Back to results
US 11,899,830 B1Granted
Keylogger detection systems and methods
AssigneeUnited Services Automobile Association (USAA)
InventorsAshley Raine Philbrick, Ryan Thomas Russell, David Joaquin Harris
Life of this patent
Estimating the term…
Abstract
A method may include detecting a keylogger based at least in part on an increase in power drawn by an input device, detecting the keylogger based at least in part on a driver of the input device, detecting the keylogger based at least in part on a duration of time that a signal generated by the input device takes to transmit to a computing device, or any combination thereof. The method may also include, in response to detecting the keylogger, generating an alert to indicate a presence of the keylogger.
Claims19
A system, comprising:
- an input device;
- and
- a computing device comprising a keylogger detection system, wherein the keylogger detection system comprises a processor configured to:
- detect a keylogger, by:
- identifying a first time that a first signal is generated by the input device as a first transmission time of a key press;
- sensing a first amount of power drawn in conjunction with the input device during the first transmission time as a baseline power draw;
- after a period of time, identifying a second time that a second signal is generated by the input device as a second transmission time of the key press;
- sensing a second amount of power drawn in conjunction with the input device during the second transmission time as a second power draw, wherein the second power draw is greater than the baseline power draw;
- determining an indication of a possible presence of the keylogger in response to determining an increase in transmission time based at least in part on a comparison between the first transmission time and the second transmission time;
- increasing a severity of the indication of the possible presence of the keylogger based at least in part on determining a change from the baseline power draw to the second power draw
- is greater than a threshold power draw change;
- and
- in response to the severity of the indication being greater than a threshold, generating an alert comprising an indication of the possible presence of the keylogger, wherein generating the alert comprises:
- providing an instruction to display a notification via an electronic display, generating an email, generating a maintenance request, or any combination thereof.
11 more elements
A method for operating a keylogger detection system of a computing device comprising:
- identifying, via a processor, a first time that a first signal is generated by an input device as a first transmission time of a key press;
- sensing, via the processor, a first amount of power drawn in conjunction with the input device during the first transmission time as a baseline power draw;
- after a period of time, identifying, via the processor, a second time that a second signal is generated by the input device as a second transmission time of the key press, wherein the second transmission time is greater than the first transmission time;
- sensing, via the processor, a second amount of power drawn in conjunction with the input device during the second transmission time as a second power draw, wherein the second power draw is greater than the baseline power draw;
- determining, via the processor, an indication of a possible presence of a keylogger based at least in part on the second transmission time being greater than the first transmission time;
- increasing, via the processor, a severity of the indication of the possible presence of the keylogger based at least in part on the second power draw being greater than the baseline power draw;
- and
- in response the severity of the indication being greater than a threshold, generating, via the processor, an alert comprising an indication of the possible presence of the keylogger, wherein generating the alert comprises:
- providing an instruction to display a notification via an electronic display, generating an email, generating a maintenance request, or any combination thereof.
6 more elements
A tangible, non-transitory computer-readable medium configured to store instructions executable by a processor of an electronic device that, when executed by the processor, cause a computing device to perform operations comprising:
- identifying a first time that a first signal is generated by an input device as a first transmission time of a key press;
- sensing a first amount of power drawn in conjunction with the input device during the first transmission time as a baseline power draw;
- after a period of time, identifying a second time that a second signal is generated by the input device as a second transmission time of the key press, wherein the second transmission time is greater than the first transmission time;
- sensing a second amount of power drawn in conjunction with the input device during the second transmission time as a second power draw, wherein the second power draw is greater than the baseline power draw;
- determining an indication of a possible presence of a keylogger based at least in part on the second transmission time being greater than the first transmission time;
- increasing a severity of the indication of the possible presence of the keylogger based at least in part on the second power draw being greater than the baseline power draw;
- and
- in response to the likelihood the severity of the indication being greater than a threshold, generating an alert comprising an indication of the possible presence of the keylogger, wherein generating the alert comprises:
- providing an instruction to display a notification via an electronic display, generating an email, generating a maintenance request, or any combination thereof.
6 more elements
Dependencies are inferred from the claim text.