KR20040086235A - Security method for keylog in the whole field of system by random keycode security software - Google Patents

Abstract

The present invention provides security for keyboard input data when using a computer. The present invention provides security for all hardware keyloggers by executing software random key security and provides security for all software keyloggers. All applications on the operating system as well as the browser can be used in a secure environment. The software keylogger security solution and the hardware keylogger security solution will significantly improve the effectiveness, applicability, and economic constraints of the existing hardware keylogger. High security for keyboard input data by random key security that surpasses the system security limit, system stability, speed reduction, and production cost increase of encryption of security solution, and surpasses encryption and decryption function without using encryption and decryption function. To promote It is invention for following.

Description

Security method for keylog in the whole field of system by random keycode security software

The present invention seeks to provide ultimate security for keyboard input data when using a computer.

Keyloggers are incomparably more harmful than viruses, worms and spyware in terms of important information hacking in the current information, digitization, and online periods. In the case of various personal information directly related to economic activities, Beyond this, it can harm the entire national economy. In addition, companies and government agencies can be at serious risk of leakage and misuse of sensitive information, and of military authorities in access to information. The security of the existing vaccines, firewalls, and various authentications has been applied, but due to the wide variety of uniqueness, legality, and illegality of the keylogger, it is possible to penetrate the system globally. It was almost useless for the most easy-to-use and most widely available exploitable keylogger. This requires more professional and stronger security for keyloggers, and various keylogger professional security solutions have been developed.

In the prior art, there is a software keyboard security program for keyboard security for a software keylogger, and a hardware keyboard security device for keyboard security for a hardware keylogger in addition to the software keylogger.

However, with the rapid development of computers and programming, keyloggers have evolved, and software keylogger security programs have been limited to deal with more and more various keyloggers. Moreover, even the hardware keylogger device is becoming a commerce. In order to maintain the security of the software keylogger, the software keylogger security program has developed from the recent encryption technique, the scan technique, the virtual keyboard technique to the hooking technique, the filter driver technique, the keyboard driver preemption technique. Input port encryption, detection, and evasion techniques have been developed, but the actual test results show that the security of the software is not realized properly, and it can be applied only in a limited Internet site environment, or applied to only one or two applications, or there is a limitation of Hangul input, There were many limitations such as limit, execution speed and system load. Security vulnerabilities have also been identified under these limited conditions.

In addition, the hardware keylogger security device attempted to maintain security from the physical keyboard stage by encryption, but the production cost increased several times due to the installation of the hardware encryption module. In general, there has been a problem in that information is not widely available due to a problem of exposing information, causing various types of hardware stability problems, or lowering the performance of an operating system.

Thus, it provides keylogger security for all techniques of software and hardware keyloggers, security in all environments of software and hardware, and security in all Windows applications, not just one or two applications such as web browsers or messengers. It provides higher security without using encryption and decryption, and at the same time has almost no impact on existing computer performance in terms of speed, resources, memory, executable file size, and system load. There is a need for a solution that is both economical and far surpasses the capabilities of today's keylogger security programs or devices.

The present invention should not only be able to maintain security for all keyloggers in software, but also be able to maintain security for all keyloggers in hardware and be applicable to all applications on Windows as well as web browsers. In addition, it must be secured not only online but also offline, and it must be able to provide a higher level of security than encryption without relying on encryption. We want to provide a security method.

Keylogger security method seen in the first aspect of the present invention for achieving the above object,

a) repeatedly transmitting a myriad of random keys to a keyboard or interface device for hardware and software keylogger security and to an input port for software keylogger security;

b) the user entering a real key on the keyboard whenever the user wants;

c) accurately extracting the real key from a myriad of random keys just before such a random key and the real key reach this application, if the real key is entered;

d) securely inputting only the actual key directly into the application program;

e) when the actual key is input through the virtual keyboard, characterized in that it comprises a step of directly entering the security to the application program.

Therefore, it must be organically integrated into all hardware and software of the basic computer operating system, and must be able to operate more stably and faster than various limitations and speed limitations of encryption and decryption, and must cope with the operating system and various computer environments, The goal is to provide a keylogger security solution that provides security for all kinds of keyloggers without compromising system performance with the simplest and most advanced functionality possible.

1 is a flow chart illustrating a keylogger security process throughout the system according to the present invention.

2 is a diagram illustrating a security program according to the present invention for each module

3 is a screen of a user program secured by a security program according to the present invention.

* Explanation of Signs of Major Parts of Drawings *

10: Key Logger Security Program

11: random key transfer module

12: actual key extraction module

13: actual key transmission module

14: virtual keyboard module

100: keyboard

200: physical interface device

300: input port

400: hardware operating system process

500: Application

A: User Input Information

B: Key Logger B

C: Key Logger C

The characteristic of system-wide key logger security by the random key code security software for achieving the above object is to apply a technique by a random key code (hereinafter, random key) rather than encryption. This random key security technology is a new technology that does not exist decryption key itself, but also improves performance several times, tens, or hundreds of times in terms of execution speed, applicability, and security of software or hardware.

