SSH Audit Server Orphaned Key Identification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Authorized key files in Secure Shell (SSH) systems become large and resource intensive due to unclaimed public keys, leading to potential unauthorized access as administrators cannot map public keys to individual users.

Innovation Solution

An SSH audit server generates registration codes for users, maps public keys to user names or email addresses, and allows users to enter these codes to authenticate, thereby identifying and removing orphaned public keys, reducing the size of authorized key files and preventing unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If public keys are continuously added to the authorized key file without removal, then more users can access the SSH system, but the authorized key file becomes large and resource intensive

Engineering Contradiction:

Improveuser access capabilityVSAvoidauthorized key file size

Core Design Contradiction:

Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

The system performs preliminary mapping of public keys to user identities before access issues arise. By establishing this mapping in advance through the audit server, the system can efficiently identify and remove orphaned keys without affecting legitimate users, thus managing key file size while maintaining user access capability

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The audit server provides feedback about the status of public keys in the authorized key file. By continuously monitoring and reporting on key ownership status, administrators can identify orphaned keys and remove them, preventing the key file from becoming excessively large while maintaining necessary user access

Inventive Principle:

Principle #23Feedback

2Ease of operation

If public keys are not mapped to individual users, then key management is simpler, but administrators cannot identify orphaned keys or prevent unauthorized access

Engineering Contradiction:

Improvekey management simplicityVSAvoidaccess security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent introduces an audit server as an intermediary between the SSH system and administrators. This intermediary automatically performs the complex task of mapping public keys to user identities and identifying orphaned keys, thereby maintaining security without requiring administrators to manually manage complex key mappings

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The audit server enables self-service by automatically identifying orphaned public keys through the mapping process. Instead of requiring administrators to manually track which keys belong to which users, the system autonomously performs this identification, improving both security and ease of operation

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS10681026B2Secure shell public key audit system

Publication Date: 2020.06.09 ONE IDENTITY LLC

AI summary

A system for auditing authorized key files associated with secure shell (SSH) servers is disclosed. In an example, the system may include a purpose-built SSH audit server. The SSH audit server may be configured to receive an authorized key file and a list of users. The SSH audit sever may generate and provide unique registration codes for each of the users in the list. The SSH audit server may associate particular users with particular public keys as each of the users accesses the SSH audit server using a public key and inputs a registration code.