Patents Assigned to VMware
  • Patent number: 11716428
    Abstract: A scanner redirection method for a remote desktop system that includes a client computing device and a host server includes the steps of: receiving a name of a physical scanner from a scanner core; transmitting the received name of the physical scanner to the host server; and in response to a first user selection to acquire a scanned image and a second user selection of the name of the physical scanner, the first and second user selections being made on a user interface of the host server, receiving from an application running on the host server a request for the scanned image, transmitting to the scanner core a request to acquire the scanned image from the physical scanner, and upon receiving the scanned image from the scanner core, transmitting the scanned image to the application.
    Type: Grant
    Filed: August 29, 2022
    Date of Patent: August 1, 2023
    Assignee: VMware, Inc.
    Inventors: Zhongzheng Tu, Weigang Huang, Huiyong Huo, Mingsheng Zang, Yueting Zhang
  • Publication number: 20230236900
    Abstract: The present disclosure relates to scheduling compute nodes to satisfy a multidimensional request using vectorized representations. One method includes receiving a request to allocate resources of a distributed virtual environment for a workload, wherein the distributed virtual environment includes a plurality of compute nodes, receiving, for each compute node, node matrix and a utilization vector, determining a mask vector, wherein the mask vector represents constraints associated with the workload, concatenating the plurality of node matrices to form a concatenated matrix, determining a utilization matrix based on the plurality of utilization vectors, and selecting a particular compute node for the workload based on the mask vector, a portion of the concatenated matrix, and the utilization matrix.
    Type: Application
    Filed: January 21, 2022
    Publication date: July 27, 2023
    Applicant: VMware, Inc.
    Inventor: Mustafa Bayramov
  • Patent number: 11711351
    Abstract: Hosts in a cluster in a virtualized computing environment bypass a management layer when communicating with an external key management service (KMS). One of the hosts is configured with KMS configuration information (including digital certificate information) that enables the host to directly communicate with the KMS via a secure communication connection, instead of communicating with the KMS via the management layer. This KMS configuration information is replicated in a distributed manner from the host to the other hosts in the cluster, thereby enabling the other hosts in the cluster to also directly and independently communicate with the KMS to obtain encryption keys to perform cryptographic operations.
    Type: Grant
    Filed: January 14, 2020
    Date of Patent: July 25, 2023
    Assignee: VMWARE, INC.
    Inventors: Georgi Lekov, Rusko Atanasov, Stanimir Lukanov, Elena Dimitrova, Dimo Raychev
  • Patent number: 11711278
    Abstract: Some embodiments provide a method for presenting a visualization of a data message flow within a logical network that is implemented across multiple sites. The method receives flow tracing data regarding the data message flow from a source endpoint in a first site to a second endpoint in a second site. The data message flow is processed according to logical forwarding elements (LFEs) implemented in at least the first and second sites. For each of the sites through which the data message flow passes, the method identifies the LFEs that process the data message flow in the site. The method presents a visualization for the data message flow. The visualization includes a separate section for each site through which the data message flow passes. Each section indicates at least a subset of the LFEs that process the data message flow in the corresponding site for the section.
    Type: Grant
    Filed: November 19, 2021
    Date of Patent: July 25, 2023
    Assignee: VMWARE, INC.
    Inventors: Pritesh Ramesh Gajjar, Pavan Vaidyula, Tarang Khandelwal, Shrinivas Sharad Parashar, Vaishnavi Ramamoorthy
  • Patent number: 11709799
    Abstract: Embodiments provide for application-specific provisioning of files or registry keys. As applications are installed or launched, data is recorded by an application virtualization engine, and an index is created linking the recorded data to both the application and the underlying files or registry keys. As applications are requested (e.g., launched, updated, or the like), the application virtualization engine reveals various copies of file or registry keys to the application on demand or in accordance with a policy.
    Type: Grant
    Filed: June 9, 2016
    Date of Patent: July 25, 2023
    Assignee: VMware, Inc.
