Remote Desktop Access Control with Location-Based Suspension Timer

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing remote desktop connection systems terminate access when a user moves out of an allowed area, requiring users to reconnect upon returning, which is inefficient and disrupts resource usage.

Innovation Solution

An information processing device that identifies user location and sets access authority accordingly, measuring time before terminating the remote desktop connection if the user remains out of the allowed region, allowing continued access within a predetermined suspension time.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the remote desktop connection is terminated when the user moves out of the allowed area, then the resource security is improved, but the usability is deteriorated

Engineering Contradiction:
Improveresource securityVSAvoidusability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The access control system dynamically adjusts the connection state based on real-time location detection. When the user moves out of the allowed area, the system transitions from an immediate termination policy to a suspended state with a countdown timer, allowing the user to return before disconnection. This dynamic approach balances security requirements with user convenience.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system provides a suspension time buffer before actually terminating the remote desktop connection. This cushioning period allows users who temporarily leave the allowed area to return without losing their connection, preventing the harsh immediate termination while still enforcing location-based access control.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

2Reliability

If the remote desktop connection is immediately terminated when the user is out of the allowed region, then the access control effectiveness is improved, but the user productivity is deteriorated

Engineering Contradiction:
Improveaccess control effectivenessVSAvoiduser productivity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The access control system dynamically manages connection status based on user location and time. Instead of immediate termination, the system implements a suspended state with a countdown mechanism, allowing users to maintain productivity during brief absences while still enforcing access control policies.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

By providing a suspension time buffer, the system cushions the impact of location-based access control on user productivity. Users have time to return to the allowed area without losing their connection, preventing workflow interruptions while maintaining security effectiveness.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

3Ease of operation

If the remote desktop connection allows users to move freely between areas, then the usability is improved, but the access control security is deteriorated

Engineering Contradiction:
ImproveusabilityVSAvoidaccess control security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system implements dynamic access control that responds to user location changes. When users move to unauthorized areas, the system activates a suspended state with a countdown timer, providing a middle ground between complete freedom of movement and strict access control.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The suspension time mechanism provides a cushioning buffer that allows users temporary freedom of movement while maintaining security. Users can move outside the allowed area without immediate disconnection, but the countdown timer ensures they are reminded to return, balancing usability with security requirements.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

Data Source

PatentUS11361091B2Information processing device, access control method, system, and storage medium
Publication Date: 2022.06.14 FUJITSU LTD
  • US11361091B2 patent drawing
  • US11361091B2 patent drawing
  • US11361091B2 patent drawing

AI summary

An information processing device includes a memory; and a processor coupled to the memory and configured to identify a location where a user is present, when the user accesses a resource by using a remote desktop connection, set access authority of the user over the resource to an allowed state or a prohibited state in accordance with whether or not the location is within an allowed region in which access to the resource is allowed, when it is determined that the location is out of the allowed region while the user is accessing the resource by using the remote desktop connection, start measurement of time without setting the access authority of the user over the resource to a prohibited state, and when it is determined that a predetermined time has elapsed after the measurement is started, terminate the remote desktop connection.