Patent ID: 8607054

Claim:
A method for allowing a remote presentation session between a virtual machine hosted in a first domain in a cloud computing environment and a client computer in a second domain outside of the cloud computing environment, the method comprising: establishing, at a server in the second domain, a communication session with the client computer; receiving, by the server, a virtual machine identifier indicative of the virtual machine hosted in the first domain; receiving from a virtualization manager in the second domain a cookie including a signed token and public key; authenticating the token using the public key and verifying that the token maps to a user account in the first domain; sending the virtual machine identifier to a virtualization system in the first domain; receiving, from the virtualization system in the first domain, a confirmation that the identified virtual machine is valid and an identity of a target resource associated with the identified virtual machine; sending to an intermediary listening service in the virtualization system the virtual machine identifier and received token, the intermediary listening service configured to cross-check the virtual machine identifier with an authorized virtual machine identifier received as a side-band notification; and forwarding remote presentation session data to the intermediary listener service.