Secure User Interaction Processing in Electronic Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern operating systems face vulnerabilities in processing user interaction information, as collected data can compromise security when not properly managed.
Innovation Solution
An electronic device processes user interaction information by executing applications in an unsecure area, converting user reactions into pseudo-events, and transmitting data to a secure area for encryption and interpretation, using a homomorphic encryption system and oblivious event receipt (OER) functions to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If user interaction information is collected and processed in the normal area, then application functionality is enhanced, but security vulnerability increases
Solution Approach 1:
The system divides the electronic device into two distinct areas: a normal area for executing applications and a secure area for processing sensitive user interaction information. This segmentation isolates security-critical operations from the untrusted application environment, allowing applications to function while protecting user data security through spatial separation of concerns.
2Reliability
If user interaction data is transmitted to secure area, then security is enhanced, but processing complexity increases
Solution Approach 1:
The system introduces an intermediary mechanism that translates user interaction events from the normal area into a secure format for the secure area. This intermediary layer handles the complexity of secure processing by managing data translation, format conversion, and secure transmission protocols, thereby enhancing security while abstracting the complexity from the application layer.
Data Source
AI summary
A method for processing user interaction information by an electronic device, includes: executing an application in an unsecure area of the electronic device; instantiating an object of the application; recognizing a user interface of the application, converting a user reaction between a pseudo-event and the instantiated object into data, and transmitting the data to a secure area of the electronic device; mirroring the application to the secure area by using the data; based on a user input being detected, inferring an event to be recognized by a graphical user interface (GUI) framework of the electronic device; and interpreting, in the secure area, the user reaction to the instantiated object corresponding to the inferred event