Optical security enhancement device

• US 9,514,316 B2
• Filed: 04/30/2013
• Issued: 12/06/2016
• Est. Priority Date: 04/30/2013
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Kotla, Ramakrishna Rao, Nowatzyk, Andreas Georg
• Primary Examiner(s): Hirl, Joseph P
• Assistant Examiner(s): MURPHY, JOSEPH B
• Application Number:
  US13/874,385
• Publication Number:
  US 20140325678A1
• Time in Patent Office: 1,316 Days
• Field of Search: 726/28
• US Class Current: 1/1
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors

Abstract

An optical security device can be used to view sensitive information provided in an obscured format via a potentially untrusted and/or compromised computer. The techniques described herein enable use of untrusted computers for access to sensitive information. The optical security device employs one or more forms of visual cryptography such as spatial cryptography and/or temporal cryptography in some instances via a programmable mask and/or a programmable color filter to reveal sensitive information that is provided in an obscured form by a potentially untrusted computer.

Claims

1. A method comprising:

receiving a seed via an input at an interface of a security device;

computing, by a micro-controller of the security device, a pattern for presentation as a programmable mask based at least in part on the seed;

configuring a first display as the programmable mask in a window of the security device to be interposed between an eye of a user and at least one second display, the programmable mask configured to reveal information presented on at least one second display that is otherwise not obtainable from the at least one second display;

configuring the window of the security device as a time-varying color filter;

synchronizing, via a color sensor, the security device to a sequence of images presented on the at least one second display, which comprises a screen of an untrusted computer; and

instructing the color sensor to reveal one image from a plurality of images being simultaneously displayed on the at least one second display to securely use the untrusted computer that is configured to present information via the at least one second display.

2. A method as claim 1 recites, wherein the first display is configured to be positioned on the at least one second display.

3. A method as claim 1 recites, wherein the first display is configured to narrow a viewing angle of the at least one second display.

4. A method as claim 1 recites, wherein at least a portion of the first display is configured for use with the at least one second display and not with a third display.

5. A method as claim 1 recites, wherein the first display is configured for a first user to access private information particular to the first user and configured to exclude a second user from accessing at least one of private information particular to the first user or particular to the second user.

6. A method as claim 1 recites, further comprising implementing a temporal form of visual cryptography via the security device.

7. A method as claim 1 recites, further comprising:

receiving a personal identification number via a keypad; and

computing the pattern based at least in part on the personal identification number.

8. A method as claim 1 recites, wherein the pattern for the first display is configured for use as a foil over the at least one second display for secure use of an untrusted computer that is configured to present information via the at least one second display.

9. A method as claim 1 recites, further comprising revealing one image from a plurality of images being simultaneously displayed on the at least one second display for individual digit entries of a personal identification number or a password.

10. A security device comprising:

an interface configured to receive a seed via an input;

a micro-controller configured to compute a pattern for presentation as a programmable mask based at least in part on the seed;

a first display including a polarizer, the first display configured as the programmable mask to be interposed between an eye of a user and at least one second display, the programmable mask configured to reveal information presented on the at least one second display that is otherwise not obtainable from the at least one second display;

a window to view the at least one second display;

a color sensor configured to synchronize the security device to a sequence of images presented on the at least one second display, which comprises a screen of an untrusted computer;

the window of the security device configured as a time-varying color filter; and

the micro-controller configured to instruct the color sensor to reveal one image from a plurality of images being simultaneously displayed on the at least one second display to securely use an untrusted computer that is configured to present information via the at least one second display.

11. A security device as claim 10 recites, the first display configured to be positioned on the at least one second display.

12. A security device as claim 10 recites, the first display configured to narrow a viewing angle of the at least one second display.

13. A security device as claim 10 recites, at least a portion of the first display being configured for use with the at least one second display and not with a third display.

14. A security device as claim 10 recites, the first display being configured for a first user to access private information particular to the first user and configured to exclude a second user from accessing at least one of private information particular to the first user or particular to the second user.

15. A security device as claim 10 recites, the micro-controller configured to implement a temporal form of visual cryptography.

16. A security device as claim 10 recites, the interface further configured to receive a personal identification number via a keypad, and the micro-controller further configured to compute the pattern based at least in part on the personal identification number.

17. A security device as claim 10 recites, wherein the pattern for the first display is configured for use as a foil over the at least one second display for secure use of an untrusted computer that is configured to present information via the at least one second display.

18. A security device as claim 10 recites, the micro-controller configured to instruct the color sensor to reveal one image from a plurality of images being simultaneously displayed on the at least one second display for individual digit entries of a personal identification number or a password.

19. A computer-readable storage media having thereon computer-executable instructions, the computer-executable instructions to configure a security device to:

receive a seed via an input of the security device;

compute a pattern for presentation as a programmable mask based at least in part on the seed;

configure the first display as the programmable mask;

configure the programmable mask in a window of the security device to be interposed between an eye of a user and the at least one second display, the programmable mask configured to reveal information presented on the at least one second display that is otherwise not obtainable from the at least one second display;

configure the window of the security device as a time-varying color filter;

synchronize, via a color sensor, the security device to a sequence of images presented on the at least one second display, which comprises a screen of an untrusted computer; and

instruct the color sensor to reveal one image from a plurality of images being simultaneously displayed on the at least one second display to securely use an untrusted computer that is configured to present information via the at least one second display.

20. A computer-readable storage media as claim 19 recites, the computer-executable instructions to configure the security device to reveal one image from a plurality of images being simultaneously displayed on the at least one second display for individual digit entries of a personal identification number or a password.