CN100565457C - 向具有高保证执行环境的系统提供安全输入的系统和方法 - Google Patents
向具有高保证执行环境的系统提供安全输入的系统和方法 Download PDFInfo
- Publication number
- CN100565457C CN100565457C CNB2004100882982A CN200410088298A CN100565457C CN 100565457 C CN100565457 C CN 100565457C CN B2004100882982 A CNB2004100882982 A CN B2004100882982A CN 200410088298 A CN200410088298 A CN 200410088298A CN 100565457 C CN100565457 C CN 100565457C
- Authority
- CN
- China
- Prior art keywords
- operating system
- user
- input pattern
- secure operating
- input
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/82—Protecting input, output or interconnection devices
- G06F21/83—Protecting input, output or interconnection devices input devices, e.g. keyboards, mice or controllers thereof
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F15/00—Digital computers in general; Data processing equipment in general
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
- G06F21/53—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/82—Protecting input, output or interconnection devices
- G06F21/84—Protecting input, output or interconnection devices output devices, e.g. displays or monitors
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/08—Access security
- H04W12/086—Access security using security domains
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2105—Dual mode as a secondary aspect
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
- H04W88/02—Terminal devices
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Physics & Mathematics (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- User Interface Of Digital Computer (AREA)
- Digital Computer Display Output (AREA)
- Burglar Alarm Systems (AREA)
Abstract
Description
Claims (37)
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US10/693,061 | 2003-10-24 | ||
US10/693,061 US7464412B2 (en) | 2003-10-24 | 2003-10-24 | Providing secure input to a system with a high-assurance execution environment |
Publications (2)
Publication Number | Publication Date |
---|---|
CN1609811A CN1609811A (zh) | 2005-04-27 |
CN100565457C true CN100565457C (zh) | 2009-12-02 |
Family
ID=34394582
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CNB2004100882982A Expired - Fee Related CN100565457C (zh) | 2003-10-24 | 2004-10-22 | 向具有高保证执行环境的系统提供安全输入的系统和方法 |
Country Status (12)
Country | Link |
---|---|
US (2) | US7464412B2 (zh) |
EP (1) | EP1526426B1 (zh) |
JP (1) | JP4607529B2 (zh) |
KR (1) | KR101099324B1 (zh) |
CN (1) | CN100565457C (zh) |
AT (1) | ATE386971T1 (zh) |
AU (1) | AU2004216665B2 (zh) |
BR (1) | BRPI0404021A (zh) |
CA (1) | CA2482078C (zh) |
DE (1) | DE602004011871T2 (zh) |
MX (1) | MXPA04010156A (zh) |
RU (1) | RU2365988C2 (zh) |
Families Citing this family (35)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7496768B2 (en) * | 2003-10-24 | 2009-02-24 | Microsoft Corporation | Providing secure input and output to a trusted agent in a system with a high-assurance execution environment |
US7464412B2 (en) * | 2003-10-24 | 2008-12-09 | Microsoft Corporation | Providing secure input to a system with a high-assurance execution environment |
US7784088B2 (en) | 2004-07-30 | 2010-08-24 | Research In Motion Limited | Method and system for managing delayed user authentication |
EP1779248A4 (en) | 2004-07-30 | 2008-02-27 | Research In Motion Ltd | METHOD AND SYSTEM FOR COORDINATING CLIENT AND HOST SAFETY MODULES |
US9363481B2 (en) * | 2005-04-22 | 2016-06-07 | Microsoft Technology Licensing, Llc | Protected media pipeline |
US7721094B2 (en) * | 2005-05-06 | 2010-05-18 | Microsoft Corporation | Systems and methods for determining if applications executing on a computer system are trusted |
US20070192826A1 (en) * | 2006-02-14 | 2007-08-16 | Microsoft Corporation | I/O-based enforcement of multi-level computer operating modes |
US7917750B2 (en) * | 2006-07-25 | 2011-03-29 | Hewlett-Packard Development Company, L.P. | Virtual user authentication system and method |
GB0615015D0 (en) * | 2006-07-28 | 2006-09-06 | Hewlett Packard Development Co | Secure use of user secrets on a computing platform |
DE102006049646B3 (de) * | 2006-10-20 | 2008-06-19 | Siemens Ag | Verfahren und Sendevorrichtung zum gesicherten Erstellen und Versenden einer elektronischen Nachricht sowie Verfahren und Empfangsvorrichtung zum gesicherten Empfangen und Verarbeiten einer elektronischen Nachricht |
