Hypervisor-Based User Interface Security via Driver Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securing user interfaces are hindered by the need to modify hardware or duplicate interface controllers, which are costly and resource-intensive, and offer inadequate security against malicious attacks such as keystroke logging and phishing.
Innovation Solution
A system comprising a hypervisor with direct access to user interface hardware peripheral devices, virtual machines that execute applications without direct hardware access, and a securing software component with split drivers managed by both the hypervisor and virtual machines, enabling secure data encryption and validation without modifying hardware or duplicating controllers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure drivers are implemented by modifying hardware to insert secret keys, then security against malicious attacks is improved, but manufacturing cost and complexity increase
Solution Approach 1:
The driver software is segmented into two distinct parts: a secure main part running in the hypervisor with direct hardware access and secret key storage, and a frontend part running in virtual machines that handles user interaction. This segmentation allows security functions to be isolated from the untrusted virtual machine environment without requiring hardware modification, resolving the contradiction between security and manufacturing ease.
Solution Approach 2:
The hypervisor acts as an intermediary layer between the virtual machines and the user interface hardware peripheral devices. It mediates all security-critical operations including secret key storage, encryption/decryption, and validation of user inputs, preventing malicious attacks from virtual machines while avoiding the need to modify hardware with embedded secret keys.
2Reliability
If secure drivers are implemented by modifying hardware, then security is improved, but device complexity increases
Solution Approach 1:
The patent replaces the mechanical/hardware approach of embedding secret keys directly in hardware with a software-based solution. The secret keys and security logic are implemented in the hypervisor software rather than being physically embedded in hardware, reducing device complexity while maintaining security through virtualization and software isolation.
3Ease of operation
If user inputs go through the host operating system, then ease of operation is maintained, but security is compromised due to potential interception
Solution Approach 1:
The hypervisor serves as a secure intermediary that directly receives user inputs from hardware peripheral devices, bypassing the untrusted host operating system and virtual machine environment. This ensures that sensitive inputs like passwords are never exposed to potentially malicious software while still allowing standard ease of operation through the virtual machine interface.
Solution Approach 2:
The input processing path is segmented into secure and untrusted zones. User inputs are captured in the secure hypervisor layer, validated and processed there, and only the necessary results are communicated to virtual machines. This segmentation prevents malicious interception while maintaining operational ease for legitimate users.
Data Source
AI summary
The invention relates to a method for securing a user interface that comprises a user interface including one or more peripheral hardware devices of the user interface for interaction with said interface, said peripheral hardware devices being driven by driver software, and one or more applications using the user interface. The invention also relates to a method for securing such an interface. The system of the invention is characterised in that the same further comprises a hypervisor and one or more virtual machines, the drivers of the peripheral hardware devices of the user interface being divided into two portions, i.e. a main portion of said drivers under the control of the hypervisor and a front-end portion of said drivers under the control of the virtual machines, wherein the front-end portion of the securing software component is in charge of managing the front-end portion of the drivers and the main portion of the securing software component is in charge of managing the main portion of the drivers. The invention can particularly be used in onboard systems.