Patent ID: 8838800

Claim:
A method, comprising: registering, at an arbitrator of a shared-computing environment, a resource based at least in part on an identifier for the resource; providing, with a processor of a host computing device, the shared computing environment, wherein the processor is utilized simultaneously by a plurality of access devices, each access device being associated with one of a plurality of users registered with the arbitrator; receiving, by the arbitrator, the identifier for the resource from an access device of the plurality of access devices, the access device being associated with a user during a user session bound to the user, the resource and the access device having independent connections to the shared-computing environment; and sending, from the arbitrator, a first token to the resource in response to receiving the identifier from the access device; subsequent to sending the first token, receiving a second token from the access device prior to binding the resource to the access device and the user session; binding, by the arbitrator, the resource to the access device and the user session only if the received second token matches the sent first token, the binding creating a private communication link including the independent connections from the resource and the access device to the shared computing environment such that no other access device associated with another user can communicate with the resource while the resource is bound to the access device and the user session.