Accessory Device Authentication and Access Policy Enforcement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Accessory devices lack secure access control mechanisms, allowing malicious users to exploit computing resources connected to them, potentially leading to data theft, malware installation, and network infiltration.
Innovation Solution
Implementing authentication mechanisms within accessory devices to validate host computing devices, applying different access policies based on authentication status, and allowing authenticated devices to set, modify, or remove access policies, using digital certificates and public keys to ensure secure access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If accessory devices provide open access to computing resources, then ease of operation is improved, but security is worsened
Solution Approach 1:
The accessory device performs authentication of the host computing device before granting access to computing resources. The authentication mechanism validates the host's identity in advance, ensuring that only authorized devices can access USB ports, Ethernet ports, video ports, audio ports, and other resources. This preliminary security check prevents unauthorized access while maintaining ease of operation for legitimate users.
2Object-affected harmful factors
If authentication mechanisms are implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent introduces an authentication mechanism as an intermediary layer between the host computing device and the accessory device's computing resources. This intermediary validates the host's identity through authentication protocols before allowing access. The authentication mechanism acts as a mediator that security-checks all access requests, providing robust security without requiring complex modifications to the core accessory device functionality.
3Object-affected harmful factors
If access policies are applied based on authentication status, then security is improved, but ease of operation is worsened
Solution Approach 1:
The patent implements different access policies for different authentication states. When the host computing device is authenticated, full access to computing resources including USB ports, Ethernet ports, video ports, and audio ports is granted. When unauthenticated, access is restricted or denied. This local quality approach tailors the level of access to the specific authentication status, providing maximum security when needed and full functionality when the host is verified legitimate.
Data Source
AI summary
An accessory device receives authentication information from a host computing device connected thereto and determines whether the authentication information is valid. If the authentication information is valid, the accessory device applies a first access policy that specifies whether the accessory device can provide the host computing device with access to none, some, or all of various computing resources of the accessory device. If the authentication information is not valid, the accessory device applies a second access policy that is different than the first access policy. The accessory device can also be provisioned with access policies by a host computing device if the host computing device successfully authenticates with the accessory device. In either case, authenticating the host computing device may include verifying a digital signature of a certificate provided by the host computing device using a public key of a certificate authority that has been provisioned to the accessory device.