Patent ID: 8613048

Claim:
A method for providing a user with authorized remote access to one of one or more application sessions disconnected from one or more client nodes previously operated by the user, the method comprising: disconnecting a first client node comprising a computing environment operated by a user, by a session server, from a resource provided by an application session provided by an application server providing a plurality of application sessions via a first communication channel; receiving a request, from a second client node comprising a second computing environment operated by the user, for access to the resource; receiving, by a first component of the policy engine, characteristics of the second computing environment gathered by a collection agent from the second client node in response to the request to access the resource; generating, by the first component of the policy engine, a data set from the received characteristics, responsive to applying a first policy to the received characteristics and storing an identifier for each condition satisfied in the data set; transmitting, by the first component of the policy engine, the data set to a second component of the policy engine; making, by the second component of the policy engine, an access control decision granting the second computing environment access to the resource based on application of a second policy to the generated data set; identifying, based on the access control decision, the application session provided by the application server disconnected from the first client node previously operated by the user, from one or more application sessions to which the second client node is permitted to connect; establishing, by the session server, a connection between the second client node and the identified application session provided by the application server in response to the identification via a second communication channel, wherein the second communication channel is wireless and different from the first communication channel; and selecting, by the application server responsive to the connection, a format for the presentation of the resource based on application of a second policy to the received characteristics of the second computing environment.