Cryptographic Engine Shuffling Touch Screen Coordinates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Malware can intercept and exploit secure information, such as bank account access codes, by trapping key entries on touch screens, compromising user data security.
Innovation Solution
A small domain cryptographic engine is used to obscure touch screen inputs by shuffling coordinates within a secure area of the screen, utilizing algorithms like Knuth or Thorp shuffle, with AES keying, ensuring an exact one-to-one mapping that only reverses with a known key, making it difficult for malware to deduce secure data entry.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If touch screen inputs are used for secure data entry, then user convenience is improved, but malware can intercept and exploit the input data
Solution Approach 1:
A security engine acts as an intermediary between the touch screen input and the application receiving the input. The security engine intercepts raw touch coordinates, applies cryptographic shuffling to transform them into scrambled coordinates, and then passes the scrambled coordinates to the application. This intermediary layer prevents malware from directly accessing the original input coordinates while maintaining the ease of touch screen operation.
Solution Approach 2:
The cryptographic shuffling of coordinates is performed in advance before the coordinates are passed to the application or stored. By preprocessing the coordinates through a secure transformation, the system ensures that even if malware later intercepts the coordinates, they are already scrambled and unusable without the corresponding decryption key.
2Reliability
If cryptographic shuffling is applied to touch coordinates, then security against malware is improved, but system complexity increases
Solution Approach 1:
The security engine serves as a dedicated intermediary component that handles all cryptographic operations. By isolating the complexity within this separate module, the rest of the system can remain relatively simple. The security engine receives raw coordinates, applies the shuffle algorithm, and outputs scrambled coordinates, encapsulating the cryptographic complexity in a manageable way.
Solution Approach 2:
The system is divided into distinct segments: the touch screen interface layer, the security engine layer, and the application layer. Each layer has a specific responsibility, with the security engine handling the cryptographic complexity. This segmentation allows the complex security functions to be implemented without overwhelming the entire system architecture.
3Reliability
If coordinates are shuffled using cryptographic algorithms, then malware's ability to trap coordinates is reduced, but processing time increases
Solution Approach 1:
The cryptographic shuffle algorithm transforms the coordinate parameters through a deterministic but complex transformation. While this adds processing time compared to simple coordinate passing, the transformation is computationally efficient enough that the added overhead is minimal. The security gain from preventing malware coordinate trapping far outweighs the small increase in processing time.
Data Source
AI summary
A series of touch panel key entries may be secured by shuffling touch entry coordinates. In one embodiment, the entries may be secured by applying a shuffling algorithm that replaces the true coordinates with other incorrect coordinates. Then the correct data may be reassembled in a secure environment.