Patent ID: 9154556
Filing Date: 2015-10-06
Classification: H04L

Abstract:
1. In electronic circuitry, a method of managing access to a limited number of computerized sessions, the method comprising: receiving, from a waiting user, a session request for a computerized session to be run on a server in a trusted network for interacting with an untrusted node outside the trusted network; queuing the session request in a wait queue in response to all of the limited number of computerized sessions being currently assigned to other users, the method accumulating credit points for the waiting user for time spent by the waiting user waiting in the wait queue, the method allowing the waiting user to spend the waiting user's credit points to un-assign a computerized session which is currently assigned to another user if the waiting user has a sufficient number of credit points; and while the session request is queued in the wait queue, providing permission to the waiting user to un-assign a computerized session which is currently assigned to another user; wherein providing the permission to the waiting user to un-assign the computerized session which is currently assigned to another user includes generating a list of idle computerized sessions including a number of credit points needed to un-assign each idle computerized session, and prompting the waiting user to terminate an idle computerized session on the list of idle computerized sessions, wherein the server runs a virtual machine platform that provides, as the limited number of computerized sessions, a limited number of virtual web interfaces running on virtual machines through which users are capable of accessing web sites outside a trusted network, the virtual machines operating on the server to provide destructible interfaces between the trusted network and nodes outside the trusted network and to protect user devices of the waiting users from malware arriving from outside the trusted network; and wherein generating the list of idle computerized sessions includes identifying particular virtual web interfaces which have gone unused by users assigned to the particular virtual web interfaces for a predefined amount of time.