AU2014324086A1 - Virtual computing systems and methods - Google Patents

Description

VIRTUAL COMPUTING SYSTEMS AND METHODS

FI E L D OF TH E INVENTION tn particular forms the present invention concerns computing systems and methods for providing virtual computers. BACKGROU ND TO TH E INVE NTI ON

Virtualization is the process of taking computet resources comprising processing, memory and storage and providing an artificial environment for network, machine, input/output, application or storage- functionality. In common use, virtualization generally refers to the operation of real world system s as a virtual ized infrastructure which operates similarly to a physical infrastructure.

The expression 'virtual network' generally refers to the provision of physical network functionality by emulating the network in a software/virtualised environment. The expression 'virtual machine' is used in various contexts. In order to clarify the various contexts, the expression 'system virtual machine' generally refers to providing the functionality of a complete platform that supports the execution of a functioning operating system. In comparison, the expression 'process virtual machine' generally refers to providing the functionality of a platform that supports the execution of a single process, the process being an instance of an application. The expression 'virtual computer' as used herein generally refers to a system virtual machine as opposed to process virtual machine. The expression 'hypervi or' generally refers, to a facility that provides for the provision of a number of virtual computers in a virtualization system . A hypervisor provides the system processor, memor and other resources to the operating system of the virtual computers. The operating system of each virtual computer provides common services for various applications. Hypervisors are provided in a number of forms, "Type 1 hypervisors' provide an interface immediately beneath one or more system virtual machines and immediately above the underlying hardware with no intervening operating system . Type 1 hypervisors communicate directly with the underlying physical server hardware. For this reason type 1 hypervisors are sometimes known as bare metal hypervisors. 'Type 2 hypervisors' provide an interface^■immediately beneath one or more system virtual, computers and immediately above an underlying operating system.

In both eases the role of a hypervisor is to generally supervise and provide one or more virtual computers while maintaining- separation policies therebetween. In virtualization systems employing hypervisors, cloning is generally provided to allow copying of virtual computers. It is possible to provide a number of types of clone. For example 'full clone' generally refers to an independent copy of a virtual computer, the clone being entirel separate from the original virtual computer. A linked clone' generally refers to sharing a virtual disk with the original virtual computer to use the same software installation, in general a linked clone cannot operate without access to the original virtual computer. This arises due to delta type arrangemen being stored rather than unified copy.

Generally linked clones can be created relatively quickly. Whilst the speed of creation is improved, linked clones sometimes suffer from performance degradation. In a virtualization system, a snapshot facility will generally provide a clone by making a snapshot to disk. In some systems such as VMware a snapshot is similar to a linked clone. Getierally a user is able to repeatedly return to a snapshot after activation. A snapshot can be considered as a repeatable suspended state of a virtual computer.

A suspend store facility will generally preserve the state of a virtual computer by saving the state of the virtual computer to disk without repeatability. With some systems the suspend facility provides a suspension pause facility storing the virtual computer state in memory without repeatability. A suspension store facility generally frees up memor and virtual CPUs. A suspension pause facility generally keeps the virtual machine in a frozen state with memory allocation still being provided. In both cases the processing and I/O operations of the virtual machine is suspended in a substantial manner. Notably resuming a suspended state from a suspend store state or suspend pause state does not allow the user to return to the same state repeatedly. The virtual machine is resumed from suspended state and continues operating from the same point at which the machine was suspended without being able to return to the suspended state. It is to be recognised that any discussion in the present specification is intended to explain the context of the present invention. It is not to be taken as an admission that the material d scussed formed part of the prior art base or relevant general knowledge in any particular country or region. S U MMA RY O F TH E I NVEN TIO N

According to an aspect of preferred embodiments herein described there is provided a method of providing virtual computers, the method including; ensuring that a series of system logon requests by users results in each user being provided with a series of virtual computers that reflect applied updates; each virtual computer being provided by resuming a virtual computer from a pool of suspended virtual computers where the suspended virtual computers are based on at least one virtual computer template; customizing each virtual computer after being resumed from the pool of suspended virtual computers to provide an. active virtual computer; and regularly updating the at least one virtual computer template, Preferably the method includes ensuring that the virtual computers provided to the users are regularly updated by terminating virtual computers based on system logoff requests by users.

Preferably the method includes ensurin that the virtual computers provided to the users are regularl updated by maintaining suspended virtual computers in the poof based on one or more regularly updated virtual computer templates.

Preferably the method includes maintaining suspended virtual computers in the pool includes creating suspended virtual computers in the pool and ensuring that the suspended virtual computers have a desirable turnover rate

Preferably the method includes maintaining suspended virtual computers in the poo! includes providing suspended virtual computers in the pool and deleting or otherwise removing older suspended virtual computers from the pool .

Preferably the method includes providin suspended virtual computers in the pool with each suspended virtual computer having services suspended in a substantially deployed state. Preferably the method includes providing the suspended virtual computers in the poo! with each suspended virtual computer having remote desktop services suspended in a substantially deployed state.

Preferably the substantially deployed state comprises a state in which the services are available as part of a fully operational system in the sense of being enabled and functional.

Preferably the method includes providing the suspended virtual computers in the poo! by cloning one or more of the virtual computer templates to provide a number of virtual computers; installing applications on the virtual computers according to the different user classes; and suspending the virtual computers.

Preferably, in order to accommodate different user classes, the method includes uninstal l i ng applications from a number of virtual computers cloned from the at least one virtual computer template.

Preferably the method includes creating suspended virtual computers i the pool with each suspended virtual computer having services suspended in a substantially deploy ed state; and ensuring that application installation or uninstallation is limited to 30 seconds or less in duration,

Preferably customizing the resumed virtual computer for a user includes allocating a security profile for the user, Preferably the method includes communicating with a classification update facility^' to instruct active virtual computers to install or remove applications in response to alterations in user classification.

Preferably the suspended virtual machines are suspended in memory in a non- repeatable suspended state. The suspended virtual machines may be suspended in memory in. a repeatable suspended state. The suspended virtual machines may be suspended on disk in a non-repeatable suspended state. The suspended virtual machines may be suspended on disk in a repeatable suspended state.

According to an aspect of preferred embodiments herein described there is provided a method of providing virtual computers, the method including: creating at least one virtual computer template; determining whether the or each at least one virtual computer template requires, updating; caching suspended virtual computers based on the at least one virtual computer template; resuming the cached suspended virtual computers to provide active virtual computers in response to system logon requests. Preferably each suspended virtual computer is cached with services suspended in a substantially deployed state.

According to an aspect of preferred embodiments herein described there i s provided a method of providing virtual computers, the method including: providing a series of virtual computers as a result of a series of logins; wherein providing each virtual computer in the series of virtual computers includes resuming a suspended virtual computer from a pool of suspended virtual computers to provide a resumed virtual computer and customizing the resumed virtual computer; the suspended virtual computers in the pool being based on at least one virtual computer template.

Preferably the method includes creating suspended virtual computers in the pool with each suspended virtual computer having service suspended in a substantially deployed state,

According to an aspect of preferred- embodiments herein described there i s provided a method of providing virtual computers, the method including: caching suspended virtual computes; and resuming the cached suspended virtual computers to provide active virtual computers in response to system logon requests.

According to an aspect of preferred embodiments herein described there is provided a method of providing virtual computers, the method including: providing a series of virtual computers as a result of a series of logins by a user; wherein providing each virtual computer in the series of virtual computers includes resuming a suspended virtual computer to provide a resumed virtual computer; and customizing the resumed virtual computer for the user.

According to an aspect of preferred embodiments herein described there is provided a method of providing virtual computers, the method including: ensuring that a series of system logon requests by users results in the users being provided with a series of virtual computers that reflect applied updates; each virtual computer being provided by resuraing a virtual computer from a pool of suspended virtual computers where the suspended virtual computers are based on at least one virtual computer template; customizing each virtual computer after being resumed from the pool of suspended virtual computers to provide an active virtual computer; and regularly updating the at least one virtual computer template.

According to an aspect of preferred embodiments herein described there is provided a computer system for providing virtual computers, the computer system including: a pool facility for storing a pool of suspended virtual computers based oft at least one virtual computer template; and a provision manager for providing a series of virtual computers as result of a series of system logon requests by users; the provision manager including an update facility, a resume facility and a customization facility; the update facility for updating the or each at least one virtual computer template; the resume facility for resuming virtual computers from the poo! of suspended virtual, computers provided by the pool facility; the customization facility for customizing virtual computers after being resumed from the pool of suspended virtual computers to provide active virtual computers.

