Abstract: To provision a client application on a client device, a user may be provided with a QR code, a one-time password, or a manual entry page for starting a credential provisioning process via a credential provisioning service provided by a credential provisioning server in a secure network. The client application may include information on trusted servers operating in the secure network. The credential provisioning server may operate to perform a sequence of actions to verify user credentials and determine, based on rules applicable to the user, the client device, or a combination thereof, whether the client application is to be provisioned on a client device. If so, the credential provisioning server may operate to generate a key pair, obtain a signed certificate, encrypt them, and send them to the client device such that the client application can use them to establish a mutual secure connection with a trusted server.

Abstract: Some embodiments may facilitate boot-specific key access to perform cryptographic operations. A first boot record and a second boot record may be generated independently in response to a request to boot a virtual device. The first and second boot records may be compared and in response to a match between the first boot record and the second boot record, an identify certificate may be obtained. Authorization to access and use a key for cryptographic operations may be obtained in response to a verification of the identity certificate by a cryptographic processor.

Abstract: Embodiments disclosed herein can allow a user of mobile device in a network environment to switch between using public network services and using private network services. To access private network services, a virtualization cloud client application running on mobile device connects to a virtualized device hosted in virtualization cloud and brokers access to private network services as well as local device functions. Embodiments disclosed herein provide a system, method, and computer program product for improving network latency by bypassing elements or functions on a remote virtual machine. Examples of this approach include moving elements of the user interface from the remote virtual machine to the local physical device, bypassing a media player on a virtual machine, and bypassing certain telephone functions on a virtual machine and instead performing those functions on the physical device.

Abstract: Embodiments disclosed herein can match a virtual display configuration to a physical display configuration. A method may include receiving from a physical device a physical device display configuration; generating a list of display configurations compatible with the physical display configuration, the generating a list including determining best matches of display geometries, aspect ratio, and density; providing the list to the physical device; and implementing a selected member of the list as a virtual device display on the physical device.

Abstract: Systems, methods and computer program products for providing notifications to physical devices when they are disconnected from corresponding virtual devices. In one embodiment, a system includes a host server executing a virtual device, and a notification server. A notification manager on the virtual device receives notifications and forwards them to the notification server when the physical device is not connected to the virtual device. The notification server stores the notifications and also stores a set of filters. The notification server identifies user, group and location information from a token of the physical device, retrieves notifications for the user and selects filters based on the information from the token. The notification server applies the filters to the notifications to produce sanitized notification information, and forwards this sanitized notification information to the physical device.

Abstract: Embodiments disclosed herein provide a system, method, and computer program product for generating remote views in a virtual mobile device platform. In one embodiment, events from a physical mobile device are sent to a distant virtual device. The virtual device creates views based on the received events. Graphical attributes of one or more of the created views are captured and sent to the physical mobile device. Remote views are generated at the physical mobile device based on the attributes received from the virtual device.

Abstract: Embodiments disclosed herein can allow a user of mobile device in a network environment to switch between using public network services and using private network services. To access private network services, a virtualization cloud client application running on mobile device connects to a virtualized device hosted in virtualization cloud and brokers access to private network services as well as local device functions. Embodiments disclosed herein provide a system, method, and computer program product for capturing touch events for a virtual mobile device platform and relaying the captured touch events to the virtual mobile device platform while ensuring that movements and speed of touch events are accurately represented at the virtual mobile device platform.

Abstract: Systems, methods and computer program products that enable efficient roaming of virtual mobile devices. In one embodiment, multiple PoP locations having a set of common master images are maintained. A communication from a mobile device received at a central facility identifies a user, a location and a type of the mobile device. The central facility determines performance measures for the PoP locations and identifies a preferred PoP location in response to the communication. If the preferred PoP location has available capacity, the central facility directs the preferred PoP location to provision resources and instantiate a virtual device from a selected master image corresponding to the mobile device. If the preferred PoP location persistently stores a user data volume for the user, the virtual device is attached to the stored user data volume. Otherwise, data is transferred from the user's data volume to a cache attached to the virtual device.

Abstract: Systems, methods and computer program products that enable efficient roaming of virtual mobile devices. In one embodiment, multiple PoP locations having a set of common master images are maintained. A communication from a mobile device received at a central facility identifies a user, a location and a type of the mobile device. The central facility determines performance measures for the PoP locations and identifies a preferred PoP location in response to the communication. If the preferred PoP location has available capacity, the central facility directs the preferred PoP location to provision resources and instantiate a virtual device from a selected master image corresponding to the mobile device. If the preferred PoP location persistently stores a user data volume for the user, the virtual device is attached to the stored user data volume. Otherwise, data is transferred from the user's data volume to a cache attached to the virtual device.

Abstract: Systems, methods and computer program products for providing notifications to physical devices when they are disconnected from corresponding virtual devices. In one embodiment, a system includes a host server executing a virtual device, and a notification server. A notification manager on the virtual device receives notifications and forwards them to the notification server when the physical device is not connected to the virtual device. The notification server stores the notifications and also stores a set of filters. The notification server identifies user, group and location information from a token of the physical device, retrieves notifications for the user and selects filters based on the information from the token. The notification server applies the filters to the notifications to produce sanitized notification information, and forwards this sanitized notification information to the physical device.

Abstract: Embodiments disclosed herein provide a system, method, and computer program product for dynamically switching virtual devices in a virtual mobile device platform. The virtual devices may use any desired operating system or operating system version. In some embodiments, a launch application installed on a secondary virtual device is defined for opening a file of a given file type. Upon a request to open a file of the given file type, the secondary virtual device is launched, and a connection is established with a client device. A client device can connect to a secondary virtual device by using a primary virtual device as a proxy, or by using a bypass channel connection.