SK5919Y1 - Device for secure control access to applications and data by two-factor authentication - Google Patents

Abstract

Device consists of mutually autonomous remote control user interface (1.1) from controlled user interface (2) by control internal clock (4.1), the internal clock (4.2) of the controlled device, filter of impulse signals (11), coder (2.1), (7) , decoder (8) and evaluation members (9), (10). Control user interface (1.1) is through the controller (2.2), integrator and encoder (3) re-connected, while at the integrator (3) are through the controlled clock coder (2.1) connected internal control clock (4.1). Autonomous remote controlled user interface (1.2) is re-connected through the differentiator (5), evaluating the input member (9), pulse filter (11) and evaluating output member (10), which is connected through a decoder (8) with a timer (6 ) and evaluating input member (9) is connected via the clock comparison encoder (7) with the internal clock (4.2) controlled device, whereby display units of the user control interface (1.1) and control user interface (1.2) comprising equal two-factor authentication of the controlled subject formed from designation of the controlled subject registered with the administrator of the control user interface (1.1) and password generated by control user interface (1.1) with a temporary effect.

Description

Technical field

The technical solution relates to a device for controlled secure access of applications and data by two-factor authentication on mutually autonomous remote control and controlled user interface, which consists mainly of a mobile phone and / or computer, and / or personal digital assistant (PDA) and the like.

BACKGROUND OF THE INVENTION

Nowadays, especially children do not have major problems in using the computer and the Internet and because of their possible dependence on these devices parents have a lot of worries because in their absence with the child can not accurately verify how much time a day they are at the computer. There is currently no technical equipment and / or software specifically designed for this purpose. Only a few general computer access control software tools are known that can set time limits for working with a computer and thus allow parents to control the child's activity. The specified time limits are static, pre-scheduled and cannot respond to changing conditions. If the child has more free time or has to learn more, the time limit is always the same and the parents have nothing else to do but constantly rebuild their computer access planning, which is very impractical and inconvenient.

Also, more and more banks routinely offer client account management remotely, via intembank banking, where passwords are the most widespread authentication technique that users can keep with each other and thus sign in to their account from virtually anywhere, but they have several drawbacks. The so-called weak passwords represent the greatest threat. Users often choose easy-to-remember but at the same time estimable variants. Therefore, most such systems require passwords that meet specific parameters, such as length, number of digits, etc., or a combination of multiple passwords, e.g. ID, PIN, and password. However, if such a password is too complicated, users prefer to write it down on paper, thereby losing the confidentiality of the password.

In organizations, intangible intellectual property, both own and classified externally acquired information, is gaining increasing value; from customers. In terms of information security in a typical organization, the most risky factors are the company's personnel, especially its management. Statistically, it was found that up to about eighty percent of classified information leaked through the management of its own organization. The main reason for this is that management must have broad access to corporate information that is found in management workstations connected to the corporate network. Therefore, in large enterprise networks, one of the most common requirements is to secure individual computers from unauthorized access not only between users, but also between users and system administrators. In large enterprise networks, passwords also protect workstations from unauthorized access when users are away from the workplace: on a business trip, on vacation, or during sick leave. In this case too, as in intemet banking, so-called weak passwords represent the greatest threat, and complicated passwords are labeled on paper, thereby losing the secrecy of such passwords.

The essence of the technical solution

The above-mentioned deficiencies are substantially eliminated by the device for remotely controlled secure access to applications and data by two-factor authentication according to the technical solution, formed by mutually autonomous remote control user interface from the controlled user interface, control internal clock, internal clock controlled equipment, pulse signal filter and evaluation members. The essence of the invention is that the control user interface is reconnected via the encoder controller and the integrator, the control clock coder connected to the integrator via the control clock and the autonomously remote controlled user interface is reconnected via the derivative member, input evaluation member, pulse filter and output evaluation member. At the same time, the output evaluation member is connected directly and via a timer decoder, and the input evaluation member is connected via the comparison clock coder to the internal clock of the controlled device, wherein the display UI and UI display units consist of two-factor authentication of the controlling entity. for the control user interface administrator and the password generated by the control user interface temporarily.

It is advantageous if additional information about the current generation time and the maximum allowed duration of the operation (Session) is encoded in the password generated by the control user interface.

SK 5919-1

Initiation Protocol) and / or at least one universal electrical device comprises at least one mobile phone and / or computer and / or personal digital assistant (PDA).

It is also advantageous if the remote access control device is securely accessing applications and data by two-factor authentication according to a technical solution created by software with an identical flow chart of control information flow in universal electrical equipment.

The device according to the technical solution enables easy control of the access of another person, e.g. a child, a client, a subordinate, etc., to a computer from their superior remote mobile phone or other computer, or a personal digital assistant (PDA), and the like. in the set date range. In electronic banking, such a device allows a user-client to have secure access by means of a one-time password generator that is temporarily valid for the user, e.g. on your mobile phone. Also, the device according to the invention allows increased protection of the workstation from unauthorized access in the absence of users at the workplace, e.g. on a business trip, on vacation, or during sick leave. The device is able to verify the current presence of an authorized user in the workplace at each access, and if the authorized user is in the workplace, standard authentication is used. In its absence, the device requires additional authentication via a special one-time password from the authorized person's mobile phone.

BRIEF DESCRIPTION OF THE DRAWINGS

A specific embodiment of the invention is schematically illustrated in the accompanying drawings, in which: FIG. 1 shows an exemplary embodiment of an electrical wiring diagram or flow chart of control information flow processed into the user interface management software; and FIG. 2 shows an exemplary embodiment of an electrical wiring diagram or flow chart of control information flow processed into a controlled user interface software.