Preferably the provision manger includes a termination facility for terminating virtual computers based on system logoff requests; the termination facility for assisting with ensuring that the virtual computers provided to the users are regularly updated. Preferabl the provision manger is able to ensure that the virtual computers provided to the users are regularly updated by maintaining suspended virtual computers in the pool based on one or more regularly updated virtual computer templates.

Preferabl the provision manager is configured to maintain suspended virtual computers in the pool by ensuring that the suspended virtual computers have a desirable turnover rate.

Preferably the provision manager is configured for maintaining suspended virtual computers in the pool by creating suspended virtual computers in the pool and deleting or other removing older suspended virtual computers in the pool. Preferably the provision manger includes a creation facility configured for providing suspended virtual computers in the pool with each suspended virtual computer having services suspended in a substantially deployed state.

Preferably the creation facility is configured for providing the suspended virtual computers in the pool with each suspended virtual computer having remote desktop services suspended in a substantially deployed state.

Preferably the substantially deployed state comprises a state in which services are available as part of a fully operational system in the sense of being enabled and functional. Preferably the provision manager includes: a creation facility for providing the suspended virtual computers in the pool by cloning one or more of the at least one virtual computer template to provide a number virtual computers; an installation facility for installing applications according to the different user classes; and a suspension, facility for suspending the virtual computers. Preferably the provision facility include an uninstall facility for accommodating different user classes, the uninstall facility for uninstaUing applications from virtual computers cloned from the at least one virtual computer template.

Preferably the system includes a classification update facility for instructing active virtual computers to install or remove applications from in response to alterations in user classif cation.

According to an aspect of preferred embodiments herei n described there is provided a computer system: for providing virtual computers to users, the computer system including: a provision manager for providing a series of virtual computers for a series of system logon requests by users; the provision manager including a resume facilit and a customization facility; the resume facility for resuming suspended virtual computers; the customization facility for customizing virtual computers for the users after being resumed.

According to an aspect of preferred embodiments herein described there is provided a computer system for providing virtual computers, the computer system including: a creation facility for providing virtual computer templates; an update facility for determining - whether revised virtual computer templates are required with new updates; a cache facility for caching suspended virtual computers based on the virtual computer templates; and a resume facility for resuming the cached suspended virtual computers to provide virtual computers in response to system logon requests by users. Preferably the cache facility is configured to cache each suspended virtual computer in a state with services suspended in a substantially deployed state.

According to an aspect of preferred embodiments herein described there is provided a computer system for providing virtual computers, the computer system including: a pool facility for storing a pool of suspended virtual computers based on at least one virtual computer template; and a provision manager for providing a series of virtual computers as a result of a series of system logon requests by users; the provision manager including an update facility, a resume facility and a customization facility; the update facility for updating the or each at least one virtual computer template, the resume facility for resuming virtual computers from the pool of suspended virtual computers provided by the pool facility; the customization facility for customizing virtual computers after being resumed from the pool of suspended virtual computers to provide active virtual computers.

Preferably the cache facility is configured t cache each suspended virtual computer in a state with services suspended in a substantially deployed state. Preferably there is provided a preceding method or system, run via at least one computer processor.

Preferably there is provided a non-transient computer readable medium having stored thereon computer exeeutable instructions for performing a computer implemented method as detailed above. Preferably there is provided a non-transient computer readable medium having stored thereon computer executable instructions encoding a computer implemented system as detailed above.

Preferably there is provided a non-transient computer-readable medium, encoded with one or more facilities configured to run an application configured to carry out a number of operations to provide any one of the preceding methods or systems Preferably there is provided a non-transient computer implemented method or system detailed above.

According to a aspect of preferred embodiments herein described there is provided a computer system fo providing virtual computers, the computer system including: a creation facility for providing virtual computer templates; an update facility for determining whether revised virtual computer templates are required with new updates; and a provision facility for providing virtual computers in response to system logon requests by users.

According to an aspect of preferred embodiments herein described there is provided a method of providing virtual computers, including: creating virtual computer templates; providin new virtual computers in response to system logon requests by users: and updating the computer templ tes.

As will be discussed embodiments of the present invention are considered to provide number of preferred arrangements including:

(i) Systems and methods that maintain a pool of computers in a manner that users will regularly be provided with virtual computers that incorporate recent updates.

(ii) Systems and methods that maintain a pool of computers in a manner that is able to readil accommodate varying numbers of users requiring access at a different times, the precise time of each users requiring access being unknown.

(iii) Systems and methods that maintain a pool of computers in manner that is able to accommodate different user application classes by providing suspended virtual computers for different categories, and adding or removing applications for different user classes.

(iv) Systems and methods that provide an application update mechanism that serves to update active virtual computers associated with users based on different user application classes associated with the users. It is to be recognised that other aspects, preferred forms and advantages of the present invention will be apparent from the present specification including the detailed description, drawings and claims.

BRI E F D ESCRIPTIO N OF D RAWI NG S

I s order to facilitate better understanding of the present invention, several preferred embodiments will now be described with reference to the accompanying drawings in which:

Figure 1 provides a schematic illustration of a computer system according to a first preferred embodiment of the invention; Figure 2 provides a schematic illustration of a virtual computer shown in Figure 1 ;

Figure 3 provides a further illustration in relation to the virtual computer shown in Figure 2;

Figure 4 provides a further illustration in relation to the virtual computer shown in Figure 2; Figure 5 provides a further illustration of the computer system shown in Figure 1 ;

Figure 6 and 7 provide further illustrations in relation to Figure 5;

Figures 8 to 1 1 provide screen images demonstrating the manner in which system logon requests are handled in the system shown in Figure I ;

Figure 12 provides a screen image of an interface provided subsequent to a logo request in the system shown in Figure 1;

Figure 13 provides a schematic illustration representing an initial state of the system shown in Figure 1 ;

Figure 14 provides screen image showing a button allowing the user to issue a logoff request i the system shown in Figure 1, Figure 15 provide a schematic illustration of a logoff request in relation to Figure

14;

Figure 16 provides a schematic illustration of a computer system according to a further preferred embodiment of the invention; Figures 17 and 18 provide schematic illustrations o a method according to a further preferred embodiment of the invention;

Figure 1 provides a schematic illustratio of a series of logon requests in relation to the method shown in Figure 17, Figure 21 and 22 provide further schematic illustrations in relation to the method shown in Figure 17;

Figure 23 provides a schematic illustration of a computer system according to another preferred embodi ment of the invention;

Figure 24 provides a screenshot of an application store provided in the system shown in Fi gure 23 ;

Figure 25 provides a screen shot providin a time breakdown of a first process in relation to the system shown in Figure 23;

Figure 26 provides a screenshot providing a time breakdown of another process i relatio to the system shown in Figure 23 ; and Figure 27 provides an illustration of a system according to a further preferred embodiment of the present invention.

DETA ILED DESCRIPTION OF TH E EMBO DIMENTS

It is to be appreciated that each of the embodiments is specifically described and that the present invention is not to be construed as being limited to any specific feature or element of any one of the embodiments. Neither i s the present invention to be construed as being limited to any feature of a number of the embodiments or variations described in relation to the embodiments.

Referring to Figure 1 there is show a computer system 10 according to a first preferred embodiment of the present invention. The computer system 10 provides virtualizati ti infrastructure as illustrated by box 12. The computer system 10 is provided using a public cl ud network 14. As part of the computer system, a number of servers 16 provide virtual computers 18. Referrin to Figure 2 each virtual computer includes an operating system 20 and applications 22. A type 1 hypervi sor 24 is installed on server hardware 26.

