Altering Sampling Rate to Thwart Attacks that Involve Analyzing Hardware Sensor Output

• US 20170075435A1
• Filed: 11/28/2016
• Published: 03/16/2017
• Est. Priority Date: 02/15/2012
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Wurster, Glenn Daniel
• Granted Patent: US 9,958,964 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06F 3/02 Input arrangements using manually operated switches, e.g. using keyboards or dials
• CPC Class Codes: G06F 3/0346 with detection of the device orientation or free movement in a 3D space, e.g. 3D mice, 6-DOF [six degrees of freedom] pointers using gyroscopes, accelerometers or tilt-sensors
• CPC Class Codes: G06F 3/0416 Control or interface arrangements specially adapted for digitisers
• CPC Class Codes: G06F 3/04166 Details of scanning methods, e.g. sampling time, grouping of sub areas or time sharing with display driving Synchronisation with the driving of the display or the backlighting unit to avoid interferences generated internally G06F3/04184
• CPC Class Codes: G06F 3/04886 by partitioning the display area of the touch-screen or the surface of the digitising tablet into independently controllable areas, e.g. virtual keyboards or menus

Abstract

A hardware sensor and a hardware user-input component are integrated in a portable electronic device. The hardware sensor is operable to produce hardware sensor output indicative of orientation or motion or both of the device within its environment. The hardware user-input component has multiple elements operable to accept user input through touch. A user-input driver and the device'"'"'s operating system are jointly operable to detect touch events involving the elements. A software application stored in the device'"'"'s memory is executable by the device'"'"'s processor as a process. A sensor driver or the operating system or both are configured to control what hardware sensor output, if any, is receivable by the process. This control may thwart an attack based on analysis of the hardware sensor output, the attack designed to deduce what user input has been made via multiple elements of the hardware user-input component.

Claims

1. A method performed in a portable electronic device, the method comprising:

controlling how hardware sensor output, if any, is available to a process resulting from execution of a software application by a processor of the portable electronic device, as follows;

making any hardware sensor output sampled during those time periods throughout which the process is running in foreground available to the process at a higher sampling rate; and

making any hardware sensor output sampled during those time periods throughout which the process is running in background available to the process at a lower sampling rate,

wherein the hardware sensor output is indicative of orientation or motion or both of the portable electronic device within its environment, and the hardware sensor output is produced by a hardware sensor integrated in the portable electronic device,

wherein the portable electronic device comprises a hardware user-input component integrated in the portable electronic device, the hardware user-input component having multiple elements operable to accept user input through touch, and

wherein the process runs in the foreground during times when the operating system of the portable electronic device is operable to notify the process of any detected touch events involving the elements, and the process runs in the background during times when the operating system is operable not to notify the process of any detected touch events involving the elements.

2. The method as recited in claim 1, wherein the hardware user-input component comprises a physical tactile keyboard, the elements comprise keys of the keyboard, and the touch events comprise key presses or key releases or both.

3. The method as recited in claim 1, wherein the hardware user-input component comprises a touchscreen, the elements comprise touch sensors, and the touch events comprise presses or releases or both.

4. The method as recited in claim 3, wherein an image of a virtual keyboard is displayable on the touchscreen and the touch events comprise one or more of presses, releases, and swipes of keys of the virtual keyboard.

5. The method as recited in claim 1, wherein the hardware sensor comprises an accelerometer.

6. The method as recited in claim 1, wherein the hardware sensor comprises a gyroscope.

7. The method as recited in claim 1, wherein the hardware sensor comprises a magnetometer.

21. The method as recited in claim 1, wherein the hardware sensor comprises an eye-tracking sensor.

8. A method performed in a portable electronic device, the method comprising:

controlling what hardware sensor output, if any, is available to a process resulting from execution of a software application by a processor of the portable electronic device, as follows;

making any hardware sensor output sampled during touch event windows that occur during time periods throughout which the process is running in background available to the process at a lower sampling rate; and

making any hardware sensor output sampled at all other times during execution of the software application available to the process at a higher sampling rate,

wherein the hardware sensor output is indicative of orientation or motion or both of the portable electronic device within its environment, and the hardware sensor output is produced by a hardware sensor integrated in the portable electronic device,

wherein the portable electronic device comprises a hardware user-input component integrated in the portable electronic device, the hardware user-input component having multiple elements operable to accept user input through touch,

wherein a touch event window starts prior to detection of a touch event involving the elements and ends sometime after detection of the touch event, and

wherein the process runs in the background during times when the operating system is operable not to notify the process of any detected touch events involving the elements.

