Secure keyboard resource limiting access of user input to destination resource requesting the user input

One or more non-transitory tangible media encoded with logic for execution by a machine and when executed by the machine operable for:

• detecting, by a secure keyboard resource executed by the machine implemented as a network device, a user input by a user via a device interface circuit of the network device;
• generating, by the secure keyboard resource, a user input data structure representing the user input relative to input options presented to the user, the user input data structure based on the secure keyboard resource identifying a position of the user input relative to the input options;
• detecting an authorization by the user of one or more executable destination resources to receive the user input data structure;
• and
• sending, by the secure keyboard resource, the user input data structure to the one or more executable destination resources authorized by the user and having requested supply of the user input data structure responsive to a user selection, wherein the sending of the user input data structure is only via a corresponding data path providing the one or more executable destination resources with access to the user input data structure, for execution of a service by the one or more executable destination resources based on the user input data structure;
• the sending of the user input data structure by the secure keyboard resource only via the data path to the one or more executable destination resources preventing any unauthorized sending of the user input data structure to any unauthorized resource.

An apparatus implemented as a physical machine, the apparatus comprising:

• non-transitory machine readable media configured for storing executable machine readable code comprising a secure keyboard resource;
• a device interface circuit configured for detecting a user input by a user of the apparatus, the apparatus implemented as a network device executing communications with a second network device via a data network;
• and
• a processor circuit configured for executing the machine readable code, and when executing the machine readable code operable for:
• detecting, by the secure keyboard resource, the user input,
• generating, by the secure keyboard resource, a user input data structure representing the user input relative to input options presented to the user, the user input data structure based on the secure keyboard resource identifying a position of the user input relative to the input options,
• detecting, by the network device, an authorization by the user of one or more executable destination resources to receive the user input data structure, and
• sending, by the secure keyboard resource, the user input data structure to the one or more executable destination resources authorized by the user and having requested supply of the user input data structure responsive to a user selection, wherein the sending of the user input data structure is only via a corresponding data path providing the one or more executable destination resources with access to the user input data structure, for execution of a service by the one or more executable destination resources based on the user input data structure;
• the sending of the user input data structure by the secure keyboard resource only via the data path to the one or more executable destination resources preventing any unauthorized sending of the user input data structure to any unauthorized resource.