Security methods and systems

• US 9,317,701 B2
• Filed: 09/24/2014
• Issued: 04/19/2016
• Est. Priority Date: 02/18/2002
• Status: Expired due to Term

• Current Assignee: SentryBay Limited
• Original Assignee: SentryBay Limited
• Inventors: Waterson, David Lynch
• Primary Examiner(s): Abrishamkar, Kaveh
• Assistant Examiner(s): NGUYEN, NGOC THACH D
• Application Number:
  US14/495,097
• Publication Number:
  US 20150106923A1
• Time in Patent Office: 573 Days
• Field of Search: 726/22, 726/26, 726/32
• US Class Current: 1/1
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Abstract

A system/method for preventing a computer virus from accessing message addresses is described. The system comprises an interception component or client plug-in that communicates with a messaging client and a messaging server. The interception component alters messages from the server and destined for the client. The interception component replaces message addresses in incoming messages with a unique identifier. The interception component also alters messages from the client destined for the server. The interception component replaces a unique identifier with a message addresses. A system/method for preventing keyboard sniffer programs from intercepting input, a system for preventing a computer virus from activating a send confirmation of a messaging client and a method for altering displayed objects to show encrypted data in decrypted form are also described and claimed. A system/method for reducing the impact of keyboard sniffer programs by altering keyboard input.

Claims

1. A system for preventing keyboard sniffer programs from intercepting keystrokes input via a keyboard comprising:

a computer system with an operating system and a user level environment for applications,

a keyboard driver at a kernel level in the operating system for receiving input keystrokes from a keyboard connected or connectable to the computer system,

a keystroke memory at the kernel level in the operating system configured to receive and store the input keystrokes from the keyboard driver,

a driver at the kernel level in the operating system configured to receive the input keystrokes from the keyboard driver and generating a replacement keystroke for each received input keystroke to pass to an application operating on the user level environment,

an application operating on the user level environment requiring input from the keyboard and comprising;

an application input,

a message queue for receiving the replacement keystrokes from the driver,

a protection library for receiving the input keystrokes from the keystroke memory and for passing the input keystrokes from the keystroke memory to the application input,

such that;

keystrokes input via the keyboard and received by the application input bypass any kernel level or user level keyboard sniffer programs, and

any kernel level and/or user level keyboard sniffer programs only log replacement keystrokes generated by the driver.

2. The system according to claim 1 wherein a random stream of keystrokes is provided to the message queue to intersperse with the replacement keystrokes received from the driver, such that any user level keyboard sniffer programs only log replacement keystrokes generated by the driver interspersed with random keystrokes.

3. The system according to claim 2 wherein the protection library generates the random stream of keystrokes provided to the message queue.

4. The system according to claim 2 wherein the driver generates the random stream of keystrokes provided to the message queue.

5. A method of preventing keyboard sniffer programs from intercepting keystrokes input via a keyboard in a computer system with an operating system and a user level environment for applications, the method comprising the steps of

receiving, at a keyboard driver at a kernel level in the operation system, input keystrokes from a keyboard,

receiving and storing the input keystrokes from the keyboard driver in a keystroke memory at the kernel level in the operating system,

receiving input keystrokes from the keyboard driver in a driver at the kernel level in the operating system and generating a replacement keystroke for each received input key stroke for passing to an application operating on the user level environment,

receiving the replacement keystrokes from the driver at a message queue in the application,

receiving the input keystrokes from the keystroke memory at a protection library in the applicant and passing the input keystrokes from the keystroke memory to an application input,

wherein

keystrokes input via the keyboard an received by the application input bypass any kernel level and/or user level keyboard sniffer programs, and

any kernel level and/or user level keyboard sniffer programs only log replacement keystrokes generated by the driver.

6. The method according to claim 5 further comprising generating and providing a random stream of keystrokes to the message queue to intersperse with the replacement keystrokes received from the driver, such that any user level keyboard sniffer programs only log replacement keystrokes generated by the driver interspersed with random keystrokes.

7. The method according to claim 6 wherein the protection library generates the random stream of keystrokes provided to the message queue.

8. The method according to claim 6 wherein the driver generates the random stream of keystrokes provided to the message queue.