    Inventors: Fei Huang, Daniel James Beveridge
  • Patent number: 11711366
    Abstract: Examples described herein include systems and methods for onboarding a device into a management system. An example method can include loading a management agent onto the device and receiving inventory information for the device. The example method can further include receiving a request to whitelist the device. In some examples, the request originates from a different device, such as a device used by a technician installing the connected device. The management server can authorize the device and add it to the whitelist. After authorizing the device, the management server can onboard the device by sending management information to the management agent on the device. The management server can then exercise management control of the device through the management agent installed on the device.
    Type: Grant
    Filed: September 7, 2020
    Date of Patent: July 25, 2023
    Assignee: VMWARE, INC.
    Inventors: Swarnadeep Banerjee, Prashant Shubham, Ashutosh Dwivedi, Agila Govindaraju
  • Patent number: 11709684
    Abstract: Systems and methods are included for causing a computing device to assemble and boot from a managed operating system. When the computing device is powered on, it can execute firmware that specifies a server to contact. The server can identify an operating system (OS) to boot, and the location of a pre-enrollment installer for assembling the OS image. The pre-enrollment installer can download base OS images in one or more pieces from multiple locations determined based on ownership information of the computing device. The multiple OS images can relate to enterprise management and company-specific applications and drivers. Once the pre-enrollment installer has combined the base OS images, the computing device reboots using the combined OS image.
    Type: Grant
    Filed: August 7, 2020
    Date of Patent: July 25, 2023
    Assignee: VMware, Inc.
    Inventors: Jason Roszak, Craig Newell, Shravan Shantharam, Varun Murthy, Kalyan Regula, Blake Watts
  • Patent number: 11709705
    Abstract: Techniques for implementing event proxies in a Functions-as-a-Service (FaaS) infrastructure are provided. In one set of embodiments, a computer system implementing an event proxy can receive an event emitted by an event source, where the computer system is part of a first computing cloud including the FaaS infrastructure, and where the event source is a software service running in a second computing cloud that is distinct from the first computing cloud. The computer system can translate the event from a first format understood by the event source to a second format understood by a function scheduler of the FaaS infrastructure, where the function scheduler is configured to schedule execution of functions on hosts of the FaaS infrastructure. The computer system can then make the translated event available to the function scheduler.
    Type: Grant
    Filed: October 25, 2021
    Date of Patent: July 25, 2023
    Assignee: VMware, Inc.
    Inventors: Berndt Jung, Mark Peek, Karol Stepniewski
  • Patent number: 11711307
    Abstract: In some embodiments, a method receives a set of packets for a flow and determines a set of features for the flow from the set of packets. A classification of an elephant flow or a mice flow is selected based on the set of features. The classification is selected before assigning the flow to a network resource in a plurality of network resources. The method assigns the flow to a network resource in the plurality of network resources based on the classification for the flow and a set of classifications for flows currently assigned to the plurality of network resources. Then, the method sends the set of packets for the flow using the assigned network resource.
    Type: Grant
    Filed: September 11, 2020
    Date of Patent: July 25, 2023
    Assignee: VMware, Inc.
    Inventors: Santosh Pallagatti Kotrabasappa, Sairam Veeraswamy, Abhishek Goliya, Abbas Mohamed
  • Patent number: 11711292
    Abstract: The disclosure provides an approach for pre-filtering traffic in a logical network. One method includes receiving, by a hypervisor, a packet from a virtual computing instance (VCI) and determining a service path for the packet based on a service table. The method further includes setting, by the hypervisor, a pre-filter component as a next hop for the packet based on the service path. The method further includes receiving, by the pre-filter component, the packet. The method further includes making a determination, by the pre-filter component, of whether the packet requires processing by the security component. The method further includes performing, by the pre-filter component, based on the determination, one of: forwarding the packet to its destination and bypassing the security component; or forwarding the packet to the security component.
    Type: Grant
    Filed: March 17, 2020
    Date of Patent: July 25, 2023
    Assignee: VMware, Inc.
