Secure Pointer Relay for Cloud Desktop Transitions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to provide seamless and secure transitions of a pointer/cursor between secure and unsecure windows on computing devices, often resulting in uneven or glitchy displays due to the host operating system being aware of operations in secure windows.
Innovation Solution
A computing device with a secure input unit encrypts pointing device operations in secure windows, performs location calculations on encrypted data to conceal these operations from the host OS, and decrypts the data to relay it to the secure window source, maintaining security and smooth transitions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the host operating system processes pointing device operations directly, then the pointer can be rendered smoothly, but the operations in secure windows become visible to the host OS, compromising security
Solution Approach 1:
A secure window manager acts as an intermediary between the pointing device and the host operating system. It captures pointing device operations, determines whether they occur in secure or unsecure windows, and processes them through appropriate channels. For secure windows, it encrypts operations and relays them to a secure processor; for unsecure windows, it passes operations directly to the host OS, thus maintaining both security and smooth pointer rendering
Solution Approach 2:
The system segments pointer processing into two distinct paths: one for secure windows and one for unsecure windows. Secure window operations are encrypted and processed separately by a secure processor, while unsecure window operations are handled directly by the host OS. This segmentation allows each path to be optimized for its specific requirements without interfering with the other
2Reliability
If the host operating system is kept unaware of secure window operations, then security is maintained, but the pointer display may become uneven or glitchy during transitions between secure and unsecure windows
Solution Approach 1:
The secure window manager serves as a mediator that coordinates pointer rendering between secure and unsecure contexts. It receives pointing device operations, determines the target window type, and manages the relay of operations to appropriate processors. This coordination ensures seamless pointer transitions while maintaining security isolation
Solution Approach 2:
The system merges the secure processing path and unsecure processing path at the pointer rendering stage. Both paths contribute to the final pointer display, with the secure processor handling secure window operations and the host OS handling unsecure window operations. The secure window manager coordinates these merged operations to ensure smooth transitions without revealing secure operations to the host OS
3Loss of information
If pointing device operations are encrypted, then confidentiality is maintained, but the host operating system cannot perform location calculations on the data
Solution Approach 1:
The secure window manager acts as an intermediary that handles encryption and decryption operations. It encrypts pointing device operations before relaying them to the secure processor, and decrypts the calculated location data returned from the secure processor. This allows the host OS to receive ready-to-use location information without needing to perform calculations on encrypted data
Solution Approach 2:
The system changes the state of the data through encryption and decryption operations. Pointing device operations are transformed from plaintext to encrypted form for secure transmission, and the calculated location data is transformed from encrypted form back to plaintext for use by the host OS and secure window applications
Data Source
AI summary
A seamless and secure cloud to PC pointer relay allows a pointer/cursor to be moved between secure and unsecure windows while being displayed with smooth transitions and while transitioning between secure and unsecure data handling for pointer information. A secure input unit encrypts pointing device operations in the secure window. A user (host) computing device performs location calculations on encrypted data, which conceals pointing device operations in the secure window from the host operating system. The secure unit decrypts the encrypted data returned by the host operating system to determine the calculated pointer location information. The secure unit relays the calculated pointer operation information to the source of the secure window (e.g., remote cloud server) to process user interaction with the secure window while keeping the host operating system unaware of user activity in the secure window (e.g., other than position, if the host renders the pointer).