Hereinafter, a computer keyboard including a system-wide keylogger security function by the random keycode security software according to the present invention will be described by way of example for realizing the security functions of all software keyloggers and hardware keyloggers on all applications. Same as

1 is a flowchart illustrating a keylogger security process in a system-wide system according to an embodiment of the present invention, and FIG. 2 is a diagram illustrating the keylogger security program for each module.

Referring to FIG. 2, the keylogger security program 10 includes a random key generation module 11, an actual key extraction module 12, an actual key input module 13, and a virtual keyboard module 14.

Referring to FIGS. 1 and 2, the random key generation module 11 continuously transmits a random number of random keys to the keyboard 100 or the interface device 200 or the input port 300 by direct hardware access (S1). . When the user inputs a real key on the keyboard 100 whenever the user wants (S2), the real key is inserted at any position of the countless random keys of the random key and passes through all the hardware and software processes 400 of the computer. . The real key extraction module 12 accurately extracts the real key based on the random key arrangement information of the random key generation module 11 from the random key and the myriad random keys immediately before the real key reaches such an application (S3). ) And remove the random key. In this process, even if there is any key logger or preemptive point at any point in the computer's hardware and software process, the real key and the random key have the same format, so they record countless random keys that have no meaning or record anything according to the characteristics of the key logger. You won't be able to. Finally, the actual key input module 13 securely inputs only the actual key directly into the application program 500 (S4). In addition, if a user specifically desires, the virtual keyboard module 240 may be directly input to the application program 300 via the actual key input module 230 (S5). In addition, when the random key generation module 11 transmits a random key to the input port 300, which is the first key code input step of the computer mainboard (S1), global key logger security that does not realize any existing software key logger security module When applied to the keyboard 100 or the interface 200, it is possible to realize global key logger security at a high speed and more economically and reliably than any existing hardware key logger security device. In addition, perfect security can be achieved by modifying the firmware routine of the existing keyboard 100 or interface 200 without adding a new chip or device for hardware key logger security. All these processes are hardware-optimized by software. In practical application, the computer memory occupancy is maintained at the basic minimum kernel level, CPU load almost 0%, resource occupancy almost 0%, speed reduction almost 0%, and all English, Korean, numbers, special character keys, function keys, etc. Supporting key codes can achieve a high level of security.

Figure 3 shows a practical example of a system global keylogger security program according to an embodiment of the present invention.

Referring to FIG. 3, it can be seen that the user input information A is actually input, but no data is recorded in a specific keylog B (B). You can see that only a lot of meaningless data is recorded. In other words, by this security program, the keylog completely loses its function, and even if the data is logged, it records only countless data which has no meaning. In particular, since this data is completely randomized, there is no decryption key, and it is nothing but meaningless data that even this security program cannot know. In other words, only the actual key extraction module can be known at the moment of inputting in real time. Before and after that, it is impossible to restore the original data by any method or any program even by the operating system.

In addition, when the present invention is applied to the keyboard 100, there is an advantage in that it can provide security for all hardware keyloggers only by modifying the firmware without modification in hardware, which is superior in performance as well as applicability and economy. Can be pointed at. It is also possible to provide security for all hardware keyloggers by adding an interface 200 with simple firmware without modifying existing keyboard firmware. In addition, it is possible to provide security for all software keyloggers by applying only to the input port 300 of the main body without modifying any firmware and adding an interface device, and can provide security for all hardware keyloggers when using a virtual keyboard. There is this.

The present invention applies a software random key security module that provides security for all hardware key loggers and software key loggers so that all applications on the operating system can be used in a secure environment, and thus the existing software key logger security solutions and hardware key loggers. Overcoming the limitations of effectiveness, applicability, and economics of security solutions, the ultimate security of keyboard input information can be realized.

In addition, the present invention maintains security for all keyloggers in hardware and software, and can be applied simultaneously to all applications on Windows and can be secured not only online but also offline.

In addition, the present invention is organically integrated into all the hardware and software of the basic computer operating system, and as simple as possible, without the dependence on encryption, can operate more stably and faster than the limitations and speed limitations of encryption and decryption, production In terms of cost, it can provide a higher level of security than encryption at almost no additional cost, resulting in tens to hundreds more security enhancements, better performance, and economics than other keylogger security tools. Improvement can be realized.

In addition, the present invention not only makes important personal information security in today's society that is rapidly becoming digitized, digitized and online, but also contributes to the economic and stable operation of information and other security solutions in terms of corporate information security and public information. It is an invention that realizes a breakthrough leap that can be exported globally with a security solution with more absolute superiority.

Embodiment of the present invention is only one embodiment, of course, many modifications and variations of the components of the present invention without departing from the gist of the present invention, of course, the present invention is not limited to the embodiment. .

Claims (1)

a) repeatedly transmitting a myriad of random keys to a keyboard or interface device for hardware and software keylogger security and to an input port for software keylogger security; b) the user entering a real key on the keyboard whenever the user wants; c) accurately extracting the real key from a myriad of random keys just before such a random key and the real key reach this application, if the real key is entered; d) securely inputting only the actual key directly into the application program; e) a key logger security method comprising a step of directly inputting security directly into an application even when a real key is input through a virtual keyboard