Managing verification of input data

• US 8,914,895 B1
• Filed: 09/25/2012
• Issued: 12/16/2014
• Est. Priority Date: 09/25/2012
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Bailey, Daniel V., Katz, Aaron T., Amar, Yavir
• Primary Examiner(s): Paliwal, Yogesh
• Application Number:
  US13/626,266
• Time in Patent Office: 812 Days
• Field of Search: 726/26
• US Class Current: 726/26
• CPC Class Codes: G06F 21/645 using a third party

Abstract

A method is used in managing verification of input data. A first set of input information is received at a first logical object, and a second set of input information is received at a second logical object. The first and second sets of input information are indicated as having a same origin. Based on the first and second sets of input information, it is determined whether the first set of input information is valid.

Claims

1. A computer-implemented method for use in managing verification of input data, the method comprising:

receiving a first set of input information at a first logical object;

receiving a second set of input information at a second logical object, wherein the first and second sets of input information are indicated as having a same origin; and

based on the first and second sets of input information, determining whether the first set of input information is valid;

characterized in that a trusted device comprises the second logical object, and keystrokes and mouse movements are logged independently on the trusted device.

2. The method of claim 1, wherein the second logical object helps to provide independent witness functionality.

3. The method of claim 1, wherein the first set of input information comprises source code and the second set of information comprises captured keystrokes and mouse movements, and when the source code is committed to a server implementing a source code repository, the determination is made by the server.

4. The method of claim 1, wherein the first and second sets of input information are received using multipoint Bluetooth.

5. The method of claim 1, wherein an untrusted PC comprises the first logical object and a trusted smartphone comprises a trusted smartphone, and the smartphone logs keystrokes and mouse movements used to provide an independent check files received at the untrusted PC.

6. The method of claim 1, wherein the second logical object records a transcript of human interface device activity from the origin, and the transcript comprises the second set of input information.

7. The method of claim 1, wherein the determination comprises making a comparison between a file received at the first logical object and a transcript of human interface device activity information received at the second logical object.

8. The method of claim 1, wherein a risk score is generated based on the first and second sets of input information.

9. The method of claim 1, wherein the second set of input information is based on voice recognition.

10. A system for use in managing verification of input data, the system comprising a processor and memory, the system configured to:

receive a first set of input information at a first logical object;

receive a second set of input information at a second logical object, wherein the first and second sets of input information are indicated as having a same origin; and

determine based on the first and second sets of input information, whether the first set of input information is valid.;

characterized in that a trusted device comprises the second logical object, and keystrokes and mouse movements are logged independently on the trusted device.

11. The system of claim 10, wherein the second logical object helps to provide independent witness functionality.

12. The system of claim 10, wherein the first set of input information comprises source code and the second set of information comprises captured keystrokes and mouse movements, and when the source code is committed to a server implementing a source code repository, the determination is made by the server.

13. The system of claim 10, wherein the first and second sets of input information are received using multipoint Bluetooth.

14. The system of claim 10, wherein an untrusted PC comprises the first logical object and a trusted smartphone comprises a trusted smartphone, and the smartphone logs keystrokes and mouse movements used to provide an independent check files received at the untrusted PC.

15. The system of claim 10, wherein the second logical object records a transcript of human interface device activity from the origin, and the transcript comprises the second set of input information.

16. The system of claim 10, wherein the determination comprises making a comparison between a file received at the first logical object and a transcript of human interface device activity information received at the second logical object.

17. The system of claim 10, wherein a risk score is generated based on the first and second sets of input information.

18. The system of claim 10, wherein the second set of input information is based on voice recognition.