Trust Index Calculation for Unknown Device Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current remote access systems face challenges in securely allowing access to computer resources from unknown devices, as existing security methods either restrict access too tightly, causing inconvenience when using new devices, or too loosely, risking unauthorized access.
Innovation Solution
A method that calculates a 'trust index' based on previous connections and location history to grant full, limited, or deny access to unknown devices, balancing security and convenience by determining the device's and location's trust levels against established thresholds.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a user registers a new device through the registration process, then the device can access the system securely, but the process is time consuming and may take hours or days
Solution Approach 1:
The system performs preliminary actions by pre-registering device identifiers (MAC addresses, device IDs) and location information (IP addresses, GPS coordinates) before actual access is needed. When a device connects, the system has already prepared authentication data and trust levels, enabling immediate access without time-consuming registration procedures.
Solution Approach 2:
The patent introduces an intermediary trust evaluation mechanism that mediates between security requirements and access convenience. The system uses location-based trust levels and device history as intermediaries to automatically assess whether unregistered devices should be granted access, eliminating the need for manual registration while maintaining security through layered verification.
2Reliability
If the system restricts access only to registered devices, then security is improved, but access is blocked when users need to connect from new or different devices
Solution Approach 1:
The system dynamically adjusts access control policies based on real-time conditions. Instead of static registered-device-only restrictions, the system evaluates device trust levels, location information, and connection history to dynamically determine whether to grant access. This allows the system to adapt between strict security mode and convenient access mode based on current risk assessment.
Solution Approach 2:
The patent changes the parameter of access control from binary (registered/not registered) to a continuous trust level spectrum. By introducing trust levels based on location data, device history, and connection patterns, the system can grant partial or full access based on calculated trustworthiness, rather than absolute restrictions.
3Ease of operation
If the control for enabling unknown device access is made loose, then access convenience is improved, but bad actors can fake the registration process to bypass security
Solution Approach 1:
The system adds another dimension to access control by incorporating location-based trust evaluation. Instead of relying solely on device registration status, the system evaluates multiple dimensions including geographic location, IP address history, device identifier patterns, and connection timing. This multi-dimensional assessment makes it difficult for bad actors to bypass security through simple device spoofing.
Solution Approach 2:
The system implements feedback mechanisms that continuously monitor connection patterns, device behavior, and location data. When unusual patterns are detected (such as multiple devices from the same location attempting access, or devices with suspicious identifiers), the system adjusts trust levels and triggers additional verification. This feedback loop maintains security while allowing legitimate unknown devices to access the system.
Data Source
AI summary
A method of controlling access to a remote system includes granting a connecting device full access to the system upon determining the device is registered to a user, upon determining the device is not registered, determining whether the device has connected to the system before, granting the device full access to the system if the device has connected before and a trust index based on a trust level for the device and a trust level of a location the device is currently connecting from exceeds a threshold, and granting the device limited access to the system otherwise.