Single Sign-On for Remote Desktops via One-Time Password

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Users face the inconvenience of repeatedly entering authorization information to access additional resources after making a remote access connection to a server, as authentication credentials are not shared between subsequent processes.

Innovation Solution

A one-time password is automatically generated and persisted to enable automatic login to cloud-based systems that do not accept token log-on credentials, allowing seamless access to multiple services without the need for repeated authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If token-based single sign-on credentials are used for cloud-based systems, then authentication efficiency is improved, but compatibility with systems that do not accept tokens deteriorates

Engineering Contradiction:

Improveauthentication efficiencyVSAvoidsystem compatibility

Core Design Contradiction:

ProductivityVSAdaptability or versatility

Solution Approach 1:

The patent transforms the authentication credential format from token-based to password-based by changing the parameter of credential type. The single sign-on service generates a password instead of a token, and this password is used to authenticate with cloud-based systems that do not accept tokens, thus resolving the compatibility issue while maintaining authentication efficiency

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The patent introduces an intermediary component that acts as a bridge between the single sign-on service and cloud-based systems. This intermediary generates and manages password credentials that are compatible with both the single sign-on service and the cloud-based systems, enabling seamless authentication across different platforms

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If authentication credentials are shared between subsequent processes, then ease of operation is improved, but security risks increase

Engineering Contradiction:

Improveconvenience of accessVSAvoidsecurity

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent generates a temporary password that is valid only for a single authentication transaction. This disposable credential is used once to access the cloud-based system and then discarded, eliminating the security risks associated with long-lived shared credentials while maintaining ease of operation through automatic authentication

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Solution Approach 2:

The patent performs preliminary authentication through the single sign-on service before accessing the cloud-based system. The one-time password is generated in advance based on the user's existing credentials, allowing seamless authentication without requiring the user to manually enter passwords while maintaining security through the use of encrypted credential storage

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS8856917B2Single sign-on for remote desktops

Publication Date: 2014.10.07 MICROSOFT TECHNOLOGY LICENSING LLC

AI summary

A mechanism is provided for automatically logging into a cloud based system that does not accept token log-on credentials generated by a single sign-on service. In an embodiment, a one-time password is automatically generated and persisted. The generated password is used to log in automatically to a cloud based system that does not accept tokens generated by the web-ID providers and for connecting to other services. Examples of such systems may include Windows, Linux, and iOS.