Secure Keyboard Encryption Module HID Input Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current technologies lack effective security measures to protect portable applications and data stored on nonvolatile memory devices, such as flash drives, when used on insecure computers, making them vulnerable to data theft from spyware, dictionary attacks, and compromised application modules.
Innovation Solution
A system incorporating a human interface device (HID) with an encryption module and a nonvolatile memory port that encrypts user inputs before sending them to a computer, using a unique key pair for secure communication, and employing a random salt to thwart dictionary attacks, ensuring only authorized applications can decrypt the inputs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is stored on portable nonvolatile memory devices for easy portability, then user convenience and accessibility are improved, but security against data theft and unauthorized access deteriorates
Solution Approach 1:
The system applies preliminary anti-action by encrypting all data stored on the portable nonvolatile memory device before it can be accessed by unauthorized parties. The encryption module pre-processes data using cryptographic algorithms (AES, RSA, ECC) so that even if the device is stolen or accessed without authorization, the data remains inaccessible without the corresponding decryption key. This preemptive security measure directly counters the vulnerability to data theft while maintaining portability.
Solution Approach 2:
The encryption module acts as an intermediary between the data storage system and potential unauthorized access. Rather than relying on physical security or user vigilance, the patent introduces a cryptographic intermediary layer that mediates all data access requests. The encryption/decryption process serves as this intermediary mechanism, allowing legitimate access through proper authentication while blocking unauthorized access attempts, thus resolving the security vulnerability without compromising portability.
2Object-affected harmful factors
If encryption is applied to protect data on portable devices, then security against data theft is improved, but device complexity and processing overhead increase
Solution Approach 1:
The encryption system is segmented into distinct functional components: key generation module, encryption module, decryption module, and key management module. Each component performs a specific cryptographic function, allowing the system to implement comprehensive security without requiring a single complex monolithic encryption system. This segmentation enables modular implementation of different cryptographic algorithms (AES for symmetric encryption, RSA/ECC for asymmetric encryption) and simplifies the overall device architecture while maintaining strong security protections.
3Object-affected harmful factors
If strong encryption algorithms are used to secure communications, then security against dictionary attacks is improved, but processing time and computational resources increase
Solution Approach 1:
The system applies different cryptographic strengths to different data types and access scenarios. High-security algorithms (AES-256, RSA-2048) are used for critical data and authentication operations where security is paramount, while lighter algorithms may be used for less sensitive operations. This local quality approach ensures that dictionary attacks are effectively countered for important data without requiring maximum computational resources for all operations, thus balancing security with processing time requirements.
4Object-affected harmful factors
If unique key pairs are generated for each device to ensure security, then protection against unauthorized access is improved, but key management complexity and vulnerability to key compromise increase
Solution Approach 1:
The key management system operates with a high degree of autonomy through self-service mechanisms. Private keys are generated and stored locally on each device without requiring external key distribution infrastructure. The system automatically manages key generation, storage, and usage, reducing the complexity of centralized key management. This self-service approach allows unique key pairs to be generated for each device, providing strong protection against unauthorized access while minimizing the complexity and vulnerability associated with centralized key management systems.
Data Source
AI summary
A secure keyboard combines a human interface device (HID), application programs stored in nonvolatile memory, and encryption technologies into a single package. Like any other keyboard, the secure keyboard communicates with a computer via a communications port. A computer can load and execute an application stored in the secure keyboard. The application, however, expects encrypted inputs. The HID inputs are encrypted before being passed to the computer and thence the application. Therefore, a secure link exists from the HID to the application. Choosing strong encryption and unique encryption/decryption keys allows applications to be keyed to a specific secure keyboard. No other keyboard can supply keyboard input to the application. The secure keyboard can be implemented as a security device that does not include a keyboard. The security device can accept HID inputs from HID devices, encrypts them, and passes them to the computer and thence the application.