Granted Patent B2

US 12,432,264 · App. 18/387,611 · Granted Sep 30, 2025

Inventors: Ramani Panchapakesan (Bangalore, IN); Pradeep B H Pai (Bangalore, IN); Usha Kamath (Bangalore, IN); Ben Joseph (Bangalore, IN); Sharun Samuel (Bangalore, IN)

Assignee: Omnissa, LLC

H04L65/403G06F21/44H04L67/141G06F8/61

Abstract

Claims (48)

1. A method for authentication within an application workspace system, the method comprising:

authenticating a first computing device of a user to the application workspace system at a point of access;

determining an application family assigned to the user, wherein the application family is associated with a plurality of application instances, wherein the plurality of application instances include at least a locally installed application instance on the first computing device and a remotely accessed application instance executing on a remote server;

resolving a set of entitlements associated with the user to select, based on the point of access, a specific application instance from the plurality of application instances for the application family;

providing access to the selected specific application instance on the first computing device;

receiving, from the first computing device, a token at the application workspace system, wherein the first computing device is paired with a second computing device, the first computing device and the second computing device both being configured to communicate with the application workspace system;

providing the token to the second computing device from the application workspace system, wherein the second computing device also receives application information associated with the selected specific application instance, the application information being specified by the first computing device;

authenticating the second computing device with the application workspace system using the token; and

providing the second computing device with access to the selected specific application instance corresponding to the application information.

2. The method of claim 1 , wherein the first computing device provides the token to the application workspace system in an instance where the pairing occurs, and wherein the first computing device sends the application information to the second computing device after the second computing device receives the token.

3. The method of claim 1 , wherein the second computing device is a dongle connected to a display.

4. The method of claim 1 , wherein the application information comprises at least two of content information, content server location information, application server information, and a file name.

5. The method of claim 1 , wherein providing the application information from the first computing device to the second computing device comprises communicating information from the first computing device to the second computing device that the second computing device uses to receive the token.

6. The method of claim 1 , further comprising sending content to the second computing device for display based on commands originating at the first computing device.

7. A system for authentication within an application workspace system, comprising:

at least one physical non-transitory storage medium that contains instructions; and

at least one processor that executes the instructions to perform stages comprising:

authenticating a first computing device of a user to the application workspace system at a point of access;

determining an application family assigned to the user, wherein the application family is associated with a plurality of application instances, wherein the plurality of application instances include at least a locally installed application instance on the first computing device and a remotely accessed application instance executing on a remote server;

resolving a set of entitlements associated with the user to select, based on the point of access, a specific application instance from the plurality of application instances for the application family;

providing access to the selected specific application instance on the first computing device;

receiving, from the first computing device, a token at the application workspace system, wherein the first computing device is paired with a second computing device, the first computing device and the second computing device both being configured to communicate with the application workspace system;

providing the token to the second computing device from the application workspace system, wherein the second computing device also receives application information associated with the selected specific application instance, the application information being specified by the first computing device;

authenticating the second computing device with the application workspace system using the token;

providing the second computing device with access to the selected specific application instance corresponding to the application information.

8. The system of claim 7 , wherein the first computing device provides the token to the application workspace system in an instance where the pairing occurs, and wherein the first computing device sends the application information to the second computing device after the second computing device receives the token.

9. The system of claim 7 , wherein the second computing device is a dongle connected to a display.

10. The system of claim 7 , wherein the application information comprises at least two of content information, content server location information, application server information, and a file name.

11. The system of claim 7 , wherein providing the application information from the first computing device to the second computing device comprises communicating information from the first computing device to the second computing device that the second computing device uses to receive the token.

12. The system of claim 7 , the stages further comprising sending content to the second computing device for display based on commands originating at the first computing device.

13. A non-transitory, computer-readable medium comprising instructions that, when executed by a processor, causes the processor to carry out stages for authentication within an application workspace system, the stages comprising:

authenticating a first computing device of a user to the application workspace system at a point of access;

determining an application family assigned to the user, wherein the application family is associated with a plurality of application instances, wherein the plurality of application instances include at least a locally installed application instance on the first computing device and a remotely accessed application instance executing on a remote server;

resolving a set of entitlements associated with the user to select, based on the point of access, a specific application instance from the plurality of application instances for the application family;

providing access to the selected specific application instance on the first computing device;

receiving, from the first computing device, a token at the application workspace system, wherein the first computing device is paired with a second computing device, the first computing device and the second computing device both being configured to communicate with the application workspace system;

providing the token to the second computing device from the application workspace system, wherein the second computing device also receives application information associated with the selected specific application instance, the application information being specified by the first computing device;

authenticating the second computing device with the application workspace system using the token;

providing the second computing device with access to the selected specific application instance corresponding to the application information.

14. The non-transitory, computer-readable medium of claim 13 , wherein the first computing device provides the token to the application workspace system in an instance where the pairing occurs, and wherein the first computing device sends the application information to the second computing device after the second computing device receives the token.

15. The non-transitory, computer-readable medium of claim 13 , wherein the second computing device is a dongle connected to a display.

16. The non-transitory, computer-readable medium of claim 13 , wherein the application information comprises at least two of content information, content server location information, application server information, and a file name.

17. The non-transitory, computer-readable medium of claim 13 , wherein providing the application information from the first computing device to the second computing device comprises communicating information from the first computing device to the second computing device that the second computing device uses to receive the token.

18. The non-transitory, computer-readable medium of claim 13 , the stages further comprising sending content to the second computing device for display based on commands originating at the first computing device.

19. The method of claim 1 , further comprising:

detecting that the first computing device is no longer paired with the second computing device; and

revoking the token on the second computing device and terminating the access to the specific application instance for the second computing device.

20. The method of claim 1 , wherein resolving the set of entitlements includes retrieving and evaluating a plurality of rules from a configuration repository of the application workspace system based on information comprising one or more of: a location of the first computing device, a network address of the first computing device, a device type of the first computing device, and a tuple stored on the first computing device.

Assignments (2)

Priority Claims (1)

Continuity (3)

References Cited (95)