Terminal Security via Dynamic Privilege Adjustment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for securing computer terminals, such as personal computers, are inadequate as they either restrict communication ports too severely, require complex device identification, or are cumbersome to manage and can be bypassed, failing to effectively control access and privilege levels.
Innovation Solution
A method that dynamically determines user privileges based on detected events, such as connection establishment or authentication status, allowing for switching between operating modes to control access to physical and logical resources, thereby enhancing security by adjusting privilege levels accordingly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If communication ports are programmatically inhibited after configuration, then security is improved, but communication functionality is lost
Solution Approach 1:
The patent implements dynamic privilege management where the terminal system automatically adjusts user privileges based on detected events (connection establishment, authentication status). The system transitions between different privilege levels (full privileges, restricted privileges, no privileges) rather than using static port inhibition, thereby maintaining security while preserving communication functionality when appropriate.
Solution Approach 2:
The system changes the privilege parameter dynamically based on system state. When a connection is detected or authentication status changes, the system modifies the privilege level assigned to the user, controlling access to resources without permanently inhibiting communication ports. This allows the same port to serve different functions at different times based on security requirements.
2Reliability
If device identification and prior declaration mechanisms are implemented, then access control is improved, but system complexity increases
Solution Approach 1:
The terminal system automatically detects connection events and authentication status changes, then self-adjusts privilege levels without requiring manual device declaration or complex identification mechanisms. The system monitors itself and responds to events autonomously, simplifying the user experience while maintaining strong access control through automated privilege management.
Solution Approach 2:
The system implements a feedback loop where connection events and authentication status are continuously monitored, and privilege levels are adjusted in response to these inputs. This event-driven approach provides effective access control based on real-time system state without requiring pre-configuration of authorized devices or complex declaration procedures.
3Reliability
If HIPS mechanism is implemented for controlling file access, then file security is improved, but management complexity and user bypass risk increase
Solution Approach 1:
Instead of static HIPS rules requiring manual configuration for each program and file, the system dynamically adjusts privileges based on detected events and authentication status. This automated approach maintains file security through context-aware privilege management while eliminating the cumbersome task of defining access rights for each program-file pair.
Solution Approach 2:
The system automatically manages security privileges based on system state without requiring manual HIPS rule configuration. The automated detection and response mechanism eliminates the need for users to define and maintain complex access control rules, reducing management complexity while maintaining security through event-driven privilege adjustment.
4Device complexity
If static privilege levels are assigned to users, then system simplicity is maintained, but security adaptability is reduced
Solution Approach 1:
The system implements dynamic privilege levels that automatically adjust based on detected events (connection establishment, authentication status) and system state. This allows the system to maintain simplicity in implementation while achieving security adaptability through automated responses to changing conditions, transitioning between privilege levels without complex manual intervention.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
A method for securing a terminal (10) equipped with at least one communication interface (24), the method comprising: - a step (110) of analyzing the links established with the terminal in order to detect either the establishment of a link between a device (30) and said terminal by means of said communication interface, or an interruption of such a link; - a step of implementing means for authenticating a user of the terminal to determine whether he is authorized to benefit from a first set of rights; - a step (120) of determining, in the event of a change in authentication state or detection during said analysis, a second set of rights to be assigned to a user of said terminal, the second set of rights being more restricted than the first if a detection of a link establishment takes place when said user is not authenticated.