Patent ID: 8201218

Claim:
A method for securely receiving data from a terminal service (TS) client at a TS server via a gateway using a remote-operating protocol, comprising: establishing a first secure channel between the gateway and the TS server without involving the TS client; receiving policy information from the gateway at the TS server via the first secure channel, the policy information identifying a manner in which the TS server is to interact with the TS client, wherein the TS server receives the policy information from the gateway and does not receive the policy information from the TS client; receiving a token from the gateway at the TS server via the first secure channel; deactivating the first secure channel; subsequent to deactivating the first secure channel, establishing a second secure channel between the TS client and the TS server; receiving data at the TS server from the TS client via the second secure channel, wherein the data includes another token associated with the token, the another token being used by the TS server to identify the TS client and apply the policy information to the TS client; and taking action on the data at the TS server based on the policy information previously transmitted from the gateway to the TS server.