Remote Machine Locking via Security Service Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the banking field, when a stock trader is absent, their locked machine prevents any modifications to ongoing stock trades due to security measures, making it impossible for others to intervene even if urgent changes are needed based on fluctuating market data.
Innovation Solution
A method allowing remote unlocking or locking of a target machine using a security service and session management module, which verifies access rights and enables state changes through a TCP/IP or UDP request, allowing authorized users to manage the machine's state without modifying the existing session management interface.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the target machine is locked to prevent unauthorized access, then security is improved, but the ability to intervene in ongoing operations is lost
Solution Approach 1:
The patent introduces a security service as an intermediary component that mediates between the locked machine state and authorized intervention requests. When a user on a source machine requests to lock or unlock the target machine, the security service verifies the user's authorization credentials and manages the locking state accordingly, allowing legitimate remote intervention while maintaining security protections.
2Reliability
If remote locking is implemented to secure the machine, then security is improved, but the complexity of the system increases
Solution Approach 1:
The security service operates autonomously to verify user credentials and manage locking states without requiring complex external authentication systems. The service checks authorization information locally and manages the locked/unlocked state transitions automatically, reducing the need for additional complex security infrastructure while maintaining robust security controls.
3Reliability
If the machine locks automatically after inactivity, then security is improved, but the loss of time for urgent interventions increases
Solution Approach 1:
The system performs preliminary authorization verification by maintaining user credential information and authorization data in advance. When a lock or unlock request is received, the security service can quickly verify the user's rights without time-consuming authentication processes, enabling rapid response to urgent situations while maintaining security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention relates to a method for changing the status, locked or unlocked, of a target machine (PC1) comprising a security service (SES1) and a session management module (M1). The status-changing method comprises the steps of: receiving, by said security service (SES1), a query (RQ) corresponding to a request (DDE) to change the status of the target machine (PC1), said query (RQ) including at least one piece of identification information (ID) from a user (USR2) of a source machine (PC2); from said security service (SES1), verifying if access rights to said target machine (PC1) related to said user (USR2) of the source machine (PC2) allow a change in the status of the target machine (PC1) by said user (USR2); if so, sending, from said security service (SES1), a status change message to the session management module (M1) of said target machine (PC1) and proceeding to said status change made by said session management module (M1).