Abstract: A processing device receives, from a remote access client executing on a mobile device, user input provided in a portion of an application window being displayed on the mobile device. The application window on the mobile device corresponds to an application executing on a remote host. The user input requests an operation to be performed on the application window and specifies a location of the portion of the application window in which the user input was provided. The processing device determines whether the portion of the application window is a restricted portion with respect to the requested operation to be performed on the application window, and prevents the remote access client on the mobile device from performing the requested operation responsive to a determination that the portion of the application window is the restricted portion.

Abstract: A system and method for providing secure private electronic communications. An exemplary method includes encrypting a hidden message using an encryption scheme; encoding the encrypted hidden message in a source message; providing the source message having the encoded hidden message by a first electronic device; and transmitting a decryption key to a second electronic device. Moreover, the second electronic device can capture the encoded hidden message provided by the first electronic device, decode the hidden message, and extract the hidden message using the decryption key so that the hidden message can be rendered by the second electronic device.

Abstract: A system and method for backup and recovery of user mobile device modules, settings and configurations. An example system includes a modular mobile device and a number of interconnected modules that can be connected to the mobile device. The device includes memory that stores configuration and setting parameters associated with each of the modules. In operation, a backup software utility monitors the configuration and setting parameters to detect additions and modifications and the transmits the detected additions and modifications to remote data storage to generate a data backup indicating a current state of the configuration and setting parameters. As a result, the modular mobile device can always return to a previous state for each module if it is replaced or the software is reinstalled, for example.

Abstract: A method and a system for cache management in system interfacing to a cloud storage. The cache has two layers: the filter layer for tracing read access to the data blocks and the cache layer for keeping the actual data blocks. The layer two consists of two modules—a main cache and a boot cache. The boot cache is filled during the short period of time after the first file open operation. The boot cache also has a limit on the amount of data that can be put into the cache for the particular file. The filter layer detects continuous read access pattern and avoids caching data, if the data is read continuously beyond some limit.

Abstract: A user administers web hosting on user's server from his computer remotely. When a run time error is generated, an error message is sent to a server connected to a knowledge database. If the error matches the known error form the knowledge database, the user is provided an article with a solution to the run-time error. Statistics of occurrence of the errors are saved in the knowledge database. The frequently occurring errors are provided to developers for creating hosting application updates. Additionally, security policies of the user's server can be updated based on the data from the knowledge database.

Abstract: A method and computer program product for providing High Availability (HA) of services in a cloud-based system. The services are the applications used by the end users of the cloud system. The system uses shared cloud distributed storage. The cloud data is distributed over several nodes and is duplicated in an on-line mode. Each user launches and runs his own Virtual Execution Environment VEE (VM or Container) used as a cloud service. If one of the hardware nodes becomes unavailable, the HA system restores all of the VEEs of the failed node on a functional hardware node. Each node has a daemon, which monitors the situation and, if one of the nodes crashes, a master daemon provides for the restoration of the services of this node on other available nodes of the cloud.

Abstract: A method for optimization of a standard TCP connection. The optimization is based on load distributions by a system kernel. A proposed architecture includes an application running a proxy-process. The application is connected locally to an assigned port (e.g., port 9000). A number of connections N (for example 4) is established to a proxy server located on the cloud storage. Thus, the application is not directly connected to a front end server. Instead, it is connected to the proxy process via a local port. The proxy process transfers redistributed data streams to the proxy server on the cloud, which combines N data streams into one and passes it to the front end server residing on the cloud.

Abstract: A user administers web hosting on user's server from his computer remotely. When a run time error is generated, an error message is sent to a server connected to a knowledge database. If the error matches the known error form the knowledge database, the user is provided an article with a solution to the run-time error. Statistics of occurrence of the errors are saved in the knowledge database. The frequently occurring errors are provided to developers for creating hosting application updates. Additionally, security policies of the user's server can be updated based on the data from the knowledge database.

Abstract: A method and computer program product for intercepting and blocking the mouse move and resize events on mobile devices transmitting remote application. The remote access client installed on the mobile device send the coordinates of user's touches to remote computer. The remote access agent, running on a remote host, blocks the consequences of user finger (or stylus) actions performed on a captured window of the remote application. The method defines the areas and elements of a captured remote application window that are not affected by the move/resize commands emulated by a mobile device user. This functionality is implemented by a control-agent component running on a remote host for receiving and processing the commands from a mobile device and for transmitting video stream and some metadata about remote applications to the mobile device.

Abstract: A computer-implemented method for transmitting and controlling images of a remotely executed application, the method including connecting a mobile computing device to a remote server; connecting a desktop computing device to the remote server and to the mobile computing device; starting an application on the remote server, wherein the application generates graphical objects controllable by commands from the mobile computing device; encoding each graphical object into a video stream; transferring the video stream to the mobile computing device and to the desktop computing device; generating the commands on mobile computing device; sending the commands to the remote server; detecting if the video stream contains results of execution of the commands; displaying the graphical objects on the local computing device; and generating an image of a substitute graphic object image if the video stream does not contain the results.

