Secure Input Device Encrypting Data Before OS Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Information security on computing devices is compromised by keylogging and other interception techniques, making secure data entry and presentation challenging due to the difficulty in detecting and removing keyloggers, which can occur at hardware and software levels.
Innovation Solution
A method and apparatus for secure information input and output where user inputted data is encrypted within the physical bounds of user input devices before transmission to the computing system, remaining hidden from the operating system, and decrypted by trusted applications or data transducers, thereby protecting against malicious snooping and keylogging attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is transmitted in plain text from input device to computing system, then ease of operation is improved, but information security deteriorates due to keylogging attacks
Solution Approach 1:
A trusted application acts as an intermediary between the input device and the operating system. The trusted application receives encrypted data packets from the input device, decrypts them using secure keys, and processes the plaintext data without exposing it to the compromised operating system or keyloggers. This intermediary layer protects sensitive data while maintaining operational ease.
Solution Approach 2:
The encryption and decryption functionality is extracted from the computing system and placed directly into the input device. This allows data to be encrypted at the source (input device) before transmission, removing the vulnerability point where the operating system would normally handle plaintext data and expose it to keyloggers.
2Object-affected harmful factors
If encryption is implemented at the input device level, then information security is improved, but device complexity increases
Solution Approach 1:
The input device is designed with multi-functionality, serving both as a standard input device and as a secure encryption unit. The same hardware infrastructure is used for both data input and cryptographic operations, avoiding the need for separate dedicated hardware encryption devices and reducing overall system complexity.
Solution Approach 2:
The encryption engine, secure key storage, and data transmission protocols are merged into the input device's existing architecture. This integration consolidates multiple security functions into a single unified component, reducing the number of separate parts and simplifying the overall system while maintaining strong security protections.
3Object-affected harmful factors
If encrypted data packets are transmitted to trusted application bypassing operating system, then information security is improved, but ease of operation deteriorates due to hidden data from OS
Solution Approach 1:
The data transmission pathway is segmented into two separate channels: an encrypted channel for sensitive data that bypasses the operating system and goes directly to the trusted application, and a standard channel for non-sensitive data that the operating system can access normally. This segmentation allows the OS to remain functional while protecting sensitive information.
Solution Approach 2:
The trusted application serves as an intermediary that receives encrypted data directly from the input device, processes it securely, and then interacts with the operating system only when necessary. This mediator role allows the system to maintain ease of operation through the trusted application's interface while keeping sensitive data hidden from the compromised operating system.
Data Source
AI summary
A method and apparatus for secure information input and output is described. The method may include initiating a secure data input mode at a user input device coupled with a computing system, wherein the computing system has a processor for executing an operating system, and the user input device is a peripheral input device for receiving input into the computing system. The method may also include receiving user inputted data at the user input device. The method may also include encrypting the user inputted data within the physical bounds of the user input device prior to transmission of the user inputted data from the user input device to the computing system. The method may also include transmitting the encrypted user inputted data to the computing system for routing to a trusted application, the encrypted user inputted data to remain hidden from an operating system of the computing system.