External Desktop Agent for Secure Remote Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Remote desktop agent software lacks adequate security measures, allowing potential access to sensitive data and compromising system integrity, which is a concern for secure environments that restrict third-party software installations.

Innovation Solution

An external desktop agent that converts bi-directional keyboard and mouse signals to a uni-directional PS/2 interface, preventing file-level access and using a PS/2 to USB adapter to ensure secure, unidirectional communication without installing software on the target computer system.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If remote desktop agent software is installed on the target computer system, then access control and management capabilities are improved, but security risks and system integrity are worsened

Engineering Contradiction:
Improveaccess control capabilityVSAvoidsystem integrity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a remote access appliance as an intermediary device that sits between the control computer and the target computer system. This appliance receives control signals from the control computer, converts them to appropriate protocols, and transmits them to the target system via PS/2 interface. The intermediary architecture allows access control functionality without requiring software installation on the target system, thereby maintaining system integrity while providing remote management capabilities.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system is segmented into three distinct components: the control computer, the remote access appliance, and the target computer system. By separating the access control functionality into a standalone appliance rather than integrating it into the target system through software installation, the patent maintains the integrity and security of the target system while still providing remote access capabilities.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If bi-directional USB interface is used for remote access, then file-level access and control capabilities are improved, but security risks and data exposure are worsened

Engineering Contradiction:
Improvefile-level access capabilityVSAvoiddata exposure risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The remote access appliance acts as an intermediary that translates control signals from the control computer into PS/2 protocol signals for the target system. This intermediary architecture inherently blocks bi-directional file-level access because PS/2 is a unidirectional input interface. The appliance converts USB or network signals into PS/2 compatible signals, allowing control functionality while preventing direct file access to the target system.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the electronic/bi-directional USB interface with a mechanical/uni-directional PS/2 interface for communication with the target system. The PS/2 interface, being an older unidirectional input interface, physically prevents bi-directional file access while still allowing keyboard and mouse control signals to be transmitted to the target system through the remote access appliance.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS9026700B2External desktop agent for secure networks
Publication Date: 2015.05.05 RGB TECHNOLOGIES AB
  • US9026700B2 patent drawing
  • US9026700B2 patent drawing
  • US9026700B2 patent drawing

AI summary

Methods and apparatus are provided for externally managing control target devices such as computer systems, cameras, recorders, etc., in an effective and secure manner. In particular examples, an external desktop agent is connected to a computer system. Remote desktop agent software need not be installed on the computer system. The external desktop agent receives commands such as keyboard and mouse commands from a control computer over a mechanism such as a bi-directional network. To provide security, the external desktop agent does not directly connect to the computer system over an interface such as universal serial bus (USB) but instead provides a PS/2 interface that connects to the computer system through a standard PS/2 to USB adapter. PS/2 does not allow bi-directional command signaling and does not provide file level access to potentially sensitive computer system data.