructions that, upon execution by a computer, cause the computer to perform operations comprising:

receiving, by the first computing environment, user input indicative of changing a setting in the first computing environment;

changing the setting in the first computing environment in response to the user input; and

sending, by the first computing environment, an indication to the second computing environment to change the setting in the second computing environment in response to changing the setting in the first computing environment;

changing, by the second computing environment, the setting in the second computing environment in response to receiving the indication;

sending, by the first computing environment, an indication to the third computing environment to change the setting in the third computing environment in response to determining that the third computing environment has been created after changing the setting in the first computing environment;

changing, by the third computing environment, the setting in the third computing environment in response to receiving the indication;

sending, by the second computing environment, an indication to the first computing environment to change a second setting in response to changing the second setting in the second computing environment;

changing, by the first computing environment, the setting in the first computing environment in response to receiving the indication to change the second setting and in response to determining that two-way setting synchronization is set for the second computing environment;

receiving, by the first computing environment, an indication to change a third setting from the third computing environment; and

determining, by the first computing environment, not to make the third setting change in response to determining that one-way synchronization is set for the third computing environment.