US20100186070A1 - System, device and method for secure provision of key credential information - Google Patents

Abstract

A system for secure provision of key credential information is provided. The system comprises secure logic circuitry for being disposed in a host computer. The secure logic circuitry detects a message received from a remote computer connected to the host computer and indicative of a request for provision of the key credential information; generates a message for prompting a user for provision of the key credential information; receives the key credential information; and provides the key credential information to the remote computer absent processing using circuitry of the host computer. The system further comprises a secure user interface cormected to the secure logic circuitry for receiving the key credential information from the user and providing the same to the secure logic circuitry.

Description

BACKGROUND OF THE INVENTION
• 1. Field of the Invention
• The present invention relates to computer networking, and more particularly to a system for secure provision of key credential information to a server via an un-trusted computer.
• 2. Brief Description of the Related Art
• Commerce over the Internet has become very popular. Such commerce takes many forms, from purchasing merchandise from online vendors to conducting online banking and stock trading. Common to all such transactions is the need to transmit private secure information. Typically, the transactions are carried out using secure encrypted connections. However, there are still opportunities to capture the private information that is used during online transactions, for example, to obtain passwords, Personal Identification Numbers (PIN), social security numbers, driver's license numbers and account numbers, to name a few. Illegal procurement of such information and using the same in a fraudulent manner is commonly referred to as identity theft.
• While the Internet is by far the largest and most pervasive computer network, the problem of identity theft occurs in other networks as well. For example, identity theft can occur entirely within the confines of a corporate network or a university network wherein a dishonest individual uses a transaction within the network to steal PINs enabling access to confidential information.
• Many of the current security mechanisms assume that a user's computer and its keyboard are secure, which is incorrect. One form of conducting online identity theft is to use a keystroke logger to log individual keystrokes for extracting personal information. The keystroke logger is, for example, software installed on a computer without the user's knowledge and its operation is invisible to the user. The keystroke logger in the form of software is, for example, distributed and installed remotely—for example, in the form of malware—and transmits the key logs to a remote computer in an invisible fashion. Numerous anti-virus programs fight known malicious software programs and try to keep up with the proliferation of new malicious software programs.
• It is desirable to provide a system for secure provision of key credential information to a server via an un-trusted computer.
• It is also desirable to provide a system for secure provision of key credential information that is easily installed in an existing computer system.
SUMMARY OF THE INVENTION
• Accordingly, one object of the present invention is to provide a system for secure provision of key credential information to a server via an un-trusted computer.
• Another object of the present invention is to provide a system for secure provision of key credential information that is easily installed in an existing computer system.
• According to one aspect of the present invention, there is provided a system for secure provision of key credential information. The system comprises secure logic circuitry for being disposed in a host computer. The secure logic circuitry detects a message received from a remote computer connected to the host computer which is indicative of a request for provision of the key credential information; generates a message for prompting a user for provision of the key credential information; receives the key credential information; and provides the key credential information to the remote computer absent processing using circuitry of the host computer. The system further comprises a secure user interface connected to the secure logic circuitry for receiving the key credential information from the user and providing the same to the secure logic circuitry.
• According to another aspect of the present invention, there is further provided a method for secure provision of key credential information. Using a secure logic circuitry disposed in a host computer, a message received from a remote computer connected to the host computer which is indicative of a request for provision of the key credential information is detected. Using the secure logic circuitry, a message prompting a user for providing the key credential information is generated. Using a secure user interface connected to the secure logic circuitry, the key credential information is received from the user and provided to the secure logic circuitry. Using the secure logic circuitry, the key credential information is provided to the remote computer absent processing using circuitry of the host computer.
• The advantage of the present invention is that it provides a system for secure provision of key credential information to a server via an un-trusted computer.
• A further advantage of the present invention is that it provides a system for secure provision of key credential information that is easily installed in an existing computer system.
BRIEF DESCRIPTION OF THE DRAWINGS
• A preferred embodiment of the present invention is described below with reference to the accompanying drawings, in which:
