Secure equipment access with screen monitoring enforcement
In one embodiment, a method is disclosed comprising: detecting, by a processor, a remote access session from an accessing device to an accessed device; determining, by the processor, an access session screen-sharing security policy for the accessed device; and preventing, by the processor, the remote access session in response to a violation of the access session screen-sharing security policy.
1 . A method, comprising:
monitoring, by a processor and on an operation dashboard, a remote access session from an accessing device to an accessed device that allows the accessing device to invoke one or more operations in support of software processes executing remotely on the accessed device;
determining, by the processor, an access session screen-sharing security policy for the accessed device, wherein the access session screen-sharing security policy requires screen sharing of the remote access session by the accessing device with one or more viewing devices while the accessing device accesses the accessed device; and
preventing, by the processor, the accessing device from further accessing the accessed device through the remote access session when in violation of the access session screen-sharing security policy.
2 . The method as in claim 1 , wherein the access session screen-sharing security policy requires full screen sharing by the accessing device, the method further comprising:
detecting the violation of the access session screen-sharing security policy in response to determining screen sharing by the accessing device to be less than full screen sharing.
3 . The method as in claim 1 , wherein the access session screen-sharing security policy requires full screen sharing by the accessing device, the method further comprising:
detecting the violation of the access session screen-sharing security policy in response to determining window-based sharing by the accessing device.
4 . The method as in claim 1 , wherein the access session screen-sharing security policy requires full screen sharing by the accessing device and singular screen utilization by the accessing device, the method further comprising:
detecting the violation of the access session screen-sharing security policy in response to one of either determining screen sharing by the accessing device to be less than full screen sharing or determining multi-screen utilization by the accessing device.
5 . The method as in claim 1 , wherein the access session screen-sharing security policy requires full screen sharing by the accessing device of all display screens of the accessing device, the method further comprising:
detecting the violation of the access session screen-sharing security policy in response to determining screen sharing by the accessing device to be less than full screen sharing of all display screens of the accessing device.
6 . The method as in claim 1 , further comprising:
preventing connection of the remote access session from the accessing device to the accessed device in response to non-compliance with the access session screen-sharing security policy prior to connecting.
7 . The method as in claim 1 , further comprising:
detecting a screen sharing change by the accessing device during the remote access session that violates the access session screen-sharing security policy; and
ceasing the remote access session in response to the screen sharing change.
8 . The method as in claim 7 , wherein the screen sharing change is one of: stopping sharing; stopping recording; or adding an additional display screen.
9 . The method as in claim 1 , further comprising:
initiating a periodic keepalive message from a screen sharing application on the accessing device; and
determining the violation of the access session screen-sharing security policy in response to the periodic keepalive message failing to arrive from the screen sharing application on the accessing device for a set period of time.
10 . The method as in claim 1 , further comprising:
indicating, via a user interface on the accessing device, the violation; and
allowing for correction of the violation via the user interface.
11 . The method as in claim 1 , further comprising:
monitoring the remote access session via one or both of either real-time monitoring or session recording.
12 . The method as in claim 1 , wherein the remote access session is browser-based, and wherein preventing the remote access session comprises browser-based enforcement.
13 . The method as in claim 1 , wherein the accessed device is an Internet of Things (IoT) device.
14 . A tangible, non-transitory, computer-readable medium having computer-executable instructions stored thereon that, when executed by a processor on a computer, cause the computer to perform a method comprising:
monitoring, on an operation dashboard, a remote access session from an accessing device to an accessed device that allows the accessing device to invoke one or more operations in support of software processes executing remotely on the accessed device;
determining an access session screen-sharing security policy for the accessed device, wherein the access session screen-sharing security policy requires screen sharing of the remote access session by the accessing device with one or more viewing devices while the accessing device accesses the accessed device; and
preventing the accessing device from further accessing the accessed device through the remote access session when in violation of the access session screen-sharing security policy.
15 . The tangible, non-transitory, computer-readable medium as in claim 14 , wherein the access session screen-sharing security policy requires one or more of: full screen sharing by the accessing device, singular screen utilization by the accessing device, or full screen sharing by the accessing device of all display screens, the method further comprising:
detecting the violation of the access session screen-sharing security policy in response to one or more of: determining screen sharing by the accessing device to be less than full screen sharing; determining window-based sharing by the accessing device; or determining screen sharing by the accessing device to be less than full screen sharing of all display screens of the accessing device.
16 . The tangible, non-transitory, computer-readable medium as in claim 14 , further comprising:
preventing connection of the remote access session from the accessing device to the accessed device in response to non-compliance with the access session screen-sharing security policy prior to connecting.
17 . The tangible, non-transitory, computer-readable medium as in claim 14 , further comprising:
detecting a screen sharing change by the accessing device during the remote access session that violates the access session screen-sharing security policy; and
ceasing the remote access session in response to the screen sharing change.
18 . The tangible, non-transitory, computer-readable medium as in claim 14 , further comprising:
initiating a periodic keepalive message from a screen sharing application on the accessing device; and
determining the violation of the access session screen-sharing security policy in response to the periodic keepalive message failing to arrive from the screen sharing application on the accessing device for a set period of time.
19 . The tangible, non-transitory, computer-readable medium as in claim 14 , further comprising:
indicating, via a user interface on the accessing device, the violation; and
allowing for correction of the violation via the user interface.
20 . An apparatus, comprising:
one or more network interfaces to communicate with a network;
a processor coupled to the one or more network interfaces and configured to execute one or more processes; and
a memory configured to store a process that is executable by the processor, the process, when executed, configured to:
monitor, on an operation dashboard, a remote access session from an accessing device to an accessed device that allows the accessing device to invoke one or more operations in support of software processes executing remotely on the accessed device;
determine an access session screen-sharing security policy for the accessed device, wherein the access session screen-sharing security policy requires screen sharing of the remote access session by the accessing device with one or more viewing devices while the accessing device accesses the accessed device; and
prevent the accessing device from further accessing the accessed device through the remote access session when in violation of the access session screen-sharing security policy.