BRPI0404021A - Entrada segura para um sistema com um ambiente de execução de alta segurança - Google Patents

Entrada segura para um sistema com um ambiente de execução de alta segurança

Info

Publication number
BRPI0404021A
BRPI0404021A BR0404021-0A BRPI0404021A BRPI0404021A BR PI0404021 A BRPI0404021 A BR PI0404021A BR PI0404021 A BRPI0404021 A BR PI0404021A BR PI0404021 A BRPI0404021 A BR PI0404021A
Authority
BR
Brazil
Prior art keywords
operating system
user
execution environment
high security
mode
Prior art date
Application number
BR0404021-0A
Other languages
English (en)
Inventor
Christine M Chew
Hirofumi Yamamoto
Idan Avraham
John E Paff
Paul C Roberts
Original Assignee
Microsoft Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Microsoft Corp filed Critical Microsoft Corp
Publication of BRPI0404021A publication Critical patent/BRPI0404021A/pt

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/82—Protecting input, output or interconnection devices
    • G06F21/83—Protecting input, output or interconnection devices input devices, e.g. keyboards, mice or controllers thereof
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F15/00—Digital computers in general; Data processing equipment in general
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G06F21/53—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/82—Protecting input, output or interconnection devices
    • G06F21/84—Protecting input, output or interconnection devices output devices, e.g. displays or monitors
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08—Access security
    • H04W12/086—Access security using security domains
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2105—Dual mode as a secondary aspect
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W88/00—Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
    • H04W88/02—Terminal devices

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • User Interface Of Digital Computer (AREA)
  • Digital Computer Display Output (AREA)
  • Burglar Alarm Systems (AREA)

Abstract

"ENTRADA SEGURA PARA UM SISTEMA COM UM AMBIENTE DE EXECUçãO DE ALTA SEGURANçA". Tratam-se de técnicas que são reveladas para proporcionar segurança para a entrada do usuário, nas quais um primeiro sistema operacional hospedeiro é utilizado junto com um segundo sistema operacional de alta segurança, onde o primeiro sistema proporciona pelo menos parte da infra-estrutura para o segundo sistema. São apresentados dois modos. Em um primeiro modo, os dados do usuário são passados para o sistema operacional hospedeiro. Em um segundo modo, os dados do usuário são retidos no segundo sistema operacional para o uso do segundo sistema operacional ou dos processos funcionando no segundo sistema operacional. As transições entre os modos podem ser realizadas de acordo com as ações hipotecadas do usuário tal como combinações de pressionamento de tecla ou quando o usuário executa uma ação que indica uma ativação programática de um processo funcionando no segundo sistema operacional. Onde os elementos de sombra gráficos são executados pelo primeiro sistema operacional para indicar a localização dos elementos gráficos a partir dos processos funcionando no segundo sistema operacional, esta ativação programática pode ser indicada pela ativação programática de um elemento de sombra gráfico.
BR0404021-0A 2003-10-24 2004-09-22 Entrada segura para um sistema com um ambiente de execução de alta segurança BRPI0404021A (pt)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
US10/693,061 US7464412B2 (en) 2003-10-24 2003-10-24 Providing secure input to a system with a high-assurance execution environment

Publications (1)

Publication Number Publication Date
BRPI0404021A true BRPI0404021A (pt) 2005-06-21

Family

ID=34394582

Family Applications (1)

Application Number Title Priority Date Filing Date
BR0404021-0A BRPI0404021A (pt) 2003-10-24 2004-09-22 Entrada segura para um sistema com um ambiente de execução de alta segurança

Country Status (12)

Country Link
US (2) US7464412B2 (pt)
EP (1) EP1526426B1 (pt)
JP (1) JP4607529B2 (pt)
KR (1) KR101099324B1 (pt)
CN (1) CN100565457C (pt)
AT (1) ATE386971T1 (pt)
AU (1) AU2004216665B2 (pt)
BR (1) BRPI0404021A (pt)
CA (1) CA2482078C (pt)
DE (1) DE602004011871T2 (pt)
MX (1) MXPA04010156A (pt)
RU (1) RU2365988C2 (pt)

