Filter Driver for Secure Remote Desktop Display Blanking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional systems for remote desktop management fail to reliably prevent local display devices from showing data generated by remote computing devices, especially when multiple monitors are involved, and often interfere with authorized applications or leave systems vulnerable to unauthorized viewing.
Innovation Solution
A method and system that filters requests to power up or down local display devices based on the presence of a remote user, using a driver to intercept operating system requests and prevent display adapter activation when a remote user is active, ensuring secure blanking of the local desktop even with graphically intense applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a full-screen overlay is used to hide the local workstation desktop when being remoted, then the local display security is improved, but the overlay cannot be created when a media player application has already generated an overlay, leaving the local display visible
Solution Approach 1:
The patent introduces a filter driver as an intermediary component in the display adapter infrastructure. This filter driver intercepts and manages overlay requests before they reach the display adapter, allowing it to create a secure overlay even when media player applications have already generated overlays. The filter driver acts as a mediator that coordinates between the remote control software and existing application overlays, ensuring security is maintained without conflicting with media player functionality.
2Reliability
If a full-screen overlay is used to prevent local viewing, then security is improved, but the overlay can only be created on one monitor, leaving other monitors exposed
Solution Approach 1:
The filter driver is designed with universal functionality to manage display security across multiple monitors simultaneously. Instead of being limited to a single monitor overlay, the filter driver can create and manage secure overlays on all connected display devices through the display adapter infrastructure, ensuring comprehensive security coverage across multi-monitor configurations.
3Ease of operation
If the local display is enabled for remote control functionality, then remote desktop operation is improved, but local users can view what the remote user is doing
Solution Approach 1:
The filter driver is installed and configured in advance in the display adapter infrastructure before remote control sessions begin. This preliminary setup ensures that when a remote user connects, the filter driver is already in position to intercept display requests and create secure overlays, maintaining both remote control functionality and display security without requiring any additional action during the remote session.
Data Source
AI summary
A method and system for preventing a local display device from, displaying data generated by a remote computing device is described. The system includes a local agent for facilitating a remote session; an operating system generating a request to enable a display device controlled by a display adapter; and a filter executing in a driver and in communication with the local agent, the filter intercepting the request generated by the operating system. The filter transmits the request to the local agent when a remote user is active or to the display adapter when the remote user is inactive. The filter will transmits a signal to the operating system that the display adapter has enabled the display device when the filter transmits the request to at least one of the local agent and the display adapter.