VDI Client Access Filters for Per-Resource VM Control

The patent segments access control from user-level to resource-level granularity. Instead of granting or denying access to entire folders or devices based on user identity, the system divides control into individual file or device-level permissions. The VDI client evaluates each resource access request independently against a policy, allowing precise control over which specific files or devices are accessible while blocking others at the same level. This segmentation resolves the contradiction by maintaining ease of operation through automated per-resource evaluation while improving security by preventing unnecessary broad access.

The patent applies local quality by implementing differentiated access policies for different resources within the same user session. Rather than applying a uniform access rule across all resources for a given user, the system assigns specific access permissions to individual files or devices based on local characteristics and policies. Each resource can have its own access criteria evaluated independently, allowing the system to grant access to necessary resources while denying access to unnecessary ones, thus resolving the security issue without compromising operational ease.

The patent segments the access control decision-making process into individual resource evaluations. Instead of applying a blanket restriction that completely denies access to all resources for a user, the system divides control into discrete file or device-level decisions. Each resource access request is evaluated independently against the policy, allowing the system to maintain security through restrictive policies while improving ease of operation by automatically granting access to specific necessary resources without requiring manual configuration for each case.

The patent implements self-service by enabling the VDI client to automatically evaluate and make access control decisions based on predefined policies without requiring manual intervention. The system autonomously determines whether to grant or deny access to each resource by evaluating the access request against the policy criteria, thereby maintaining security through restrictive policies while improving ease of operation by eliminating the need for manual access management and enabling seamless resource access when permissions are satisfied.

The patent segments access control to the individual file or device level, allowing the VDI client to evaluate each resource access request independently against the policy. This granular segmentation enables the system to grant access to only the specific files or devices necessary to fulfill the request, rather than granting broad access to entire folders or device types. By dividing control into discrete resource-level decisions, the system maintains ease of operation through automated evaluation while preventing unnecessary access that would compromise security.

The patent applies partial action by granting access to only the specific subset of files or devices necessary to fulfill the access request, rather than granting complete access to all resources of a certain type. The VDI client evaluates each resource individually and grants access only where the policy permits, providing the minimum necessary access rather than excessive access. This approach maintains ease of operation by enabling necessary resource access while improving security by limiting access to only what is required.