    Inventors: Sudesh Pawar, Pierluigi Rolando, Rahul Mishra
  • Patent number: 11709698
    Abstract: A method of deploying a network service (NS) across multiple data centers includes identifying virtual network functions (VNFs) associated with the NS in response to a request for or relating to the NS, generating commands to deploy VNFs based on VNF descriptors, and issuing the commands to the data centers to deploy VNFs. The data centers each have a cloud management server in which cloud computing management software is run to provision virtual infrastructure resources thereof for a plurality of tenants. The cloud computing management software of a first data center is different from the cloud computing management software of a second data center, and the commands issued to the first and second data centers are each a generic command that is not in a command format of the cloud computing management software of either the first data center or the second data center.
    Type: Grant
    Filed: November 4, 2020
    Date of Patent: July 25, 2023
    Assignee: VMware, Inc.
    Inventors: Sachin Thakkar, Allwyn M. Sequeira, Serge Maskalik, Debashis Basak, Akshatha Sathyanarayan
  • Patent number: 11709723
    Abstract: Aspects of a cloud service framework are described. In some examples, a noncompliance event is received. The noncompliance event is identified using parameters detected from a deployment of hardware resources and software resources provided by a cloud service according to a service level agreement (SLA). An application programming interface (API) associated with the noncompliance event is identified. The API is disabled by updating an API availability status. A request to invoke the API is received, and the API is prevented from being forwarded to a backend service that provides the API.
    Type: Grant
    Filed: January 13, 2022
    Date of Patent: July 25, 2023
    Assignee: VMWARE, INC.
    Inventors: Chiao-Chuan Shih, Himanshu Pandey, Joy Ghosh, Natalie Schlechter
  • Patent number: 11709710
    Abstract: Some embodiments provide a novel method for sharing data between user-space processes and kernel-space processes without copying the data. The method dedicates, by a driver of a network interface controller (NIC), a memory address space for a user-space process. The method allocates a virtual region of the memory address space for zero-copy operations. The method maps the virtual region to a memory address space of the kernel. The method allows access to the virtual region by both the user-space process and a kernel-space process.
    Type: Grant
    Filed: October 30, 2020
    Date of Patent: July 25, 2023
    Assignee: VMWARE, INC.
    Inventors: Alex Markuze, Chen Dar, Aran Bergman, Igor Golikov, Israel Cidon, Eyal Zohar
  • Patent number: 11709695
    Abstract: The generation, actuation, and enforcement of policies within a distributed computing system is provided. The policies are employed to manage the resources of the system. The resources include virtualized resources, such as virtual machines (VMs) and virtual storage disks (VSDs). A policy includes a rule and scope. Enforcing a policy includes applying the rule to resources that are within the policy's scope. Policies are employed to constrain the leasing period and reclaim leased resources, as well constrain the access of certain users to specific operations on the leased resources. Policies may be created via a UI that automatically generates a policy encoding. The policy is registered and accessed via a policy store. When multiple policies target a common resource, merging strategies are applied to the multiple policies.
    Type: Grant
    Filed: January 31, 2020
    Date of Patent: July 25, 2023
    Assignee: VMware, Inc.
    Inventors: Mathieu Colombet, Daniel Evan Schwartz, Julie A. Pickhardt, Prateek Gangwal
  • Patent number: 11709700
    Abstract: An example method of secure attestation of a workload deployed in a virtualized computing system is described. The virtualized computing system includes a host cluster and a virtualization management server, the host cluster having hosts and a virtualization layer executing on hardware platforms of the hosts. The method includes: launching, in cooperation with a security module of a host, a guest as a virtual machine (VM) managed by the virtualization layer, the security module generating an attestation report from at least a portion of the VM loaded into memory of the host; sending the attestation report from the security module to a trust authority; receiving, in response to verification of the attestation report by the trust authority, a secret from the trust authority at the security module; and providing the secret from the security module to the guest.
    Type: Grant
    Filed: January 13, 2021
    Date of Patent: July 25, 2023
    Assignee: VMware, Inc.
