Secure Session Resume for Remote Desktop Data Leakage Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Remote desktop software poses a security risk when users resume disconnected sessions, as sensitive information can be inadvertently displayed on devices at public locations, potentially leaking or being compromised by unauthorized individuals.
Innovation Solution
Implementing a secure resume feature that suppresses the visibility of session content on a computing device during session resumption by applying predefined rules, such as minimizing applications or displaying a default user interface, to prevent data exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If session content is displayed normally during resumption, then user can access remote applications and resources, but sensitive information may be exposed to unauthorized individuals
Solution Approach 1:
The system performs preliminary actions by detecting the device unlock state before session resumption occurs. When the device is unlocked, the system proactively suppresses session content display before the session is fully resumed, preventing potential data exposure while allowing the session to continue functioning normally
Solution Approach 2:
The system introduces an intermediary mechanism that monitors device unlock status and mediates between session resumption requests and content display. This intermediary layer detects when the device is unlocked and triggers content suppression, acting as a buffer between the session management system and the display output
2Object-affected harmful factors
If session content is suppressed during resumption, then data leakage risk is reduced, but user cannot view session content immediately upon resumption
Solution Approach 1:
The system dynamically adjusts content display based on real-time device state. When the device transitions from locked to unlocked state, the suppression is automatically lifted, allowing session content to become visible. This dynamic behavior ensures security during vulnerable states while restoring normal functionality when the device is secure
Solution Approach 2:
The system applies preliminary anti-action by suppressing content display only when the device is in an unlocked state, which is identified as a potentially vulnerable condition. This targeted suppression prevents data leakage during resumption without imposing continuous restrictions that would delay user access
3Object-affected harmful factors
If device unlock detection is implemented, then content suppression can be triggered, but additional processing steps are required
Solution Approach 1:
The system leverages the device's existing unlock detection capability, which already provides unlock state information for other purposes. By utilizing this existing self-service functionality, the system avoids building a separate unlock detection mechanism, thereby reducing additional complexity while still achieving content suppression
Data Source
AI summary
Techniques are disclosed for providing secure resume of sessions such as, for example, application sessions. An example methodology implementing the techniques includes receiving, by a computing device, a request to resume a session, the session being hosted on a remote computer system and accessible by the computing device to enable display of content of the session via the computing device. The method also includes initiating one or more actions on the remote computer system to prevent content of the session from being visible on the computing device in response to resumption of the session and resuming the session on the remote computer system such that the content of the session is hidden from view within a display of the computing device as a result of the initiation of the one or more actions.