Figure 3 illustrates user data 28 forming part of each virtual computer _.18. Figure 4 illustrates decoupling of the user data 28 from th operating system 20. As shown there is provided user data virtualization 30, The user data virtualization 30 provides a layer al.lowi.ng separation of the user data including files, configuration and settings from the operating system and applications. As would be apparent other embodiments may include appl i cat! on virtual izati on, As showB in Figure 5, the computer system .10 includes a provision manager 32. The provision manager 32 acts a broker providing users 34 with access to the virtual computers 18. Each user 3_.4 has a client 3_.6 that provides access to respective virtual computers 1_.8. The virtual computers ,18 are provided to the users 34. as virtual computers having virtual desktops. Referring to Figure 6, the computer system 1_.0 includes pool facility 38 as part of the virtualization infrastructure. The pool facility 38 stores a pool 40 of suspended virtual computers 42. The suspended virtual computers 42 are based on two virtual computer templates 44. The virtual computer templates 44 comprise golden images. In another embodiments the virtual computer templates comprise active or suspended virtual computers.

Referring to Figure 7, the provision manager 32 is configured to provide a series 46 of virtual computers 48, over time, as a result of a series. 50 of system logon requests 52 by user 54. From the viewpoint of the user group a similar statement ca be made i connection with the users as a whole. In the computer system 10, a single user account is associated no more than one virtual computer 18 at any one time. Other arrangements are of course possibl e.

The passing of time is represented by arrows 56. A first system logon request 58 by the user 54 results in the provi sion of a virtual computer 60. A subsequent system logon request 62 results in the provision of a virtual computer .64. A subsequent system logon request 6 results in the provision of virtual machine 68. A final system logon request 70 results in the provision ofa virtual computer 72, In the embodiment the provision manger 32 ensures that each of the system logon requests 52 is separated by a system logoff requests 74. Each system logoff request 74 terminates the current virtual computer associated with the user.

The manner in which system logon requests 52 are initiated is demonstrated in Figure 8 and 9. In order to issue a system logon request, user 54 uses an interface 76 provided a browser 78, The interface 7.6 provides a dashboard 80, providin a system logo request facility 82 in the form of a button. In operation the user 54 activates the system logon request facility 82, and is provided with a loading indicator 84, The loading indicator 84 is illustrated in Figure 10. Referring to Figure 11 , the user 54 i s subsequently provided with a number of connection options 86, A first one of the options comprises usin a remote desktop protocol client on the user machine to provide a desktop interface. A second one of the options comprises using the browser 80 to provide a desktop interface.

Selecting the second one of the options provides a web client 88 illustrated in Figure 12. The web client 8_.8 provi des a virtual desktop 90 havi ng a menu facili ty 92 and a desktop 94 upon shortcuts and other items can be placed. The virtual desktop ,90 include task bar 96 showing visible applicati ons. A run facility 98 is provided for command type executio . Applications are ran on an operating system 20 corresponding with a single virtual computer 1.8. Notably in other embodiments the system logon request facility 82 forms part of a dashboard authentication such that loggin on the dashboard 80 automatically provides a system logo request 52 seeking access to a virtual computer.

Returning to Figure 7 the provision manager 32 includes an update facility 1.00, a resume facility 102 and a customization facility 1.04. The update facility 1 0 is able to update each virtual computer template 44, The resume facility 102 is able to resume a virtual computer from the pool 40 of suspended virtual computers 42 provided by the pool facility 38, The customization facility is able to customize the resumed virtual computer for the user 54 to provide an active virtual computer.

As will be described the computer system J O is configured for ensuring that a series of system logon requests by a user results in the user being provided with a series of virtual computers that reflect applied updates, More- articularl as a result of each logon request by a user, a new virtual computer for the user is provided ('new' in the sense of being provided as part of a cloning process as described below).

The logon requests and virtual computers are provided on a one to one basis. That is, each logon request results i n the provision of a single new virtual computer.

An initial state of the computer system 10 is illustrated in Figure 13. After a system logon request 106 is initiated, the provision manager 12 uses the resume facility . 02 to resume a suspended virtual computer 108 from the pool 40 of the suspended virtual computers 42. The customization facility 104 is then used to customize the resumed virtual computer 110. The customization associates user data Π2 with the virtual computer 110 and applies security settings. After customization the provisio manager 32 provides an active virtual computer 1 14 for access by the user. The active virtual computer 1 14 i then accessible by one of several known access techniques.

As part of the nature of the resume process, the resume facility _.102 removes the suspended virtual computer 1.08 from the pool 40. The resume facility 102 employs a non-rep eatable resume associated with the suspended virtual computer being in a non-repeatable suspended state.

The update facility j 00 regularly updates each virtual computer template 44 according to notifications from an update notification facility. After resuming the suspended computer 42, a creation facility 1 16 schedules: (i) the cloning of a virtual template 44 to provide a virtual machine^' and (ii) and the subsequent suspension of the virtual machine to provide a replacement suspended virtual computer 42. Initially there is provided a build. instruction list.

The provi si on manger 32 advantageousl includes a termination facility 1_.1.8 for terminating virtual computers 1.8 based on system logoff requests by users to ensure that the virtual computers 18 provided to the users are regularly updated. After a user logs off from the computer system .1. the associ ted virtual computer is scheduled for termination.

After the user 54 has been provided with a virtual computer 114, the user is provided with access to a system logoff request facility .120 illustrated in Figure 14. With the use of the logoff request facility .120, the user i s able to issue a system logoff request 122 a shown in Figure 15.

Advantageously, in the computer system 10, the provision manger 3_.2 is able is ensure that the virtual computers 18, provided, to the users 34 are regularly updated. This arises due to the system regularly updating the virtual computer templates 44. from which the suspended virtual computers 42 in the pool 40 are based. The computer system 1.0 employs Linux Kernel-based Virtual Machine (KVM) technology. Other technologies such as VMware, and Microsoft services ma be used in other embodiments.

The provision manager 32 includes a range facility 124_. that monitors the turnover of suspended virtual computers 42 in the pool 40. The range facility 124 access both historical and actual login/virtual machine informati n.

The provision manager 3_,2 ensures that the number of suspended virtual computers in the pool 4 is with a range recommended by the range facility 124. The provision manager 32 ensures that: the suspended virtual computers 42 have a desirable turnover rate by limiting the number of suspended virtual computers in the pool 40 in view of anticipated user de nd. In thi s an er the chum of virtual computers through system logon requests and the regular updating of the templates 44 ensures that the suspended virtual computers 42 reflect updates in a. timely mariner.

In order to apply critical updates to active virtual computers, the provision manager 32 includes an active machine updater 126, The active machine updater 126 is configured to send update requests to the virtual computers .18, The virtual computers 18 respond to notifications from the active machine updater 126 to install updates. In this embodiment the active machine updater is provided by a technology known as 'Puppet' for Linux.

The termination facility 1 18 is configured to remove old suspended virtual computers in the pool 40 to ensure that the suspended virtual computer 42 in the pool desirably reflect updates and are suitable to be provided to the user 34.

In the past the process of cl oning a virtual template 44 to provide an active virtual computer for a user would typically comprise: (i) determining whether a user has suffice credit; (ii) performing a cloning operation on virtual template; (Hi) deploying services on the virtual machine; (iv) installing applications; and (iv) applying security policies to allow access by the user. Performing items (ii), (rii ) and (iv) provide a significant delay.

In the present embodiment the creatio facility _.1_.1.6 is configured for creating the suspended virtual computers 42 in the pool 40 with each suspended virtual compute 42 having services suspended in a substantially deployed state. This advantageousl serves to reduce the time visible to the user when requesting a virtual computer through the dashboard 8Q,

In particul ar, b having the remote desktop services of each suspended vi rtual computer 42 suspended in a substantially deployed state, the time to provide access to the virtual computer is advantageousl reduced. In the case of each suspended computer 42 remote desktop sendees are deployed in the sense that the sendees are started and can be connected to a user from the network and provide functionality to that user. With the embodiment a substantial improvement in the time between the logon request and the provision of a virtual computer can be provided. Rdp, Xrdp, Xserver and other remote desktop technologies for performing VDI as remote desktop infrastructure are known, Manufactures ofVDI systems i clude VMWare, Citrix and HP.

As discussed the creation facility 1.16 is provided for providing the suspended virtual computers 42 in the pool 40 by cloning the virtual computer templates 44. An in stall ati on facility .128 is provided for installing applications according to the different user classes. A suspension facility .130 is provided for suspending virtual computers as part of the creation process to provide the suspended virtual computers 42. The installation facility 128 is provided for installing applications after cloning a virtual template 44. The provision manager 32 includes an uninstall facility 132 for removing applications after cloning a virtual template 44. Generally uninstalling applications has a greater processing overhead than removing applications, Uninstalling applications can be advantageous in circumstances in which a requirement for unin stall ation occurs relatively infrequently.

