SK500942010U1 - Device for secure control access to applications and data by two-factor authentication - Google Patents

Abstract

The device consists of a mutually autonomously remote control user interface (1.1) from the controlled user interface (2), internal control clock (4.1), internal clock (4.2) of the controlled device, pulse signal filter (11), encoders (2.1), (7) , a decoder (8) and evaluation members (9), (10). The control user interface (1.1) is linked back via the controller (2.2), the encoder and the integrator (3), and the internal clock (4.1) is connected to the integrator (3) via the control clock encoder (2.1). The autonomously remote controlled user interface (1.2) is coupled via a derivative member (5), an input evaluation member (9), a pulse filter (11), and an output evaluation member (10) connected via a timer decoder (8) ), and the input evaluation member (9) is coupled via a comparator clock coder (7) to the internal clock (4.2) of the managed device, the display units of the control user interface (1.1) and the managed user interface (1.2) comprising the same two-factor authentication of the control entity formed from the designation of the controlling entity registered with the administrator user interface administrator (1.1) and the password generated by the temporary user control user interface (1.1).

Description

Device for controlled secure access to applications and data by two-factor authentication

Technical field

The technical solution relates to a device for controlled secure access of applications and data by two-factor authentication on mutually autonomous remote control and controlled user interface, which consists mainly of a mobile phone and / or computer, and / or personal digital assistant (PDA) and the like.

BACKGROUND OF THE INVENTION

Nowadays, especially children do not have major problems in using the computer and the Internet and because of their possible dependence on these devices parents have a lot of worries because in their absence with the child can not accurately verify how much time a day they are at the computer. There is currently no technical equipment and / or software specifically designed for this purpose. Only a few general computer access control software tools are known that can set time limits for working with a computer and thus allow parents to control the child's activity. The specified time limits are static, pre-scheduled and cannot respond to changing conditions. If the child has more free time or needs to learn more, the time limit is always the same and the parents are left with nothing but constant rebuilding of computer access planning, which is very impractical and inconvenient.

Also, more and more banks routinely offer client account management remotely through Internet banking, where the most widespread authentication technique is passwords that users can always have with them, allowing them to log in to their account from virtually anywhere, but they have several drawbacks. The so-called weak passwords represent the greatest threat. Users often choose easy-to-remember but at the same time estimable variants. Therefore, most such systems require passwords that meet specific parameters, such as length, number of digits, etc., or a combination

-2multiple passwords, e.g. ID, PIN, and password. However, if such a password is too complicated, users prefer to write it down on paper, thereby losing the confidentiality of the password

In organizations, intangible intellectual property, both own and classified externally acquired information, is gaining increasing value; from customers. In terms of information security in a typical organization, the most risky factors include the company's personnel, especially its management. Statistically, it was found that up to about eighty percent of classified information leaked through the management of its own organization. The main reason for this is that management must have broad access to corporate information that is found in management workstations connected to the corporate network. Therefore, in large enterprise networks, one of the most common requirements is to secure individual computers from unauthorized access not only between users, but also between users and system administrators. In large corporate networks, passwords also protect workstations from unauthorized access when users are away from the workplace: on a business trip, on vacation, or during sick leave. Here again, as in Internet banking, so-called weak passwords represent the greatest threat, and complicated passwords are labeled on paper, thus losing the secrecy of such passwords.

The essence of the technical solution

The above-mentioned deficiencies are substantially eliminated by the device for remote controlled secure access to applications and data by two-factor authentication according to the technical solution, formed by mutually autonomous remote control user interface from controlled user interface, control internal clock, internal clock controlled device, pulse signal filter, encoders, and evaluation members. The essence of the invention is that the control user interface is reconnected via the encoder driver and the integrator, the control clock coder connected to the integrator via an internal clock and the autonomously remote controlled user interface reconnected via a derivative member, input evaluation member, pulse filter and output evaluation member. At the same time, the output evaluation member is connected directly and via a timer decoder and the input evaluation member is connected via a comparison clock coder to the internal clock of the controlled device, wherein

The display units of the control user interface and the controlled user interface comprise identical two-factor authentication of the control entity formed by the control entity registration registered with the control user interface administrator and the password generated by the control user interface temporarily.

