Back to results
US 11,531,786 B1Granted
Keylogger detection systems and methods
AssigneeUnited Services Automobile Association (USAA)
InventorsAshley Raine Philbrick, Ryan Thomas Russell, David Joaquin Harris
Life of this patent
Estimating the term…
Abstract
A method may include detecting a keylogger based at least in part on an increase in power drawn by an input device, detecting the keylogger based at least in part on a driver of the input device, detecting the keylogger based at least in part on a duration of time that a signal generated by the input device takes to transmit to a computing device, or any combination thereof. The method may also include, in response to detecting the keylogger, generating an alert to indicate a presence of the keylogger.
Claims17
A system, comprising:
- an input device;
- a microphone configured to detect a sound associated with a key press;
- and
- a computing device comprising a keylogger detection system, wherein the keylogger detection system comprises a processor configured to perform operations comprising
- recording a first time that the microphone detects the sound associated with the key press;
- identifying a second time that a signal generated by the input device, in response to the key press, is received by the computing device;
- identifying a duration of time between the first time and the second time as a transmission time of the key press;
- detecting a keylogger based at least in part on:
- an increase in the transmission time of the key press in comparison to a historical trend of transmission times that it has taken signals generated by the input device to transmit to the computing device, and
- the duration of time that the signal generated by the input device takes to transmit to the computing device by:
- receiving the signal generated by the input device at a current time and a time of input into the input device from the input device;
- determining the duration of time based at least in part on a difference between the time of input and the current time;
- accessing historical transmission times associated with previous signals received from the input device;
- and
- detecting the keylogger based at least in part on determining that the duration of time is a threshold amount longer than one or more historical transmission times;
- and
- in response to detecting the keylogger, generating an alert comprising a notification associated with the detection of the keylogger.
14 more elements
A method for operating a keylogger detection system of a computing device, comprising:
- detecting, via a microphone, a sound associated with a key press;
- recording a first time the microphone detects the sound associated with the key press;
- identifying a second time that a signal is generated by an input device in response to the key press is received by the computing device;
- identifying a duration of time between the first time and the second time as a transmission time of the key press;
- detecting a keylogger based at least in part on:
- an increase in the transmission time of the key press in comparison to a historical trend of transmission times that it has taken signals generated by the input device to transmit to the computing device, and
- the duration of time that the signal generated by the input device takes to transmit to the computing device by:
- receiving the signal generated by the input device at a current time and a time of input into the input device from the input device;
- determining the duration of time based at least in part on a difference between the time of input and the current time;
- accessing historical transmission times associated with previous signals received from the input device;
- and
- detecting the keylogger based at least in part on determining that the duration of time is a threshold amount longer than one or more historical transmission times;
- and
- in response to detecting the keylogger, generating an alert comprising a notification associated with the detection of the keylogger.
11 more elements
A tangible, non-transitory computer-readable medium configured to store instructions executable by a processor of an electronic device that, when executed by the processor, cause a computing device to perform operations comprising:
- recording a first time a microphone detects a sound associated with a key press;
- identifying a second time a signal is generated by an input device in response to the key press is received by the computing device;
- identifying a duration of time between the first time and the second time as a transmission time of the key press;
- detecting a keylogger based at least in part on:
- an increase in the transmission time of the key press in comparison to a historical trend of transmission times that it has taken signals generated by the input device to transmit to the computing device, and
- the duration of time that the signal generated by the input device takes to transmit to the computing device by:
- receiving the signal generated by the input device at a current time and a time of input into the input device from the input device;
- determining the duration of time based at least in part on a difference between the time of input and the current time;
- accessing historical transmission times associated with previous signals received from the input device;
- and
- detecting the keylogger based at least in part on determining that the duration of time is a threshold amount longer than one or more historical transmission times;
- and
- in response to detecting the keylogger, generating an alert comprising a notification associated with the detection of the keylogger.
10 more elements
Dependencies are inferred from the claim text.