Smart Card Credential Relay for Secure Remote Desktop Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users cannot remotely access a smart card-protected desktop from another location, as the smart card security measures prevent unauthorized access.
Innovation Solution
A method and apparatus that detects the presence of a smart card on a local machine, reads its credentials, and communicates them to a remote access client application, which then transmits these credentials to a remote machine for verification, allowing secure remote access if valid.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If smart card protection is implemented on a desktop machine, then security and parental control are improved, but remote access capability deteriorates
Solution Approach 1:
The patent introduces a card reader as an intermediary device that bridges the smart card protection mechanism and remote access capability. The card reader reads credentials from the smart card and transmits them to a remote access server, enabling remote machines to authenticate and access the protected desktop without requiring physical presence of the smart card at the remote location
Solution Approach 2:
The authentication process is segmented into separate components: the smart card stores credentials locally, the card reader extracts and transmits these credentials, and the remote access server verifies them. This segmentation allows the security function (smart card) to be separated from the access function (remote connection), enabling both security and remote access capability to coexist
Data Source
AI summary
A method and apparatus for accessing a remote machine from a local machine via a smart card. In one embodiment, the presence of the smart card coupled to the local machine is detected. A card reader reads the credentials from the smart card and communicates them to a remote access client application of the local machine. The remote access client application transmits the credentials to the remote machine. The remote machine sends a query for login information to the local machine upon valid credentials. The local machine transmits the login information to the remote machine and is granted permission to access the remote machine upon valid login information.