Server Access Control via Segmented Root Sessions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing server computer access control systems lack efficient mechanisms to manage simultaneous access to privileged levels, particularly the root level, which can lead to conflicts and potential system damage during maintenance or troubleshooting, as multiple system administrators may share login IDs and passwords and work on the same system simultaneously.
Innovation Solution
A system that provides a two-step access process using separate access keys for primary and root levels, allowing real-time observation and communication between administrators, while logging activities securely to prevent concurrent root access and ensure accountability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If multiple system administrators share the same login ID and password to access root level, then ease of operation is improved, but system reliability deteriorates due to potential conflicts and lack of accountability
Solution Approach 1:
The patent segments the root access into two distinct levels: primary-level session and root-level session. Each level has its own access key (first access key for primary, second access key for root). This segmentation allows multiple administrators to operate at the primary level simultaneously without conflict, while root-level access remains controlled and accountable through individual credentials.
Solution Approach 2:
The patent introduces an intermediary mechanism - the application layer that sits between the administrators and the root system. This intermediary manages the two-step authentication process, controls session transitions, and enforces the rule that only one administrator can be at root level at a time, thus preventing conflicts while maintaining ease of operation.
2Productivity
If multiple administrators can access root level simultaneously, then productivity is improved, but harmful factors increase due to potential system damage
Solution Approach 1:
The patent implements dynamic access control where the system adapts to current conditions. When one administrator is at root level, the system dynamically prevents others from entering root level. The application monitors session states and adjusts access permissions in real-time, allowing flexible collaboration at primary level while maintaining strict control at root level.
Solution Approach 2:
The patent incorporates feedback mechanisms through real-time observation capabilities. Administrators can observe what another administrator is doing at root level through the application interface. This feedback loop allows collaborative decision-making and prevents harmful actions by enabling peer review, thus maintaining productivity while reducing system damage risk.
3Reliability
If root level access is restricted to one administrator at a time, then system reliability is improved, but loss of time increases due to waiting for access
Solution Approach 1:
The patent implements preliminary action by requiring administrators to go through a two-step authentication process before accessing root level. The first access key grants primary-level access immediately, allowing administrators to prepare and coordinate their actions at the primary level before transitioning to root level. This preliminary preparation reduces actual wait time for root access.
Solution Approach 2:
The patent adds a temporal dimension to access control by implementing session management. Instead of simple binary access, the system tracks session states, duration, and transition timing. The application can manage queueing and coordination across multiple administrators in different time slots, optimizing the overall system throughput while maintaining security.
4Reliability
If real-time observation and communication features are added, then accountability is improved, but device complexity increases
Solution Approach 1:
The patent implements multi-functionality in the application layer. The same application that manages authentication and session control also provides observation and communication capabilities. By combining multiple functions into a single integrated system, the patent improves accountability without proportionally increasing complexity, as the observation and communication features leverage the existing session management infrastructure.
Data Source
AI summary
A system for controlling access to a server computer comprising a server computer with a memory; an application residing in the memory of the server computer that, when executed by the computer, provides a first user with access to a primary-level session of the server computer, based on a first access key; provides the first user with a root-level session of the server computer, based on a second access key; prevents a second user from accessing the root from the primary level, while the root-level session of the first user is active; provides the second user with real-time observation of the actions taking place in the session of the first user; permits the first user and the second user to communicate with one another in real-time, during the root-level session; and logs the activity of root-level session.