Back to results
US 2015/0088733 A1Published application
System and method for ensuring safety of online transactions
AssigneeKaspersky Lab ZAO
InventorsAlexey V. Monastyrsky, Sergey Y. Golovanov, Vladislav V. Martynenko, Vyacheslav E. Rusakov
Life of this patent
Estimating the term…
Abstract
Online transaction security is improved by detecting a start of an online financial transaction between a user-controlled online transaction application and a remote payment service. A protected data input module, a protected environment module, and a safe data transfer module each provides a corresponding set of protection operations. A risk level of conducting the financial transaction is assessed based on a vulnerability assessment and on present condition of the local computing system. An initial degree of protection for each of the modules is set, and subsequently adjusted based on the risk level.
Claims25
In a computing system that includes a processor, data storage, and input/output devices including a network interface device, and an operating system, a method for securing online transactions, the method comprising:
- detecting, by the computing system, a start of an online financial transaction between a user-controlled online transaction application executing on the computing system and a remote payment service;
- executing, by the computing system, a protected data input module configured to apply a selected protection scheme to limit access by unauthorized processes to an input sequence via at least one of the input/output devices while permitting the input sequence to be accepted by an authorized process;
- executing, by the computing system, a protected environment module configured to apply a selected protection scheme to protect the user-controlled online transaction application from being compromised by malware;
- executing, by the computing system, a safe data transfer module configured to apply a selected protection scheme to determine whether a connection with the remote payment service is a correct connection with a reputable party;
- in response to detection of the start of the financial transaction, assessing, by the computing system, a risk level of conducting the financial transaction based on a vulnerability assessment and on a present condition of the computing system;
- setting, by the computing system, an initial protection scheme for each of the protected data input module, the protected environment module, and the safe data transfer module based on the risk level;
- and
- adjusting, by the computing system, a protection scheme for at least one of the protected data input module, the protected environment module, and the safe data transfer module based on the risk level to a different protection scheme than the initial protection scheme for each of the at least one corresponding modules,
- wherein adjusting the protection scheme includes accessing a hierarchy of protection settings that represent each item of protective functionality facilitated by the protected data input module, the protected environment module, and the safe data transfer module, and changing at least one of the protection settings of the hierarchy to either increase, or decrease, an extent of functionality of protection commensurately with the risk level.
6 more elements
A system for securing online transactions, comprising:
- computing hardware, including a processor, data storage, and input/output devices including a network interface device and a graphical user interface;
- an operating system stored in a non-transitory storage medium and executable on the computing hardware;
- a control module configured to detect a start of an online financial transaction between a user-controlled online transaction application executing on the computing hardware and a remote payment service;
- a protected data input module configured to apply a selected protection scheme to limit access by unauthorized processes to an input sequence via at least one of the input/output devices while permitting the input sequence to be accepted by an authorized process;
- a protected environment module configured apply a selected protection scheme of the user-controlled online transaction application from being compromised by malware;
- a safe data transfer module configured to apply a selected protection scheme to determine whether a connection with the remote payment service is a correct connection with a reputable party;
- a vulnerability assessment module configured to assess a risk level of conducting the financial transaction based on a vulnerability assessment and a present condition of the computing system in response to detection of the start of the financial transaction;
- the control module being further configured to:
- set an initial protection scheme for each of the protected data input module, the protected environment module, and the safe data transfer module based on the risk level;
- and
- adjust a protection scheme for at least one of the protected data input module, the protected environment module, and the safe data transfer module based on the risk level to a different protection scheme than the initial protection scheme for each of the at least one corresponding modules,
- wherein adjustment of the protection scheme includes accessing a hierarchy of protection settings that represent each item of protective functionality facilitated by the protected data input module, the protected environment module, and the safe data transfer module, and changing at least one of the protection settings of the hierarchy to either increase, or decrease, an extent of functionality of protection commensurately with the risk level.
9 more elements
In a computing system that includes a processor, data storage, and input/output devices including a network interface device, and an operating system, a system for securing online transactions, the system comprising:
- means for detecting a start of an online financial transaction between a user-controlled online transaction application executing on the computing system and a remote payment service;
- means for executing a protected data input module configured to apply a selected protection scheme to limit access by unauthorized processes to an input sequence via at least one of the input/output devices while permitting the input sequence to be accepted by an authorized process;
- means for executing a protected environment module configured apply a selected protection scheme of the user-controlled online transaction application from being compromised by malware;
- means for executing a safe data transfer module configured to apply a selected protection scheme to determine whether a connection with the remote payment service is a correct connection with a reputable party;
- means for assessing a risk level of conducting the financial transaction based on a vulnerability assessment and on present condition of the computing system in response to detection of the start of the financial transaction;
- means for setting an initial protection scheme for each of the protected data input module, the protected environment module, and the safe data transfer module based on the risk level;
- and
- means for adjusting a protection scheme for at least one of the protected data input module, the protected environment module, and the safe data transfer module based on the risk level to a different protection scheme than the initial degree of protection for each of the at least one corresponding modules
- wherein the means for adjusting the protection scheme includes means for accessing a hierarchy of protection settings that represent each item of protective functionality facilitated by the protected data input module, the protected environment module, and the safe data transfer module, and means for changing at least one of the protection settings of the hierarchy to either increase, or decrease, an extent of functionality of protection commensurately with the risk level.
6 more elements
Dependencies are inferred from the claim text.