System and method for remote access to a personal computer as a service using a remote desktop protocol and windows hello support

Patent metadata

Field	Value
Publication number	US-11070551-B2
Application number	US-201815874730-A
Country	US
Kind code	B2
Filing date	Jan 18, 2018
Priority date	Jan 18, 2018
Publication date	Jul 20, 2021
Grant date	Jul 20, 2021

Abstract

Systems and methods for a network environment for client-side remote access of a server device from a client device may utilize a biometric sensor device of the client device and a pluggable authentication and authorization framework. The biometric sensor device may capture a gesture of a target user. The server device may authenticate the target user based on previously registered encrypted biometric information of the target user utilizing the pluggable authentication and authorization framework and a remote desktop protocol. When the target user has been authenticated, the client device may be authorized to access a service of the server device.

First claim

What is claimed is:

1. An information handling system comprising:
a biometric sensor device; and
a client device coupled to the biometric sensor device, the client device including a processor having access to memory media storing instructions executable by the processor to perform operations comprising:
receive a gesture of a target user captured by the biometric sensor device;
in response to receiving the gesture of the target user, unlock secure access information of the information handling system including encrypted biometric information of the target user and server-side unlock information based on the gesture and the encrypted biometric information of the target user utilizing client-side software of the client device, wherein the secure access information is stored at the biometric sensor device; and
communicate the encrypted biometric information of the target user and the server-side unlock information to a server device via a network utilizing a remote desktop protocol (RDP) to cause server-side software of the server device to:
unlock server-side access information of the server device based on the server-side unlock information; and
authenticate the target user based on the encrypted biometric information of the target user and the server-side access information.

2. The information handling system of claim 1 , wherein the biometric sensor device is at least one of a fingerprint reader, a facial recognition device, a gesture recognition device, an iris recognition device, a retinal scan identification device, a hand geometry recognition device, a voice recognition device, a vein and facial characteristics recognition device, and an illuminated IR sensor, and wherein the gesture is at least one of a fingerprint, a face, a user gesture, an eye, a hand, a voice, and a vein.

3. The information handling system of claim 1 , wherein the biometric sensor device includes hardware configured to:
capture biometric information of the target user; and
match the biometric information of the target user to previously captured and authorized biometric information of the target user.

4. The information handling system of claim 1 , wherein the client-side software includes software configured to request access to a service of the server device.

5. The information handling system of claim 1 , wherein the server-side software includes software configured to authenticate and authorize the target user to access a protected service.

6. The information handling system of claim 1 , wherein the biometric sensor device provides multifactor authentication policies to enforce user identity protection.

7. An information handling system comprising:
a biometric sensor device; and
a client device coupled to the biometric sensor device, the client device including a processor having access to memory media storing instructions executable by the processor to perform operations comprising:
receive a gesture of a target user captured by the biometric sensor device;
in response to receiving the gesture of the target user, unlock secure access information of the information handling system including encrypted biometric information of the target user based on the gesture and the encrypted biometric information of the target user utilizing client-side software of the client device, wherein the secure access information is stored at the biometric sensor device;
establish a virtual channel between the client device and a server device;
populate the virtual channel with the encrypted biometric information of the target user; and
communicate an access request including the target user to the server device via a network utilizing the established virtual channel to cause server-side software of the server device to:
receive the access request; and
authenticate the target user based on the encrypted biometric information of the target user populated at the virtual channel.

8. The information handling system of claim 7 , wherein the biometric sensor device includes hardware configured to:
capture biometric information of the target user; and
match the biometric information of the target user to previously captured and authorized biometric information of the target user.

9. The information handling system of claim 7 , wherein the client-side software includes software configured to request access to a service of the server device.

10. The information handling system of claim 7 , wherein the server-side software includes software configured to authenticate and authorize the target user to access a protected service.

11. An information handling system comprising:
a server device including a processor having access to memory media storing instructions executable by the processor to perform operations comprising:
receive a set of login credentials from a client device via a network;
open a guest account on a host of the server device based on the received set of login credentials to establish a remote desktop protocol (RDP) session between the client device and the host of the server device;
access a gesture of a target user of the client device captured by a biometric sensor device coupled to the client device utilizing server-side software and a virtual interface of the biometric sensor device within the RDP session;
authenticate the target user to a target account on the host of the server device based on the gesture and encrypted biometric information of the target user utilizing the server-side software, wherein the encrypted biometric information of the target user is stored at the biometric sensor device; and
when the target user is authenticated: open the target account; and
switch from the guest account to the target account to allow the client device to access the target account.

12. The information handling system of claim 11 , wherein the server-side software includes software configured to authenticate and authorize the target user to access a protected service.

13. The information handling system of claim 11 , wherein the virtual interface comprises a virtual universal serial bus (USB) interface of the biometric sensor device.

14. The information handling system of claim 11 , wherein the biometric sensor device is at least one of a fingerprint reader, a facial recognition device, a gesture recognition device, an iris recognition device, a retinal scan identification device, a hand geometry recognition device, a voice recognition device, a vein and facial characteristics recognition device, and an illuminated IR sensor, and wherein the gesture is at least one of a fingerprint, a face, a user gesture, an eye, a hand, a voice, and a vein.

Assignees

• Dell Products Lp

Inventors

• Fausak Andrew T
• Rombakh Oleg
• Robison Jr Charles D
• Andrews Carlton A

Classifications

• G06F21/32 Primary

  using biometric data, e.g. fingerprints, iris scans or voiceprints · CPC title

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• G06F2213/0042

  Universal serial bus [USB] · CPC title

• H04L63/0861 Primary

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• G06F2213/0016

  Inter-integrated circuit (I2C) · CPC title