Virtual Desktop Maintenance for Classified Multi-Network Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing remote access techniques for secure networks are burdensome, expensive, and inflexible, requiring multiple laptops and dedicated hardware, which are costly and time-consuming to update, and do not support seamless access across multiple networks with varying classification levels.

Innovation Solution

A computing system with a network interface controller and virtual desktop infrastructure application that enables secure access to multiple networks from a single portable device, using COTS and GOTS components, automating network access management and certificate renewal, and supporting multiple classification levels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If multiple laptops are used to access different remote networks, then network access capability is improved, but hardware cost and physical burden increase

Engineering Contradiction:

Improvenetwork access capabilityVSAvoidhardware quantity

Core Design Contradiction:

Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

The patent implements a single laptop capable of accessing multiple remote networks by integrating virtual machine technology and multiple network interface cards. The system allows one physical device to perform the functions of multiple dedicated laptops, with each virtual machine configured to access specific remote networks while sharing the physical hardware resources.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent combines multiple network interface cards and virtual machine instances into a single physical laptop system. By merging the functionality of multiple dedicated devices into one integrated system, the patent reduces hardware quantity while maintaining the ability to access multiple remote networks simultaneously.

Inventive Principle:

Principle #5Merging (Combining)

2Reliability

If remote access hardware is physically shipped for updates, then security maintenance is improved, but time loss and security risk increase

Engineering Contradiction:

Improvesecurity maintenanceVSAvoidupdate time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent implements automated self-service mechanisms for security updates. The system includes automated patch management that can download and install security updates remotely, automated certificate renewal that refreshes security credentials without manual intervention, and self-healing capabilities that detect and respond to security issues autonomously, eliminating the need for physical shipping of hardware for maintenance.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces the mechanical process of physically shipping hardware for updates with electronic and automated software-based update mechanisms. Security patches, certificate renewals, and system updates are delivered and installed remotely through network connections, substituting physical transportation with digital distribution and automated installation processes.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If conventional classified network installation is performed, then security compliance is improved, but installation time and cost increase

Engineering Contradiction:

Improvesecurity complianceVSAvoidinstallation time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary configuration of security policies, certificates, and network access controls before deployment. Virtual machine images are pre-configured with security compliance settings, and the system includes pre-established security frameworks that can be rapidly deployed, eliminating the need for time-consuming on-site security installations and renovations.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent replaces physical network infrastructure installation (such as aluminum tubes and specialized hardware installations) with software-based virtual network interfaces and virtualized network stacks. This substitution allows security-compliant network access to be established through software configuration rather than physical construction, dramatically reducing installation time and cost.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS12381851B1Operations and maintenance techniques subsystem for secure classified remote access as a service

Publication Date: 2025.08.05 CDW LLC

AI summary

A computing system includes a processor, a network interface controller (NIC) configured to communicate via multiple networks; a virtual desktop infrastructure application (VDIA) including computer-executable instructions configured to: perform operations and maintain a virtual hosting environment; remediate a finding by hardening network access; and notify a user of an issue; and an information technology service management application (ITSMA) accessible to the VDIA. A computer-implemented method includes configuring a NIC to communicate via multiple networks; accessing an ITSMA; performing operations to maintain a hosting environment; remediating a finding by hardening network access; and notifying a user of an issue. A non-transitory computer readable medium includes computer-executable instructions that when executed, cause a computer to: configure a NIC to communicate via multiple networks; access an ITSMA; perform operations to maintain a hosting environment; remediate a finding by hardening network access; and notify a user of an issue.