Patent ID: 8661524
Filing Date: 2014-02-25
Classification: H04L

Abstract:
1. A machine-implemented method, comprising: establishing a virtual private network (VPN) session between a client workstation that is a desktop and a first principal that is a user, the VPN session established by the first principal; permitting multiple second principals to remain logged into the client workstation during the VPN session with the first principal, the multiple second principals having different sessions and not part of the VPN session between the first principal and the client workstation, the multiple second principals are second users different from the user and where logged into the client workstation before the first principal established the VPN session; routing connection requests that originate from applications used by the first principal and the second principals through a VPN client interface, wherein the connection requests are directed to a protected resource that is part of the VPN session with the first principal; and enforcing a policy in response to identities associated with the first principal and the second principal that permits the first principal to connect to the protected resource via the VPN session and that denies the second principals in their attempts to connect to the protected resource, and other connection requests from the multiple second principals directed to other resources that are not part of the VPN session and that are not protected resources are permitted to proceed during the VPN session independent, and the identities are acquired by passing Internet Protocol (IP) addresses and communication port identifiers for the first principal and the second principals to an operating system command that returns process identifiers for the connection requests, the process identifiers are searched in an Access Control List (ACL) to obtain the identities for the first principal and the second principals and to acquire corresponding permissions for access to the protected resource.