Reverse seamless integration between local and remote computing environments
Methods and systems for transparent user interface integration between remote (“published”) applications and their local counterparts are described, providing a seamless, unified user experience, and allowing integration of a start menu, dock, taskbar, desktop shortcuts, windows, window and application switching, system tray elements, client-to-host and host-to-client file type association, URL redirection, browser cookie redirection, token redirection, status message interception and redirection, and other elements. These methods and systems further enhance theme-integration between a client and remote desktop or virtual machine by remoting all UI elements to a recipient for generation, including text controls, buttons, progress bars, radio buttons, list boxes, or other elements; presenting them with the receiver's product and OS-specific UI; and returning status back to the sender. This may achieve a more unified and transparent UI integration. Furthermore, storage resources, printer resources, and identity-based resources may be integrated using a reverse seamless user interface.
1. A method comprising:
establishing a connection between a client device and a remote host, said remote host providing access to one or more applications executing remotely on the remote host, wherein said client device is configured with one or more resources based on a first user identity, and said remote host is configured with one or more resources based on a second user identity;
sending, by the client device, first information to the remote host about a first application executing on the client device;
rendering within a user interface associated with the remote host, a first user interface component based on the first application, said first user interface component being rendered with a consistent appearance as a user interface associated with the remote host; and
when the first application meets one or more predefined criteria, providing the first application with access to the one or more resources based on the second user identity.
2. The method of claim 1 , wherein the predefined criteria comprises validating the second user identity to the client device.
3. The method of claim 2 , wherein validating the second user identity to the client device comprises:
authenticating the second identity to the remote host;
the remote host sending, to a third party, a request for an authentication token for the second user identity;
the remote host sending the authentication token to the client device;
the client device sending the authentication token to the third party; and
the client device receiving information from the third party allowing the client device to use the second user identity.
4. The method of claim 3 , wherein the third party comprises a security support provider interface (SSPI).
5. The method of claim 3 , wherein the remote host and client device send one or more validation messages via a Kerberos protocol.
6. The method of claim 3 , wherein client device actions are performed by an ICA client.
7. A method comprising:
establishing a connection between a client device and a remote host, said remote host providing access to one or more applications executing remotely on the remote host, wherein said client device is configured with access to a first set of one or more resources, and said remote host is configured with access to a second set of one or more resources;
sending, by the client device, first information to the remote host about a first application executing on the client device;
rendering within a user interface associated with the remote host, a first user interface component based on the first application, said first user interface component being rendered with a consistent appearance as a user interface associated with the remote host; and
when the first application meets one or more predefined criteria, providing the first application with access to the second set of one or more resources.
8. The method of claim 7 , wherein each resource of the second set of one or more resources comprises a storage resource.
9. The method of claim 8 , wherein providing the first application with access to the second set of one or more storage resources comprises:
enumerating the second set of one or more storage resources;
mapping each of the second set of one or more storage resources to a locally accessible storage identifier of the client device; and
redirecting I/O requests for each of the second set of one or more storage resources based on the corresponding mapped locally accessible storage identifier.
10. The method of claim 9 , wherein the enumeration is performed by a network provider.
11. The method of claim 9 , wherein the redirecting is performed by a device driver.
12. The method of claim 9 , wherein the mapping is performed by one of a network provider and a device driver.
13. The method of claim 9 , wherein the mapping and redirection are performed by a server message block (SMB) application layer protocol.
14. The method of claim 7 , wherein each resource of the second set of one or more resources comprises a printer resource.
15. The method of claim 14 , wherein providing the first application with access to the second set of one or more printing resources comprises:
configuring the client device with a network print provider, a print service, and one or more universal print drivers;
mapping each of the second set of one or more printing resources to a locally accessible printing resource of the client device; and
redirecting print requests for each of the second set of one or more printing resources based on the corresponding mapped locally accessible printing resource.
16. The method of claim 14 , wherein providing the first application with access to the second set of one or more printing resources comprises:
configuring the remote host with a universal print server;
configuring the client device with a universal print client, wherein said universal print client provides a network printer provider service that enumerates one or more of the second set of one or more printer resources to the client device; and
redirecting a print request from the client device to one of the second set of printer resources based on an enumerated printer resource identified in the print request.
17. The method of claim 16 , further comprising tunneling the print request through a proxy to the one of the second set of printer resources, when said one of the second set of printer resources is behind a firewall.
18. The method of claim 17 , wherein the proxy comprises a Secure Gateway.
19. One or more non-transitory computer readable media storing computer executable instructions that, when executed, cause a client device to perform:
establishing a connection between the client device and a remote host, said remote host providing access to one or more applications executing remotely on the remote host, wherein said client device is configured with access to a first set of one or more resources, and said remote host is configured with access to a second set of one or more resources;
sending, by the client device, first information to the remote host about a first application executing on the client device;
rendering within a user interface associated with the remote host, a first user interface component based on the first application, said first user interface component being rendered with a consistent appearance as a user interface associated with the remote host; and
when the first application meets one or more predefined criteria, providing the first application with access to the second set of one or more resources.
20. The computer readable media of claim 19 , wherein each set of one or more resources is selected from a group comprising storage resources, printer resources, and identity-based resources.