Automated Key Management for Remote Devices via Single Sign-On

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Manually setting up secure remote connections over networks using SSH protocols is tedious and error-prone, especially when multiple devices and key management are involved, leading to security issues and inefficiencies.

Innovation Solution

An automated key management system using single sign-on techniques that maintains a data record of authorized devices and stores public keys, allowing secure remote connections without manual key generation and configuration for each device.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual key generation and configuration is performed for each device connection, then security can be maintained through proper key management, but the connection setup process becomes tedious and error-prone

Engineering Contradiction:

Improveconnection setup accuracyVSAvoidconnection setup effort

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system enables automated self-service key management where the key management server automatically generates, distributes, and manages cryptographic key pairs for devices. The server responds to connection requests by automatically providing authentication credentials, eliminating the need for manual key configuration by users while maintaining security through automated key lifecycle management.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The key management server performs preliminary actions by pre-generating and storing cryptographic key pairs for devices before actual connection needs arise. Public keys are pre-distributed to authorized devices and stored in secure repositories, so when a connection is needed, authentication credentials are already prepared and immediately available, eliminating setup delays.

Inventive Principle:

Principle #10Preliminary action

2Ease of operation

If automated key management is implemented, then connection setup becomes efficient and user-friendly, but system complexity increases due to key management infrastructure

Engineering Contradiction:

Improveconnection setup effortVSAvoidkey management system complexity

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The key management server acts as an intermediary between devices needing authentication and the cryptographic key infrastructure. It centralizes key generation, storage, and distribution functions, shielding individual devices from the complexity of key management while providing automated authentication services. The server mediates all key-related operations, simplifying the user experience despite backend complexity.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The key management server provides universal authentication services that can be used by multiple devices and applications across the network. A single infrastructure supports various connection types and protocols, managing cryptographic credentials for diverse devices through a unified system, thereby reducing overall system complexity through consolidation.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Productivity

If public keys are stored for multiple target devices, then access authorization can be efficiently managed, but security risks increase if key management is not properly controlled

Engineering Contradiction:

Improveaccess management efficiencyVSAvoidsecurity assurance

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The key management server implements feedback mechanisms where it receives connection requests, verifies device authorization against stored public keys, and dynamically controls authentication credential distribution. The system continuously monitors and adjusts key access based on connection requests and authorization policies, ensuring that only authorized devices receive cryptographic credentials while maintaining efficient access management.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The key management server serves as a secure intermediary that controls the distribution of cryptographic credentials between devices. It mediates the relationship between stored public keys and authentication operations, ensuring that key usage is properly authorized and controlled. The server verifies device identities and enforces access policies, preventing security risks while enabling efficient multi-device access management.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS11489824B2Automated key management for remote devices using single sign-on techniques

Publication Date: 2022.11.01 EMC IP HLDG CO LLC

AI summary

Techniques are provided for automated key management for accessing remote devices using single sign-on techniques. One method comprises maintaining a data record identifying target user devices that a given source user device is authorized to access; and initiating storage of a public key of the given source user device in a file of at least one target user device, wherein the given source user device accesses the at least one target user device using a secure remote connection protocol based on the public key of the given source user device stored in the file of the at least one target user device. The data record may further comprise a fingerprint of a key of the at least one target user device, and the method may further comprise comparing a fingerprint of the key returned by the at least one target user device to the fingerprint of the key obtained from the data record.