• FIGS. 1A and 1B are simplified block diagrams of a system for secure provision of key credential information according to a preferred embodiment of the present invention; and,
• FIG. 2 is a simplified flow diagram of a method for secure provision of key credential information according to a preferred embodiment of the present invention.
DESCRIPTION OF THE PREFERRED EMBODIMENT
• Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which the invention belongs. Although any methods and materials similar or equivalent to those described herein can be used in the practice or testing of the present invention, the preferred methods and materials are now described.
• While the description of the preferred embodiments herein below is with reference to an Internet connection for sake of simplicity, it will become evident to those skilled in the art that the embodiments of the invention are not limited thereto, but are also applicable for use with various other networks such as, for example, corporate networks or university networks.
• Referring toFIGS. 1A and 1B, a system for secure provision ofkey credential information100 according to a preferred embodiment of the invention is provided. A user's Personal Computer (PC) orworkstation102 is connected via acommunication network114 such as, for example, the Internet, to aremote computer116, for example, a server of an Internet based booking center or vendor. Typically, computers such as PCs and workstations communicate with thecommunication network114 via a Network Interface Card (NIC)118 which is connected to amotherboard110 comprising a Central Processing Unit (CPU)106 via an internal bus system. The user typically interacts with thecomputer102 usingkey board112 for providing information and commands to theCPU106 and monitor104 for visually receiving information, for example, in a graphical fashion.
• The system for secure provision ofkey credential information100 enables a user to communicate key credential information to theserver116 such that a malware having, for example, a surreptitious key logger capability, resident in the computer'sCPU106 ormotherboard110 is not able to see the provided key credential information.
• The system for secure provision ofkey credential information100 preferably comprises aNIC118 havingsecure logic circuitry120 connected toports130,132, and134. Theports132 and134 are connected to thecommunication network114 and the internal bus system of thecomputer102, respectively. Thesecure logic circuitry120 comprises, for example, aprocessor136 andmemory138 having executable commands stored therein for execution on theprocessor136. Thesecure logic circuitry120 scans messages received from theserver116 for detecting a message which is indicative of a request for provision of the key credential information. Typically, when a user attempts to invoke a service on a remote network resource, the server then sends a request for credentials message to thecomputer102. For example, in conventional web browsing operations theCPU106 of thecomputer102 sends a HTTP GET message to theserver116 specifying a server resource and theserver116 replies with a HTTP401 Authorization Required message with an embedded realm-title such as “Some-Service Login” to alert the user to exactly which set of key credentials are required for the requested resource.
• When thesecure logic circuitry120 encounters a “request for key credentials” message the request is not passed to thecomputer motherboard110—as is using conventional technology—but instead is passed to asecure user interface124,126 connected to thesecure logic circuitry120 via theport130. The secure user interface comprises, for example, asecure keyboard126 for receiving the key credential information from the user and asecure display124 for displaying a message for prompting the user for provision of the key credential information. Alternatively, the secure user interface comprises a touch screen. The secure user interface is deployed, for example, as a peripheral device connected to theport130 viacable122. Alternatively, wireless communication is enabled between thesecure logic circuitry120 and thesecure user interface124,126 using, for example, RF or infrared signal transmission techniques. For example, for common web browsing thesecure logic circuitry120 scans for messages coming from remote port80 that contains the HTTP401 message. More generally, a dedicated internet protocol is used to handle credentials for more general services or thesecure logic circuitry120 scans for authentication for each type of internet protocol, e.g. POP onport110. Thesecure logic circuitry120 generates a message for prompting the user for provision of the key credential information which is then transmitted to thesecure display124 for alerting the user. Optionally, an audio alert is generated using, for example, a loudspeaker disposed in the secure user interface. For example, for a common web browsing situation, the secure display shows the embedded realm title such as “Some-Service Login”.
• Optionally, the secure logic circuitry interrupts communication between the keyboard and the motherboard, for example, simultaneously when the message for prompting the user for provision of the key credential information is displayed.
• Optionally,keyboard126 can be enhanced with a second non-secured keyboard-to-PC connection link (not shown) that can transmit keystrokes from theenhanced keyboard126 to thePC motherboard110 in a non-secure mode, this optional enhancedkeyboard126 additionally having a user-activatable switch128 that, when activated, temporarily blocks future transmission via the second non-secured keyboard-to-PC connection link to halt any typed keystrokes provided from the keyboard from reaching themotherboard110, and when activated, additionally temporarily allowing future transmission of data from theenhanced keyboard126 to theNIC118 viacable122 or such other manner known to a person skilled in the art. This eliminates the requirement for the PC user to have separate secure and non-secure keyboards.