Abstract: A method and computer program product for targeted container virtualization, where only separate components of a computer system or a server are virtualized. The OS kernel and other server resources are not virtualized. Only selected components—applications or resources are targeted for virtualization instead of virtualization of the entire system. Targeted virtualization provides for more flexible container isolation from each other and from a host node. This, in turn, provides for optimized more flexible cloud infrastructure. Each element within a container virtualization model is optional in terms of virtualization. The element's virtualization option can be turned on and off by an administrator or by a client who owns the container.

Abstract: A method for using a mobile device to access remote host desktop applications. A client mobile device is connected to a remote server (host) over a WAN. The client mobile device launches host desktop applications remotely and loads the application windows onto its screen. The applications are executed on a remote host and the host application icons are loaded and rendered on a mobile device screen. The images are formed on the remote host as a result of execution of the applications. The host is connected to cloud cache storage. The host loads application icons onto the cloud cache storage. The icon hashes are generated. When a mobile client needs to launch the host application, the corresponding icon hashes are used for locating the required application icons in the cloud cache storage and loading them to the client mobile device.

Abstract: A method for implementing teleconferences when at least one participant receives 3-D data. A data rendering device presents data in a 3-D format or in pseudo 3-D format. A 3-D image is formed on a user computer system. The 3-D presentation is calculated by a local computer system. A block of user avatars is formed on the local computer system for all teleconference participants (including a local participant). The participant avatar includes a kinetic model (joints, muscles, body parts, etc.). The avatar includes a participant's behavior model (gestures, fingers, mimics, etc). The avatar also includes an avatar skin. The avatar skin includes a stable (unchangeable) part of the participant containing face and visible body parts, as well as modifiable parts (e.g., clothes, shoes, accessories, etc.).

Abstract: A method for editing a non-native file on a mobile device using a remote application, including establishing a connection between a local-side component and a remote-side component on a remote computer; wherein the local-side component identifies an editor on the remote computer based on parameters of the file; on the remote computer, activating an editor for a file located on the mobile device; upon selection of the editor, using the local-side component to transmit the file to the remote-side component; storing the file in a storage on the remote computer; opening the file using the editor and giving the editor control over the file using a protocol for remote connection; editing the file on the mobile device as if the editor on the remote computer were native; saving the file on the remote storage and transmitting the file to the mobile device; and replacing the file on the mobile device with the transmitted file.

Abstract: A method and computer program product for running a remote desktop application on a mobile device without audio interference from the other desktop applications, so the remote user applications runs as if it were a native mobile device application. A remote host desktop has a number of applications running simultaneously and producing sounds. A mobile device user selects one application and launches it on his mobile device. The selected application runs on a mobile device and the sounds produced by all other desktop applications are filtered out by special audio control driver implemented on the host system.

Abstract: A method for publishing the web sites on remote server using shared hosting in cases of unexpected server timeouts. A list of elements (work items) to be published is generated. The list is sorted out according to dependencies of elements from one another. Then, the work items are sorted out by the priority. The work item from the top of the list (with the highest priority) is processed first. After the work is performed with this work item, the work item is marked as closed if the process has executed successfully. Then, the process moves to the next work item and so on. The process has a library of the work items. Thus, in case of a server timeout, the process knows exactly which work items have been processed prior to the timeout and can start the processing from the next work item.

Abstract: A method and computer program product for establishing a connection and downloading server applications on a desktop. A user downloads and installs custom server software with the embedded user credentials data. The software provider customizes software for the user. The key of the digital signature is used as a part of the installation package. The user downloads custom server software and installs it on his desktop over a secure connection. A vendor (or content provider) checks the validity of the user data and registers the application to the user. The application provider has a right to digitally sign the package.

Abstract: A method for publishing the web sites on remote server using shared hosting in cases of unexpected server timeouts. A list of elements (work items) to be published is generated. The list is sorted out according to dependencies of elements from one another. Then, the work items are sorted out by the priority. The work item from the top of the list (with the highest priority) is processed first. After the work is performed with this work item, the work item is marked as closed if the process has executed successfully. Then, the process moves to the next work item and so on. The process has a library of the work items. Thus, in case of a server timeout, the process knows exactly which work items have been processed prior to the timeout and can start the processing from the next work item.

Abstract: A method and computer program product for targeted container virtualization, where only separate components of a computer system or a server are virtualized. The OS kernel and other server resources are not virtualized. Only selected components—applications or resources are targeted for virtualization instead of virtualization of the entire system. Targeted virtualization provides for more flexible container isolation from each other and from a host node. This, in turn, provides for optimized more flexible cloud infrastructure. Each element within a container virtualization model is optional in terms of virtualization. The element's virtualization option can be turned on and off by an administrator or by a client who owns the container.

Abstract: A system and method for implementing direct attachment of VMs, implemented on a computer system, to hardware devices attached to the computer system. Direct attachment architecture is implemented. The direct attachment is an exclusive dedication of a hardware device to a VM, where a particular hardware device is assigned to a particular VM. When the VM is not activated, the hardware device can be re-assigned to another VM. At system start up, hardware devices are masked from a host OS of a computer system and are automatically attached to the assigned VMs.