Relay Communication System for Secure Remote Maintenance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional remote maintenance systems face inefficiencies due to the need for manual phone notifications of one-time passwords, which slows down the connection process between maintenance operators and target systems, limiting quick problem resolution.
Innovation Solution
A relay communication system where relay servers are connected via a WAN, allowing client terminals to communicate with each other through a LAN, with a center terminal managing operator IDs and connection jobs, enabling quick and secure connections between maintenance and target terminals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual phone notification of one-time password is used, then security is maintained, but connection speed deteriorates
Solution Approach 1:
The patent replaces the manual mechanical process of phone notification with an automated electronic authentication system. The authentication server automatically sends one-time passwords to terminal devices through electronic communication channels, eliminating the need for manual phone notification while maintaining security. This substitution of mechanical human intervention with automated electronic systems resolves the contradiction between security and connection speed.
Solution Approach 2:
The system performs preliminary authentication actions by pre-establishing the authentication server and terminal device registration before actual maintenance connections are needed. One-time passwords are generated and ready for immediate transmission, so when a maintenance request occurs, the authentication process can proceed instantly without delay. This preliminary setup enables both security and fast connection establishment.
2Reliability
If one-time password authentication is required, then system security is improved, but operational efficiency deteriorates
Solution Approach 1:
The terminal devices perform self-service authentication by automatically receiving and using one-time passwords from the authentication server without requiring manual intervention from operators. The system autonomously handles the authentication process, generating passwords, verifying credentials, and establishing connections. This self-service mechanism maintains high security while improving operational efficiency by eliminating manual password notification steps.
Solution Approach 2:
The authentication server acts as an intermediary between the maintenance system and terminal devices. It mediates the authentication process by securely generating and distributing one-time passwords, verifying credentials, and authorizing connections. This intermediary layer centralizes security management while streamlining the authentication flow, improving both system security and operational efficiency simultaneously.
3Measurement precision
If manual authentication process is used, then control precision is maintained, but response time deteriorates
Solution Approach 1:
The patent replaces manual authentication control with automated electronic verification. The authentication server automatically verifies credentials, checks one-time passwords, and authorizes connections through electronic processes. This substitution eliminates manual handling steps while maintaining precise control over authentication decisions, thereby reducing response time without sacrificing control precision.
Solution Approach 2:
The authentication system operates continuously and seamlessly, with the server constantly ready to process authentication requests. The electronic transmission of one-time passwords and verification processes occurs without interruption or pause, maintaining continuous useful action. This continuity enables both precise control over the authentication process and rapid response times, eliminating the delays inherent in manual processes.
Data Source
AI summary
A center terminal includes a target terminal list storing unit that registers a target terminal and an operator list storing that registers an operator ID and a password. Each of the maintenance terminal and the target terminal includes a center terminal information storing unit that registers a center terminal. The center terminal makes a connection job that associates a predetermined target terminal with the operator ID and registers the connection job to the center terminal. One of maintenance terminals receives the specific operator ID and the password from a connected client terminal and sends the center terminal an indication whether or not the maintenance terminal can log in to the center terminal, and, if the logging-in is granted, the maintenance terminal is configured to receive the connection job assigned to the operator ID from the center terminal and notify the operator. If the maintenance terminal receives a selection of the connection job from the operator, the maintenance terminal sends an inquiry to the center terminal whether or not the maintenance terminal can execute the connection job. If the connection job is allowed to be executed, the maintenance terminal can be connected to the target terminal included in the connection job.