Remote Access Encryption via Intermediary Key Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic devices lack secure methods for remote access, as traditional solutions like hashed passwords are insecure and digital certificates are complex, making it difficult to grant administrative or servicing access without exposing the device to security threats.
Innovation Solution
The method involves generating an encrypted password on the electronic device using a public encryption key, which is transmitted to a user's computer and then decrypted by a support computer or server using a private key, allowing secure remote access without exposing the password to the user.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a hashed password is stored on the device for remote access, then ease of operation is improved, but security is worsened as the password could be leaked exposing the device to security threats
Solution Approach 1:
A support server acts as an intermediary between the electronic device and support personnel. The support server stores the private key and handles password decryption, while the electronic device only stores a hashed password. This mediator architecture prevents the password from being exposed on the device itself, resolving the contradiction between ease of remote access and security vulnerability.
Solution Approach 2:
The authentication system is segmented into multiple components: the electronic device stores only a hashed password, while the support server stores the private key and handles actual password decryption. This segmentation separates the authentication functionality from the password storage, ensuring that even if the device is compromised, the actual password remains protected on the support server.
2Object-affected harmful factors
If digital certificates are used for secure access, then security is improved, but device complexity is worsened as certificates are complex and normally used for identity not access permissions
Solution Approach 1:
The system changes the parameter of authentication from using complex digital certificates to using a simplified password-based approach combined with asymmetric encryption. Instead of managing certificate files and validation chains, the system uses a hashed password stored on the device and a private key stored on the support server, dramatically reducing device complexity while maintaining security through cryptographic protection.
Solution Approach 2:
The patent replaces the traditional certificate-based mechanical authentication system with a cryptographic substitution approach. Instead of using certificate files, validation chains, and complex identity verification mechanisms, the system substitutes these with a streamlined process using hashed passwords and private key decryption on a support server, reducing the mechanical complexity on the device while maintaining security.
Data Source
AI summary
Methods, systems, devices and computer-readable media for granting remote access to an electronic device are described herein. An electronic device obtains an encrypted password comprising a password encrypted with a public encryption key. The electronic device outputs the encrypted password for a device user computer to transmit the encrypted password to a support computer to have the encrypted password decrypted with a private encryption key corresponding to the public encryption key. The electronic device receiving an access request comprising the password from the support computer. The electronic device grants the support computer access thereto when the password of the access request from the support computer corresponds to the password at the electronic device.