Remote Desktop Security via Device Whitelisting and Scheduling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current remote desktop connection security relies solely on usernames and passwords, which are often compromised or weak, allowing unauthorized access and potential virus transmission between devices, especially when connecting from unsecured computers.
Innovation Solution
A system that monitors and controls remote desktop connections by using connection control data to authorize devices based on whitelists, blacklists, and schedules, periodically checking connections and disconnecting unauthorized devices, ensuring only approved computers can access the target device during specified times.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If username and password authentication is used for remote desktop connections, then ease of operation is improved, but security is worsened because passwords can be compromised or guessed
Solution Approach 1:
The authentication process is segmented into multiple independent verification layers: first username/password authentication, then additional verification of the connecting device's identity through device name matching against authorized device lists. This multi-layered approach maintains ease of use while significantly improving security.
Solution Approach 2:
An intermediary security system is introduced between the authentication process and the remote desktop connection. This intermediary verifies device names and maintains authorized device lists, acting as a mediator that allows legitimate connections while blocking unauthorized access even when credentials are compromised.
2Adaptability or versatility
If remote desktop connections are allowed from any device with valid credentials, then adaptability is improved, but security is worsened due to potential virus transmission from unsecured devices
Solution Approach 1:
The system performs preliminary verification of the connecting device's identity before allowing the remote desktop connection to establish. By checking the device name against authorized device lists in advance, the system prevents potentially harmful connections from unsecured devices before they can transmit viruses or malware to the target system.
3Reliability
If connection monitoring is implemented to check device authorization, then security is improved, but device complexity is worsened
Solution Approach 1:
The security system operates autonomously by automatically monitoring incoming connection requests, verifying device names against stored authorized device lists, and blocking unauthorized connections without requiring manual intervention. This self-service approach improves security while minimizing the operational complexity burden on users.
Data Source
AI summary
A system for control of remote desktop connections includes security software that interfaces with the operating system of the target device and periodically monitors existing connections (e.g., remote desktop connections) to determine if the connecting device (e.g., the remote computer) is authorized to connect with the target device based upon the name of the connecting device. In some embodiments, as hackers often perform their activities when users are not generally expected to be active, the system for control of remote desktop connections provides a scheduling capability that allows connections only during certain time periods such as 9:00 AM-5:00 PM on Mondays through Fridays.