US 12,106,136 B2
User device compliance-profile-based access to virtual sessions and select virtual session capabilities
Sisimon Soman, Sunnyvale, CA (US); and Vignesh Raja Jayaraman, Palo Alto, CA (US)
Assigned to Omnissa, LLC, Palo Alto, CA (US)
Filed by VMware, Inc., Palo Alto, CA (US)
Filed on Oct. 20, 2021, as Appl. No. 17/506,069.
Application 17/506,069 is a continuation of application No. 16/523,796, filed on Jul. 26, 2019, granted, now 11,163,584.
Prior Publication US 2022/0100533 A1, Mar. 31, 2022
Int. Cl. G06F 9/455 (2018.01); G06F 9/445 (2018.01); G06F 21/31 (2013.01)
CPC G06F 9/45558 (2013.01) [G06F 9/44505 (2013.01); G06F 21/31 (2013.01); G06F 2009/45587 (2013.01); G06F 2009/45595 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method of providing a virtual session to a user device in response to a request from the user device, the method comprising:
receiving, at a management server of a device management system, operational data from a plurality of user devices, including a first user device, that are managed by the device management system, each of the user devices including a management agent running therein to obtain the operational data and transmit the operational data to the management server;
for each of the user devices, the management server performs the steps of:
determining a compliance sub-profile using the operational data from the user device;
providing, from the management server, the compliance sub-profile to a security service;
requesting a security assessment from the security service based on the compliance sub-profile;
receiving a security sub-profile from the security service, the security sub-profile including the requested security assessment; and
generating a compliance profile including the compliance sub-profile and the security sub-profile; and
providing by the management server to a gateway server that is controlling access to virtual sessions, the compliance profile of the first user device in response to a request from the gateway server for the compliance profile of the first user device, wherein the gateway server permits the first user device to access a virtual session based on determining that the security sub-profile of the compliance profile of the first user device satisfies a minimum access policy.