Proxy and Stub Driver for Remote Device Unlocking

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing remote computing systems face challenges in efficiently unlocking devices connected to clients, particularly when the server is remote and lacks direct access to the device's interface, limiting user access and control over secure data partitions.

Innovation Solution

A system comprising a proxy and stub driver that receives string descriptor requests from a server to switch the device's interface from a first type to a second type, allowing remote unlocking of secure data partitions, enabling non-administrator access through a SCSI and HID composite interface.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the server is remote and lacks direct access to the device's interface, then network-based remote computing is enabled, but the server cannot directly control or unlock the device's secure data partitions

Engineering Contradiction:
Improveremote access capabilityVSAvoiddevice control capability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a client device as an intermediary between the remote server and the local device. The client receives interface switching requests from the server and forwards them to the device, enabling indirect control. This mediator architecture allows the server to control secure data partitions without direct physical access, resolving the contradiction between remote accessibility and control reliability.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If the device interface is switched from a first interface type to a second interface type, then user access to secure data partitions is enabled, but the device complexity increases

Engineering Contradiction:
Improveinterface switching capabilityVSAvoidinterface management complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent implements dynamic interface switching where the device can transition between different interface types (e.g., from a restricted first interface to a more accessible second interface) based on authentication and control requests. This dynamic capability allows the system to adapt access levels without permanently increasing complexity, as the interface configuration changes temporarily based on operational needs.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent segments the device interface into multiple types or modes, with each interface type providing different levels of access to secure data partitions. By dividing the interface functionality into distinct segments, the system can enable versatile access control while managing complexity through modular interface design rather than a monolithic complex interface.

Inventive Principle:
Principle #1Segmentation

3Extent of automation

If the proxy receives and directs string descriptor requests from the server to the device, then remote unlocking is facilitated, but the network communication overhead increases

Engineering Contradiction:
Improveautomatic unlocking capabilityVSAvoidcommunication delay
Core Design Contradiction:
Extent of automationVSLoss of time

Solution Approach 1:

The patent implements preliminary authentication and interface switching before actual data access operations. By pre-establishing the appropriate interface type and obtaining necessary permissions in advance, the system automates the unlocking process so that subsequent data operations can proceed without repeated authentication delays, reducing overall communication overhead despite the initial setup time.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP2678778B1System and method for facilitating unlocking a device connected locally to a client
Publication Date: 2018.03.14 WYSE TECHNOLOGY INC
  • EP2678778B1 patent drawingFigure 1
  • EP2678778B1 patent drawingFigure 2
  • EP2678778B1 patent drawingFigure 3

AI summary

Systems and methods for facilitating unlocking a device connected locally to a client, utilizing a server located remotely from the client and the device, are provided in accordance with various aspects of the subject technology. In one aspect, a system includes a proxy configured to receive, at the client, at least one string descriptor request from the server over a network, where the at least one string descriptor request is associated with switching an interface of the device from a first interface type to a second interface type. The system further includes a stub driver configured to receive the at least one string descriptor request from the proxy, and to direct the at least one string descriptor request to the device.