USB Keyboard Security via Host Controller Driver Interception
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security measures for USB keyboards are reactive and fail to promptly prevent malicious programs from leaking sensitive information input through USB keyboards, as they rely on patching and monitoring at higher levels, leaving systems vulnerable until new remedies are applied.
Innovation Solution
A method that secures USB keyboards by performing security operations at the host controller driver level, involving selecting device objects, storing IRP addresses, registering completion routines, encoding and decoding key data, and outputting it securely, effectively preventing unauthorized data leakage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If security operations are performed at USB hub driver level, then ease of operation is improved, but response speed and effectiveness against malicious programs deteriorates
Solution Approach 1:
The patent applies dimensionality change by operating at a lower driver level (host controller driver level instead of USB hub driver level), effectively adding a new dimension to the security architecture. This lower level provides closer proximity to the keyboard input mechanism, enabling faster detection and prevention of malicious programs while maintaining operational effectiveness.
2Device complexity
If reactive security measures are used, then device complexity is reduced, but reliability and effectiveness against evolving malware deteriorates
Solution Approach 1:
The patent implements preliminary action by establishing security operations at the host controller driver level before malicious programs can successfully leak data. The completion routine is registered in advance to intercept and prevent key data leakage, transforming the security approach from reactive to proactive while maintaining acceptable system complexity.
3Reliability
If security operations are performed at host controller driver level, then effectiveness against data leakage is improved, but device complexity increases
Solution Approach 1:
The patent uses an intermediary approach by introducing a completion routine as a mediator between the host controller driver and the USB hub driver. This completion routine selectively intercepts IRPs (I/O request packets) related to keyboard input, processes them through security operations, and forwards them appropriately, thereby achieving effective data leakage prevention without requiring complete system redesign.
Data Source
AI summary
Provided is a method of securing a Universal Serial Bus (USB) keyboard. According to the method, a keyboard security operation is performed at a host controller driver level, which is one level lower than a USB hub driver level. Thus, it is possible to rapidly and effectively prevent a malicious program from leaking information input from a keyboard that is in communication with a main frame and transfers data via a USB.