In the computer system 10,. the user classes include accounting classes, secretarial classes and manager classes. The classes are associated with a particular application suites. Only a few user classes do not require the use of LibreOfrice. In this embodiment the uninstall facility is provided to uninstall LibreOffice for these users. Advantageousl this means that a reduced number of virtual templates have to be maintained by the system The active machine updater 126 provides a classification update facility for instructing virtual computers 18 to install or remove applications. Such an instance may occur when there is an alteration in the classification of a user.

The computer system 10 is considered to advantageousl maintain a pool of virtual computers in a suspended state with substantially deployed services wherein the number of suspended virtual computers, and updating of templates results in users regularly bein provided with virtual computers that incorporate recent updates.

Furthermore, by providing a pool of suspended virtual computers, circumstances involving high demand for virtual computers can be readily accommodated by maintaining a relatively large number of suspended virtual computers in the pool. In this manner the system can be configured to accommodate high demand such as might occur in group computer laborator session at a university. At other times a reduced number of suspended computers can be provided in the pool. Native deduplication of in the virtualized computer system is considered to allow for both relatively small and relatively large numbers of suspended virtual computers to be stored in the pool. The use of native deduplication for 'storm' type events is considered to be advantageous.

In another embodiment illustrated in Figure 16, there is provided a computer system 13 according to a further preferred embodiment of the present invention. The computer system 1_.34 includes a template provision facility _.13_.6 for providing virtual, computer templates _.138_. and an update facility 140 for determining whether revised virtual computer templates are required. A cache facility 142 is provided for caching suspended virtual computers 144 based on the virtual computer templates 138. A resume facility 146 is provided for resuming the cached suspended virtual computers 144 to provide active virtual computers in response to system logon requests b users. The cache facilit 1.42 is configured to cache each suspended virtual computer 144 with services suspended in a substantially deployed state.

Referrin to Figure 17 there is shown a method 148 according to a further preferred embodiment of the present invention. The method 148 advantageously provisions virtual computers ISO in response to system logon requests 152, A number of processes occur in the method 148. At block 154 the method 1_.48 includes regularly updating a number of virtual computer templates 1 56. At block 158 the method 148 includes receiving a system logon request 1_.60. In response to the system logon request 16_.0, the method _.1_.48 performs an account validation check at block 162. If the account is valid the method US, at block 164_s. performs a check to determine whether an active virtual computer is currently associated with the user that issued the system logon request. If there is an existing virtual computer then a logoff request is issued at block _.166 to shut-down the existing virtual computer. Once a shutdown request has been issued, the method 1_.44 provides a virtual computer 150 as detailed at a block I6| (See Figure 8).

At block 1_.70, the method _.14.8 includes checking the user account type to determine the number of suspended virtual computers 172 based on suitabl templ tes _.156 * in a pool 174. In times of unanticipated high demand the number of suspended virtual computers _.17_.2 in the pool 174 may be depleted in which case the method waits a desirable amount of time at block U§Jn anticipation of further suspended virtual computers being added to the pool 1_.74.

At block 1_.78 the method 1_.46 commences a resume routine that non-repeat ably resumes a suspended computer jjfO to provide a virtual computer ,182. The act of resuming the suspended computer 180 takes cpu, memor and storage resources from the underlying hypervisor. At block 184 specific resources, security profiles and other configuration settings are customized.

The customization includes the provision of a virtualised user data layer _.1_.86, At block 188 moditications are made to an application layer 190 which in the present embodiment is not virtualized. Various customizations are illustrated in block 1_.8_.8. A virtual computer 1_.92 is then made available to the user at block 1_.94. In this embodiment, after resuming a virtual computer it continues to reside on the existing physical machine. Of course the virtual computer could be migrated across the network to another physical machine.

Referring to Figure 1 , by applying the method _,148 on each system logon by a user 1,96, the method 1_.48 ensures that that a series of the system logon requests _.198 results in the user 196 bei ng provided with a series of virtual computers 200 than reflect ap l ied updates. The method 148 applies these updates at block 154 and the updated virtual computer 200 are accordingly provided to the user 1_.96 at each system logon. Each virtual computer 200 in the progression of time 202 is provided by resuming a virtual, computer from the pool _.17 of suspended virtual computers 1 72, where the suspended virtual computers .172 are based on the virtual computer templates .15.6- At block 154 the method j 48. regularly updates the virtual computer template 156, At block 184 the method 1.48 customizes the virtual computer for the user af\er being resumed from the pool .174, The process is repeated and proaetively provide updated active virtual computers to each user of the system upon logon requests. The method 146 is applied across all users.

The method 148 includes terminating virtual computers 150 based on system logoff requests .204 by users. At block 206 shown in Figure 20, the method 148 includes receiving logoff requests and determining user activity. In the case where user activity does not meet a threshold in a wait period 2_.0_.8, the machine i terminated at block 2_.1_.0. The user is able to manually issue a logoff request 204 which is received at block 212. The virtual computer is terminated at block 210. The method _.148 ensures that the virtual computers provided to the users are regularly updated by terminating virtual computers based on system logoff requests by users.

Referring to Figure 21, at block _.2_.14 the method 146 includes providing suspended virtual computers 216 in the pool 174, In this embodiment re lenishment is initiated once a virtual computer has been made available to a user. Other embodiments advantageously have a routine that anticipates expected demand. At block 218. the method 146 determines whether to add a suspended virtual computer to the pool 174.

At block 220 a virtual template 1_,56 is selected to replace the earlier resumed suspended virtual computer. At block 222 the template is cloned. At block 224 the template is checked to determine whether updates are required. If updates are required, the updates are applied at block 226, The updated virtual machine is cloned as template at block 228 and the old template is removed at block 23.0, Some configuration may occur at block 232. At block .234 the virtual computer is suspended in the pool 174,

When applying the configuration at block 232 the method 148 suspends the services of the cloned template in a substantially deployed state. In the present embodiment the services that are suspended in a substantially deployed state include remote desktop services including XRDP to allow connections from RDP clients and Puppet (to apply ongoing configuration, changes). The system services are running and are available for interaction by users. Replenishment occurs each time after an active virtual computer has been provided to a user. In this manner the pool _.174 is refreshed.

The method .146 ensures that users are provided with regularly updated virtual computers by effectivel maintaining suspended virtual computers in the pool 174 based on one or more regularly updated virtual computer templates 156.

The method 146 effectively maintains suspended virtual computers in the pool 174 by providing suspended virtual computers in the pool and ensuring that the suspended virtual computers have a desirable turnover rate. This is performed at block ,2J6..illustrated i Figure 22, When it is determined that the suspended computers do not have a desirable turnover rate that is providing regular updates through chum, old suspended computers are removed at block 238 and new suspended computers are added at block 214 as described,

At block 220 the virtual template to clone is selected based on the last suspended virtual computer that was resumed from the pool 174. I other embodiments the routine at block 236 adds and removes suspended computers based on anticipated demand by users. At block 232 the customization of the active virtual computer 182 includes installing applications according to user class. I this manner suspended virtual computers can be provided in additional class types to the virtual computer templates 156. This is considered to be advantageous as it means that required customization at block .1.S4 for different user classes ca be limited. Examples of user class types incl ude accounting classes, secretari al classes, management classes and so forth.

In order to provide flexibility at block 184, the method 146 includes either installing or uninstalling applications according to a desired user class. Installing applications is generally is less intensive that uninstalling applications. Nonetheless in some situations a reduced number of templates and suspended machines types will be advantageous. I one embodiment word processing and spreadsheet applications are installed on a virtual template .156, During customization at block 1.84 the word processing and spreadsheet applications are uninstalled for a particular user class to allow for a reduced number of virtual templates and suspended virtual computer types.

The method 1.46 creates suspended virtual computers in the pool _,1.74 with each suspended virtual computer having services suspended in a substantially deployed state. The method 146 uses this strategy to ensure that application installation or uninstallation at block 1.84 is limited to 30 seconds or less in time duration. The applicant considers that 20 seconds betwee requesting access to a virtual computer, with a logon request, provides an acceptable wait time by a user. Of course smaller wait times are desirable. in the present embodiment the suspended virtual computers 172 are suspended in memory in a non-rcpeatab!e suspended state The nati ve de-duplication provided by virtual machine software that manages suspended virtual machines operates to conserve random memory space (KVM). In addition by being suspended the processing required to maintain the suspended virtual machines is nil or at least relatively in si gni.fi cant. Suspending in random access memory is the preferred approach. The persistence of the guest's memory is dependent o the virtual host maintaining functionality, i.e. if the power is pulled out of the virtual host a "suspend' guest will lose its memory state.

