Terminal Server Application Launcher Security Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to effectively control and restrict unauthorized access to application programs on remote devices, leading to security risks such as hacking and execution of malicious code, which jeopardize device and network security.
Innovation Solution
Implementing a smart application launcher on a terminal server that embeds application controls, such as web browser controls, to manage and restrict the execution of application programs on client devices, ensuring only authorized access and preventing access to unauthorized information and resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If application programs are allowed to execute freely on remote devices, then user accessibility and system functionality are improved, but security risks increase due to unauthorized access and malicious code execution
Solution Approach 1:
A terminal server is introduced as an intermediary between the client and remote application programs. The terminal server receives execution requests, validates them against security policies, and only permits authorized applications to run. This mediator architecture allows free application execution for authorized users while blocking unauthorized access and malicious code, thus resolving the contradiction between accessibility and security.
2Adaptability or versatility
If remote application execution is permitted without restrictions, then system functionality is enhanced, but device and network security are compromised
Solution Approach 1:
The terminal server performs preliminary validation of application execution requests before allowing them to proceed. Security policies are established in advance, and the terminal server checks each request against these pre-defined rules. This preliminary action ensures that only authorized applications can execute remotely, maintaining both functionality and reliability by preventing unauthorized access before it can cause harm.
3Ease of operation
If unrestricted application access is provided to clients, then ease of operation is improved, but harmful factors such as hacking and malicious code execution increase
Solution Approach 1:
The terminal server implements a feedback mechanism where execution requests from clients are automatically validated against security policies before being granted or denied. This automated feedback loop maintains ease of operation for authorized users (who experience no additional friction) while actively blocking malicious activities. The system provides immediate feedback to clients regarding their request status without requiring manual security reviews.
Data Source
AI summary
A terminal server receives a request from a client to execute an application program on the terminal server. The terminal server identifies information associated with the application program and determines whether the client is permitted to access the application program based on the information associated with the application program. If the client is permitted to access the application program, the application program is launched within an application launcher on the terminal server, which sends data to be rendered to the client and instructs the client to begin rendering the data after successfully launching the application program.