GUI Keyboard Pointer Motion Tracking for Secure Data Entry
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data entered through user interfaces is inherently insecure due to vulnerabilities in the interaction between computer components, particularly susceptible to keystroke logging and eavesdropping, as it bypasses conventional security measures.
Innovation Solution
A graphical user interface (GUI) keyboard, or soft-keyboard, is integrated within applications to allow data entry through pointer motion and position, bypassing operating system components and eliminating the need for physical key presses, thereby reducing the risk of interception by malicious programs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a conventional keyboard and operating system components are used for data entry, then ease of operation is improved, but security is worsened due to susceptibility to keystroke logging and eavesdropping
Solution Approach 1:
The patent extracts the data entry function from the conventional keyboard input pathway and relocates it to a web application-based virtual keyboard interface. This extraction removes the vulnerability point where keystrokes are intercepted by malicious programs, as the input now occurs within the secured web application environment rather than through the vulnerable OS keyboard driver layer.
Solution Approach 2:
The patent introduces a virtual keyboard interface as an intermediary between the user and the data entry process. This intermediary layer, implemented through web application technology, mediates the input process by capturing pointer movements and translating them into data entries within the secured application context, thereby preventing direct exposure to the vulnerable system-level keyboard input channel.
2Object-affected harmful factors
If a GUI keyboard is used to bypass operating system components, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent implements a universal virtual keyboard interface that can be deployed across different web applications and operating systems without requiring application-specific customization. The pointer-tracking mechanism serves multiple functions: it detects key positions, determines input timing, and generates data entries, thereby reducing the need for separate specialized components and lowering overall system complexity despite the security enhancements.
3Object-affected harmful factors
If pointer motion tracking is used for data entry, then security against keystroke logging is improved, but ease of operation is worsened
Solution Approach 1:
The patent employs periodic sampling of pointer position at defined time intervals to determine key presses. This periodic action allows the system to balance security requirements with operational speed by checking pointer position at optimized intervals, thereby capturing sufficient input data for secure processing while maintaining reasonable data entry pace for the user.
Data Source
AI summary
A method and device for entering data in an application is disclosed. The method may comprise displaying a graphical user interface (GUI) keyboard within the application, the keyboard comprising multiple identifier keys. A detection module may monitor the position of a pointer of a pointing device in relation to the multiple identifier keys and detects that the pointer of the pointing device has been positioned over one of the multiple identifier keys for a predetermined period of time, thereby detecting the selection of the identifier key. In response to detecting the selection, data associated with the selected identifier key may be generated and indication data representative of the generated data may be displayed in a data field.