Solid state storage may provide another viable option, depending on the speed of the solid state store. As such, in some embodiments, the suspended virtual computers may be suspended on disk in a non-repeatable suspended state. Various other storage methods may be possible including being suspended on disk i a repeatable suspended state, or being suspended in memory in a repeatable suspended state.

In another embodiment according to the present invention, a method creates virtual computer templates and determines whether revised virtual computer templates are required with new updates. Suspended virtual computers are created based on the virtual computer templates and are cached for subsequent resuming to provide active virtual computers in response to system logon requests.

Various methods and systems of provisioning virtual computers are provided by preferred embodiments. By separating the user data it i possible to readily allow a user to deploy a different operating system or desktop environment with the same personal settings and applications. For example in some embodiments there is provided a desktop switching facility. The desktop switching facility allows the user to switch between a Macintosh type desktop environment arid a Windows type desktop environment. Examples include switching between LD^'XE and XFCE. An operating switching facilit could for example allow switching between UBU TU and REDHAT. Various embodiments advantageously buffer a lot of prepared VM's in advance to speed up deploying new VM's and address boot storm problems. Updates are provided by refreshing and upgrading the technology inside a virtual machine when a user logs in. The de-duplicating environment serves to reduce the physical memory space. Referring to Figure 23 there is shown a system 243 according to a further preferred embodiment of the present invention. In the system the virtual host server the software used to manage virtual desktops i libvirt and KVM. The description of the system is specific to KVM interfaced through libvirt. As would be apparent, various virtualization environments may be provided in other embodiments The system 243 operates using KVM (Kernel -based Virtual Machine). As detailed on Wikipedia 'a wide variety of guest operating systems work with ^'KVM, including many flavours of Linux, BSD, Solaris, Windows, Haiku, ReactOS, Plan 9, and AROS Research Operating System. In addition Android 2.2, GNU Hurd[8] (Debian K16), Mi nix 3.1.2a, Solaris 10 U3, Darwin 8.0, 1 and more Os's and some newer versions of these with limitations are known to work, A modified version of QEMU can use KVM to run Mac OS X.'

KVM provides a virtual isati on infrastructure for the Linux kernel. KVM supports (interfaced through libvirt) suspending and resuming virtual machines as described in the earlier embodiments. As detailed on Wikipedia, 'libvirt is an open source API, daemon and management tool for managing platform virtualization. It can be used to manage Linu KVM, Xen, VMware ESX, QEMU and other virtualizatio technologies. These APIs are widely used in the orchestration layer of hypervisors in the development of a cloud-based solution.' Libvirt is a high level open source API, daemon and management tool for managing platform virtualization. Libvirt provide a virtual isati on infrastructure interface to create, start, suspend, resume and destroy virtual m chines.

I the system 243 golden images are updated, A golden image is a template for a virtual machine, virtual desktop, virtual server or hard disk image. A golden image is also sometimes referred to as a clone image, master image or base image. To create a golden image, a script is executed to first set up the computing environment exactly the way it is needed, and then saves the disk image as a patter for making more copies. A golden image is an unchanging disk image of an operating system install without any information being stored in RAM. This is due to the golden image being in a pre-hoot state

In the embodiment, the golden image has defined administrator user accounts that are specific to the golden image. There is no regular user accounts or regular user data associated with a golden image. Building golden images in done by executing the script "buildvm.pl <type>^'\ where the value of "<type>" specifies additional customisation^'s that are done to the gold image produced, namely: specifying the type 'lxde' installs the additional software, packages Ixde-common', 'lxde-i con -theme' and 'Ixrandr', and setting the default desktop environment to LXDE. The type of install provides features such as the GU I layout and vi sual environment. The system currently produces two gold image types: LXDE and XFCE. There are no limitations to the type of golden images that can be created.

In the system, the golden images can be listed with the following command:

( root@vhost01 :/home/rainmaker/rainmaker-vmscripts# rbd -p gopc-rain-i mages Is | grep -v desktop.gopc.net gnome-20130611; gno e-20130719; lxde-20130718; lxde-20130719; txde-20130806; lxde-201.30822; lxde-20130827; lxde-2013 828; lxde-20130829; lxde-20130902; Ixde- 20130929; mate-20130719; trinity-201 0719; unity-20130719; xfce-20130719; xfce- 20130806; xfce-20130822; xfce-20130828; xfce-20130902; xfce-20 i 30929;

_ )

The script 'buiidvm.pl' calls the Ubuntu script Vmbuilder' to create a VVf in KVM and start a basic installation of the Ubuntu operating system. When this basic Ubuntu installation is completed, the command Virsh start' is issued and the VM is powered on and a script 'firstboot.sh' is executed from within the newly created VM to do the following Customisations:

1. Write system configuration files, such as /etc ldap conf for LDAP system wide LDAP authentication, /etc/krb.5.conf for Kerberos authentication, and /etc/puppet^/puppetconf to allow on the fly application installation. 2, Pre-instalting all the dependencies for all the applications available in the GoPC AppStore. This is achieved by running a script to iterate through the list of applications in the AppStore and create a list of software dependencies where the dependency is associated with a librar required for the execution of the program as opposed to a separate application,

These application dependencies include libqt4-xml, libtime-date-perl and python-cairo, By pre-installing the application dependencies the installation time of applications via the AppStore is greatly reduced as there are less packages to download arid install. A screenshot of an application store is shown in Figure 24. A script to achieve the update is detailed below.

(

#!/usf bin/perl use strict;

use warnings; use Frontier: : Client qw//;

use Data:: Dumper qw/.Dumper/; main(@ARGV); sub main {

my %dep =· (); my Sserver = Frontier: ;Clie.nt->ne (^*urr => 'http://10.0J0.41 :&081 RPC2', use_objects => 0);

my $apps = SseA-er-^^-callCprovisioning^pplicationlist'); my (^packages - ();

for my Sappnaine (keys %$app&) {

for my $paekag (@{$apps->{ Sappname) }) {

push @ packages, $package->{name};

my SpackageHst = j oin ' (^packages;

open my $fh, '-|', "apt-rdepends Spackagelist" or die "Could not get dependencies: while (my Sline = <$fh>) {

chomp $line; next unless $line =~ /(?:Dqjends|Recommends); (\S+)/;

my $dep ^ $1 ; nest unless $dep ^~~ /^'"lib/ or $dep =-« /^Apython/;

next if $dep =- /^Ali breofflce/;

next if $de =~ /^Alibtagl/;

next if Sdep =~ /^Alib(avjsw|pQstproc)/ && $dep =~ /extra , $deps{$dep} - 1 ;

}

close $fh; my @deps = grep (is_real_paekage($_)} keys %deps; print 'DEBL N_FRONTEND=noninteractive apt-get -y --no-install-reeommends install 'Join ¹ @deps, "\n"; exit 0;

.f

sub is_real_paekage {

my (Spackage) - @_; my $res = 0;

open my $fh, '- , "apt-cache show Spackage" or die "Could not get i fo for $package': $! ";

while (m $1 trie - <$fh>) {

$res = 1 ;

last;

f

close $fh; return $res;

)

_ ) As discussed above, customisations for the exact golden image type is performed. Once the Ttrstb.OGt.sh' script has finished executing, the VM created is powered down, termi ating all operating system services and removing any running state in memory', with the command Virsh destroy¹. The following commands are executed:

rbd snap create "g0:pc-rain-images/<name>@current" rbd snap protect "gopc-rain-images/<name @eurrent )

This makes the golden image disk image available on the storage back-end for cloning. The final step in the process is marking the golden image as 'active' in the provisioning database.

When updated versions of operating system or application software is required a new golden image is built and made active in the provisioning database. Application dependencies are based on the output of the above script and are downloaded from Ubuntu's software repository.

Suspend and resume refer to the process of taking a runnin virtual desktop and temporarily saving its memory^' state. At a later time, it is possible to resume the guest to its original running state, continuing execution where it left off. Suspend does not save a repeatably persistent image of the guest's memory.

