Trusted UI Object Verification via Cryptographic Hashing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Users face difficulties in distinguishing legitimate user interface (UI) elements from fake ones in graphical operating systems, as graphical objects can be easily forged to appear legitimate, making it challenging to protect sensitive information from malicious sites or fraudulent entities.

Innovation Solution

The system verifies the identity of UI objects by cryptographically signing trusted graphical UI objects and modifying their appearance upon verification, allowing users to differentiate authentic from non-authentic UI elements through visual transforms such as colored borders, textures, or location changes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If graphical UI objects are rendered without verification, then ease of operation is improved, but security and reliability deteriorate as users cannot distinguish fake UI elements from legitimate ones

Engineering Contradiction:
Improveease of useVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary cryptographic verification of UI objects before they are rendered to the user. Hash values of UI objects are calculated and verified against stored reference values in advance, ensuring that only authenticated objects are displayed. This preliminary action prevents fake UI elements from being presented to users while maintaining seamless interaction.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If cryptographic verification of UI objects is implemented, then security and reliability are improved, but device complexity increases due to hash calculation and verification processes

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Instead of verifying entire UI objects, the system uses cryptographic hash values as compact representations or copies of the verification data. These hash values are stored in a database and compared against calculated hashes of rendered objects, providing a simplified verification mechanism that reduces computational complexity while maintaining security.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The system transforms UI objects into a different parameter space by calculating cryptographic hash values. This parameter transformation converts complex graphical objects into fixed-length hash strings that are easy to store, transmit, and verify, significantly reducing the complexity of the verification process.

Inventive Principle:
Principle #35Parameter changes

3Loss of information

If visual transforms are applied to verified UI objects, then information transmission is improved by indicating authenticity, but device complexity increases due to additional rendering processing

Engineering Contradiction:
Improveinformation transmissionVSAvoidrendering complexity
Core Design Contradiction:
Loss of informationVSDevice complexity

Solution Approach 1:

The system applies color changes as visual transforms to verified UI objects, such as adding colored borders or changing background colors to indicate authentication status. This simple visual modification effectively communicates authenticity to users without requiring complex rendering transformations, maintaining ease of implementation while providing clear security indicators.

Inventive Principle:
Principle #32Color changes

Data Source

PatentUS7913292B2Identification and visualization of trusted user interface objects
Publication Date: 2011.03.22 MICROSOFT TECHNOLOGY LICENSING LLC
  • US7913292B2 patent drawing
  • US7913292B2 patent drawing
  • US7913292B2 patent drawing

AI summary

A unique system and method that facilitates visually identifying authentic UI objects, bundles, or windows is provided. A detection component can detect when user-based input has activated a verification mode with respect to one or more trusted UI objects rendered on-screen. A verification component can verify at least one of a source and identity associated with one or more UI objects in order to ensure the integrity related therewith. A verification rendering engine can re-render the one or more trusted UI objects in a manner that is based at least upon whether the one or more trusted UI objects are verified, thus improving visual recognition of verified trusted UI objects over non-verified UI objects.