Patent ID: 8990898
Filing Date: 2015-03-24
Classification: G06F,H04L

Abstract:
1. A method of establish a session in a virtual desktop infrastructure, comprising steps of: a connection broker receiving a request for a session from a client device; the connection broker determining, based on an identification of the client device, one or more session hosts the client device is authorized to access, and one or more resources the client device is authorized to use on the one or more session hosts; the connection broker generating a lease token based on the client device, the one or more session hosts, and the one or more resources, wherein the lease token is a self-sustaining package of cryptographically signed connection lease data from which each of the one or more session hosts can determine whether the client device is authorized to access the one or more resources hosted by that session host; the connection broker sending the lease token for storage in a lease store; receiving, by one of the session hosts, the lease token as a request to establish a session with the client device; the session host validating the lease token based on the cryptographic signature of the lease token; based on the validating, the session host sending connection information for use by the client device to establish a session with the session host; and establishing the session between the session host and the client device through which the client device accesses one or more resources hosted by the session host.