Digital Signature Securing Remote Script Execution

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing script execution systems face security concerns due to improper execution of scripts at incorrect locations or by wrong user accounts, leading to undesirable computer actions, as they lack effective centralization and management of scripts.

Innovation Solution

A method and system where a management system receives a user script, issues execution data with validation parameters, signs it with a private key to create a digital signature, and authorizes communication to a remote execution tool for secure execution on a remote system, ensuring scripts are executed by the correct user account within specified parameters.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If scripts are executed without digital signature validation, then script execution speed is improved, but security and authorization control deteriorate

Engineering Contradiction:
Improvescript execution speedVSAvoidscript execution security
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The management system performs preliminary actions by validating the digital signature and checking validation parameters before script execution occurs. This preliminary validation ensures that only authorized scripts are executed, preventing unauthorized script execution while maintaining execution speed through efficient validation mechanisms.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The digital signature acts as an intermediary mechanism between the script and the execution environment. It provides a secure link that verifies the script's authenticity and authorization without requiring complex validation processes during execution, thus maintaining both security and speed.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If centralized management of scripts is implemented, then script security and authorization control are improved, but system complexity increases

Engineering Contradiction:
Improvescript authorization controlVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the security validation functionality from the script execution process itself and places it in the management system. By separating the validation logic into a dedicated management layer, the system achieves centralized control without embedding complex validation mechanisms into every script execution path.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The digital signature creates a cryptographic copy of the script's authorization information that can be verified without modifying the original script or execution process. This copying approach allows centralized validation while maintaining script simplicity and execution straightforwardness.

Inventive Principle:
Principle #26Copying

3Manufacturing precision

If validation parameters are checked before execution, then script execution accuracy is improved, but execution time increases

Engineering Contradiction:
Improvescript execution accuracyVSAvoidexecution time
Core Design Contradiction:
Manufacturing precisionVSLoss of time

Solution Approach 1:

Validation parameters are checked in advance before script execution begins. This preliminary checking ensures accurate script execution by verifying authorization and parameters upfront, while the efficiency of the validation process minimizes any time loss.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent replaces complex mechanical validation checks with efficient cryptographic digital signature verification. This substitution allows thorough validation of execution accuracy parameters while reducing the time required for validation through optimized cryptographic operations.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS9940480B2Securing delegated remote management with digital signature
Publication Date: 2018.04.10 RED HAT INC
  • US9940480B2 patent drawing
  • US9940480B2 patent drawing
  • US9940480B2 patent drawing

AI summary

A system and method of executing a script includes receiving, by a service user account module, a user script from a first user account. The method includes issuing, by a management system, execution data including the user script and validation parameters. The method includes signing, by the management system, the execution data with a private key. Responsive to signing the execution data, the execution data further includes a digital signature. The method further includes authorizing, by the management system, communication to a remote execution tool, where authorization requires the digital signature. The method further includes sending, to the remote execution tool, the execution data including the digital signature. The method further includes confirming, by the remote execution tool, the validation parameters. The method further includes, responsive to confirming the validation parameters, executing, by the remote execution tool, the user script on a remote system for the first user account.