Proxy Server VNC Authentication Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In virtual network computing (VNC) authentication, sensitive user data such as passwords are vulnerable to leakage or decryption when transmitted from a trusted domain to an untrusted network environment, compromising security.
Innovation Solution
A proxy server replaces the client to complete the response process in VNC authentication, determining a response value using a password and challenge information, and transmitting this value directly to the serving end, thereby avoiding the need for sensitive data to be stored in an untrusted domain.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the client completes the VNC authentication response process, then the authentication can be performed, but sensitive data such as passwords are transmitted to and stored in the untrusted domain, causing security leakage or brute force decryption
Solution Approach 1:
The patent introduces a proxy server as an intermediary between the client and serving end. The proxy server receives the challenge information from the serving end, performs the encryption calculation using the password stored in the trusted domain, and sends the response value to the serving end. This mediator approach allows authentication to proceed while preventing the password from leaving the trusted domain, thus resolving the security contradiction.
2Reliability
If the proxy server replaces the client to complete the response process, then security is improved by keeping sensitive data in the trusted domain, but the device complexity increases due to the additional proxy server component
Solution Approach 1:
The proxy server performs multiple functions: it acts as a data transmission intermediary, stores authentication credentials securely in the trusted domain, performs encryption calculations, and communicates with both the client and serving end. By consolidating these multiple functions into a single component, the patent reduces the overall system complexity despite adding the proxy server.
Data Source
AI summary
A response method and system in virtual network computing authentication, and a proxy server, where the method includes receiving, by a proxy server, a password from a controller, receiving challenge information from a serving end, where the challenge information is generated by the serving end based on the virtual network computing authentication, determining a first response value according to the password and the challenge information, and sending the first response value to the serving end in order to resolve a problem that sensitive data of a user is leaked or decrypted by brute force because a response process in the virtual network computing authentication is completed by a client, thereby improving security in the virtual network computing authentication process.