Security Input Device Driver for Keystroke Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computer security systems are inadequate in protecting user keystroke data from being intercepted by malicious programs like Spyware and Keystroke loggers, as they often rely on outdated methods that require updating virus definitions and do not effectively prevent data leakage at the OS level.
Innovation Solution
A computer security apparatus and method that replaces the OS's input ISR with a security input ISR in the IDT, using a security input device driver to encrypt data from input units like keyboards, and includes monitoring and decryption mechanisms to ensure secure data transmission to application programs, preventing unauthorized access and altering of the ISR address.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a conventional security program with ActiveX format is used to protect keystroke data at application program level, then keystroke data leakage can be prevented at application level, but the protection is ineffective against filtering drivers or hacking programs operating at lower system levels
Solution Approach 1:
The patent moves the security protection from the application program level (one dimension) to the operating system kernel level (another dimension). By installing a filtering driver at the OS level that intercepts keystrokes before they reach application programs, the system achieves comprehensive protection against all hacking programs regardless of their installation level, thus resolving the contradiction between protection reliability and coverage scope.
2Reliability
If virus definition updates are used to detect and remove malicious programs, then known Spyware and Keystroke loggers can be removed, but the method becomes obsolete when deformed or newly introduced malicious programs appear
Solution Approach 1:
The patent implements preliminary action by proactively intercepting and encrypting keystrokes at the OS level before any malicious program can read or log them. This preventive approach eliminates the need for reactive virus definition updates, as the security mechanism is already in place to block all keystroke-based attacks regardless of whether the malicious program is known or newly introduced.
3Productivity
If input data is transmitted directly from system to application programs, then data transmission efficiency is maintained, but hacking programs can intercept the input data during transmission
Solution Approach 1:
The patent introduces an intermediary component - a filtering driver installed at the OS level - that sits between the input devices and application programs. This intermediary intercepts keystrokes, encrypts them, and transmits the encrypted data to application programs. This maintains transmission efficiency while preventing hacking programs from intercepting readable data, as the intermediary ensures all data passes through the security layer first.
Data Source
AI summary
Provided is a computer security apparatus and a method using a security input device driver. Data inputted through a data input unit is directly encrypted at the security input device driver without passing through an OS input device driver supporting in an OS. Thereby, the data inputted through the data input unit can be prevented from being illegally acquired by any hacking program from the beginning.