It is advantageous if additional information about the current Generation Time and Maximum Permitted Session Duration (Session Initiation Protocol) is encoded in the password generated by the control user interface and / or the at least one universal electrical device comprises at least one mobile phone and / or computer and / or personal digital assistant (PDA).

It is also advantageous if the remote access control device is securely accessing applications and data by two-factor authentication according to a technical solution created by software with an identical flow chart of control information flow in universal electrical equipment.

The device according to the technical solution enables easy control of the access of another person, e.g. child, client, subordinate worker, etc., to the computer of their superior remote mobile phone or other computer, or personal digital assistant (PDA), and the like. in the set date range. In electronic banking, such a device allows a user-client to have secure access by means of a one-time password generator that is temporarily valid for the user, e.g. on your mobile phone. Also, the device according to the invention allows increased protection of the workstation from unauthorized access in the absence of users at the workplace, e.g. on a business trip, on vacation, or during sick leave. The device is able to verify the current presence of an authorized user in the workplace at each access, and if the authorized user is in the workplace, standard authentication is used. In its absence, the device requires additional authentication via a special one-time password from the authorized person's mobile phone.

-4Overview of drawings

A specific embodiment of the invention is schematically illustrated in the accompanying drawings, in which: FIG. 1 shows an exemplary embodiment of an electrical wiring diagram or flow chart of control information flow processed into the user interface management software; and FIG. 2 shows an exemplary embodiment of an electrical wiring diagram or flow chart of control information flow processed into a controlled user interface software.

EXAMPLES

An exemplary embodiment of a device for remotely controlled secure access to applications and data by two-factor authentication according to the invention is shown in FIG. 1 and FIG. 2. The device is constituted by a self-contained remote control user interface 1.1 which comprises a display unit with a keyboard, e.g. a mobile phone and / or computer, and / or a personal digital assistant (PDA), from a controlled user interface 1.2, which comprises a display unit with a keyboard e.g. computer, control internal clock 4.1, internal clock 4.2 of the controlled device, pulse filter 11 signals, encoders 2.1, 7, decoder 8 and evaluation members 9, 10. The control user interface 1.1 is reconnected via controller 2.2 and integrator 3, integrator 3 is connected to the control clock coder 2.1 by the control internal clock 4.1. The autonomous remote controlled user interface 1.2 is back-coupled via a differentiator 5, an input evaluation element 9, a pulse filter 11, and an output evaluation element.

10. The output evaluation member 10 is further connected directly and via a decoder 8 with a timer 6, and the input evaluation member 9 is connected via a comparison clock coder 7 to the internal clock 4.2 of the controlled device, wherein the display units of the control user interface 1.1 and the controlled user interface 1.2 two-factor authentication of the control entity consisting of an unlabeled control entity designation registered with the control user interface 1.1 and a non-displayed password generated by control user interface 1.1 with a temporary e.g. hourly validity, resp. on the specified day of the calendar year. Additional information is encoded in the password generated by the control user interface 1.1

-5on the current generation time and the maximum allowed session duration

Initiation Protocol).

Alternatively, such a device may be produced by software with an identical flow chart of control information flow in known universal electrical devices, which comprise e.g. mobile phone and / or computer, and / or personal digital assistant (PDA).

Logging on to the systems is via the Managed User Interface 1.1 and the Managed User Interface 1.2, for example through the well-known Windows Winlogon module, where the functionality of the module is enhanced or modified by implementing Credential Provider software through the display unit. login fields - rectangular areas, at least one of which is intended to indicate the user, the other for the password or time stamp and password, and the third is an active confirmation button to start the next operation of the device. The user, in a known manner via a keyboard not shown, enters his / her indication of the desired duration of operation of the controlled device, e.g. in minutes in the maximum hour length and with the confirmation button starts another operation of the control device, e.g. mobile phone or computer, etc. After this action, an electrical pulse from the control user interface 1.1 is received through the encoder controller in the control device.