9. The method as recited in claim 8, wherein the hardware user-input component comprises a physical tactile keyboard, the elements comprise keys of the keyboard, and the touch events comprise key presses or key releases or both.

10. The method as recited in claim 8, wherein the hardware user-input component comprises a touchscreen, the elements comprise touch sensors, and the touch events comprise presses or releases or both.

11. The method as recited in claim 10, wherein an image of a virtual keyboard is displayable on the touchscreen and the touch events comprise one or more of presses, releases, and swipes of keys of the virtual keyboard.

12. The method as recited in claim 8, wherein the hardware sensor comprises an accelerometer.

13. The method as recited in claim 8, wherein the hardware sensor comprises a gyroscope.

14. The method as recited in claim 8, wherein the hardware sensor comprises a magnetometer.

22. The method as recited in claim 8, wherein the hardware sensor comprises an eye-tracking sensor.

15. A non-transitory computer-readable medium having stored thereon instructions which, when executed by a processor of a portable electronic device, cause the processor to perform operations comprising:

controlling how hardware sensor output, if any, is available to a process resulting from execution of a software application by a processor of the portable electronic device, as follows;

making any hardware sensor output sampled during those time periods throughout which the process is running in foreground available to the process at a higher sampling rate; and

making any hardware sensor output sampled during those time periods throughout which the process is running in background available to the process at a lower sampling rate,

wherein the hardware sensor output is indicative of orientation or motion or both of the portable electronic device within its environment, and the hardware sensor output is produced by a hardware sensor integrated in the portable electronic device,

wherein the portable electronic device comprises a hardware user-input component integrated in the portable electronic device, the hardware user-input component having multiple elements operable to accept user input through touch, and

wherein the process runs in the foreground during times when the operating system of the portable electronic device is operable to notify the process of any detected touch events involving the elements, and the process runs in the background during times when the operating system is operable not to notify the process of any detected touch events involving the elements.

16. The non-transitory computer-readable medium as recited in claim 15, wherein the hardware user-input component comprises a physical tactile keyboard, the elements comprise keys of the keyboard, and the touch events comprise key presses or key releases or both.

17. The non-transitory computer-readable medium as recited in claim 15, wherein the hardware user-input component comprises a touchscreen, the elements comprise touch sensors, and the touch events comprise presses or releases or both.

18. A non-transitory computer-readable medium having stored thereon instructions which, when executed by a processor of a portable electronic device, cause the processor to perform operations comprising:

controlling what hardware sensor output, if any, is available to a process resulting from execution of a software application by a processor of the portable electronic device, as follows;

making any hardware sensor output sampled during touch event windows that occur during time periods throughout which the process is running in background available to the process at a lower sampling rate; and

making any hardware sensor output sampled at all other times during execution of the software application available to the process at a higher sampling rate,

wherein the hardware sensor output is indicative of orientation or motion or both of the portable electronic device within its environment, and the hardware sensor output is produced by a hardware sensor integrated in the portable electronic device,

wherein the portable electronic device comprises a hardware user-input component integrated in the portable electronic device, the hardware user-input component having multiple elements operable to accept user input through touch,

wherein a touch event window starts prior to detection of a touch event involving the elements and ends sometime after detection of the touch event, and

wherein the process runs in the background during times when the operating system is operable not to notify the process of any detected touch events involving the elements.

19. The non-transitory computer-readable medium as recited in claim 18, wherein the hardware user-input component comprises a physical tactile keyboard, the elements comprise keys of the keyboard, and the touch events comprise key presses or key releases or both.

20. The non-transitory computer-readable medium as recited in claim 18, wherein the hardware user-input component comprises a touchscreen, the elements comprise touch sensors, and the touch events comprise presses or releases or both.