A VM that is placed into a suspend state uses the same amount of RAM on the virtual host as a running VM, but consumes virtual I y no CPU time. A large number of suspended VMs can exist on the virtual host without impacting CPU resources. At a high level the process steps of allocating a virtual desktop to a user are conventionally as follows:

1. User requests a virtual desktop

2. M aking a cl onefcop ) of a gold en i m age

3. Powering the cl one on 4. Booting the operating system

5. Starting software services (such as xrdp, sshd and puppet) inside the clone

6. Waiting for the above software services to finish their start up sequences and be avail able for service (i e xrdp is listening on port 3 89 for i ncom ing RDP -client connect! ons)

7. Send a message to the user stating the virtual desktop is read to use In the above list the steps from 4 to 6 can take upwards of 120 seconds to complete. For user driven interactive websites 120 seconds is considered to be too lona to wait. Advantageous with, the use of libvirt/KVM suspension the present embodiment is able to break this process into two independent separate processes to save the effective wait time for a user.

The first process in the embodiment i s as follows:

1. Making a clone(eopy) of a golden image 2. Powering the clone on

3. Booting the operati ng system

4. Starting software services (such a xrdp, sshd and puppet) inside the clone

5. ^'Waiting for the above software services to finish their start up sequences and be available for service ie xrdp i s listening on port 3389 for incoming RDP cli ent connections (We test that xrd is running by the successful TCP connection to port 3389),

6. Suspending the virtual desktop.

In one system, the services started are listed below:

( — —

vahi -daemon. conf; console.conf; console-setup. conf; eontainer-detect conf; control-alt- delete.conf; cron.conf; eups.eonf; dbus.conf; draesg.conf; failsafe, conf; fiush-early-job- log.conf; host ame.conf; hwcloek.conf; hwclock-save.eonf; lightdm conf; modemmanager.eOnf; module-i it-tools. conf; mountall.coiif; mountall-net.conf; mountall- reboot.conf; mountall -shell. conf; mounted-debugfs.conf; mounted-dev conf; mounted- procconf; mounted-run. conf; mounted-tm .conf; mounted-var.conf; networking.conf; network-interface.conf; network-interface-container.conf; network-interfaee- security.conf; network-manager.conf; passwd.conf; ply mouth, conf; plymouth-log.conf; pi yniouth-read . conf; pi ym ou th-spl ash . conf; pi ym outh- stop . cont; pi ymou th-upstart- bridge conf; procps eonf; rc.conf; rcS.ccmf; rc-sysinit.conf; resolveonf.conf; rsyslog.conf; sewtrgb.conf shutdown.conf; ssh.conf; ttyl .conf; tty2.conf; tty3.conf; ttv4.conf; ttyS.conf; tt 6xonf; udev.conf; udev-fallback-graphics.conf, udev-finish.conf; udevmoni tor conf, udevtri gger . conf; upstart-socket-b ri dge. conf ; upstart-udev-bri dge. conf; ureadahead. conf; ureadahead-ofher.conf; wait-for-state.eonf; S201ibnss-ldap; S20nsed; S20saslauthd;

S2Gxrdp; S21puppet; S25openafs-client; SSOpulseaudio; S70pppd-dns; S75sudo; S99grub- common; S99nx sensor; $99nxserver; S99ondemand; S99rc,local )

Through our testing we have found one of the I ast services to com lete it's start-up sequence is the xrdp service.

The second process is as follows: 1. User requests a virtual desktop

2. Resuming the suspended 'virtual desktop

3. Send a message to the user stating the virtual desktop is ready to use

The first process takes approximately 120 seconds to complete, and can be done i dependently of any user interaction. The second process takes less than 1 second, whic means that the time taken for a user requesting a virtual desktop and the virtual desktop is minimal.

Figure 25 provides a screen shot providing a time breakdown of the first process (building a clone of a golden image and putting it in a suspend state) under high virtual host system load. As show the substantial time processes comprise cloning, waiting for XRDP and sleeping.

Figure 26 provides a screenshot providing a time breakdown of the second process (setting virtual desktop to resume state) under high virtual host system l oad. Because the cloning process is decoupled from the user interaction, system load on the virtual host does not substantially impact the interactive website processes of a user bein allocated a virtual desktop.

In computing, data de duplication is a specialised data compression technique for eliminating duplicate copies of repeating data De-duplication is applied to both contents in RAM and contents on disk storage. In the system de-duplication is provided by KVM for RAM and Ceph for network storage. Owing to the fact all virtual desktops of the same type are cloned from the same relatively small set of golden images the set of virtual desktops compress very well, giving significant savings, in terms of required RAM and disk usage. This is considered to be advantageous Cloned images are built and put into a suspend mode (as detailed above) , and then placed in a FIFO (First In, First Out) queue (referred to as the Virtual Desktop Poo!) tor later allocation and use by a user.

The code listed below regularly polls for the size of the suspended virtual desktop allocation pool, and triggers the constaiction of a clone from a gold image when the number of suspended virtual desktops drops below the desired suspended pool size.

(

#!/usr/bin/perl use strict;

use warnings; use Frontier: : Client q //;

use Data:: Dumper qw/Dumper/;

use POSIX qw/:sys_waitji my SCHILD LIMIT ^ 7;

my children = (); sub REAPER {

while ((my Sehild = waitpid(-l, WNOHANG)) > :Q) (

del ete $cliildren { Schild ,

}

$SIG{CHLD} = \&REAPER;

1 main(@A GV);

sub main {

ray Sprovisionin = Frontier:: CI ient->new('urr -> 'http^/ rovisioningcSOSl/RPC^, use_objects => 0); my $desired = {

kde => 25,

xfce -> 1 5,

};

$SIG{CHLD) = \&REAPER;

while (1) {

eval ί

for my Sbasename (keys %$desired) {^' ray Spools = Sprovistoning^caHCprovisioning-m oh^jnepoolsize');

ray Sspareeount ^~ Spool s->($basename} || 0;.

my Spool si ZQ ^ $desjred->{ Sbasenanie) |] 3; if ($spareeount < Spool si ze && scalar keys %children < $CH1LD_LIM1T) { my $pid = fbrk();

'httpi/^'/ rch 1 ));

if ($@) l

print "$@V;

}

exit 0;

} else {

print "Fork error: Sl^'.n":

J

} else {

sleep 1;

}

sleep 1; if ($@) {

print "Error oecured: S@\n";

sleep 15;

ί

}

)

Virtual desktops have a life-cycle of the following states: 1. Building - when a virtual desktop in in the process of being cloned from a gold image, powering o and starting service up until the virtual deskto is put into a suspend state.

2. Available ~ when a virtual desktop has been put into a suspend state and is placed into the Virtual Deskto Pool ready for user allocation.

3. hi -Use - when a virtual desktop has been allocated to user, has been resumed from it's suspended state and is currently in use,

4. Finished - when a virtual desktop is no longer in by a user and has been powered off by the system and the associated disk image has been removed, When a user requests a virtual desktop via the GoPC website a suspended virtual desktop is chosen from the Virtual Desktop Pool (the oldest virtual desktop is always chosen here) and resumed with the command Virsh resume'. Once resumed DNS records are updated to point <user's usernanie>.desktop.gope,iiet to the virtual desktop's IP address and the user's applications are installed and the user's configurations are applied. All user created data and user application configuration and customisation is stored on networked storage (networked home directories) and not on the virtual desktops themselves. The networked home directories for users allows for the persistence of user data and configuration between different instances of virtual desktops.

User data and presented to the virtual desktop systems via the Ai ^'S distributed networked file system. User home directories are mounts from the following location: /afs/gcpc.net/users <user's unique U1D number>.

