Virtual User Authentication System for Keystroke Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Security credentials, such as usernames and passwords, are vulnerable to memory scanning and keystroke logging, compromising their security when used to access security-hardened cryptographic tokens or smartcards.
Innovation Solution
A virtual user authentication system utilizing a virtual machine manager (VMM) intercepts keystroke inputs and processes them through a service OS, generating arbitrary placeholder characters for security-sensitive inputs, thereby preventing keystroke loggers from accessing actual credentials and reducing the time available for memory scanning.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used with memory scanning and keystroke logging, then authentication can be performed, but security credentials become vulnerable to compromise
Solution Approach 1:
The patent introduces a virtual machine manager (VMM) as an intermediary layer between the user's operating system and the authentication process. The VMM intercepts keystroke inputs and credential data before they reach the actual authentication target, creating a secure buffer that prevents direct access by keystroke loggers and memory scanning malware. This mediator approach allows authentication to function while blocking harmful factors from compromising credentials.
Solution Approach 2:
The patent extracts the credential handling process from the traditional operating system memory space and relocates it to a isolated virtual environment managed by the VMM. By taking out the sensitive authentication data from the conventional memory space where malware operates, the system eliminates the vulnerability window that previously allowed keystroke loggers to capture credentials.
2Ease of operation
If security credentials are processed in traditional memory space, then authentication functions work normally, but the time window for memory scanning increases vulnerability
Solution Approach 1:
The patent implements a rapid intercept-and-process mechanism where the VMM captures keystroke inputs and credential data immediately, processes them through a secure virtual environment, and completes the authentication function before the data can be scanned by memory scanning malware. This rushing through approach minimizes the exposure time window by accelerating the authentication process through the virtual layer.
Data Source
AI summary
A virtual user authentication system comprising a virtual machine manager (VMM) communicatively coupled to a user operating system (OS) and a service OS, the VMM configured to receive keystroke input destined for an application executing on the user OS and communicate the keystroke input to the service OS, the keystroke input processed by the service OS.