Browser Applet Random Keystroke Generation for Key Logger Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Key loggers can capture sensitive information such as usernames and passwords by logging user keystrokes and mouse clicks, posing a threat to information security, as existing security mechanisms like one-time passwords and biometric devices can be defeated by malware.
Innovation Solution
An applet is downloaded into a web browser that generates random keystroke or mouse click events in the input field, making it difficult for key loggers to distinguish between actual user data and random data, while only the actual user input is communicated to the remote server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If one-time passwords, biometric devices, or rotating secret information are used, then security against key loggers is improved, but the key logger can still capture useful information about the user
Solution Approach 1:
The patent introduces an intermediary component (the applet) that sits between the user and the key logger. This applet generates random data that mimics user input, acting as a mediator that confuses the key logger while allowing legitimate communication to proceed. The random data serves as a shield that protects the actual user input from being captured by the key logger.
2Reliability
If graphically entered information through number pads is used, then security is improved, but key loggers can take screen shots and reconstruct the graphically entered information
Solution Approach 1:
The applet acts as an intermediary that generates random graphical input data, making it difficult for key loggers to distinguish between random data and actual user input. The applet buffers only the legitimate user data while generating and transmitting random data to confuse the key logger.
3Reliability
If an applet generates random keystroke or mouse click events, then key loggers are overwhelmed with random data, but the applet must distinguish between random data and actual user input
Solution Approach 1:
The applet serves as an intelligent intermediary that can distinguish between random data it generates and actual user input. It maintains a buffer of legitimate user data separate from the random data stream, allowing it to protect user input while overwhelming the key logger with random events.
Data Source
AI summary
An applet may be downloaded or provided to a web browser when a user visits a site in order to protect data input by the user from being captured by malicious software, such as key loggers. The applet may present a user input field in the web browser and may generate a random sequence of low-level key stroke or mouse click events within the input field when the user enters information, such as a username and/or password. A listening key logger will receive a large amount of random data, whereas the applet will receive and buffer the actual user data that may be communicated to a remote site access by the user.