Patent application EP20173708A (EP), filed 2020-05-08
Publication number: EP3742698A1
Title: SYSTEMS AND METHODS PROVIDING CONNECTION LEASE ANTI-THEFT FEATURES FOR VIRTUAL COMPUTING SESSIONS
Abstract: A computing device may include a memory and a processor cooperating with the memory and configured to receive a connection request from a client device having a public/private encryption key pair associated therewith. The connection request may be based upon a connection lease and the public key for the client device, and the connection lease may be generated based upon an authenticated version of the public key for the client device. The processor may also be configured to verify that the authenticated version of the public key upon which the connection lease was generated matches the public key for the client device and authorize a connection with the client device and provide the client device with access to a virtual computing session via the connection.
IPC codes: H04L  29/    06            A I
H04L  67/    14            A I
H04L   9/    40            A I
Claims: number: 1
text: A computing device comprising:
a memory and a processor cooperating with the memory and configured to
number: 2
text: The computing device of claim 1 wherein the processor is further configured to, prior to authorizing the connection with the client device:
number: 3
text: The computing device of claim 2 wherein the processor initiates the challenge and validates the signed response prior to verifying that the authenticated version of the public key upon which the connection lease was generated matches the public key for the client device.
number: 4
text: The computing device of claim 2 wherein, prior to the challenge and response, the processor is further configured to validate a signature and date associated with the connection lease, and validate that the public key is valid.
number: 5
text: The computing device of claim 2 wherein the processor initiates the challenge and validates the signed response after verifying that the authenticated version of the public key upon which the connection lease was generated matches the public key for the client device.
number: 6
text: The computing device of claim 1 wherein the connection lease includes a hash of the authenticated version of the public key for the client device.
number: 7
text: The computing device of claim 1 wherein the public/private key pair is generated at the client device using a hardware-backed key store.
number: 8
text: The computing device of claim 1 wherein the processor is further configured to drop the connection with the client device based on a failure to verify that the authenticated version of the public key upon which the connection lease was generated matches the public key for the client device.
number: 9
text: A method comprising:
number: 10
text: The method of claim 9 further comprising, prior to authorizing the connection with the client device:
number: 11
text: The method of claim 10 wherein initiating and validating comprise initiating the challenge and validating the signed response prior to verifying that the authenticated version of the public key upon which the connection lease was generated matches the public key for the client device.
number: 12
text: The method of claim 10 wherein initiating and validating comprise initiating the challenge and validating the signed response after verifying that the authenticated version of the public key upon which the connection lease was generated matches the public key for the client device.
number: 13
text: The method of claim 9 wherein the public key for the client device is registered with a broker; and further comprising validating, at the virtual delivery appliance, that the public key for the client device is registered with the broker prior to verifying that the authenticated version of the public key upon which the connection lease was generated matches the public key for the client device.
number: 14
text: The method of claim 9 wherein the connection lease includes a hash of the authenticated version of the public key for the client device.
number: 15
text: The method of claim 9 further comprising dropping the connection with the client device based on a failure to verify that the authenticated version of the public key upon which the connection lease was generated matches the public key for the client device.
Office action: search_report, dated 2020-11-25
Rejection reasons: novelty_epc_54
Prior art cited: ref_id: US8001232B1
ref_type: patent
severity: background
ref_id: US2013219468A1
ref_type: patent
severity: background
ref_id: US8001232
ref_type: patent
severity: novelty_destroying
ref_id: US2013219468
ref_type: patent
severity: background
Final disposition: pending (2020-11-25)