Systems and methods for key logger prevention security techniques

• US 8,799,809 B1
• Filed: 09/25/2008
• Issued: 08/05/2014
• Est. Priority Date: 06/04/2008
• Status: Active Grant

• Current Assignee: United Services Automobile Association
• Original Assignee: United Services Automobile Association
• Inventors: Voutour, Teddy Joseph Edmond, Morris, Michael Frank
• Primary Examiner(s): SAX, STEVEN PAUL
• Application Number:
  US12/237,874
• Time in Patent Office: 2,140 Days
• Field of Search: 715/780, 715/748, 715/749, 715/760, 715/763, 715740-743, 715745-747, 719/315
• US Class Current: 715/780
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/82 Protecting input, output or interconnection devices
• CPC Class Codes: G06F 2221/031 Protect user input by software means
• CPC Class Codes: G06F 3/048 Interaction techniques based on graphical user interfaces [GUI]
• CPC Class Codes: G06F 3/0638 Organizing or formatting or addressing of data
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Abstract

An applet may be downloaded or provided to a web browser when a user visits a site in order to protect data input by the user from being captured by malicious software, such as key loggers. The applet may present a user input field in the web browser and may generate a random sequence of low-level key stroke or mouse click events within the input field when the user enters information, such as a username and/or password. A listening key logger will receive a large amount of random data, whereas the applet will receive and buffer the actual user data that may be communicated to a remote site access by the user.

Claims

1. A method of obfuscating data received in a user interface by loading an applet within the user interface, the method performed by the applet and comprising:

receiving first input data in an input field of a first type from a user in real time;

receiving second input data in an input field of a second type, different from the first type, from the user in real time, wherein the first type and the second type are selected from the group including a social security number field, a birthdate field, a credit card number field, a phone number field, and an address field;

generating first additional data associated with the first input data while the first input data is being input in the input field of the first type, wherein the first additional data is generated in the format of the first input field and at an expected frequency associated with a user inputting the first input data in the input field of the first type;

presenting the first input data to a remote server for processing a user transaction;

combining the first input data and the first additional data to form a first plurality of input events and presenting the first plurality of input events to an operating system;

generating second additional data associated with the second input data while the second input data is being input in the input field of the second type, wherein the second additional data is generated in the format of the second input field and at an expected frequency associated with a user inputting the second input data in the input field of the second type;

presenting the second input data to the remote server for processing the user transaction; and

combining the second input data and the second additional data to form a second plurality of input events and presenting the second plurality of input events to the operating system.

2. The method of claim 1, further comprising presenting the user interface within a web browser directed to the remote server identified by an address to which the input field of the first type and the input field of the second type communicate.

3. The method of claim 2, further comprising communicating the first input data and second input data to the remote server at the address without the first additional data and the second additional data.

4. The method of claim 1, further comprising:

generating numeric data for the input field of the first type in response to determining, that the input field of the first type receives numeric input data; and

generating alphanumeric data for the input field of the second type in response to determining that the input field of the second type receives alphanumeric input data.

5. The method of claim 1, further comprising:

generating additional input for a graphical input associated with the user interface;

receiving user-initiated graphical inputs on the user interlace; and

presenting the user-initiated graphical inputs on a display.

6. A non-transitory computer-readable medium encoded with computer-readable instructions for obfuscating data received in a user interface by loading an applet within the user interface, said computer-readable instructions comprising instructions that:

receive first input data in an input field of a first type from a user in real time;

receive second input data in an input field of a second type, different from the first type, from the user in real time, wherein the first type and the second type are selected from the group including a social security number field, a birthdate field, a credit card number field, a phone number field, and an address field;

generate first additional data associated with the first input data while the first input data is being input in the input field of the first type, wherein the first additional data is generated in the format of the first input field and at an expected frequency associated with a user inputting the first input data in the input field of the first type;

present the first input data to a remote server for processing a user transaction;

combine the first input data and the first additional data to harm a first plurality of input events and present the first plurality of input events to an operating system;

generate second additional data associated with the second input data while the second input data is being input in the input field of the second type, wherein the second additional data is generated in the format of the second input field and at an expected frequency associated with a user inputting the second input data in the input field of the second type;

present the second input data to the remote server for processing the user transaction; and

combine the second input data and the second additional data to harm a second plurality of input events and presenting the second plurality of input events to the operating system.

7. The computer-readable medium of claim 6, further comprising instructions that:

present the user interface within a web browser directed to the remote server identified by an address to which the input field of the first type and the input field of the second type communicate.

8. The computer-readable medium of claim 7, further comprising instructions that communicate the first input data and second input data to the remote server at the address without the first additional data and the second additional data.

9. The computer-readable medium of claim 6, further comprising instructions that:

generate numeric data for the input field of the first type in response to determining that the input field of the first type receives numeric input data; and

generate alphanumeric data for the input field of the second type in response to determining that the input field of the second type receives alphanumeric input data.

10. The computer-readable medium of claim 6, further comprising instructions that:

generate additional input for a graphical input associated with the user interface;

receive user-initiated graphical inputs on the user interface; and

present the user-initiated graphical inputs on a display.

11. A system for obfuscating data received in a user interface by loading an applet within the user interface, comprising:

at least one subsystem that receives first input data in an input field of a first type from a user in real time;

at least one subsystem that receives second input data in an input field of a second type, different from the first type, from the user in real time, wherein the first type and the second type are selected from the group including a social security number field, a birthdate field, a credit card number field, a phone number field, and an address field;

at least one subsystem that generates first additional data associated with the first input data while the first input data is being input in the input field of the first type, wherein the first additional data is generated in the format of the first input field and at an expected frequency associated with a user inputting the first input data in the input field of the first type;

at least one subsystem that presents the first input data to a remote server for processing a user transaction;

at least one subsystem that combines the first input data and the first additional data to form a first plurality of input events and presenting the first plurality of input events to an operating system;

at least one subsystem that generates second additional data associated with the second input data while the second input data is being input in the input field of the second type, wherein the second additional data is generated in the format of the second input field and at an expected frequency associated with a user inputting the second input data in the input field of the second type;

at least one subsystem that presents the second input data to the remote server for processing the user transaction; and

at least one subsystem that combines the second input data and the second additional data to form a second plurality of input events and presenting the second plurality of input events to the operating system.

12. The system of claim 11, wherein the user interface is presented within a web browser directed at the remote server identified by an address to which the input field of the first type and the input field of the second type communicate.

13. The system of claim 12, wherein the first input data and second input data are communicated to the remote server at the address without the first additional data and the second additional data.

14. The system of claim 11, wherein numeric data is generated for the input field of the first type in response to determining that the input field of the first type receives numeric input data, and wherein alphanumeric data is generated for the input field of the second type in response to determining that the input field of the second type receives alphanumeric input data.

15. The system of claim 11, wherein the at least one subsystem that loads the applet generates additional input for as graphical input associated with the user interface, receives user initiated graphical inputs on the user interface, and presents the user-initiated graphical inputs on a display.