Signed Token Virtual Desktop Security Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Enterprise organizations face challenges in managing and securing virtual desktops, particularly in pooled VDI environments, where malicious users can compromise desktops and make them appear untainted, posing security risks.
Innovation Solution
Implementing a public key cryptography system to create signed tokens for virtual desktops, which are securely deleted upon user login, allowing a server to validate the token state and determine if a desktop is tainted or untainted, thereby ensuring secure management and brokering of virtual desktop sessions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If virtual desktops are reused in pooled VDI environments, then resource utilization and productivity are improved, but security risks increase as malicious users can compromise desktops and make them appear untainted
Solution Approach 1:
The system performs preliminary actions by deleting tokens before user login and validating tokens before assigning desktops to users. This ensures that only genuinely clean desktops are allocated, preventing compromised desktops from being reused while maintaining high resource utilization through efficient pool management.
Solution Approach 2:
The system implements feedback mechanisms where desktops report their token status to the server, and the server validates tokens before desktop assignment. This closed-loop feedback system ensures that compromised desktops are automatically detected and excluded from the pool, maintaining security while allowing safe desktops to be reused for productivity.
2Reliability
If token validation is performed before each desktop assignment, then security is improved, but system complexity and processing time increase
Solution Approach 1:
The system extracts the security validation function into a separate, dedicated token validation mechanism that operates independently from the main desktop assignment workflow. This modular approach simplifies the overall system by isolating complexity into a specialized component that can be optimized and maintained separately.
Solution Approach 2:
The token acts as an intermediary that carries security information between the desktop and the server. Instead of complex direct verification protocols, the token serves as a simple passable credential that encapsulates desktop state information, reducing system complexity while maintaining rigorous security validation.
3Ease of operation
If tokens are retained on virtual desktops, then desktop state tracking is simplified, but security risks increase as tokens can be stolen or tampered with by malicious users
Solution Approach 1:
The system performs preliminary token deletion before user login, ensuring that tokens do not remain on desktops during user sessions. This preliminary action eliminates the security vulnerability of token theft while maintaining the ability to track desktop state through server-side validation of token absence or presence at appropriate checkpoints.
Solution Approach 2:
The system converts the potential harm of token exposure into a benefit by using token absence as a security feature. When tokens are deleted before login, their absence becomes a verifiable indicator of proper security protocol adherence, and the system validates this state rather than treating it as a loss of tracking capability.
Data Source
AI summary
Methods, systems, and computer-readable media for tracking and managing virtual desktops using signed tokens are presented. In some embodiments, a server computing device may receive a first registration message from a first virtual machine. The server computing device may determine a state of the first virtual machine based on token information associated with the first registration message received from the first virtual machine. Subsequently, the server computing device may update virtual machine state information records maintained by the server computing device based on the state of the first virtual machine determined by the server computing device. The virtual machine state information records maintained by the server computing device may identify one or more tainted virtual machines and one or more untainted virtual machines. In addition, the server computing device may be configured to select virtual machines for brokered virtual desktop sessions based on the virtual machine state information records.