Virtual Keyboard Security via Dynamic System Priority

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional virtual keyboards on communication devices may expose sensitive personal information to third-party keyboards, which can access keystrokes and potentially compromise security.

Innovation Solution

A method and system that allows communication devices to determine if sensitive information is being entered, and in such cases, prioritizes the system keyboard over third-party keyboards, optionally storing this information for secure retrieval in a keyring file, thereby enhancing data security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If third-party keyboards are enabled for data entry, then ease of operation and user choice are improved, but security and reliability deteriorate due to potential exposure of sensitive personal information

Engineering Contradiction:
Improveuser choice of keyboardVSAvoiddata security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system dynamically switches between system keyboard and third-party keyboards based on the sensitivity of the data being entered. The processor determines whether to enable third-party keyboards in real-time based on detected sensitive information, making the keyboard availability adaptive rather than static.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system introduces an intermediary detection mechanism that monitors data entry contexts and mediates between user convenience (third-party keyboard access) and security requirements. This intermediary layer determines whether third-party keyboards should be enabled based on sensitive information detection.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If third-party keyboards are disabled for security, then reliability and data security are improved, but ease of operation and user versatility deteriorate

Engineering Contradiction:
Improvedata securityVSAvoidkeyboard availability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system applies different security policies to different data entry contexts. Instead of uniformly disabling third-party keyboards across all applications, the system selectively enables or disables them based on the local context of data sensitivity, allowing third-party keyboards to remain available for non-sensitive applications while blocking them for sensitive data entry.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The availability of third-party keyboards changes dynamically based on the detected sensitivity of the data being entered. The system transitions between states of allowing and restricting third-party keyboard access according to real-time assessment of information sensitivity.

Inventive Principle:
Principle #15Dynamics

3Reliability

If the system monitors for sensitive information to control keyboard access, then security is improved, but device complexity increases

Engineering Contradiction:
Improvedata securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system performs self-assessment by automatically detecting whether the current data entry context involves sensitive information. The processor autonomously determines the sensitivity level and makes decisions about third-party keyboard availability without requiring external intervention or complex user configuration.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11137909B2Secure data entry via a virtual keyboard
Publication Date: 2021.10.05 GOOGLE LLC
  • US11137909B2 patent drawing
  • US11137909B2 patent drawing
  • US11137909B2 patent drawing

AI summary

A communication device, which is capable of presenting one or more of a plurality of virtual keyboards, may be operable to receive application content. The application content may require a user to enter particular data via one of the plurality of virtual keyboards. The plurality of virtual keyboards may comprise a system keyboard and one or more third-party keyboards. The communication device may be operable to determine whether the particular data to be entered by the user may comprise sensitive personal information associated with the user. Based on the determination of the personal information and/or based on a configuration option communicated from the user, the communication device may be operable to determine whether to cause presentation of the system keyboard for the user to enter the particular data. The communication device may cause presentation of the system keyboard by disabling the one or more third-party keyboards.