• The user enters the required key credential information which is then sent to thesecure logic circuitry120 viacable122. Upon receipt, thesecure logic circuitry120 provides the key credential information to theremote computer116 absent processing using themotherboard110, for example, by generating a reply message with the key credential information contained therein. Once the key credential information has been received, conventional communication and operation proceeds. For the common web browsing situation thesecure logic circuitry120 additionally keeps track of outgoing HTTP GET requests, because within the HTTP protocol, an authorization message is supplied by retrying the originals HTTP GET request with an additional Authorization field added that contains the key credential information.
• As is evident, there are numerous variants for coding the key credential information. For example, the HTTP protocol defines a low security Basic mode, where the key credential information is transmitted over the network using a base-64 transfer encoding. HTTP also includes a Digest based authentication mechanism, whereby the HTTP401 message also contains a one-time unique server supplied “salt” value. In this authentication technique, the authentication reply is a specified hash computation of the user key credential information and the “salt” value, for which the server evaluates the correctness. Using this technique, a network based eavesdropper is not able to recover the key credential information. Of course, there are numerous other methods for encoding the key credential information using various encryption techniques. Thesecure logic circuitry120 is adaptable to perform these various encoding techniques in a straightforward manner.
• The system for secure provision ofkey credential information100 is easily installed, for example, in the form of a NIC, into an existing insertion slot of a computer such as a PC or workstation with the secure user interface being connected thereto, allowing retrofitting of existing computer systems in a simple fashion.
• Referring toFIG. 2, a simplified flow diagram of a method for secure provision of key credential information according to a preferred embodiment of the invention is provided. The method is implemented using thesystem100 described above. At10, using thesecure logic circuitry120 disposed in thehost computer102 messages received from theremote computer116 are scanned for detecting—12—a message received from theremote computer116 which is indicative of a request for provision of key credential information. Upon detection of the message, the secure logic circuitry generates a message prompting a user for providing the key credential information—14. Optionally, the secure logic circuitry interrupts—16—communication betweencircuitry110 of thehost computer102 and theremote computer116 to increase security. At18, transmission of keystroke signals to thecircuitry110 of thehost computer102 from akeyboard112 connected to thehost computer102 is interrupted. The interruption is performed, for example, when a same keyboard connected to themotherboard110 and to thesecure logic circuitry120 is used. For example, the user presses a toggle switch disposed on the keyboard prior provision of the key credential information. Alternatively, the interruption is performed automatically, using thesecure logic circuitry120. Optionally, the interruption is also performed when two separate keyboards or a touch screen are employed to prevent accidental use of the keyboard connected to themotherboard110 for provision of the key credential information by the user.
• At20, the secure logic circuitry generates display data for displaying the message prompting the user which is then displayed—22—using thesecure display124. Using the secure user interface connected to thesecure logic circuitry120, the key credential information is received from the user and provided to thesecure logic circuitry120, at24. Using thesecure logic circuitry120, the key credential information is encoded—26—using one of various available encoding techniques for providing the key credential information in an obfuscated fashion. Thesecure logic circuitry120 then sends—28—the key credential information to theremote computer116 absentprocessing using circuitry110 of thehost computer102.
• After provision of the key credential information to theremote computer116 communication between thecircuitry110 of thehost computer102 and theremote computer116 is enabled—30—as well as transmission of keystroke signals from the keyboard to thecircuitry110 of thehost computer102, at32.
• It is understood that in the preferred embodiment of the present invention, the NIC of the present invention would not incorporate or utilize a conventional packet sniffer function that would capture the secure credential packets being transmitted therethrough (to mitigate the risk that malware could locate and acquire such data from the NIC).
• It is also understood that, in the case of a laptop computer, an NIC of the present invention may be provided which is physically separate from, and connectable to the laptop by way of, for example, a USB port or other interface on the laptop, in a manner known to a person skilled in art (network access to and from laptop thereafter being provided by way of the NIC of the present invention).
• The present invention has been described herein with regard to preferred embodiments. However, it will be obvious to persons skilled in the art that a number of variations and modifications can be made without departing from the scope of the invention as described herein.

