External Rendering Device Secures Content Against Malware

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Malware, such as screen scrapers and keyloggers, can intercept sensitive information on user computing devices by rendering and capturing confidential data displayed on websites or entered by users, posing a risk of unauthorized access and data theft.

Innovation Solution

Implementing a system where a computing device generates a graphical representation of content and sends it to an external rendering device, which analyzes the representation to determine display characteristics and a network address, retrieves the actual content, and renders it outside the traditional graphic pipeline, preventing malware on the computing device from accessing secured content.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If content is rendered on the computing device using traditional graphic pipeline, then the content can be displayed on the display device, but malware on the computing device can intercept and capture the sensitive information

Engineering Contradiction:
Improvedata securityVSAvoidrendering system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

An external rendering device is introduced as an intermediary between the computing device and display device. The computing device sends rendering instructions to the external rendering device, which then renders the content and displays it on the display device. This intermediary approach prevents malware on the computing device from intercepting sensitive information while maintaining the rendering functionality.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If content is rendered externally, then unauthorized access is prevented, but additional devices and processing steps are required

Engineering Contradiction:
Improveunauthorized access preventionVSAvoidsystem architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The rendering system is segmented into separate functional components: the computing device generates rendering instructions, the external rendering device performs the actual rendering, and the display device displays the output. This segmentation isolates the sensitive rendering process from potential malware on the computing device while maintaining system functionality.

Inventive Principle:
Principle #1Segmentation

3Manufacturing precision

If graphical representation is analyzed to determine display characteristics, then precise rendering control is achieved, but processing time and computational resources increase

Engineering Contradiction:
Improverendering precisionVSAvoidprocessing time
Core Design Contradiction:
Manufacturing precisionVSLoss of time

Solution Approach 1:

The computing device prepares rendering instructions in advance that include all necessary display characteristics and parameters. The external rendering device receives these pre-prepared instructions and can immediately begin rendering without requiring extensive analysis time, thus reducing processing delays while maintaining rendering precision.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12260004B2Systems and methods for rendering secured content items
Publication Date: 2025.03.25 MICROSOFT TECHNOLOGY LICENSING LLC
  • US12260004B2 patent drawing
  • US12260004B2 patent drawing
  • US12260004B2 patent drawing

AI summary

Methods, systems, apparatuses, and computer program products are provided herein for rendering secured content. For instance, a computing device may be utilized to view content that is to be displayed via a display device coupled thereto. However, rather than rendering the content, the computing device generates and/or provides a graphical representation of the content to a rendering device coupled between the computing device and the display device. The rendering device analyzes the graphical representation to determine characteristics of the graphical representation, characteristics of a display region of an application window in which the content is to be rendered, and a network address at which the actual content is located. The rendering device retrieves the content using the network address and renders the retrieved content over the display region of the application window in accordance with the characteristics determined for the graphical representation and the display region of the application window.