Abstract: The present invention describes exemplary embodiments of a method and apparatus for transmitting raster graphics. The method comprises determining a region, from 3D scene information for quality adjustment in a raster sequence of frames, wherein the raster sequence is generated by a graphics processing unit (the GPU) and consumed by an image encoder and the 3D scene information is provided by the GPU to the image encoder via shared memory and adjusting, by the image encoder, quality for the region according to the 3D scene information and a resource target for encodings of the raster sequence of frames.

Abstract: A method for communicating an image stream, one embodiment comprising negotiating, between a server and client, an MTCC identifying: a window as a portion of a display of the client, and an occluded portion of the window defined by the client; generating, by the server, complying with the MTCC, a sequence of image frames each comprising pixel data in a portion of the frame identified by the occluded portion; transmitting an encoding of a first frame of the sequence not including an encoding of the pixel data in the portion of the first frame; identifying, by the server, an event associated with the sequence; and transmitting, before communication between the server and the client regarding the event, by the server, information of the event in conjunction with an encoding of a second frame of the sequence including an encoding of the pixel data in the portion of the second frame.

Abstract: A method for transmitting a computer display image. In one embodiment, the method comprises determining a pixel boundary, referenced to a sub-tile boundary within a grid of tiles, for a changed portion of the image; identifying i) a uniform tile within the changed portion referenced to a first tile and ii) at least one hybrid sub-tile, associated with the sub-tile boundary, within the changed portion referenced to a second tile adjacent the first tile; engaging an SIMD vector processor to transform the uniform tile to an exit matrix, transform the at least one hybrid sub-tile to at least one DC coefficient, and transform the exit matrix to a first DC coefficient and the at least one DC coefficient to a second DC coefficient; quantizing, encoding and transmitting coefficients of the first and second tiles; and transmitting a binary mask specification for the changed portion adjusted to the sub-tile boundary.

Abstract: A system for providing a conditional single sign-on, wherein during a first access sequence a connection broker provides a first random number to a device. During a subsequent access period, the device provides encrypted user credentials to the connection broker comprising credentials of a user encrypted by a key K. The key K comprises the first random number combined with a second random number. The device further provides an encryption of the second random number to the connection broker, the second random number encrypted with a first public key held by the computer resource. The connection broker decrypts the first random number and retransmits the encryption of the second random number and the encrypted user credentials to the computing resource.

Abstract: A method and apparatus for motion determination comprising generating a hash value for each changed pixel in a frame of an image display sequence, the changed pixels indicated in a set of sparse display coordinates, for each changed pixel, overwriting (X, Y) information at a position in a symbol table indexed by the hash value, the (X, Y) information comprising one display coordinate associated with the each changed pixel, generating motion vectors for a frame, each motion vector specifying a pixel area determined from at least one (X, Y) delta between one of the changed pixels represented in the symbol table and a previously changed pixel represented at the position in a previous frame symbol table for a previous frame in the image display sequence, and transmitting the motion vectors from the host computer over a network to a client computer.

Abstract: A method and apparatus for transmitting a desktop display comprising classifying a first region of the desktop display as persistently changed and a second region of the desktop display as sporadically changed, adjusting, in relation to a user experience (UX) bias and a resource constraint, a target image quality for the first region, decimating the first region in accordance with a spatial decimation factor to generate a first decimated region, compressing the first decimated region at the target image quality and compressing the second region to generate a plurality of compressed regions and transmitting the plurality of compressed regions to a client via an IP network.

Abstract: The present invention describes exemplary embodiments of a method and apparatus for rasterizing and encoding vector graphics. The method comprises determining, by an image encoder, a difference between a transmission frame rate of an image encoder and a raster sequence frame rate of a raster sequence of images rasterized by a graphics processing unit (GPU); and adjusting, by the GPU, image detail of the raster sequence according to the difference.

Abstract: A method and apparatus for sequencing remote desktop connections. In one embodiment, the method comprises receiving, at a processor, a session exchange request from a first client in a first connection to a remote desktop; selecting, by the processor, a second client for connection to the remote desktop based on the session exchange request; configuring, by the processor, the second client; and orchestrating, by the processor, a second connection between the second client and the remote desktop.

Abstract: A method and apparatus for image encoding. In one embodiment, the method comprises encoding a first image portion by a first encoder associated with a first processor at a host system; dynamically determining a requirement to encode a second image portion by the first encoder or by a second encoder associated with a second processor at the host system; and encoding, based on the requirement, the second image portion by the first encoder or the second encoder.

Abstract: A method for communicating an image stream, one embodiment comprising negotiating, between a server and client, an MTCC identifying: a window as a portion of a display of the client, and an occluded portion of the window defined by the client; generating, by the server, complying with the MTCC, a sequence of image frames each comprising pixel data in a portion of the frame identified by the occluded portion; transmitting an encoding of a first frame of the sequence not including an encoding of the pixel data in the portion of the first frame; identifying, by the server, an event associated with the sequence; and transmitting, before communication between the server and the client regarding the event, by the server, information of the event in conjunction with an encoding of a second frame of the sequence including an encoding of the pixel data in the portion of the second frame.

