US 2016/0110554 A1 · TECHNOLOGIES FOR SECURE INPUT AND DISPLAY OF VIRTUAL TOUCH USER INTERFACES

Abstract

Technologies for secure input and display of a virtual touch user interface include a computing device having a security monitor that may protect memory regions from being accessed by untrusted code. The security monitor may use hardware virtualization features such as extended page tables or directed I/O to protect the memory regions. A protected touch filter driver intercepts requests for touch input and allocates a transfer buffer. The transfer buffer is protected by the security monitor. A touch screen controller may write touch input data into the protected transfer buffer. The touch input data may be shared by the touch filter driver with authorized applications through a protected communication channel. A graphical virtual user interface may be generated by trusted code and rendered into a hardware overlay surface. The user interface may include a virtual keyboard. The security monitor may protect the overlay surface. Other embodiments are described and claimed.

Claims23

Dependent claims

A computing device for secure input, the computing device comprising:

a security monitor module to restrict access to a protected transfer buffer in a secure memory view using a hardware virtualization feature of a processor of the computing device;
and
an input module to (i) store, in the secure memory view, user input data generated by a user input device of the computing device into the protected transfer buffer and (ii) transfer, in response to storage of the user input data, the user input data from a kernel module to an authorized application via a protected side channel in the secure memory view.

One or more computer-readable storage media comprising a plurality of instructions that in response to being executed cause a computing device to:

restrict access to a protected transfer buffer in a secure memory view using a hardware virtualization feature of a processor of the computing device;
store, in the secure memory view, user input data generated by a user input device of the computing device into the protected transfer buffer;
and
transfer, in response to storing the user input data, the user input data from a kernel module to an authorized application via a protected side channel in the secure memory view.

1 more element

Dependencies are inferred from the claim text.

Technologies for secure input and display of virtual touch user interfaces

Life of this patent

Technologies for secure input and display of virtual touch user interfaces

Life of this patent

Abstract

Claims23