Each time a new golden image is built the latest versions of operating system software, application software and application software dependencies from Ubuntu's software repository . To minimise any potential incompatibilities between new versions of software with user data and user configurations from older versions of software gold images are built on Ubuntu's LTS (Long Term Support) editions. Ubuntu LTS editions are created with a release life time of 5 years, and software compatibility between updated versions of software are tested by Ubuntu's internal QA teams to prevent this type of software breakages. Once a virtual deskto has been determined to no longer be in use (either because of user interaction or due to lack of interactive user connections via RDP or NX) it is terminated. Termination involves powering the virtual desktop off (via the command 'virsh destroy'), removing the machine definition from libyirt/ VM (via the command 'virsh undefine') and removing the cloned disk image (via the command 'rbd rm'). Once a virtual desktop has been terminated it no longer uses any resources on the virtual host. Code to terminate virtual desktops is listed below:

( def cl ean_sessions(cleanup) :

Server =^' xmlrpcl ib , S erverProxy fhttp : //orchestrati on: 8000') d now = datetime.datettme.todayO

for session i db-Session,objects.filter(stoptime = None, type—0):

machine - sessionjnachine usertype = timeouts. et .(sessi on. userid, 0)

idletime = idletirnes[usertype] if ( sessi on. lastseen + datetiTne.timedelta(niinutesHdletime)) < now: '

if cleanup:

print sen'er.DeleteDesktopIdle(session. userid)

# free users,, disconnect after 1 hours active time

elif usertype = 0 or usertype = 1 :

if (session. starttirae + datetime.timedelta(minutes=60)) < now:

if cleanup:

print server. DeleteDesktopIdle( sessi on.userid)

)

Referring to Figure 27 there is shown a schematic diagram of a computer system 240 that is configured to provide preferred arrangements of systems and methods described herein. The computer system 240 is provided as. a distributed computer environment containing a number of individual computer systems 242 (computers/computing devices) that cooperate to provide the preferred arrangements. In other embodiments the computer system 240 is provided as a single computing device. As shown, a first one of the computing devices 242 includes a memory facility 244- The memory facility 244 includes both 'general memory ^* and other forms of memory such as virtual memory; The memory facility 244 is operativel connected to a processing facility 246 includin at least one processor. The memory facility 244 includes computer information .in the form of executable instructions and/or computer data, The memory facility 244 is accessible by the processing facility 246 in implementing the preferred arrangements.

As shown each of the computing devices 242 includes a system bus facilit 248, a data store facility 250, an input interface facility 252 and an output interface facility 254. The data store facility 250 includes computer information in form of executable instructions and/or computer data. The data store facility 250 is operatively connected to the processing facility 246. The data store facility 250 is operatively connected to the memory facility 244. The data store facility 250 is accessible by the processing facility 246 in implementing the preferred arrangements. Computer information may be located across a number of devices and be provided in a number of forms. For example the data store facility 250 may include computer information, in the form of executable instructions and/or computer data. The computer data information may be provided in the form of encoded data instructions, data signals, data structures, program logic for server side operation, program logic for client side operation, stored webpages and so forth that are accessible by the processing facility 246,

O one level, input interfaces allow computer data to be received by the computing devices 242. On another level, input interfaces allow computer data to be received from individuals operating one or more computer devices. Output interfaces, on one level, allow for instructions to be sent to computing devices. On another level, output interfaces allow computer data to be sent to individuals. The input and output interface facilities .252, 254 provide input and output interfaces that are operatively associated with the processing facility 246. The input and output facilities 25_.2, _.25_.4 allow for communication between the computing devices 242 and individuals,

The computing devices 242 provide a distributed system in which several devices are in communication over network and other interfaces to collectively provide the preferred arrangements. Preferably there is provided at least one client device in the system of computing devices 242 where the system is interconnected by a data network.

The client device may be provided with a client side software product for use in the system which, when used, provides systems and methods, where the client device and other computer devices 242 communicate over a public data network. Preferably the software product contains computer information in the form of executable instructions and/or computer data for providing the preferred arrangements.

Input interfaces associated with keyboards, mice, trackballs, touchpad's, scanners, video cards, audio cards, network cards and the like are known. Output interfaces associated with monitors, printers, speakers, facsimiles, projectors and the like are known. Network interfaces in the form of wired or wireless interfaces for various forms of LANs, WANs and so forth are known. Storage facilities in the form of floppy disks, hard disks, disk cartridges, CD-ROMS, smart card, RAID systems are known. Volatile arid non-volatile memory types including RAM, ROM, EEPROM and other data storage types are known. Various transmission facilities such as circuit board material, coaxial cable, fibre optics, wireles facilities and so forth are known.

It is to be appreciated that systems, components, facilities, interfaces and so forth can be provided in several forms. Systems, components, facilities, interfaces and so forth may be provided as hardware, software or a combination thereof. The present invention may be embodied as computer readable memory, a personal computer and distributed computing environments.

In addition the present invention may be embodied as: a number of computer executable operations; a number of computer executable components; a set of process operations; a set of systems, facilities or components; a computer readable medium having stored thereon computer executable instructions for performin computer implemented methods and/or providing computer implemented systems; and so forth. In the case of computer executable instructions they preferably encode the systems, components and facilities described herein. For example a computer-readable medium may be encoded with one or more facilities configured to run an application configured to carry out a number of operations forming at least part of the present arrangements. Computer readable mediums preferably participate in the provision, of computer executable instructions to one or more processors of one or more computing devices.

Computer executable instructions- are preferably executed by one or more computing devices to cause the one or more computing devices to operate as desired. Preferred data structures are preferably stored on a computer readable medium. The computer executable instructions may form part of an operating sy stem of a computer device for performing at least part of the preferred arrangements. One or more computing devices may preferably implement the preferred arrangements.

The term computer is to be understood as including all forms of computing device includin servers, personal computers, smart phones, digital assistants and distributed computing systems.

Computer readable mediums and so forth of the type envi saged are preferably intransient. Such computer readable mediums may be operatively associated with computer based transmi ssion facilities for the transfer of computer data. Computer readable mediums may provide data signals. Computer readable mediums preferabl include magnetic disks, optical disks and other electric/magnetic and physical storage mediums as may have or find application in the industry.

Components, systems and tasks may comprise a process involving the provision of executable instructions to perform a process or the execution of executable instructions within say processor. Applications or other executable instructions may perform method operations in different orders to achieve similar results. It is to be appreciated that the blocks of systems and methods described may be embodied in any suitable arrangement and in any suited order of operation. Computing facilities, modules, interfaces and the like may be provided in distinct, separate Joined, nested or other forms arrangement. Methods will be apparent from systems described herein and systems will be apparent from methods described herein.

As would be apparent various alterations and equivalent forms may be provided without departing from the spirit and scope of the present invention. This i ncludes modifications within the scope of the appended claims along with all modifications, alternative construct! ons and equival ents. There is no intentio to limit the present invention to the specific embodiments shew in the drawings. The present invention is to be construed beneficiall to the applicant and the invention given its full scope.

In the present specification, the presence of particular features does not preclude the existence of further features. The words 'comprising', ' including^* and 'having' are to be construed in an inclusive rather than an exclusive sense,

It is to be recognised that any discussion in the present specification is intended to explain the context of the present invention. It is not to be taken as an admission that the material discussed formed part of the prior art base or relevant general knowledge in any particular country or regi on.

Claims (1)

1. THE CLAIMS DEFINI G THE INVENTION ARE AS FOLLOWS:

   1. A method of providing virtual computers, the method including; ensuring that a series of system logon requests by users results in each user being provided with a series of virtual computers that reflect applied updates; each virtual computer being provided by resuming a virtual computer from a pool of suspended virtual computers where the suspended virtual computers are based on at least one virtual computer template; customizing each virtual computer after being resumed from the pool of suspended virtual computers to provide an active virtual computer; and regularly updating the at least one virtual computer template,

   2. A method as claimed in claim 1 including ensuring that the virtual computers provided to the users are regularly updated by terminating virtual computers based on system logoff requests by users.

   3, A method as claimed in claim 1 or 2 including ensuring that the virtual computers provided to the users are regularly updated by maintaining suspended virtual computers in the pool based on one or more regularly updated virtual computer templates.

   4 A method as claimed in claim 3 wherein maintaining suspended virtual computers in the pool includes creating suspended virtual computers in the pool and ensuring that the suspended virtual computers have a desirable turnover rate.

   5. A method as claimed in claim 3 or 4 wherein maintaining suspended virtual computers in the pool include providing suspended virtual computers in the pool and deleting or otherwise removing older suspended virtual computers from the pool.

   6. A method as claimed in any one of claims 1 or 5 including providing sus ended virtual computers in the pool with each suspended virtual computer having services suspended in a substantially deployed state.

   7. A method as claimed in art one of claims I to 6 including providing the suspended virtual computers in the pool with each suspended virtual computer having remote deskto services suspended in a substantially deployed state.

