Method and apparatus for providing provably secure user input/output
AssigneeAT&T Intellectual Property I, L.P.
InventorsJeffrey E. Bickford, Mikhail Istomin, Evgene Vahlis
Life of this patent
Estimating the term…
Abstract
A method, non-transitory computer readable medium and apparatus for securing user input and/or output on a mobile endpoint device. For example, the method receives an input on the mobile endpoint device, encrypts and authenticates the input in a trusted domain of the mobile endpoint device executing an application and sends the input that is encrypted and authenticated to an untrusted domain of the mobile endpoint device over a secure channel.
Claims20
A method for securing a user input on a mobile endpoint device having at least one processor, comprising:
- receiving, by the at least one processor, an input on the mobile endpoint device;
- encrypting and authenticating, by the at least one processor, the input in a trusted domain of the mobile endpoint device executing an application;
- and
- sending, by the at least one processor, the input that is encrypted and authenticated to an untrusted domain of the mobile endpoint device over a secure channel.
A non-transitory computer-readable medium having stored thereon a plurality of instructions, the plurality of instructions including instructions which, when executed by a processor of a mobile endpoint device, cause the processor to perform operations for securing a user input on the mobile endpoint device, the operations comprising:
- receiving an input on the mobile endpoint device;
- encrypting and authenticating the input in a trusted domain of the mobile endpoint device executing an application that is being executed on the mobile endpoint device;
- and
- sending the input that is encrypted and authenticated to an untrusted domain of the mobile endpoint device over a secure channel.
A method for securing a user output on a mobile endpoint device having at least one processor, comprising:
- receiving, by the at least one processor, data in an untrusted domain of the mobile endpoint device that is executing an application;
- sending, by the at least one processor, the data to a trusted domain of the mobile endpoint device executing the application over a secure channel;
- decrypting and authenticating, by the at least one processor, the data in the trusted domain of the application;
- and
- displaying, by the at least one processor, the data as the user output on a display of the mobile endpoint device.
Dependencies are inferred from the claim text.