Virtual Keyboard Authentication for Unencrypted VNC Connections
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information handling systems face challenges in securely authenticating management servers over un-encrypted remote console connections, which can compromise security and data integrity.
Innovation Solution
The implementation of a Virtual Network Computing (VNC) server with a dynamically generated virtual keyboard that decodes log-in credentials based on randomly assigned key designations, ensuring secure authentication without transmitting actual characters over the network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional authentication methods are used over un-encrypted remote console connections, then ease of operation is improved, but security is worsened due to transmission of plain text credentials
Solution Approach 1:
The patent introduces a virtual keyboard as an intermediary between the user and the authentication system. Instead of directly transmitting credentials, the system displays a virtual keyboard with randomly assigned key designations, captures mouse clicks on keys, and translates these clicks into credential characters on the server side. This intermediary mechanism prevents plain text credential transmission over the network while maintaining ease of operation.
Solution Approach 2:
The patent creates a visual copy of a keyboard interface that functions independently from the actual credential transmission. The virtual keyboard displayed to the user is a copy that captures input actions (mouse clicks) without transmitting the underlying credential data. The server receives only the sequence of key clicks, not the actual characters, thereby securing the authentication process while preserving usability.
2Object-affected harmful factors
If encrypted connections are used for remote console access, then security is improved, but device complexity increases due to SSL tunneling requirements
Solution Approach 1:
The patent extracts the security function from the communication protocol layer and implements it at the application layer through the virtual keyboard mechanism. Instead of requiring SSL/TLS encryption of the entire communication channel, the system extracts only the credential transmission portion and replaces it with the virtual keyboard interaction model. This eliminates the need for complex SSL tunneling infrastructure while maintaining security for the critical authentication phase.
3Ease of operation
If actual log-in credentials are transmitted over the network, then ease of operation is improved, but loss of information is worsened due to potential credential interception
Solution Approach 1:
The patent inverts the traditional authentication information flow. Instead of the client sending credentials to the server, the system captures the physical location of mouse clicks on the virtual keyboard and transmits only these coordinate data points to the server. The server, which has the same virtual keyboard layout, determines the clicked keys locally and reconstructs the credentials without ever receiving them from the client. This inversion prevents credential interception while maintaining operational simplicity.
Data Source
AI summary
A Virtual network computing (VNC) server receives a client launch request from a VNC client and provides a log-in page for display at the VNC client. The log-in page includes a graphical representation of a keyboard having a plurality of keys. Individual key designations at the keyboard are unique and are generated randomly in response to the client launch request. The VNC server receives pointing device movement coordinates from the VNC client; the movement coordinates indicating selection of individual keys at the keyboard by a user of the VNC client.