Virtual Machine Bypassing Untrusted Drivers for Secure Login
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face the risk of nefarious entities stealing log-in data when interacting with networked sites, as existing secure connections do not protect against keystroke or video loggers resident on the computing device, allowing unauthorized access and transactions.
Innovation Solution
A system and method where a networked site delivers a surveyor application to the user's computing device to survey the operating system, identify non-trusted drivers, and instantiate a virtual machine with replacing drivers to bypass these drivers, preventing log-in data theft during the login process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure connections (HTTPS) are used to protect log-in data transmission, then network interception is prevented, but local keyloggers and video loggers on the computing device can still steal log-in data
Solution Approach 1:
A virtual machine is introduced as an intermediary layer between the user and the host operating system. This virtual machine runs a trusted operating system that is isolated from untrusted drivers in the host OS, preventing keyloggers and video loggers from accessing log-in data while allowing secure transmission to proceed
Solution Approach 2:
The system is segmented into two separate environments: the host operating system with potentially untrusted drivers, and a virtual machine with a trusted operating system. This segmentation isolates the log-in data entry process from harmful local software while maintaining secure network transmission
2Reliability
If a virtual machine with replacing drivers is instantiated to bypass non-trusted drivers, then log-in data theft is prevented, but system complexity and resource consumption increase
Solution Approach 1:
The virtual machine is instantiated and configured with trusted replacing drivers before the log-in process begins. This preliminary setup ensures that the protective environment is ready in advance, preventing data theft without requiring complex real-time detection or intervention during the actual log-in
3Reliability
If surveyor application is used to identify non-trusted drivers, then targeted protection can be provided, but additional software delivery and execution steps are required
Solution Approach 1:
The surveyor application executes within the virtual machine and provides feedback about the host operating system's drivers. Based on this feedback, the system determines which drivers are untrusted and configures replacing drivers accordingly, creating a dynamic adaptation process that enhances protection while managing complexity
Data Source
AI summary
A user at a computing device interacts with a networked site so that the user can log in thereto. The site receives a selection to log in and in response downloads at least one replacing driver for bypassing a corresponding driver operating on the computing device that may possibly copy log-in data including authentication credentials as entered by the user. Each replacing driver is loaded into an operating system of the computing device so as to bypass the corresponding possibly copying driver and be employed in the operating system rather than such corresponding bypassed driver. The site then delivers a log-in screen to a presentation application of the computing device after each replacing driver has been loaded. The presentation application displays the log-in screen and the user enters the log-in data thereinto. Accordingly, each non-trusted and bypassed driver is unable to copy the entered log-in data.