Families Citing this family (36)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7496768B2 (en) * 2003-10-24 2009-02-24 Microsoft Corporation Providing secure input and output to a trusted agent in a system with a high-assurance execution environment
US7464412B2 (en) * 2003-10-24 2008-12-09 Microsoft Corporation Providing secure input to a system with a high-assurance execution environment
US7784088B2 (en) * 2004-07-30 2010-08-24 Research In Motion Limited Method and system for managing delayed user authentication
CN101002180B (zh) 2004-07-30 2012-09-05 捷讯研究有限公司 用于协调客户和主机安全模块的方法和系统
US9363481B2 (en) * 2005-04-22 2016-06-07 Microsoft Technology Licensing, Llc Protected media pipeline
US7721094B2 (en) * 2005-05-06 2010-05-18 Microsoft Corporation Systems and methods for determining if applications executing on a computer system are trusted
US20070192826A1 (en) * 2006-02-14 2007-08-16 Microsoft Corporation I/O-based enforcement of multi-level computer operating modes
US7917750B2 (en) * 2006-07-25 2011-03-29 Hewlett-Packard Development Company, L.P. Virtual user authentication system and method
GB0615015D0 (en) * 2006-07-28 2006-09-06 Hewlett Packard Development Co Secure use of user secrets on a computing platform
DE102006049646B3 (de) * 2006-10-20 2008-06-19 Siemens Ag Verfahren und Sendevorrichtung zum gesicherten Erstellen und Versenden einer elektronischen Nachricht sowie Verfahren und Empfangsvorrichtung zum gesicherten Empfangen und Verarbeiten einer elektronischen Nachricht
US8095977B2 (en) * 2007-01-19 2012-01-10 Microsoft Corporation Secure PIN transmission
KR100838488B1 (ko) * 2007-01-24 2008-06-16 현대중공업 주식회사 사용자 컴퓨터에 키스트로크 해킹 보안 프로그램 설치가필요 없는 변조된 일회성 인증 데이터 생성 방식을 이용한정보 보안 방법 및 장치
JP4782042B2 (ja) * 2007-02-21 2011-09-28 富士通株式会社 電子計算機及びソフトウェアによるユーザインタフェースの実現方法
US8261064B2 (en) * 2007-02-27 2012-09-04 L-3 Communications Corporation Integrated secure and non-secure display for a handheld communications device
US8307358B1 (en) * 2007-07-10 2012-11-06 Parallels IP Holdings GmbH Method and system for unattended installation of guest operating system
US8205248B2 (en) * 2007-09-30 2012-06-19 Lenovo (Singapore) Pte. Ltd. Local verification of trusted display based on remote server verification
US8516564B2 (en) * 2008-07-18 2013-08-20 International Business Machines Corporation Secure user interaction using virtualization
KR101540798B1 (ko) * 2008-11-21 2015-07-31 삼성전자 주식회사 가상화 환경에서 보안 정보를 제공하기 위한 장치 및 방법
US9065812B2 (en) * 2009-01-23 2015-06-23 Microsoft Technology Licensing, Llc Protecting transactions
US8560826B2 (en) 2009-12-14 2013-10-15 Citrix Systems, Inc. Secure virtualization environment bootable from an external media device
US8650565B2 (en) 2009-12-14 2014-02-11 Citrix Systems, Inc. Servicing interrupts generated responsive to actuation of hardware, via dynamic incorporation of ACPI functionality into virtual firmware
KR101521778B1 (ko) * 2009-12-24 2015-05-20 인텔 코포레이션 가상화 환경에서 ｉ／ｏ 동작을 처리하는 방법 및 장치
TWI476625B (zh) 2011-02-22 2015-03-11 Htc Corp 資料安全管理系統和方法
CN103930899B (zh) * 2011-11-14 2017-03-08 意法爱立信有限公司 用于管理在设备处输入的公用数据和私人数据的方法
CN102542205B (zh) * 2011-12-31 2015-06-03 汉柏科技有限公司 用于共享数据保护的辅助设计方法
GB201218389D0 (en) 2012-10-12 2012-11-28 Uni I Olso Multi-mode computer with selector
RU2583710C2 (ru) * 2013-07-23 2016-05-10 Закрытое акционерное общество "Лаборатория Касперского" Система и способ обеспечения конфиденциальности информации, используемой во время операций аутентификации и авторизации, при использовании доверенного устройства
CN104143065A (zh) * 2014-08-28 2014-11-12 北京握奇智能科技有限公司 安全智能终端设备、及信息处理方法
US9704355B2 (en) 2014-10-29 2017-07-11 Clover Network, Inc. Secure point of sale terminal and associated methods
US9832207B2 (en) 2014-12-23 2017-11-28 Mcafee, Inc. Input verification
US9996690B2 (en) * 2014-12-27 2018-06-12 Mcafee, Llc Binary translation of a trusted binary with input tagging
US9798559B2 (en) 2014-12-27 2017-10-24 Mcafee, Inc. Trusted binary translation
EP3355188B1 (en) 2017-01-31 2021-08-25 OpenSynergy GmbH Instrument display on a car dashboard by checking frames of a gui by a realtime os
US10846432B2 (en) 2018-09-11 2020-11-24 OneLogin, Inc. Secure data leak detection
US11429753B2 (en) * 2018-09-27 2022-08-30 Citrix Systems, Inc. Encryption of keyboard data to avoid being read by endpoint-hosted keylogger applications
CN115291735B (zh) * 2022-07-11 2026-03-27 统信软件技术有限公司 一种键盘指示灯的控制方法、装置、计算设备和存储介质

