Remote Desktop Screen Sharing Remediation for Sensitive Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In virtualized desktop infrastructure environments, there is a risk of accidental disclosure of sensitive information during screen sharing on remote desktops, which can lead to personal, business, and legal consequences.
Innovation Solution
A computer system monitors screen sharing activities and identifies sensitive information, performing remediation actions such as closing or relaunching applications in a seamless window to prevent disclosure, using configuration information and event tracking to protect sensitive data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If screen sharing is enabled on remote desktop to allow collaboration and knowledge transfer, then productivity and communication effectiveness are improved, but the risk of accidental disclosure of sensitive information increases
Solution Approach 1:
The system performs preliminary actions by monitoring application states and screen sharing status before sensitive information can be accidentally disclosed. The remote desktop system continuously tracks which applications are running and detects when screen sharing is enabled, allowing preventive measures to be taken in advance rather than reacting after disclosure occurs.
Solution Approach 2:
The system introduces an intermediary layer of control between the screen sharing function and the displayed content. This intermediary mechanism monitors the relationship between active applications and screen sharing status, and can intervene to prevent sensitive information from being shared without blocking the entire screen sharing functionality.
2Reliability
If the system monitors all applications and screen sharing activities to detect sensitive information, then security is improved, but device complexity and operational overhead increase
Solution Approach 1:
The monitoring system leverages existing universal components already present in the remote desktop infrastructure. The same monitoring mechanisms used for general system management and security are reused for detecting sensitive information disclosure, eliminating the need for separate dedicated monitoring hardware or complex specialized systems.
Solution Approach 2:
The system performs self-monitoring using built-in operational data that is already being collected for other purposes. The remote desktop system utilizes its own existing event tracking and application state monitoring capabilities to detect sensitive information disclosure, rather than requiring external monitoring systems or additional complex infrastructure.
Data Source
AI summary
Example methods and systems for sensitive information protection during screen sharing on a remote desktop are described. In one example, a computer system may establish a connection between a remote desktop and a client device to allow access to multiple applications supported by the remote desktop. The computer system may obtain configuration information identifying sensitive information that includes at least a particular application from the multiple applications or an information item. Based on the configuration information, the computer system may monitor the particular application or the information item. In response to detecting that (a) screen sharing is enabled for a first user to share a visual representation associated with the remote desktop with a second user and (b) the particular application or the information item being monitored is active, the computer system may perform a remediation action to protect against potential disclosure of the sensitive information.