EXAMPLES

An exemplary embodiment of a device for remotely controlled secure access to applications and data by two-factor authentication according to the present invention is shown in FIG. 1 and FIG. 2. The device shall consist of a self-contained remote control user interface 1.1. that make up a keyboard display unit, e.g. a mobile phone and / or computer, and / or a personal digital assistant (PDA), from a managed user interface 1.2. which forms a display unit with a keyboard e.g. computer, control internal clock 4.1. an internal clock 4.2 of the controlled device, a pulse filter 11 of signals, encoders 2.1, 7, a decoder 8, and evaluation members 9, 11). The control user interface TT is reconnected via the controller 2.2 and the integrator 3, with the internal clock 4.1 connected to the integrator 3 via the master clock encoder 2.1. The autonomously controlled user interface 1.2 is reconnected via a differentiator 5, an input evaluation member 9, a pulse filter 11 and an output evaluation member 10. The output evaluation member 10 is further connected directly and via a decoder 8 with a timer 6 and the input evaluation member 9 is connected via a comparator clock coder 7 with an internal clock 4.2 of the controlled device, wherein the display units of the control user interface 1.1 and the managed user interface 1.2 comprise identical two-factor authentication of the control entity consisting of an unlabeled control entity designation with temporary eg. hourly validity, resp. on the specified day of the calendar year. The password generated by the control user interface encodes additional information about the current generation time and the maximum allowed operation duration (Session Initiation Protocol).

Alternatively, such a device may be produced by software with an identical flow chart of control information flow in known universal electrical devices, which comprise e.g. mobile phone and / or computer, and / or personal digital assistant (PDA).

Logging on to systems is via the Managed User Interface 1.1 and the Managed User Interface 1.2, for example through the well-known Windows Winlogon module, where the functionality of this module is enhanced or modified by implementing Credential Provider software through the login fields displayed on the display unit. - rectangular areas, at least one of which is intended to indicate the user, the other for the password or time stamp and the password, and the third for actively confirming the button to start the next operation of the device. The user, in a known manner via a keyboard not shown, enters his / her indication of the desired duration of the controlled device, e.g. in minutes in ma3

SK 5919 Y1 with the minimum hour length and the confirmation button starts the next operation of the control device, e.g. mobile phone or computer, etc. After such an operation, in the control device, the electrical pulse from the control user interface 1.1 passes through the encoder controller 2.2 to the signal integrator 3 to which it is permanently connected via the control clock encoder 2.1 controlling the internal clock 4.1 of the device. The encoder controller 2.2 performs the usual hash function, i.e., the hash function. j. transforms the user-entered data (from when / for how long) into a code, and the master clock encoder 2.1 simultaneously performs another common hash function, i. j. transforms the actual data from the control internal clock 4.1 with a fixed time range of possible device start-up, eg. for 1 to 15 minutes, etc., into the code. The integrator 3 then merges both data into one, and such data is displayed as a password in the rectangular area of the display not shown in the control user interface 1.1. This password and user ID are then communicated, e.g. by telephone or SMS message, or by fax, or electronically to the user of the controlled device, who normally enters them via the non-displayed keyboard within the set time range on a non-displayed display in the controlled user interface 1.2. After this action, in the controlled device, an electrical pulse from the controlled user interface reaches a differentiator 5, which separates the integrated time data from the controlled device from the password and then evaluates it with the set actual device clock. 9. If the data is incompatible, the evaluator only displays this fact on the display of the controlled user interface 1.2 and does not allow further operation of the controlled device. Otherwise, by the differentiator 5, the two split signals are connected via a pulse filter 11 to an output evaluation member 10, which compares and evaluates the set user data with the timer data 6 via the decoder 8. otherwise, even after the set time of the managed device has expired, no further activity is allowed to the managed device, which is displayed on the managed user interface display unit 1.2 and no further activity is allowed to the controlled device without reusing the new time-current password from the managed device user interface 1.1. .

The embodiments described and illustrated are not the only possible solutions according to the utility model, since the device may be formed by all possible combinations resulting from the protection claims.

Industrial usability

Remote-controlled secure access to applications and data with two-factor authentication is designed to quickly and conveniently control controlled devices in homes, Internet-enabled devices, electronic banking, enterprise computer networks, conventional electronic security devices, and TV sets with remote control.

Claims (4)

PROTECTION REQUIREMENTS A device for remotely controlled secure access to applications and data by two-factor authentication, consisting of an autonomously remote control user interface from a controlled user interface, a control internal clock, an internal clock of a controlled device, a pulse signal filter, encoders, decoder and evaluation members, that the control user interface (1.1) is reconnected via the encoder controller (2.2) and the integrator (3), the control clock encoder (2.1) being connected to the integrator (3) by a control internal clock (4.1) and an autonomously remote controlled user interface (1.2) is reconnected via the derivative member (5), the input evaluation member (9), the pulse filter (11) and the output evaluation member (10), which is connected directly and via the decoder (8) to the timer (6) and input the evaluating member (9) is connected via a comparison clock an encoder (7) with an internal clock (4.2) of the controlled device, wherein the display units of the control user interface (1.1) and the controlled user interface (1.2) comprise identical two-factor authentication of the control entity formed by the control entity the password generated by the temporary user interface (1.1). 2. Device for remotely controlled secure access to applications and data by two-factor authentication according to clause 1, characterized in that the password generated by the control user interface (1.1) encodes additional information about the current generation time and maximum allowed operation duration (Session Initiation Protocol) ). SK 5919-1 3. A device for remotely controlled secure access to applications and data by two-factor authentication according to claim 1, characterized in that at least one universal electrical device is a mobile phone and / or a computer and / or a personal digital assistant (PDA). 4. Device for remotely controlled secure access to applications and data by two-factor authentication according to items 1 to 3, characterized in that it is created by software with an identical flow chart of control information flow in universal electrical equipment.