Systems and methods for key logger prevention security techniques

摘要

An applet may be downloaded or provided to a web browser when a user visits a site in order to protect data input by the user from being captured by malicious software, such as key loggers. The applet may present a user input field in the web browser and may generate a random sequence of low-level key stroke or mouse click events within the input field when the user enters information, such as a username and/or password. A listening key logger will receive a large amount of random data, whereas the applet will receive and buffer the actual user data that may be communicated to a remote site access by the user.

主权项

1. A method of obfuscating data received in a user interface by loading an applet within the user interface, the method performed by the applet and comprising:
receiving first input data in an input field of a first type from a user in real time; receiving second input data in an input field of a second type, different from the first type, from the user in real time, wherein the first type and the second type are selected from the group including a social security number field, a birthdate field, a credit card number field, a phone number field, and an address field; generating first additional data associated with the first input data while the first input data is being input in the input field of the first type, wherein the first additional data is generated in the format of the first input field and at an expected frequency associated with a user inputting the first input data in the input field of the first type; presenting the first input data to a remote server for processing a user transaction; combining the first input data and the first additional data to form a first plurality of input events and presenting the first plurality of input events to an operating system; generating second additional data associated with the second input data while the second input data is being input in the input field of the second type, wherein the second additional data is generated in the format of the second input field and at an expected frequency associated with a user inputting the second input data in the input field of the second type; presenting the second input data to the remote server for processing the user transaction; and combining the second input data and the second additional data to form a second plurality of input events and presenting the second plurality of input events to the operating system.