IP Library Granted Patent US 11,657,170
Granted Patent B2
US 11,657,170 · App. 15/930,284 · Granted May 23, 2023

Secure cross-device direct transient data sharing

Inventors: Chaoting Xuan (Duluth, GA); Lin Lv (Beijing, CN); Suyu Pan (Atlanta, GA); Guoxin Liu (Beijing, CN); Qimin Yao (Atlanta, GA); Yue Zhao (Beijing, CN)
Assignee: VMware, Inc.
G06F21/6218G06F16/2365G06F16/258G06F21/44
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,657,170
App. No.
15/930,284
Granted
May 23, 2023
Kind
B2
Abstract

Systems and methods can allow for secure cross-device sharing of transient data using direct transient data sharing (“DTDS”). A source destination can share data using local DTDS with an agent on a first device. The agent can send the data to a hub server that runs a security control process and data formatting process. The hub server can determine risk scores for the source and destination devices and allow the sharing to occur if a safety threshold is met. Then an agent on the destination device can receive the transient data and use local DTDS to send the data to a destination application.

Claims (39)

1. A method for sharing between user devices using direct transient data sharing (“DTDS”), comprising:

receiving data at a server from a first device, wherein a source application on the first device shares the data with a first agent at the first device using DTDS, and wherein the first agent shares the data with the sever;

identifying, at the server, a second device associated with a same user as the first device;

determining that security requirements are met by at least one of the first device and second device; and

in an instance where the security requirements are met, sending the data to a destination application of the second device,

wherein determining the security requirements are met includes determining risk scores for the first device and second device based on a management status of the source application and destination application, wherein the risk scores are compared against a threshold to determine whether to send the data to the destination application.

2. The method of claim 1 , further comprising:

determining that the second device runs a different operating system (“OS”) compared to the first device; and

translating the data for use with the different OS.

3. The method of claim 2 , wherein the translating includes the server converting an image to a different image format.

4. The method of claim 2 , wherein the translating includes converting the data to a different size.

5. The method of claim 1 , wherein determining the security requirements are met is based on compliance of the first and second devices with an enterprise mobility management (“EMM”) compliance policy, wherein a first agent on the first and a second agent on the second device report compliance statuses to the server.

6. The method of claim 1 , wherein sending the data to the destination application includes sending the data from the server to a second agent on the second device, and wherein the second agent sends the data to the destination application using DTDS.

7. A non-transitory, computer-readable medium containing instructions that, when executed by a hardware-based processor, performs stages for sharing between user devices using direct transient data sharing (“DTDS”), the stages comprising:

receiving data at a server from a first device, wherein a source application on the first device shares the data with a first agent at the first device using DTDS, and wherein the first agent shares the data with the sever;

identifying, at the server, a second device associated with a same user as the first device;

determining that security requirements are met by at least one of the first device and second device;

in an instance where the security requirements are met, sending the data to a destination application of the second device;

determining that the second device runs a different operating system (“OS”) compared to the first device; and

translating the data for use with the different OS.

8. The non-transitory, computer-readable medium of claim 7 , wherein the translating includes the server converting an image to a different image format.

9. The non-transitory, computer-readable medium of claim 7 , wherein the translating includes converting the data to a different size.

10. The non-transitory, computer-readable medium of claim 7 , wherein determining the security requirements are met includes determining risk scores for the first device and second device based on a management status of the source application and destination application, wherein the risk scores are compared against a threshold to determine whether to send the data to the destination application.

11. The non-transitory, computer-readable medium of claim 7 , wherein determining the security requirements are met is based on compliance of the first and second devices with an enterprise mobility management (“EMM”) compliance policy, wherein a first agent on the first and a second agent on the second device report compliance statuses to the server.

12. The non-transitory, computer-readable medium of claim 7 , wherein sending the data to the destination application includes sending the data from the server to a second agent on the second device, and wherein the second agent sends the data to the destination application using DTDS.

13. A system for secure cross-device transient data sharing using direct transient data sharing (“DTDS”), comprising:

a memory storage including a non-transitory, computer-readable medium comprising instructions; and

a computing device including a hardware-based processor that executes the instructions to carry out stages comprising:

receiving data at a server from a first device, wherein a source application on the first device shares the data with a first agent at the first device using DTDS, and wherein the first agent shares the data with the sever;

identifying, at the server, a second device associated with a same user as the first device;

determining that security requirements are met by at least one of the first device and second device; and

in an instance where the security requirements are met, sending the data to a destination application of the second device.

14. The system of claim 13 , the stages further comprising:

determining that the second device runs a different operating system (“OS”) compared to the first device; and

translating the data for use with the different OS.

15. The system of claim 14 , wherein the translating includes the server converting an image to a different image format.

16. The system of claim 14 , wherein the translating includes converting the data to a different size.

17. The system of claim 13 , wherein determining the security requirements are met includes determining risk scores for the first device and second device based on a management status of the source application and destination application, wherein the risk scores are compared against a threshold to determine whether to send the data to the destination application.

18. The system of claim 13 , wherein determining the security requirements are met is based on compliance of the first and second devices with an enterprise mobility management (“EMM”) compliance policy, wherein a first agent on the first and a second agent on the second device report compliance statuses to the server.

Assignments (4)
PATENT ASSIGNMENT Recorded Aug 5, 2024
From: VMWARE LLC
To: OMNISSA, LLC
Reel/Frame 068327/0365 →
SECURITY INTEREST Recorded Jul 3, 2024
From: OMNISSA, LLC
To: UBS AG, STAMFORD BRANCH
Reel/Frame 068118/0004 →
CHANGE OF NAME Recorded Apr 15, 2024
From: VMWARE, INC.
To: VMWARE LLC
Reel/Frame 067102/0395 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 10, 2022
From: XUAN, CHAOTING; LV, LIN; PAN, SUYU; LIU, GUOXIN; YAO, QIMIN; ZHAO, YUE
To: VMWARE, INC.
Reel/Frame 059232/0766 →