Smart Card Virtual Session Initiation for Shared Kiosks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing desktop virtualization systems face challenges in efficiently managing user connection leases and UI caches, particularly in shared kiosk environments where multiple users access virtual sessions, leading to delays and security concerns due to the need for frequent synchronization of user-specific connection leases and resource caches.
Innovation Solution
A smart card system that stores user connection leases and UI caches, with a processor configured to establish communications links with a kiosk device, initiate virtual sessions, and manage group-level connection leases and UI caches, allowing for secure and efficient access by multiple users without the need for frequent synchronization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user connection leases and UI caches are stored locally on each user device, then user-specific customization and security are improved, but device complexity and synchronization overhead increase in shared kiosk environments
Solution Approach 1:
The system segments connection leases and UI caches into two types: user-specific data stored on individual devices, and group-level data stored centrally on the kiosk. This segmentation allows each device to maintain its own user-specific lease without needing to synchronize with other devices, while group-level leases are shared across the kiosk. The smart card further segments security credentials, storing private keys locally on the card rather than on the device, eliminating the need for cryptographic key synchronization.
Solution Approach 2:
The patent introduces a connection lease issuing service (CLIS) as an intermediary that automatically manages the issuance, renewal, and revocation of connection leases. This intermediary handles the complexity of lease management, allowing devices to simply request and receive leases without needing to manually synchronize with other devices. The smart card acts as an intermediary for authentication, verifying user identity and presenting credentials to the kiosk without requiring the device to store sensitive authentication data.
2Duration of action of moving object
If connection leases are frequently synchronized across shared kiosk devices, then session continuity is improved, but loss of time and processing overhead increase
Solution Approach 1:
The system performs preliminary actions by pre-establishing group-level connection leases and UI caches on the kiosk device before users arrive. When a user presents their smart card, the kiosk can immediately utilize the pre-configured group-level lease to establish a session without needing to synchronize or retrieve lease information from other devices. This preliminary configuration enables rapid session initiation while maintaining continuity across different users of the same kiosk.
Solution Approach 2:
Each smart card self-services its own authentication credentials and user-specific connection lease by storing private keys and lease information locally on the card. When the smart card is presented to the kiosk, it automatically provides the necessary authentication and lease information without requiring synchronization with other devices. The kiosk independently validates the smart card credentials and establishes sessions based on the information provided by the smart card itself, eliminating synchronization delays.
3Adaptability or versatility
If multiple users share a kiosk device with individual user profiles, then user customization is improved, but device complexity and authentication overhead increase
Solution Approach 1:
The patent extracts authentication credentials and user identity verification from the kiosk device and places them on the smart card. The smart card stores private keys, user connection leases, and UI cache information, removing the need for the kiosk to manage multiple user profiles, store sensitive authentication data, or perform complex authentication logic for each user. The kiosk simply validates the smart card credentials and grants access, significantly reducing authentication overhead while maintaining user customization through smart card-specific configurations.
Data Source
AI summary
A smart card may include a memory configured to store a user connection lease and user interface (UI) cache for a user and a private/public key pair of the smart card, with the user connection lease being bound to the private/public key pair of the smart card. The smart card may further include a processor coupled to the memory and configured to establish a communications link with a kiosk device to be shared by a plurality of different users, initiate a virtual session for the user at the kiosk device based upon the user connection lease and the private key responsive to establishing the communications link (with the smart card defining an endpoint for the virtual session authorization), and cause the kiosk device to launch the virtual session based upon the user UI cache.