Securing Sensitive User Data Across Hardware and Software Components Having Unbalanced Trust Levels

A method comprising:

• receiving, at a secure runtime environment associated with an application, a request from an application executing on a user device for particular user input;
• providing the request to a remote location;
• receiving, from the remote location and at the user device, code executable by display hardware to render a user interface configured to receive the user input, wherein the received code is not meaningfully readable by the secure runtime environment such that the secure runtime environment does not obtain information about the user interface content;
• capturing information at the secure runtime environment identifying the particular display device locations to which the user provided input on the rendered user interface, wherein the secure runtime environment does not have information needed to map the captured display device locations to the content of the rendered user interface;
• and
• providing a representation of the captured information to an auxiliary computing device for validation of the user input.

A system comprising:

• a user device having one or more processors and one or more storage devices storing a compiled application, that when executed by the one or more processors, causes the user device to perform operations comprising:
• in response to a request from an application executing on a user device for particular user input, providing the request to a remote location;
• receiving, within a secure runtime environment, executable code to render a user interface configured to receive the user input, wherein the received code is not contextually readable by the secure runtime environment such that the secure runtime environment does not obtain information about the user interface content;
• rendering the user interface on a display device of the user device;
• capturing information at the secure runtime environment identifying one or more particular display device locations to which a user of the user device provided input on the rendered user interface, wherein the secure runtime environment does not have information needed to map the captured display device locations to the content of the rendered user interface;
• and
• providing the information to the remote location that evaluates integrity of a chain of custody tracking all interactions and flows involved from a point of receiving the request for user input and capturing the input to the point of delivering the input to the intended remote location.

A system comprising:

• a user device having one or more processors and one or more storage devices storing instructions, that when executed by the one or more processors, cause the user device to perform operations comprising:
• receiving, at a secure runtime environment associated with an application, a request from that application executing on a user device for particular user input;
• providing the request to a remote location;
• receiving, from the remote location and at the user device, code executable by display hardware to render a user interface configured to receive the user input, wherein the received code is not meaningfully readable by the secure runtime environment such that the secure runtime environment does not obtain information about the user interface content;
• rendering the user interface on a display device of the user device;
• capturing metadata at the secure runtime environment describing user input on the rendered user interface, wherein the secure runtime environment does not have information needed to map the captured metadata to the actual content of the rendered user interface;
• and
• providing a representation of the captured information to an auxiliary computing device for extracting the contextualized the user input.