Device Risk-Based Trusted Verification for Remote Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current remote access technologies face challenges in verifying whether a user device accessing a business server is legitimate, leading to potential information leakage due to external hackers, as they do not adequately assess the risk score of the user device before granting access.
Innovation Solution
A device risk-based trusted device verification system calculates a risk score for user devices by performing vulnerability and additional checks, transmitting this score to a device management server to determine trustworthiness, and monitors data transmission between the user device and business server in real-time to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If remote access is allowed without risk verification, then ease of operation is improved, but reliability deteriorates due to information leakage risks from unauthorized devices
Solution Approach 1:
The system performs preliminary risk verification by calculating risk scores for user devices before allowing remote access to the business server. This advance verification ensures that only devices meeting security criteria can establish connections, preventing information leakage while maintaining operational convenience for authorized users
2Reliability
If risk verification is implemented, then reliability is improved, but device complexity increases due to additional verification processes
Solution Approach 1:
The verification system introduces an intermediary risk score calculation mechanism that acts as a mediator between the user device and the business server. This intermediary layer simplifies the overall verification process by providing a single risk score metric that determines access eligibility, rather than requiring multiple complex verification steps
3Reliability
If real-time monitoring is implemented, then reliability is improved through continuous security checks, but use of energy increases due to continuous data transmission monitoring
Solution Approach 1:
The real-time monitoring system operates autonomously once the risk verification is complete, automatically monitoring data transmissions between the verified device and business server without requiring additional human intervention or excessive energy consumption. The system self-manages the monitoring process efficiently
Data Source
AI summary
A device risk-based trusted device verification and remote access processing includes: an inspection process start unit for starting a risk inspection process based on risk inspection information set in a device management server; a risk score calculation unit for performing a vulnerability check process and an additional check process corresponding to inspection items based on the risk inspection information to calculate a risk score for the user device through the check result; a trusted device confirmation unit, when a function of the risk score calculation unit is completely performed and the risk score is completely calculated, for transmitting the calculated risk score to the device management server, thereby allowing the device management server to determine whether the user device is a trusted device; and an access monitoring unit for monitoring data transmission and reception in real time between the user device and the business server upon remote access.