Abstract: A method and apparatus for accessing a computer resource, wherein, during a first access sequence, the computer resource receives credentials of a user from a device the user is using to access the computer resource, encrypts the credentials using at least a first credentials key stores the encrypted credentials, communicates the first credentials key to a connection broker or to the device, and purges the first credentials key. The computer resource, during a subsequent access sequence, receives the first credentials key, decrypts the encrypted credentials using the first credentials key, and purges the first credentials key. The computer resource authenticates the user using the credentials and purges the credentials after the user is authenticated and enables the device to access the computer resource following the authentication of the user.

Abstract: A method and apparatus for communicating USB data. In one embodiment, the method comprises receiving, by an optimizer executing on a computer and communicatively coupled between a USB storage driver (USBSD) and a USB hub controller driver (UHCD), an SCSI command; transmitting, by the optimizer in response to receiving the SCSI command, the SCSI command to the UHCD; generating, by the optimizer, an SCSI command completion; transmitting, by the optimizer, the SCSI command completion to the USBSD; receiving, by the optimizer, SCSI data associated with the SCSI command completion; transmitting, by the optimizer in response to receiving the SCSI data, the SCSI data to the UHCD; generating, by the optimizer after transmitting the SCSI data, an optimized SCSI status message; transmitting, by the optimizer, the optimized SCSI status message to the UHCD; and transmitting, by the optimizer responsive to an SCSI status completion, the SCSI Status completion to the USBSD.

Abstract: Method for managing appliance authentication. In one embodiment, the method comprises generating, by a server, a first secret and a second secret from a certificate; transmitting from the server to a client computer, via a first channel secured and trusted based on a trusted computer, the first secret and the second secret; presenting the certificate to an appliance in response to a secure channel request from the appliance, wherein the appliance is holding the first secret; receiving, from the appliance, a description of a second channel, via the appliance, between the client computer and the server; establishing a trust in the second channel based on the description; and transmitting, in response to the trust in the second channel, via the second channel, channel information that comprises a portion of the description signed by the second secret.

Abstract: In one embodiment a method for communicating data comprises receiving, by a traffic manager between a plurality of virtual machines (VMs) and a network interface, (a) first data from a first VM in the plurality of VMs and en route via a first client computer to a first device, and (b) second data from a second VM in the plurality of VMs and en route via a second client computer to a second device; determining first attributes of the first data that provide a first communication requirement; determining second attributes of the second data that provide a second communication requirement; determining, based on available bandwidth of the network interface, a communications schedule associated with cumulative bandwidth of the first and second communication requirements; and transmitting, according to the communications schedule, the first data to the first client computer and the second data to the second client computer.

Abstract: Methods of encoding an image stream. In one embodiment, the method comprises analyzing, for each block in a plurality of image blocks, changes from the same block in previous image frames; classifying each block as a non-video block if it has changed from a corresponding block in an immediately previous frame; re-classifying each non-video block as a video block if it meets video block requirements; encoding each non-video block having a first image type to a lossless quality level; encoding each non-video block having a second image type to a first lossy quality level; and encoding each video block to a second lossy quality level, wherein each of the lossless quality level, the first and the second lossy quality levels define a measurable image quality level of a decoded output of a corresponding block at a client computer, wherein the image frame comprises separate video insert, text and picture portions.

Abstract: A method and apparatus for generating and communicating encoded images. In one embodiment, the apparatus comprises a graphics processor for rendering, for each display of a plurality of displays, a plurality of images from a plurality of drawing command sets, wherein each drawing command set is generated by a separate VM of a plurality of VMs in response to HID events received from a network location associated with a corresponding display; an image encoder for generating an encoding of each image of the plurality of images, each encoding comprising indications of changed and unchanged portions of a corresponding image; and a scheduler, coupled to the image encoder by a computer expansion bus, for scheduling generation of the encoding based on completion of (i) a rendering of an associated image from the plurality of images and (ii) a transmitting, via the IP network, of an encoding of a previously associated image.

Abstract: A method and apparatus for endpoint configuration management comprising receiving an endpoint topology and storing the endpoint topology in a configuration store, modifying a configuration for a remote session to conform to the endpoint topology and corresponding the configuration to the endpoint topology in the data structure and presenting to the endpoint the modified configuration of the remote session.

Abstract: Method for managing appliance authentication. In one embodiment, the method comprises generating, by a server, a first secret and a second secret from a certificate; transmitting from the server to a client computer, via a first channel secured and trusted based on a trusted computer, the first secret and the second secret; presenting the certificate to an appliance in response to a secure channel request from the appliance, wherein the appliance is holding the first secret; receiving, from the appliance, a description of a second channel, via the appliance, between the client computer and the server; establishing a trust in the second channel based on the description; and transmitting, in response to the trust in the second channel, via the second channel, channel information that comprises a portion of the description signed by the second secret.