Family Cites Families (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5596718A (en) * 1992-07-10 1997-01-21 Secure Computing Corporation Secure computer network using trusted path subsystem which encrypts/decrypts and communicates with user through local workstation user I/O devices without utilizing workstation processor
US5537544A (en) 1992-09-17 1996-07-16 Kabushiki Kaisha Toshiba Portable computer system having password control means for holding one or more passwords such that the passwords are unreadable by direct access from a main processor
US5590266A (en) * 1994-10-11 1996-12-31 International Business Machines Corporation Integrity mechanism for data transfer in a windowing system
KR100521252B1 (ko) * 1997-06-16 2006-01-12 삼성전자주식회사 화면출력상태 제어기능을 갖는 컴퓨터 시스템 및 그 제어방법
RU2163745C2 (ru) * 1999-04-29 2001-02-27 Щеглов Андрей Юрьевич Система защиты виртуального канала корпоративной сети с аутентифицирующим маршрутизатором, построенной на каналах и средствах коммутации сети связи общего пользования
WO2001010076A2 (en) * 1999-07-29 2001-02-08 Intertrust Technologies Corp. Systems and methods for protecting secure and insecure computing environments using cryptography
JP4089171B2 (ja) 2001-04-24 2008-05-28 株式会社日立製作所 計算機システム
GB2376764B (en) 2001-06-19 2004-12-29 Hewlett Packard Co Multiple trusted computing environments
GB2376761A (en) 2001-06-19 2002-12-24 Hewlett Packard Co An arrangement in which a process is run on a host operating system but may be switched to a guest system if it poses a security risk
US7464412B2 (en) 2003-10-24 2008-12-09 Microsoft Corporation Providing secure input to a system with a high-assurance execution environment
US7496768B2 (en) * 2003-10-24 2009-02-24 Microsoft Corporation Providing secure input and output to a trusted agent in a system with a high-assurance execution environment

Also Published As

Publication number Publication date
JP4607529B2 (ja) 2011-01-05
US7464412B2 (en) 2008-12-09
US20090083862A1 (en) 2009-03-26
DE602004011871D1 (de) 2008-04-03
US20050091530A1 (en) 2005-04-28
EP1526426A2 (en) 2005-04-27
AU2004216665A1 (en) 2005-05-12
CN1609811A (zh) 2005-04-27
US7882566B2 (en) 2011-02-01
AU2004216665B2 (en) 2010-03-18
ATE386971T1 (de) 2008-03-15
CA2482078A1 (en) 2005-04-24
RU2365988C2 (ru) 2009-08-27
EP1526426B1 (en) 2008-02-20
KR101099324B1 (ko) 2011-12-26
MXPA04010156A (es) 2005-04-28
EP1526426A3 (en) 2005-07-20
CN100565457C (zh) 2009-12-02
KR20050039542A (ko) 2005-04-29
JP2005129035A (ja) 2005-05-19
RU2004131023A (ru) 2006-04-10
CA2482078C (en) 2011-10-25
DE602004011871T2 (de) 2009-03-05

Similar Documents

Publication Publication Date Title
BRPI0404021A (pt) Entrada segura para um sistema com um ambiente de execução de alta segurança
BRPI0503785A (pt) sistema eletrÈnico de permuta de dados
EP3314503B1 (en) Simulation of an application
JP6583865B2 (ja) プロファイリングイベントに基づいたエクスプロイト検出
ATE539411T1 (de) Projektion von vertrauenswürdigkeit von einer zuverlässigen umgebung auf eine unzuverlässige umgebung
CN107409120B (zh) 检测恶意外设的装置、方法及系统
JP2021087216A (ja) 共通物理レイヤ上のマルチプロトコルサポート
WO2006086594A3 (en) Remediating effects of an undesired application
ATE375548T1 (de) Bereitstellen einer benutzereingabeschnittstelle vor der einleitung eines betriebssystems
JP2018519604A (ja) マルウェアの検出
BRPI0404349A (pt) Fornecimento de uma interface gráfica do usuário em um sistema com um ambiente de execução com plena garantia
BRPI0404095A (pt) Entrada e saìda segura para um agente confiável em um sistema com um ambiente de execução de alta segurança
US9654982B2 (en) Protecting mobile devices from malware
US9678732B2 (en) Firmware agent
GB2513982A (en) Apparatus and method to protect digital content
BRPI0506256A (pt) ambiente de computação portátil
EP1439662A4 (en) DEVICE FOR INFORMATION PROCESSING
EP1801696A3 (de) Multithreading - fähige virtuelle Maschine
BR0215664A (pt) Arranjo e método para controlar/suportar o controle de processos de um sistema
DE602005019807D1 (de) Unterstützungssystem für Applikationsanwendungen
Bartels et al. Representing and reasoning about dynamic code
SG129352A1 (en) System and method for processing messages being composed by a user
Ariola SHF: SMALL: Intermediate Languages for Safe and Efficient Compilation
Hui et al. A source code oriented static detection method for integer overflow defects
Shu et al. Fmea-Based Design for Remanufacture Using Automotive-Remanufacturer Data

Legal Events

Date Code Title Description
B08F Application dismissed because of non-payment of annual fees [chapter 8.6 patent gazette]

Free format text: REFERENTE A 9A ANUIDADE.

B08K Patent lapsed as no evidence of payment of the annual fee has been furnished to inpi [chapter 8.11 patent gazette]

Free format text: REFERENTE AO DESPACHO 8.6 PUBLICADO NA RPI 2259 DE 22/04/2014.