OS Command Launcher Obfuscation for Secure Terminal Sessions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Publicly-accessible computing devices such as ATMs, Self-Service Terminals, and Self-Service Checkouts are vulnerable to malware, viruses, and eavesdropping attacks, which can compromise sensitive consumer information like credit/debit card data due to inadequate security measures, especially in scenarios where multiple users share the same OS session with restricted access.
Innovation Solution
A computer-implemented method and Self-Service Terminal configuration that involves identifying and validating OS commands, decrypting and re-encrypting credentials and executable paths with randomly generated keys, and storing hash values to ensure each command execution is secure and isolated within the OS, preventing unauthorized access and data breaches.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If multiple users share the same OS session with restricted access, then device accessibility and ease of operation are improved, but security vulnerability and risk of information compromise increase
Solution Approach 1:
The patent segments the OS session into isolated process contexts, where each command execution occurs in a separate, validated environment with its own credential verification. This allows multiple users to access the device while preventing cross-process contamination and unauthorized data access.
Solution Approach 2:
The patent introduces an intermediary validation layer between the user session and command execution. This intermediary verifies credentials and validates executables before allowing access, acting as a security buffer that maintains both accessibility and protection against eavesdropping attacks.
2Reliability
If strict permission levels are enforced in the OS, then security control is improved, but inability to mitigate eavesdropping attacks persists
Solution Approach 1:
The patent performs preliminary validation of credentials and executables before command execution. By verifying authenticity in advance and isolating each command in a validated context, the system prevents eavesdropping attacks from compromising sensitive information during runtime.
Solution Approach 2:
The patent creates isolated process contexts that replicate necessary OS functionality for each command execution. These isolated copies operate with validated credentials, preventing eavesdropping processes from accessing real sensitive data while maintaining operational functionality.
3Productivity
If credentials and executable paths are stored in memory during runtime, then operational efficiency is improved, but exposure to data theft and malware attacks increases
Solution Approach 1:
The patent extracts sensitive credentials and executable path information from persistent memory storage and validates them freshly for each command execution. By taking out these sensitive elements from vulnerable memory locations and verifying them in isolated contexts, the system maintains operational efficiency while reducing exposure to malware and data theft.
4Use of energy by moving object
If the same executable is used across multiple commands in an OS session, then system resource utilization is improved, but security vulnerability to malware injection increases
Solution Approach 1:
The patent implements dynamic validation where each executable is verified fresh for each command execution rather than relying on static trust. This dynamic approach allows the system to reuse executables for resource efficiency while maintaining security through continuous validation in isolated process contexts.
Data Source
Figure 1A
Figure 1B
Figure 1C
AI summary
An Operating System (OS) command launcher (404) or loader is newly obfuscated each time a command is successfully processed by the OS command launcher (404). Moreover, a binary for the OS command launcher (404) is validated each time a command is attempted to be processed for execution by the OS command launcher (404).