Virtual Machine Manager Input Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtual machine-based data security systems are vulnerable as the operating system can intercept plaintext user input if compromised, reducing security.
Innovation Solution
A virtual machine manager acquires and encrypts user input data according to a security connection's encryption rule, sending encrypted data to a server, thereby isolating the encryption process from the operating system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the operating system performs security and encryption processing during secure input, then security protection can be performed for applications requiring secure input, but plaintext input by a user may be acquired if the operating system is attacked, thereby reducing security of input information
Solution Approach 1:
The patent divides the input processing system into separate components: a virtual machine manager layer that handles encryption and a virtual machine/operating system layer that handles input acquisition. This segmentation ensures that even if the operating system is compromised, the encryption logic in the virtual machine manager remains intact and can still protect the input data.
Solution Approach 2:
The virtual machine manager acts as an intermediary between the user input and the application server. It acquires input data from the physical input unit, performs encryption according to negotiation results with the server, and then transmits the encrypted data. This intermediary role isolates the sensitive encryption operations from the potentially compromised operating system.
2Reliability
If the virtual machine manager acquires input data by controlling a physical input unit, then input data can be obtained directly without operating system involvement, but the physical input unit requires additional control mechanisms
Solution Approach 1:
The virtual machine manager implements a universal input acquisition mechanism that works across different physical input units (keyboard, mouse, touchscreen, etc.). By establishing a standardized interface for acquiring input data directly from physical devices, the system avoids the need for separate control mechanisms for each input device while maintaining security.
3Reliability
If encryption processing is performed on input data before transmission to the server, then data security during transmission is improved, but additional processing time and computational resources are required
Solution Approach 1:
The encryption parameters and negotiation results are established in advance during the connection setup phase between the virtual machine manager and the server. This preliminary action allows the actual encryption of input data to occur quickly without repeated negotiation, reducing the time overhead during data transmission.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of the present invention provide a method and an apparatus for inputting data. The present invention relates to the communications field and aims to improve security of input information. The method includes: acquiring, by a virtual machine manager, input data; performing, by the virtual machine manager, encryption processing on the input data according to an encryption rule of a security connection to obtain encrypted data, where the security connection refers to a connection that is established between an application interface and a server and used for data transmission; and sending, by the virtual machine manager, the encrypted data to the server. The present invention is applicable to a data input scenario.