US 11,658,907 B2
System and method for validating virtual session requests
Georgy Momchilov, Parkland, FL (US); Hubert Divoux, Parkland, FL (US); Roberto Valdes, Weston, FL (US); Leo C. Singleton, IV, Fort Lauderdale, FL (US); Paul Browne, Weston, FL (US); and Kevin Woodmansee, Lighthouse Point, FL (US)
Filed by CITRIX SYSTEMS, INC., Fort Lauderdale, FL (US)
Filed on Jun. 9, 2022, as Appl. No. 17/806,113.
Application 17/806,113 is a continuation of application No. 16/847,780, filed on Apr. 14, 2020, granted, now 11,362,943.
Claims priority of provisional application 62/850,089, filed on May 20, 2019.
Prior Publication US 2022/0303213 A1, Sep. 22, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 45/586 (2022.01); H04L 45/42 (2022.01); H04L 67/141 (2022.01); H04L 9/40 (2022.01); H04L 67/01 (2022.01)
CPC H04L 45/586 (2013.01) [H04L 45/42 (2013.01); H04L 63/0442 (2013.01); H04L 63/0876 (2013.01); H04L 63/108 (2013.01); H04L 67/01 (2022.05); H04L 67/141 (2013.01)] 16 Claims
OG exemplary drawing
 
1. A method comprising:
storing and updating published resource entitlements for a plurality of client devices at a computing device, wherein the computing device has a public/private key pair associated therewith, and the public key of the computing device is signed by a private key of a Root of Trust (RoT);
using a plurality of virtual delivery appliances to:
receive connection requests from the client devices, the connection requests including connection leases having associated resource entitlements the client devices are respectively permitted to access, and
request validation of the connection leases from the computing device;
at the computing device, responsive to validation requests from the virtual delivery appliances, comparing the connection leases to the updated published resource entitlements and validating the virtual session requests based thereon; and
at the virtual delivery appliances, providing the client devices with access to virtual sessions corresponding to the published resource entitlements responsive to the virtual session request validations from the computing device;
at the computing device, providing its signed public key along with virtual session request validations to the virtual delivery appliances.