Virtualization Management Continuous Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In computing system virtualization environments, unauthorized access to management sessions poses a significant risk, as existing authentication mechanisms may not provide continuous security checks, potentially allowing malicious users to cause harm to the entire enterprise.

Innovation Solution

A computing system virtualization management engine is implemented to monitor user activity and provide authentication challenges dynamically during management sessions, using a continuous authentication module that compares user behavior to expected patterns, and upon deviation, issues a challenge to verify the user's authenticity, thereby enhancing security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication mechanisms are used for management sessions, then initial access security is provided, but continuous security verification is lacking allowing unauthorized users to cause harm

Engineering Contradiction:

Improveauthentication securityVSAvoidauthentication system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system implements continuous authentication by constantly monitoring user activity information throughout the management session. The authentication process does not end after initial login but continues with ongoing verification of user behavior patterns, ensuring security is maintained throughout the entire session duration rather than only at the beginning.

Inventive Principle:

Principle #20Continuity of useful action

Solution Approach 2:

The system monitors user activity information and compares it against expected behavior patterns to provide continuous feedback on authentication status. When deviations are detected, the system responds by issuing authentication challenges, creating a closed-loop feedback mechanism that dynamically adjusts security verification based on observed user behavior.

Inventive Principle:

Principle #23Feedback

2Reliability

If continuous authentication monitoring is implemented, then security against unauthorized access is improved, but system complexity and computational overhead increase

Engineering Contradiction:

Improvesession securityVSAvoidmonitoring system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system monitors user activity information and automatically determines when authentication challenges are needed based on predefined policies and behavioral analysis. The system serves itself by autonomously detecting anomalies and initiating verification processes without requiring external security administrators to manually intervene in each authentication decision.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

Instead of continuously challenging every user action, the system applies authentication challenges selectively based on monitored user activity patterns. Challenges are triggered only when deviations from expected behavior are detected or when policy conditions are met, rather than imposing continuous verification on all actions, thus reducing unnecessary complexity while maintaining security.

Inventive Principle:

Principle #16Partial or excessive action

3Reliability

If authentication challenges are issued dynamically based on user behavior, then security verification is enhanced, but user experience and session continuity may be affected

Engineering Contradiction:

Improveauthentication verificationVSAvoidmanagement session usability

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

Authentication challenges are issued selectively rather than continuously, triggered only when user behavior deviates from expected patterns or when policy conditions require verification. This partial application of authentication challenges maintains security verification while minimizing disruptions to normal user workflows and session continuity.

Inventive Principle:

Principle #16Partial or excessive action

Solution Approach 2:

The authentication system dynamically adjusts its verification intensity based on real-time user behavior analysis. The system transitions between different authentication states (normal operation, monitoring, challenge, verification) based on observed user patterns, making the authentication process adaptive rather than static, thereby balancing security with user experience.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS11328041B2Computing system virtualization continuous authentication system

Publication Date: 2022.05.10 DELL PROD LP

AI summary

A computing system virtualization continuous authentication system includes a computing system virtualization system that is configured to provide a virtual computing system on a computing client device, and a computing system virtualization management server device that is coupled to the computing system virtualization system and a management terminal. The computing system virtualization management server device monitors user activity information that is associated with a management session that corresponds with the management of the computing system virtualization system and that is associated with an authenticated user account on the computing system virtualization management server device. The computing system virtualization management server device determines that a first authentication challenge is required during the management session based on the user activity information and provides the first authentication challenge to the management terminal.