Network Access Control via Remote Environment Interrogation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control systems for remote resources primarily rely on user identification, failing to consider the varying security levels of different computing environments, which can lead to security risks when accessing resources from insecure environments.
Innovation Solution
Implementing a system that interrogates the remote computer's operating environment using interrogator agents to determine the security state and provision necessary security and communication process objects, ensuring access is granted based on the environment's security state and requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If access control is based only on user identification, then ease of operation is improved, but security is worsened
Solution Approach 1:
The system changes the parameters used for access control from solely user identification to include multiple environmental parameters such as security software presence, operating system version, hardware configuration, and network conditions. This allows the access control decision to consider the computing environment's security state without fundamentally changing the authentication process.
2Reliability
If environmental interrogation is implemented, then security is improved, but device complexity is worsened
Solution Approach 1:
The system performs preliminary interrogation of the computing environment before making access control decisions. By gathering information about security software, operating system, hardware, and network conditions in advance, the system can assess security risks proactively and prepare appropriate access decisions without adding complexity to the actual access control execution.
Solution Approach 2:
The system introduces an intermediary assessment layer that mediates between user identification and access control decisions. This intermediary evaluates environmental parameters and security states, then provides recommendations or decisions to the access control system, reducing the complexity burden on the core authentication mechanism.
3Reliability
If graded authorization is implemented, then security is improved, but loss of information is worsened
Solution Approach 1:
The system applies graded authorization by assigning different levels of access rights based on the specific computing environment's security characteristics. Rather than a uniform access policy, the system tailors authorization levels to local environmental conditions, such as providing full access from secure corporate networks while limiting access from public networks, thereby preserving user flexibility within security constraints.
Data Source
AI summary
Systems and techniques are provided for controlling requests for resources from remote computers. A remote computer's ability to access a resource is determined based upon the computer's operating environment. The computer or computers responsible for controlling access to a resource will interrogate the remote computer to ascertain its operating environment. The computer or computers responsible for controlling access to a resource may, for example, download one or more interrogator agents onto the remote computer to determine its operating environment. Based upon the interrogation results, the computer or computers responsible for controlling access to a resource will control the remote computer's access to the requested resource.