Claims (13)

1. A system for secure provision of key credential information comprising:

secure logic circuitry for being disposed in a host computer, the secure logic circuitry for:

detecting a message received from a remote computer connected to the host computer and indicative of a request for provision of the key credential information;

generating a message for prompting a user for provision of the key credential information receiving the key credential information; and,

providing the key credential information to the remote computer absent processing using circuitry of the host computer; and,

a secure user interface connected to the secure logic circuitry for receiving the key credential information from the user and providing the same to the secure logic circuitry.

2. A system for secure provision of key credential information as defined inclaim 1 wherein the secure user interface comprises:

a secure display for displaying the message for prompting the user for provision of the key credential information; and,

a secure keyboard for providing the key credential information.

3. A system for secure provision of key credential information as defined inclaim 1 wherein the secure logic circuitry is placed on a network interface card.

4. A system for secure provision of key credential information as defined inclaim 3 wherein the secure user interface is provided as a peripheral device connected to the network interface card.

5. A system for secure provision of key credential information as defined inclaim 1 wherein the secure logic circuitry comprises a processor and memory, the memory having executable commands stored therein for execution on the processor.

6. A method for secure provision of key credential information comprising:

using a secure logic circuitry disposed in a host computer, detecting a message received from a remote computer connected to the host computer and indicative of a request for provision of the key credential information;

using the secure logic circuitry, generating a message prompting a user for providing the key credential information;

using a secure user interface connected to the secure logic circuitry, receiving the key credential information from the user and providing the same to the secure logic circuitry;

using the secure logic circuitry, providing the key credential information to the remote computer absent processing using circuitry of the host computer.

7. A method for secure provision of key credential information as defined inclaim 6 comprising:

using the secure logic circuitry, generating display data for displaying the message prompting the user; and,

using a display of the secure user interface displaying the message prompting the user.

8. A method for secure provision of key credential information as defined inclaim 6 comprising scanning messages received from the remote computer for detecting the message indicative of a request for provision of the key credential information.

9. A method for secure provision of key credential information as defined inclaim 7 comprising interrupting transmission of keystroke signals from a keyboard connected to the host computer to the circuitry of the host computer.

10. A method for secure provision of key credential information as defined inclaim 6 comprising:

interrupting communication between the circuitry of the host computer and the remote computer after detection of the message indicative of a request for provision of the key credential information; and,

enabling the communication between the circuitry of the host computer and the remote computer after provision of the key credential information to the remote computer.

11. A method for secure provision of key credential information as defined inclaim 6 comprising using the secure logic circuitry, encoding the key credential information for provision of the same in an obfuscated fashion.

12. A device for providing secure key credential information comprising:

key credential information request detection means connected to a host computer adapted for detecting a message received from a remote computer connected to the host computer and indicative of a request for provision of the key credential information;

secure logic circuitry for being disposed within the host computer and adapted for receiving key credential information from a user and providing same to the remote computer while not providing key credential information to any other processor of the host computer; and

keyboard means adapted for receiving the key credential information from the user and providing the same to the secure logic circuitry.

13. The device according toclaim 12 having display means connected to the key credential information request detection means and adapted for generating a message for prompting the user for provision of the key credential information in response to the detection of a message received from the remote computer connected to the host computer and indicative of a request for provision of the key credential information.

Images