US8095977B2 (en) * | 2007-01-19 | 2012-01-10 | Microsoft Corporation | Secure PIN transmission |
KR100838488B1 (ko) * | 2007-01-24 | 2008-06-16 | 현대중공업 주식회사 | 사용자 컴퓨터에 키스트로크 해킹 보안 프로그램 설치가필요 없는 변조된 일회성 인증 데이터 생성 방식을 이용한정보 보안 방법 및 장치 |
JP4782042B2 (ja) * | 2007-02-21 | 2011-09-28 | 富士通株式会社 | 電子計算機及びソフトウェアによるユーザインタフェースの実現方法 |
US8261064B2 (en) * | 2007-02-27 | 2012-09-04 | L-3 Communications Corporation | Integrated secure and non-secure display for a handheld communications device |
US8307358B1 (en) | 2007-07-10 | 2012-11-06 | Parallels IP Holdings GmbH | Method and system for unattended installation of guest operating system |
US8205248B2 (en) * | 2007-09-30 | 2012-06-19 | Lenovo (Singapore) Pte. Ltd. | Local verification of trusted display based on remote server verification |
US8516564B2 (en) * | 2008-07-18 | 2013-08-20 | International Business Machines Corporation | Secure user interaction using virtualization |
KR101540798B1 (ko) * | 2008-11-21 | 2015-07-31 | 삼성전자 주식회사 | 가상화 환경에서 보안 정보를 제공하기 위한 장치 및 방법 |
US9065812B2 (en) * | 2009-01-23 | 2015-06-23 | Microsoft Technology Licensing, Llc | Protecting transactions |
WO2011075484A2 (en) | 2009-12-14 | 2011-06-23 | Citrix Systems, Inc. | A secure virtualization environment bootable from an external media device |
US8924571B2 (en) * | 2009-12-14 | 2014-12-30 | Citrix Systems, Imc. | Methods and systems for providing to virtual machines, via a designated wireless local area network driver, access to data associated with a connection to a wireless local area network |
EP2517104A4 (en) * | 2009-12-24 | 2013-06-05 | Intel Corp | METHOD AND APPARATUS FOR MANAGING I / O OPERATION IN A VIRTUALIZATION ENVIRONMENT |
TWI476625B (zh) | 2011-02-22 | 2015-03-11 | Htc Corp | 資料安全管理系統和方法 |
EP2780860A1 (en) | 2011-11-14 | 2014-09-24 | ST-Ericsson SA | Method for managing public and private data input at a device |
CN102542205B (zh) * | 2011-12-31 | 2015-06-03 | 汉柏科技有限公司 | 用于共享数据保护的辅助设计方法 |
GB201218389D0 (en) | 2012-10-12 | 2012-11-28 | Uni I Olso | Multi-mode computer with selector |
RU2583710C2 (ru) * | 2013-07-23 | 2016-05-10 | Закрытое акционерное общество "Лаборатория Касперского" | Система и способ обеспечения конфиденциальности информации, используемой во время операций аутентификации и авторизации, при использовании доверенного устройства |
CN104143065A (zh) * | 2014-08-28 | 2014-11-12 | 北京握奇智能科技有限公司 | 安全智能终端设备、及信息处理方法 |
US9704355B2 (en) | 2014-10-29 | 2017-07-11 | Clover Network, Inc. | Secure point of sale terminal and associated methods |
US9832207B2 (en) * | 2014-12-23 | 2017-11-28 | Mcafee, Inc. | Input verification |
US9996690B2 (en) * | 2014-12-27 | 2018-06-12 | Mcafee, Llc | Binary translation of a trusted binary with input tagging |
US9798559B2 (en) | 2014-12-27 | 2017-10-24 | Mcafee, Inc. | Trusted binary translation |
EP3355188B1 (en) | 2017-01-31 | 2021-08-25 | OpenSynergy GmbH | Instrument display on a car dashboard by checking frames of a gui by a realtime os |
US10846432B2 (en) | 2018-09-11 | 2020-11-24 | OneLogin, Inc. | Secure data leak detection |
US11429753B2 (en) * | 2018-09-27 | 2022-08-30 | Citrix Systems, Inc. | Encryption of keyboard data to avoid being read by endpoint-hosted keylogger applications |
Family Cites Families (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5596718A (en) * | 1992-07-10 | 1997-01-21 | Secure Computing Corporation | Secure computer network using trusted path subsystem which encrypts/decrypts and communicates with user through local workstation user I/O devices without utilizing workstation processor |
US5537544A (en) | 1992-09-17 | 1996-07-16 | Kabushiki Kaisha Toshiba | Portable computer system having password control means for holding one or more passwords such that the passwords are unreadable by direct access from a main processor |
US5590266A (en) | 1994-10-11 | 1996-12-31 | International Business Machines Corporation | Integrity mechanism for data transfer in a windowing system |
KR100521252B1 (ko) * | 1997-06-16 | 2006-01-12 | 삼성전자주식회사 | 화면출력상태 제어기능을 갖는 컴퓨터 시스템 및 그 제어방법 |