2.2 to a signal integrator 3, to which they are permanently connected via a control clock coder 2.1 controlling the internal clock 4.1 of the device. The encoder controller 2.2 performs the usual hash function, i.e., the hash function. j. transforms the user-entered data (from when / how long) into a code and the master clock encoder 2.1 simultaneously performs another common hash function, i. j. transforms the actual data from the control internal clock 4.1 with a fixed time range of possible device start-up, eg. for 1 to 15 minutes, etc., into the code. The integrator 3 then merges both data into one, and such data is displayed as a password in the rectangular area of the display not shown in the control user interface 1.1. This password and user ID are then communicated, e.g. by telephone or SMS message, or by fax, or electronically to the user of the controlled device, who enters them in the usual way via the unlabeled keyboard in the set time range on the unlabeled display in the controlled user interface 1.2. After this operation, an electrical pulse from the controlled user interface 1.2 reaches the derivative in the controlled device

-65, which separates the integrated time data from the controlled device from the password and these are then evaluated with the set range of the current internal clock data 4.2 of this device via the comparator clock coder 7 in the input evaluation member 9. If the data is incompatible the managed user interface display unit 1.2 and further operation of the controlled device. Otherwise, by the differentiator 5, the two split signals are connected via a pulse filter 11 to an output evaluation member 10, which compares and evaluates the set user data with the timer data 6 via the decoder 8. otherwise, even after the set time of the managed device has expired, no further activity is allowed to the managed device, which is displayed on the managed user interface display unit 1.2 and no further activity is allowed to the managed device without reusing the new time-current password from the controlled device user interface 1.1. .

The embodiments described and illustrated are not the only possible solutions according to the utility model, since the device may be formed by all possible combinations resulting from the protection claims.

Industrial usability

Remotely controlled secure access to applications and data with two-factor authentication is designed to quickly and conveniently control controlled devices in homes, Internet-enabled devices, electronic banking, enterprise computer networks, conventional electronic security devices, and TV sets with remote control.

Claims (4)

PROTECTION REQUIREMENTS A device for remotely controlled secure access to applications and data by two-factor authentication, consisting of an autonomously remote control user interface from a controlled user interface, a control internal clock, an internal clock of a controlled device, a pulse signal filter, encoders, decoder and evaluation members; that the control user interface (1.1) is reconnected via the encoder controller (2.2) and the integrator (3), the control clock encoder (2.1) being connected to the integrator (3) by a control internal clock (4.1) and an autonomously remote controlled user interface (1.2) is reconnected via the derivative member (5), the input evaluation member (9), the pulse filter (11) and the output evaluation member (10), which is connected directly and via the decoder (8) to the timer (6) and input the evaluating member (9) is connected via a comparison clock an encoder (7) with an internal clock (4.2) of the controlled device, wherein the display units of the control user interface (1.1) and the controlled user interface (1.2) comprise identical two-factor control entity authentication consisting of the control entity designation registered with the control user interface (1.1); the password generated by the temporary user interface (1.1). 2. Device for remotely controlled secure access to applications and data by two-factor authentication according to clause 1, characterized in that the password generated by the control user interface (1.1) encodes additional information about the current generation time and maximum allowed operation duration (Session Initiation Protocol) ). 3. A device for remotely controlled secure access to applications and data by two-factor authentication according to claim 1, characterized in that at least one universal electrical device is a mobile phone and / or a computer and / or a personal digital assistant (PDA). 4. Device for remotely controlled secure access to applications and data by two-factor authentication according to items 1 to 3, characterized in that it is created by software with an identical flow chart of control information flow in universal electrical equipment.