UMEC State Detection for Single Authentication in Remote Visualization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In remote visualization systems, users are inconveniently required to authenticate multiple times when accessing a remote computer's desktop or console, which can lead to security breaches and unnecessary credential entry.

Innovation Solution

The receiving system foregoes collecting user credentials for authentication if the sending system is in an unauthenticated mutually exclusive connection (UMEC) state, determined by conditions such as no existing user login and locked or logged-out graphics displayed, allowing a single authentication for connection establishment and desktop access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the receiving system collects user credentials for authentication, then user authentication is performed, but user convenience deteriorates due to multiple authentication requirements

Engineering Contradiction:
Improveuser authenticationVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system dynamically adjusts authentication behavior based on the connection state. When in a mutually exclusive connection state, the receiving system suppresses the authentication request to the sending system, allowing single authentication. When not in such state, normal dual authentication proceeds. This dynamic adaptation resolves the contradiction by making the authentication process flexible rather than rigid.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent introduces an intermediary mechanism where the receiving system determines whether to forward authentication requests based on connection state information. This intermediary layer (the connection state determination logic) mediates between the authentication requirement and user convenience, selectively allowing or blocking credential collection based on system state.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If the receiving system suppresses authentication requests in UMEC state, then user convenience improves, but security risk increases due to potential credential bypass

Engineering Contradiction:
Improveuser convenienceVSAvoidsecurity risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system implements feedback by continuously monitoring the connection state between sending and receiving systems. Based on this feedback, the receiving system adjusts its authentication behavior. The feedback loop ensures that credential suppression only occurs when truly appropriate (mutually exclusive connection state), preventing security breaches while maintaining convenience.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent replaces the mechanical authentication process with a state-based control mechanism. Instead of always requiring credential submission, the system uses connection state information to control whether authentication mechanisms are activated, substituting rigid mechanical authentication with flexible state-driven control.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If the system maintains strict authentication protocols, then security is improved, but system complexity increases due to multiple authentication states

Engineering Contradiction:
Improvesystem securityVSAvoidauthentication state management
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the authentication process into distinct states: mutually exclusive connection state and non-mutually-exclusive state. This segmentation allows the system to apply different authentication rules to different states, simplifying the overall logic by dividing the complex authentication management into manageable state-based rules.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS7797435B2Foregoing user credential collection if sending system is in an unauthenticated mutually exclusive connection state
Publication Date: 2010.09.14 HEWLETT PACKARD DEVELOPMENT COMPANY LP
  • US7797435B2 patent drawing
  • US7797435B2 patent drawing
  • US7797435B2 patent drawing

AI summary

A method comprises a receiving system establishing a first connection to a sending system. The method also comprises determining whether the sending system is in an unauthenticated mutually exclusive connection (UMEC) state. The method further comprises foregoing collecting user credentials to establish a connection between the receiving and sending systems if the sending system is in the UMEC state, and collecting user credentials to establish a connection between the receiving and sending systems if the sending system is not in the UMEC state.