JP4089171B2 (ja) | 2001-04-24 | 2008-05-28 | 株式会社日立製作所 | 計算機システム |
GB2376761A (en) | 2001-06-19 | 2002-12-24 | Hewlett Packard Co | An arrangement in which a process is run on a host operating system but may be switched to a guest system if it poses a security risk |
GB2376764B (en) | 2001-06-19 | 2004-12-29 | Hewlett Packard Co | Multiple trusted computing environments |
US7496768B2 (en) * | 2003-10-24 | 2009-02-24 | Microsoft Corporation | Providing secure input and output to a trusted agent in a system with a high-assurance execution environment |
US7464412B2 (en) | 2003-10-24 | 2008-12-09 | Microsoft Corporation | Providing secure input to a system with a high-assurance execution environment |
-
2003
- 2003-10-24 US US10/693,061 patent/US7464412B2/en not_active Expired - Fee Related
-
2004
- 2004-09-06 KR KR1020040070841A patent/KR101099324B1/ko active IP Right Grant
- 2004-09-09 EP EP04021452A patent/EP1526426B1/en not_active Not-in-force
- 2004-09-09 AT AT04021452T patent/ATE386971T1/de not_active IP Right Cessation
- 2004-09-09 DE DE602004011871T patent/DE602004011871T2/de active Active
- 2004-09-17 CA CA2482078A patent/CA2482078C/en not_active Expired - Fee Related
- 2004-09-22 BR BR0404021-0A patent/BRPI0404021A/pt not_active IP Right Cessation
- 2004-09-24 JP JP2004278413A patent/JP4607529B2/ja not_active Expired - Fee Related
- 2004-09-30 AU AU2004216665A patent/AU2004216665B2/en not_active Ceased
- 2004-10-15 MX MXPA04010156A patent/MXPA04010156A/es active IP Right Grant
- 2004-10-22 CN CNB2004100882982A patent/CN100565457C/zh not_active Expired - Fee Related
- 2004-10-22 RU RU2004131023/09A patent/RU2365988C2/ru not_active IP Right Cessation
-
2008
- 2008-11-25 US US12/323,169 patent/US7882566B2/en not_active Expired - Fee Related
Also Published As
Publication number | Publication date |
---|---|
BRPI0404021A (pt) | 2005-06-21 |
US7464412B2 (en) | 2008-12-09 |
US7882566B2 (en) | 2011-02-01 |
CA2482078C (en) | 2011-10-25 |
EP1526426B1 (en) | 2008-02-20 |
AU2004216665A1 (en) | 2005-05-12 |
EP1526426A3 (en) | 2005-07-20 |
CA2482078A1 (en) | 2005-04-24 |
CN1609811A (zh) | 2005-04-27 |
ATE386971T1 (de) | 2008-03-15 |
DE602004011871T2 (de) | 2009-03-05 |
RU2004131023A (ru) | 2006-04-10 |
DE602004011871D1 (de) | 2008-04-03 |
US20090083862A1 (en) | 2009-03-26 |
KR101099324B1 (ko) | 2011-12-26 |
KR20050039542A (ko) | 2005-04-29 |
MXPA04010156A (es) | 2005-04-28 |
RU2365988C2 (ru) | 2009-08-27 |
EP1526426A2 (en) | 2005-04-27 |
JP4607529B2 (ja) | 2011-01-05 |
US20050091530A1 (en) | 2005-04-28 |
AU2004216665B2 (en) | 2010-03-18 |
JP2005129035A (ja) | 2005-05-19 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN100565457C (zh) | 向具有高保证执行环境的系统提供安全输入的系统和方法 | |
US7434069B2 (en) | Method and device for encryption/decryption of data on mass storage device | |
CN101533450B (zh) | 提供安全执行环境的微处理器及其执行安全编码的方法 | |
RU2365045C2 (ru) | Обеспечение защищенного ввода и вывода для доверенного агента в системе с высоконадежной средой исполнения программ | |
US20190332765A1 (en) | File processing method and system, and data processing method | |
CN101246530A (zh) | 对一组存储设备进行数据加密和数据访问的系统和方法 | |
CN101529366A (zh) | 可信用户界面对象的标识和可视化 | |
CN1811785A (zh) | 安全计算机密码系统和方法 | |
CN1306357C (zh) | 一种保证信息安全的计算机系统 | |
TWI444834B (zh) | 使用於鍵盤及應用程式間之共享秘密技術 | |
CN101079090B (zh) | 再现个人应用环境的设备 | |
CN2754136Y (zh) | 一种保证信息安全的计算机系统 | |
KR101742265B1 (ko) | 입력 장치 및 방법 | |
CN1591333A (zh) | 一种能识别计算机的智能加密方法 | |
TW202013291A (zh) | 透過作業系統驗證密碼以進行加解密之系統及方法 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
C14 | Grant of patent or utility model | ||
GR01 | Patent grant | ||
ASS | Succession or assignment of patent right |
Owner name: MICROSOFT TECHNOLOGY LICENSING LLC Free format text: FORMER OWNER: MICROSOFT CORP. Effective date: 20150507 |
|
C41 | Transfer of patent application or patent right or utility model | ||
TR01 | Transfer of patent right |
Effective date of registration: 20150507 Address after: Washington State Patentee after: Micro soft technique license Co., Ltd Address before: Washington State Patentee before: Microsoft Corp. |
|
CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20091202 Termination date: 20201022 |
|
CF01 | Termination of patent right due to non-payment of annual fee |