   8. A method as claimed in claim 7 wherein the substantially deployed state comprises a state in which the services are available as part of a fully operational system in the sense of being enabled and functional.

   9. A method as claimed in claim 8 including providing the suspended virtual computers in the pool by cloning one or more of the virtual computer templates to provide a number of virtual computers; installing applications on the virtual computers according to the different user classes; arid suspendi g the virtual computers.

   10. A method as claimed in claim 9 wherein in order to accommodate different user classes, the method includes uninstalling applications' from a number of virtual computers cloned from the at least one virtual computer template.

   1 1. A method as claimed in claim 9 or 10 including creating suspended virtual computers in the pool with each suspended virtual computer having services suspended in a substantially deployed state; and ensuring that application installation or un i stallation is limited to 30 seconds or less in duration.

   12. A method as claimed in any one of claims 1 to 1 1 wherein customizing the resumed virtual computer for a user includes allocating a securit profile for the user.

   13. A method as claimed in an one of claims 1 to 12 including communicating with a cl ssification update facility to instruct active virtual computers to install or remove applications in response to alterations in user classification.

   14. A method as claimed in any one of claims 1 to 13 wherein the suspended virtual machines are suspended in memory in a repeatahle suspended state.

   15. A method as claimed in any one of claims I to 13 wherein the suspended virtual machines are suspended on disk in a non-repeatatale suspended state.

   16. A method as claimed i any one of claims I to 13 wherein the suspended virtual machines are suspended on disk in a repeatahle suspended state.

   17. A method of providing virtual computers, the method including: creating at least one virtual computer template; determining whether the or each at least one virtual computer template require updating caching suspended virtual computers based on the at least one virtual computer template; resuming the cached suspended virtual computers to provide active virtual computers i response to s tem logon requests.

   18. A method as claimed in claim 18 wherein each suspended virtual computer is cached with services suspended in a substantially deployed state.

   1 . A method of providing virtual computers, the method including: creating at least one virtual computer template; determining whether the or each at least one virtual computer template requires updating; caching suspended virtual computers based on the at least one virtual computer template; resuming the cached suspended virtual computers to provide active virtual computers in response to s tem logon requests.

   20. A method as claimed in claim 1.8 wherein each suspended virtual computer is cached with services suspended in a substantially deployed state. , A method of providing virtual computers, the method including: providing a series of virtual computers as a result of a series of logins; wherein providing each virtual computer in the series of virtual computers includes resuming a suspended virtual computer from a pool of suspended virtual computers to provide a resumed virtual computer and customizing the resumed virtual computer; the suspended virtual computers in the pool being based at least one virtual computer template. , A method as claimed i claim 20 including creating suspended virtual computers in the pool with each suspended virtual computer having services suspended in a substantially deployed state. , A method of providing virtual computers, the method including: caching suspended virtual computes; and resuming the cached suspended virtual computers to provide active virtual computers in response to system logo requests. , A method of providing virtual computers, the method including: providing a series of virtual computers as a result of a series of logins by a user; wherein providing each virtual computer in the series of virtual computers includes resuming a suspended virtual computer to provide a resumed virtual computer; and customizing the resumed virtual computer for the user. , A method of providin virtual computers, the method including: ensuring that a series of system logon requests by users results in the users being provided with a series of virtual computers that reflect applied updates; each virtual computer being provided by resuming a virtual computer from a pool of suspended virtual computers where the suspended virtual computers are based on at least one virtual computer template; customizing each virtual computer after being resumed from the pool of suspended virtual computers to provide an active virtual computer; and regularly updating the at least one virtual computer template. , A computer system for providing virtual computers, the computer system including: a pool facility for storing a pool of suspended virtual computers based on at least one virtual computer template; and a provision manager for providing a series of virtual computers as a result of a series of s stem logon requests by users; the provisio manager including an update facility, a resume facility and a customization facility; the update facility for updating the or each at least one virtual computer template; the resume facility for resuming virtual computers from the pool of suspended virtual computers provided by the pool facility, the customization facility for customizing virtual computers after being resumed from the pool of suspended virtual computers to provide active virtual computers. , A computer system as claimed in claim 26 wherein the provision manger includes a terminatio facilit for terminating virtual computers based on system logoff requests; the termination facility for assisting: with ensuring that the virtual computers provided to the users are regularly updated. , A computer system as claimed in claim 26 or 27 wherein the provision manger is able to ensure that the virtual computers provided to the users are regularly updated by maintaining suspended virtual computers in the pool based on one or more regularly updated virtual computer templates, , A computer system as claimed in claim 28 wherein the provision manager is configured to maintain suspended virtual computers in the pool by ensuring that the suspended virtual computers have a desirable turnover rate. , A computer system as claimed in claim 28 or 29 wherein the provision manager is configured for maintaining suspended virtual computers in the pool by creating suspended virtual computers in the pool and deleting or other removing older suspended virtual computers in the pool,

   31 . A computer system as claimed in any one of claims 26 to 30 wherein the provision manger includes a creation facility configured for providing suspended virtual computers in the pool with each suspended virtual computer having services suspended in a substantially deployed state,

   32. A computer system as claimed in claim 31 wherein the creation facility is configured for providing the suspended virtual computers in the pool with each suspended virtual computer having remote desktop services suspended in a substantially deployed state,

   33. A computer system as claimed in claim 32 wherein the substantially deployed state comprises a state in which services are available as part of a fully operational system in the sense of being enabled and functional.

   3:4, A computer system as claimed in any one of claims 27 to 33 wherein the provision manage includes: a creation facility for providing the suspended virtual computers in the pool by cloning one or more of the at least one virtual computer template to provide a number virtual computers; an installation facility for installing applications according to the different user classes; and a suspension facility for suspending the virtual computers.

   35. A computer system as claimed in claim 34 wherein the provision facility includes an uniiistall facility for accommodating different user classes, the uniiistall facility for uninstalling applications from virtual computers cloned from the at least one virtual computer template. 6. A computer system as claimed in any one of claims 1 to 35 including a classification update facility for instructing active virtual computers to install or remove applications from in response to alterations in user classifi ation,

   37. A computer system for providing virtual computers to users, the computer system including: a provision manager for providing a series of virtual computers for a series of system logon requests by users, the provision manager including a resume facilit and a customization facility; the resume facility for resuming suspended virtual computers; the customization facility for customizing virtual computers for the users after being resumed,

   38. A computer system for providing virtual computers, the computer system including: a creation facility for providing virtual computer templates; an update facility for detennining whether revised virtual computer templates are required with new updates; a cache facility for caching suspended virtual computers based on the virtual computer templates; and a resum facility for resuming the cached suspended virtual computers to provide virtual computers in response to system logon requests by users.

   39. A computer system as claimed in claim 38 wherein the cache facility is configured to cache each suspended virtual computer in a state with services suspended in a substantially deployed state.

   40. A computer system for providing virtual computers, the computer system including; a pool facility for storing a pool of suspended virtual computers based on at least one virtual computer template; and a provision manager for providing a series of virtual computers as a result of a series of system logon requests by users; the provision manager including an update facility, a resume facility and a customization facility; the update facility for updating the or each at least one virtual computer template; the resume facility for resuming virtual computers from the pool of suspended virtual computers provided by the pool facility,; the customization facility for customizing virtual computers after being resumed from the pool of suspended virtual computers to provide active virtual computers.

   41 . A computer system as claimed in claim 40 wherein the cache facility is configured to cache each suspended virtual computer in a state with services suspended in a substantially deployed state,

   42. A computer system for providing virtual computers, the computer system including: a creation faci lity for providing virtual computer templates; an update facility for determining whether revised virtual computer templates are required with ne updates; and a provision facility for providing virtual computers in response to system logon requests by users.

   43. A method of providing virtual computers, including: creating virtual computer templates; providing new virtual computers in response to system logon requests by users; and updating the computer templates,

   44. A method or system as claimed above, run via at least one computer processor.

   45. A non-transient computer readable medium; having stored thereon computer executable instruetions for performing a computer implemented method as claimed above.

   46. A non-transient computer readable medium having stored thereon computer executable instructions encoding a computer implemented syste as claimed above.

   47. A non-transient computer- readable medium encoded with one or more facilities configured to run an application configured to carry out a number of operations to provide a method or system claimed above.