Hypervisor-Based Remote Computer Remediation via Secure Gateway

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Remote computers used as personal workstations in organizations often require adaptation to function within organizational computing resources, but this process is time-consuming and challenging due to security concerns and the need for physical proximity, especially when faults like virus infections occur.

Innovation Solution

The implementation of a type-1 hypervisor that allows for remote installation and management, enabling the creation of a secure connection between the organizational computing environment and the remote computer, facilitating secure remote access, provisioning, and remediation through virtual software appliances and secure communication channels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a computer is used remotely from organizational premises, then user flexibility and work mobility are improved, but security risks and difficulty of remote remediation increase

Engineering Contradiction:
Improvework mobilityVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a gateway server as an intermediary between the remote computer and organizational computing resources. This gateway establishes secure communication channels, performs authentication, and mediates all interactions, thereby maintaining security while enabling remote access. The gateway acts as a trusted mediator that resolves the contradiction between work mobility and security.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of repair

If IT personnel physically access a faulty remote computer for remediation, then repair capability is improved, but time consumption and operational disruption increase

Engineering Contradiction:
Improverepair capabilityVSAvoidtime consumption
Core Design Contradiction:
Ease of repairVSLoss of time

Solution Approach 1:

The patent replaces the mechanical approach of physical travel with remote electronic access. IT personnel use the gateway server to remotely connect to and diagnose faulty computers, substituting physical presence with digital communication channels. This eliminates travel time while maintaining full repair capability through remote access to computing resources.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system enables self-service remediation capabilities where computers can automatically report faults, receive diagnostics, and implement repairs without requiring physical intervention. The gateway server facilitates automated troubleshooting and repair processes, reducing both time consumption and the need for manual IT personnel involvement.

Inventive Principle:
Principle #25Self-service

3Reliability

If high security measures are implemented for remote access, then security is improved, but system complexity and difficulty of implementation increase

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines multiple security functions into a single gateway server that handles authentication, encryption, and access control in one centralized location. By merging these security mechanisms into one integrated system rather than implementing separate security layers throughout the network, the overall system complexity is reduced while maintaining high security standards.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS10970102B2System and method for hypervisor-based remediation and provisioning of a computer
Publication Date: 2021.04.06 INTEL CORP
  • US10970102B2 patent drawing
  • US10970102B2 patent drawing
  • US10970102B2 patent drawing

AI summary

A computer located outside of an organizational computing environment is remotely prepared and configured to work in the organizational computing environment. A hypervisor operating system is installed and replaces the primary operating system of the computer, and the primary operating system, virtual software appliances (VSA) and virtual machines (VM) can execute as processes of the hypervisor. The hypervisor is configured to establish secure connection with organizational computing environment and to receive from it organization-configured image software for configuring the compute to work in the organizational computing environment. The secure connection can also be used for remote maintenance of the computer even when the computer operating system is faulty or inactive.