NETWORK AND DEVICE SECURITY SYSTEM, METHOD, AND APPARATUS

• US 20200134141A1
• Filed: 10/24/2019
• Published: 04/30/2020
• Est. Priority Date: 10/24/2018
• Status: Active Grant

• Current Assignee: SunStone Information Defense Inc.
• Original Assignee: SunStone Information Defense Inc.
• Inventors: Ford, David K.
• Granted Patent: US 11,379,564 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/46 by designing passwords or checking the strength of passwords
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules

Abstract

A system, apparatuses, and methods for device and network security are discussed herein. In an example, a security device for providing security to user-entered inputs includes a universal serial bus (“USB”) port configured to receive a connector of an input device and a USB connector configured to connect to a port of a user device. The apparatus also includes a processor configured to receive a string of characters from the input device that correspond to inputs made by a user into a web browser or application on the user device. The processor adds at least one security character to the string of characters to generate a watermark string, and transmits the watermark string to the user device. The processor is configured to format the at least one security character such that only the string of characters are displayed in the web browser or the application at the user device.

Claims

1. A system for providing security to user-entered inputs, the system comprising:

a security device that is communicatively coupled between an input device and a processor of a user device, the security device being configured to;

receive a string of characters from the input device that correspond to inputs made by a user into a web browser or application on the user device that is in communication with an application server,

add at least one security character to the string of characters to generate a watermark string, and

transmit the watermark string to the user device,

wherein the security device is configured to format the at least one security character such that only the string of characters are displayed in the web browser or the application at the user device; and

a security server communicatively coupled between the user device and the application server, the security server configured to;

receive the watermark string from the user device,

use at least one rule to identify the at least one security character within the watermark string,

compare the at least one security character to one or more security rules,

remove the at least one security character from the watermark string, and

enable the application server to receive the string of characters for processing if the at least one security character matches at least one security rule.

2. The system of claim 1, wherein the security server is configured to receive the watermark string from an event listener on the web browser or the application on the user device.

3. The system of claim 1, wherein the at least one security character includes an identifier comprised of one or more identifier characters and a delete key input or a backspace key input after each of the one or more identifier characters such that the one or more delete key inputs or the backspace key inputs cause the identifier not to be displayed at the user device.

4. The system of claim 3, wherein the security processor is configured to use the one or more identifier characters for selecting the one or more security rules from among a plurality of security rules and use the at least one security character that does not include identifier characters for comparison to the selected one or more security rules.

5. The system of claim 1, wherein the security processor is configured to add the at least one security character by applying at least one watermark rule to a first character of the string of characters entered by the user.

6. The system of claim 1, wherein the security processor is configured to add the at least one security character by applying at least one watermark rule to each of the characters of the string of characters entered by the user.

7. The system of claim 1, wherein the security processor is configured to add the at least one security character by applying a different watermark rule to each of the characters of the string of characters entered by the user.

8. The system of claim 1, wherein the at least one security character includes a hidden character or a non-displayable character.

9. The system of claim 1, wherein the input device includes a touchscreen device and the security device is connected to a communication bus between the touchscreen device and a processor of the user device.

10. The system of claim 1, wherein the security server is configured to prevent the application server from receiving the string of characters if the at least one security character fails to match at least one security rule.

11. The system of claim 10, wherein the security server is configured to transmit an alert message to at least one of the application server or the user device indicative of a malicious application if the at least one security character fails to match at least one security rule.

12. The system of claim 1, wherein the security device includes a private key that defines the at least one security character, and

wherein the security device is configured to:

identify a public key based on the at least one security character,

identify a public key that corresponds to the at least one security character, and

select the one or more rules as rules that correspond to the identified public key.

13. The system of claim 1, wherein the security server is configured to enable the application server to receive the string of characters for processing after the user submits the string of characters for transmission to the application server.

14. A security device apparatus for providing security to user-entered inputs, the apparatus comprising:

a universal serial bus (“

USB”

) port configured to receive a USB connector of an input device;

a connector configured to connect to a port of a user device; and

a security processor communicatively coupled to the USB port and the USB connector, the security processor configured to;

receive a string of characters from the input device that correspond to inputs made by a user on the user device into a web browser or application that is in communication with an application server,

add at least one security character to the string of characters to generate a watermark string where the at least one security character includes an identifier comprised of one or more identifier characters and a delete key input or a backspace key input after each of the one or more identifier characters, and

transmit the watermark string to the user device,

wherein the security processor is configured to format the at least one security character such that only the string of characters are displayed in the web browser or the application at the user device.

15. The apparatus of claim 14, wherein the input device includes a keyboard and the security device apparatus is connected in-line between the input device and the user device.

16. The apparatus of claim 14, further comprising a memory device configured to store at least one watermark rule,

wherein the security processor is configured to add the at least one security character by applying the at least one watermark rule to at least one of:

a first character of the string of characters entered by the user, and

each of the characters of the string of characters entered by the user.

17. The apparatus of claim 14, wherein the at least one security character includes a hidden character or a non-displayable character.

18. The apparatus of claim 14, wherein the at least one security character includes at least one of an identifier or a randomly generated character.

19. The apparatus of claim 18, wherein the security processor is configured to add the identifier to a first set of characters entered by the user and add randomly generated characters to a second set of characters entered by the user.

20. The apparatus of claim 14, wherein the connector is at least one of a USB connector or a wireless connector and the port of the user device includes respectively at least one of a USB device port or a wireless port.