    Inventors: Abhishek Srivastava, David A. Dunn, Jesse Pool, Adrian Drzewiecki
  • Publication number: 20230229537
    Abstract: The current document is directed to methods and systems that automatically generate training data for machine-learning-based components used by a metric-data processing-and-analysis component of a distributed computer system, a subsystem within a distributed computer system, or a standalone metric-data processing-and-analysis system. The training data sets are labeled using categorical KPI values. The machine-learning-based components are applied to metric data both for predicting anomalous operational behaviors and problems within the distributed computer system and for determination of potential causes of anomalous operational behaviors and problems within the distributed computer system. Training of machine-learning-based components is carried out concurrently and asynchronously with respect to other metric-data collection, aggregation, processing, storage, and analysis tasks.
    Type: Application
    Filed: January 17, 2022
    Publication date: July 20, 2023
    Applicant: VMware, Inc.
    Inventors: Ashot Nshan Harutyunyan, Nelli Aghajanyan, Lilit Harutyunyan, Arnak Poghosyan, Tigran Bunarjyan
  • Publication number: 20230229771
    Abstract: Some embodiments provide a method of preventing network spread of malware files. At a host computer executing in a datacenter, the method receives a request from a particular compute machine executing on the host computer to open a file that was downloaded to the host computer for the particular machine. The method determines whether the file is a known file that has been previously assessed to contain malware. Based on a determination that the file is unknown, the method allows the particular compute machine to open the file while also (i) creating a record to identify the file as a file that is currently being analyzed to assess whether the file contains malware, and (ii) distributing the record to other host computers in the datacenter to ensure that the file cannot be opened on the other host computers until it has been analyzed to confirm that the file does not contain malware.
    Type: Application
    Filed: October 15, 2022
    Publication date: July 20, 2023
    Applicants: VMware, Inc., VMware, Inc.
    Inventors: Manisha Sameer Gambhir Parekh, Pranav Narayan Gokhale, Aditya Anil Gokhale
  • Publication number: 20230229474
    Abstract: Example methods and systems to register and manage a plug-in in a virtualized computing environment have been disclosed. One example method includes initiating a deployment process to deploy a virtual appliance configured to host the plug-in, pushing information associated with a user interface on a management entity to the virtual appliance to be one or more Open Virtual Appliance (OVA) environment properties, powering on the virtual appliance and registering and managing the plug-in on the management entity through the UI.
    Type: Application
    Filed: January 19, 2022
    Publication date: July 20, 2023
    Applicant: VMware, Inc.
    Inventors: Plamen DIMITROV, Ankur Kumar SHARMA, Vladimir VELIKOV, Hakan HALIL, Andrey KARABELYOV, Ivaylo RADEV, Tony GANCHEV
  • Publication number: 20230229675
    Abstract: The current document is directed to methods and systems that collect metric data within computing facilities, including large data centers and cloud-computing facilities. In a described implementation, two or more metric-data sets are combined to generate a multidimensional metric-data set. The multidimensional metric-data set is compressed for efficient storage by clustering the multidimensional data points within the multidimensional metric-data set to produce a covering subset of multidimensional data points and by then representing the multidimensional-data-point members of each cluster by a cluster identifier rather than by a set of floating-point values, integer values, or other types of data representations. The covering set is constructed to ensure that the compression does not result in greater than a specified level of distortion of the original data.
    Type: Application
    Filed: January 17, 2022
    Publication date: July 20, 2023
    Applicant: VMware, Inc.
    Inventors: Ashot Hautyunyan, Arnak Poghosyan, Tigran Bunarjyan, Naira Movses Grigoryan
  • Publication number: 20230231741
    Abstract: Some embodiments of the invention provide a method of sending data in a network that includes multiple worker nodes, each worker node executing at least one set of containers, a gateway interface, and a virtual local area network (VLAN) tunnel interface. The method configures the gateway interface of each worker node to associate the gateway interface with multiple subnets. Each subnet is associated with a namespace, a first worker node executes a first set of containers of a first namespace, and a second worker node executes a second set of containers of the first namespace and a third set of containers of a second namespace. The method sends data between the first set of containers and the second set of containers through a VLAN tunnel between the first and second worker nodes. The method sends data between the first set of containers and the third set of containers through the gateway interface.
    Type: Application
    Filed: March 1, 2022
    Publication date: July 20, 2023
    Applicants: VMware, Inc., VMware, Inc.
    Inventors: Qiang Tang, Zhaoqian Xiao