Digital token based remote administration

Remote administration i.e. controlling a computer from remote location is becoming increasingly common. To avoid constant manual intervention in allowing access (voluntary) to the system and monitor the activities; token based access can be granted, however the tokens can be replayed and attackers may also extract the token and use it to impersonate as authentic users. In this paper we use concept of digital token for remote authentication of an authorized user without man-in-the-loop approach. The proposed method will not only mitigate replay attack, but also prevent impersonation attempts. It can also be attached to a user account, so as to control permissions and subsequent authorizations during the remote session. The integration of digital token in TLS layer is out of scope of this paper.