Virtual delivery appliance and system with remote authentication and related methods
A virtual delivery appliance may communicate with a client device over a network to provide the client device with a virtualized session for a user. A processor may be configured to communicate with the client device over the network to perform a registration operation with a relying party. An application within the virtualized session may perform an authentication operation with the relying party to access a resource. The processor may be configured to forward an authentication challenge message to the client device in response to the application receiving the authentication challenge message from the relying party for the user to access the resource, and receive an authentication answer message in response to the authentication challenge message from the client device.
1. A virtual delivery appliance comprising:
a memory and a processor configured to cooperate with the memory to
communicate with a client device over a network to provide the client device with a virtualized session for a user,
communicate with the client device over the network to perform a registration operation between a relying party and the client device, an application operating within a virtual operating system (OS) comprising a native authentication interface, the application to perform an authentication operation between the client device and the relying party to access a resource,
intercept by the application an authentication OS command of the native authentication interface from the relying party, and translate the authentication OS command into an authentication challenge message,
redirect the authentication challenge message to the client device for the user to access the resource, and
receive an authentication answer message in response to the authentication challenge message from the client device, the authentication answer message being based upon a biometric characteristic of the user accessible from a memory of the client device, the application to forward the authentication answer message to the relying party to complete the authentication operation;
the application within the virtualized session serving as a conduit for each authentication operation being performed between the client device and the relying party.
2. The virtual delivery appliance of claim 1 wherein the client device comprises a biometric device configured to generate the biometric characteristic of the user.
3. The virtual delivery appliance of claim 1 wherein the client device comprises a local wireless transceiver configured to exchange the authentication challenge message and the authentication answer message with a mobile wireless communication device.
4. The virtual delivery appliance of claim 1 wherein the application comprises a web browser application.
5. The virtual delivery appliance of claim 4 wherein said processor is configured to receive a web authentication application programming interface (API) command from the relying party.
6. The virtual delivery appliance of claim 5 wherein said processor is configured to translate the web authentication API command from the relying party into the authentication challenge message; and wherein the client device is configured to generate the web authentication API command based upon the authentication challenge message.
7. The virtual delivery appliance of claim 5 wherein the web authentication API command comprises a WebAuthn standard authentication command.
8. The virtual delivery appliance of claim 1 wherein said processor is configured to translate the authentication OS command from the relying party into the authentication challenge message; and
wherein the client device is configured to reconstruct the authentication OS command based upon the authentication challenge message.
9. A computing system comprising:
a client device; and
a virtual delivery appliance configured to communicate with said client device over a network to
provide said client device with a virtualized session for a user,
communicate with said client device over the network to perform a registration operation between a relying party and the client device, an application operating within a virtual operating system (OS) comprising a native authentication interface, the application to perform an authentication operation between the client device and the relying party to access a resource,
intercept by the application an authentication OS command of the native authentication interface from the relying party, and translate the authentication OS command into an authentication challenge message,
redirect the authentication challenge message to the client device for the user to access the resource, and
receive an authentication answer message in response to the authentication challenge message from said client device, the authentication answer message being based upon a biometric characteristic of the user accessible from a memory of said client device, the application to forward the authentication answer message to the relying party to complete the authentication operation;
the application within the virtualized session serving as a conduit for each authentication operation being performed between the client device and the relying party.
10. The computing system of claim 9 wherein said client device comprises a biometric device configured to generate the biometric characteristic of the user.
11. The computing system of claim 9 wherein said client device comprises a local wireless transceiver configured to exchange the authentication challenge message and the authentication answer message with a mobile wireless communication device.
12. The computing system of claim 9 wherein the application comprises a web browser application.
13. The computing system of claim 12 wherein said virtual delivery appliance is configured to receive a web authentication application programming interface (API) command from the relying party.
14. The computing system of claim 13 wherein said virtual delivery appliance is configured to translate the web authentication API command from the relying party into the authentication challenge message; and wherein said client device is configured to generate the web authentication API command based upon the authentication challenge message.
15. The computing system of claim 13 wherein the web authentication API command comprises a WebAuthn standard authentication command.
16. A method for operating a virtual delivery appliance, the method comprising:
communicating with a client device over a network to provide the client device with a virtualized session for a user;
communicating with the client device over the network to perform a registration operation between a relying party and the client device, an application operating within a virtual operating system (OS) comprising a native authentication interface, the application to perform an authentication operation between the client device and the relying party to access a resource;
intercepting by the application an authentication OS command of the native authentication interface from the relying party, and translating the authentication OS command into an authentication challenge message;
redirecting the authentication challenge message to the client device for the user to access the resource; and
receiving an authentication answer message in response to the authentication challenge message from the client device, the authentication answer message being based upon a biometric characteristic of the user accessible from a memory of the client device, the application to forward the authentication answer message to the relying party to complete the authentication operation, the application within the virtualized session serving as a conduit for each authentication operation being performed between the client device and the relying party.
17. The method of claim 16 wherein the client device comprises a biometric device configured to generate the biometric characteristic of the user.
18. The method of claim 16 wherein the client device comprises a local wireless transceiver configured to exchange the authentication challenge message and the authentication answer message with a mobile wireless communication device.
19. The method of claim 16 wherein the application comprises a web browser application.
20. The method of claim 19 further comprising receiving a web authentication application programming interface (API) command from the relying party.
21. The method of claim 20 further comprising translating the web authentication API command from the relying party into the authentication challenge message; and wherein the client device is configured to generate the web authentication API command based upon the authentication challenge message.
22. The method of claim 20 wherein the web authentication API command comprises a WebAuthn standard authentication command.