GPU Display Obfuscation for Sensitive Data Exposure Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security measures for sensitive information presented on displays are inadequate as they can be easily circumvented by screen captures or photographs, leading to data exfiltration and potential fraud or malicious activities.
Innovation Solution
Implementing obfuscation techniques at the hardware layer using a graphics processing unit (GPU) to identify and alter sensitive information before display, allowing it to be revealed only upon user interaction, thereby enhancing security across various applications and hardware configurations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data masking is implemented to protect sensitive information, then security against data exfiltration is improved, but the system complexity and computational overhead increase
Solution Approach 1:
The patent applies preliminary action by implementing obfuscation at the hardware layer before data is rendered to the display. The GPU modifies sensitive data in the binary format during the rendering process, so that by the time data appears on screen, it is already obscured. This prevents data exfiltration through screen captures while avoiding the need for additional software layers or post-processing security measures.
Solution Approach 2:
The patent uses the GPU as an intermediary component between the data source and the display output. The GPU intercepts the binary data during rendering, applies obfuscation algorithms to sensitive information, and then outputs the modified data to the display. This intermediary approach integrates security into the existing graphics pipeline without requiring separate security hardware or software systems.
2Reliability
If obfuscation is applied to all content, then security is improved, but the loss of information and usability deteriorate
Solution Approach 1:
The patent applies local quality by selectively obfuscating only specific portions of data based on sensitivity characteristics. The system analyzes the binary data during rendering, identifies sensitive information fields, and applies obfuscation only to those specific regions while leaving non-sensitive content unchanged. This ensures that security is applied where needed without compromising the usability or accessibility of non-sensitive information.
3Reliability
If hardware-based obfuscation is implemented, then resistance to circumvention is improved, but the device complexity and configuration requirements increase
Solution Approach 1:
The patent leverages the GPU's existing multi-functional capabilities to perform both graphics rendering and security obfuscation operations. The GPU processes binary data during normal rendering operations and simultaneously applies obfuscation to sensitive information. This universal approach allows the existing GPU hardware to serve dual purposes without requiring dedicated security hardware or additional configuration, thereby maintaining resistance to circumvention while avoiding increased device complexity.
Data Source
AI summary
In some implementations, a device may obtain content data that indicates content that is to be presented on a display, where the content data is in a binary format. The device may process the content data, in connection with rendering the content for presentation on the display, to identify information in the content. The device may determine that the information is to be obfuscated in the content based on one or more characteristics of the information. The device may generate presentation data, for presenting the content on the display, to obfuscate the information by altering a portion of the presentation data that is associated with the information. The device may provide the presentation data to the display to cause presentation of the content with the information obfuscated.