Mobile App Obfuscation Module for Screen Capture Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile device platforms lack effective mechanisms to prevent screen capture of sensitive information in mPOS applications, allowing unauthorized reproduction of sensitive data.
Innovation Solution
A method and system that utilize an event listener and obfuscation module to detect screen capture events and obfuscate sensitive data fields until the event is completed, using obstruction layers or nullifying user input to protect sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional SDK APIs are used, then developers can build mobile applications, but they cannot prevent users from taking screen captures of sensitive information
Solution Approach 1:
The system applies preliminary anti-action by detecting screen capture events through an event listener and proactively obfuscating sensitive data fields before the capture is completed. The obfuscation module receives notifications of capture events and immediately applies obfuscation techniques (such as pixelation, blurring, or replacement with placeholder characters) to the identified sensitive data fields, preventing the unauthorized reproduction of sensitive information while allowing the screen capture functionality to continue operating.
Solution Approach 2:
The invention introduces an intermediary obfuscation module that acts as a mediator between the event listener and the display system. This module intercepts screen capture events, identifies sensitive data fields that would be captured, applies obfuscation transformations to those fields, and presents the obfuscated version to the capture process. This intermediary layer enables screen capture functionality to coexist with data protection without requiring complete disabling of user operations.
2Adaptability or versatility
If screen capture functionality is enabled, then users can perform screenshots, but sensitive data may be unauthorizedly reproduced
Solution Approach 1:
The system applies local quality by selectively obfuscating only the sensitive data fields identified within the screen capture area rather than obfuscating the entire screen. The obfuscation module receives coordinates of the capture area, identifies which data fields within that area contain sensitive information, and applies obfuscation transformations only to those specific fields. This allows non-sensitive portions of the screen to remain clear and usable while protecting only the sensitive information from unauthorized reproduction.
3Ease of operation
If sensitive data is displayed for user input, then users can enter information, but the data becomes vulnerable to capture
Solution Approach 1:
The system implements preliminary action by setting up an event listener that monitors for screen capture events before they complete. When a capture event is detected, the obfuscation module is immediately triggered to obfuscate sensitive data fields that are currently displayed and vulnerable to capture. This preliminary detection and response mechanism ensures that sensitive information is protected retroactively even though it was briefly displayed for user input purposes.
Data Source
AI summary
Described herein are a system and methods for obfuscating sensitive data during a data capture event in order to prevent unauthorized reproduction of that sensitive data. In some embodiments, an event listener detects an event likely to result in a data capture and notifies an obfuscation module. The obfuscation module then identifies sensitive data fields, determines an appropriate obfuscation technique for each data field, and obfuscates the identified data fields for the duration of the event. In some embodiments, any active data input actions may be canceled. In some embodiments, the data values within the obfuscated data fields may be revealed upon completion of the event.