Intelligent Redirection of Authentication Devices in VDI
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In virtual desktop infrastructure (VDI) environments, authentication devices like smart cards become inaccessible when the remote session is locked, rendering the client device unusable without restarting the session, and existing solutions rely on driver mapping which is undesirable due to compatibility issues and limited API support.
Innovation Solution
A server-side agent intelligently redirects authentication devices by registering for session state changes, causing them to be connected locally when the session is locked and reconnected to the server when unlocked, allowing seamless authentication without requiring client-side driver installation or complex API mappings.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If authentication devices are redirected to the server during a remote session, then the devices are accessible within the remote session, but they become inaccessible when the session is locked
Solution Approach 1:
The patent implements dynamic redirection of authentication devices based on session state. The system automatically redirects the authentication device to the server when the session is unlocked and returns it to the client when the session is locked, adapting the device location to the current operational context. This resolves the contradiction by making the system flexible rather than static, allowing the authentication device to be accessible both during active remote sessions and when locked for unlocking operations.
2Adaptability or versatility
If driver mapping is used to maintain authentication device access, then compatibility issues and limited API support are avoided, but client-side driver installation and complex API mappings are required
Solution Approach 1:
The patent extracts the authentication device redirection logic from the client side and places it entirely on the server side. The server agent monitors session state changes and controls device redirection independently, eliminating the need for complex client-side driver mappings and API interceptors. This extraction resolves the contradiction by maintaining protocol adaptability through server-side intelligence while removing client-side complexity.
Solution Approach 2:
The patent introduces a server-side agent as an intermediary between the authentication device and the remote session. This agent monitors session state changes and orchestrates device redirection automatically, serving as a mediator that eliminates the need for complex client-side driver mappings. The intermediary handles all the complexity of device management on the server side while presenting a simple interface to the client.
Data Source
AI summary
Authentication devices can be intelligently redirected in a VDI environment to thereby ensure that the redirected authentication devices remain available for authentication even after a remote session has been locked. This intelligent redirection of authentication devices can be accomplished in a way that only requires server-side modifications and that is agnostic to the remoting protocol used to establish the remote session.