Method and apparatus for securely providing access and elevated rights for remote support
An approach is provided to allow remote support representatives to carry out remote support session with minimal access and privileges to remote systems. An attempt is detected to establish a remote support session via a remote support appliance that is configured to establish the remote support session between a first device associated with a support representative and a second device associated with a user. A credential that provides an elevated access privilege is retrieved in response to the detection. The credential is provided to the first device for use in the establishment of the remote support session.
1. A method comprising:
detecting an attempt to establish a remote support session hosted on a remote support appliance that is configured to establish the remote support session between a first device associated with a support representative and a second device associated with a user,
wherein the remote support appliance is under the physical and virtual computing control of the user;
retrieving a credential that provides restricted access privileges in response to the detection;
providing the credential to the first device for use in the establishment of the remote support session;
establishing the remote support session; and
during the remote support session, retrieving, from a third device associated with an access sponsor system, via the remote support appliance, an elevated credential that provides elevated access privileges to the first device in an ad-hoc manner,
wherein the elevated credential is not provided to the support representative.
2. A method according to claim 1 , further comprising:
joining, by an access sponsor system associated with an access sponsor user, the remote support session to monitor activities conducted over the remote support session between the first device and the second device,
wherein the third device comprises the access sponsor system.
3. A method according to claim 1 , further comprising:
receiving a request for the credential from the first device associated with the support representative;
determining whether the support representative is authorized to use the credential; and
selectively granting the request based on the determination.
4. A method according to claim 1 , wherein the remote support appliance is a standalone hardware device configured to establish a secure connection for the remote support session.
5. A method according to claim 4 , wherein the remote support appliance resides within a customer premise.
6. A method according to claim 1 , wherein the remote support appliance is configured to provide a portal for a third party representative, and the portal is configured to push a remote support executable to the second device to initiate a pre-installed client to establish the remote support session.
7. A method according to claim 1 , wherein the credential is maintained by an access sponsor module, and the remote support appliance includes the access sponsor module.
8. An apparatus comprising:
at least one processor; and
at least one memory including computer program code,
the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,
detect an attempt to establish a remote support session hosted on a remote support appliance that is configured to establish the remote support session between a first device associated with a support representative and a second device associated with a user,
wherein the remote support appliance is under the physical and virtual computing control of the user,
retrieve a credential that provides a restricted access privilege in response to the detection,
provide the credential to the first device for use in the establishment of the remote support session,
establish the remote support session, and
retrieve, during the remote support session, from a third device associated with an access sponsor system, an elevated credential that provides elevated access privileges to the first device in an ad-hoc manner,
wherein the elevated credential is not provided to the support representative.
9. An apparatus according to claim 8 , wherein the apparatus is further caused, at least in part, to:
join, by an access sponsor system associated with an access sponsor user, the remote support session to monitor activities conducted over the remote support session between the first device and the second device,
wherein the third device comprises the access sponsor.
10. An apparatus according to claim 8 , wherein the apparatus is further caused, at least in part, to:
receive a request for the credential from the first device associated with the support representative;
determine whether the support representative is authorized to use the credential; and
selectively grant the request based on the determination.
11. An apparatus according to claim 8 , wherein the remote support appliance is a standalone hardware device configured to establish a secure connection for the remote support session.
12. An apparatus according to claim 11 , wherein the remote support appliance resides within a customer premise.
13. An apparatus according to claim 8 , wherein the remote support appliance is configured to provide a portal for a third party representative, and the portal is configured to push a remote support executable to the second device to initiate a pre-installed client to establish the remote support session.
14. An apparatus according to claim 8 , wherein the credential is maintained by an access sponsor module, and the remote support appliance includes the access sponsor module.
15. A system comprising:
a remote support appliance configured to establish a remote support session between a first device associated with a support representative and a second device associated with a user, wherein the remote support appliance is under the physical and virtual computing control of the user; and
an access sponsor configured to detect an attempt to establish the remote support session, to retrieve a credential that provides a restricted access privilege for the establishment of the remote support session, establish the remote support session, and, during the remote support session, to retrieve an elevated credential that provides an elevated access privilege in an ad-hoc manner wherein the elevated credential is not provided to the support representative.
16. A system according to claim 15 , wherein the remote support appliance is a standalone hardware device configured to establish a secure connection for the remote support session, the remote support appliance residing within a customer premise.
17. A system according to claim 15 , wherein the remote support appliance includes the access sponsor.
18. A method according to claim 1 , wherein the elevated credential that provides elevated access privileges is retrieved in response to a request.
19. A method according to claim 1 , wherein the elevated credential that provides elevated access privileges is retrieved in response to a pre-defined automated mechanism.
20. A method according to claim 1 , wherein the elevated credential is provided only to the second device.