Secure display method and device
View Patent ↗A secure display device is designed to display on a screen a first set of information edited by an open operating system. A secure operating system resident in a dedicated circuit edits a second set of information. A filter allocates, independently of the open operating system, a first zone of the screen to the first set of information and a second zone of the screen to the second set of information. The zones and can have a non-zero intersection and any value. A real video memory is used for transferring the two sets of information to the screen under the sole control of the secure operating system so as to produce a secure display of the second set of information.
1. Method of secure display on a screen, comprising:
a step of receiving a first set of information edited by a first operating system, said first operating system being an unsecured operating system;
a filtering step in which an element allocates, independently of the first operating system, a first zone of the screen to the first set of information and a second zone of the screen to a second set of information edited by a second operating system which is secure; and
a real display step in which the two sets of information are transferred to the screen under sole control of the second secured operating system so as to produce a secure display of the second set of information.
2. Display method according to claim 1 , wherein the method comprises a virtual display step in which the first set of information is written in a virtual video memory under control of the first operating system and wherein content of the virtual video memory is accessible to the second operating system.
3. Display method according to claim 1 , wherein the method comprises a virtual display step in which the first set of information is written in a real video memory under control of the first operating system so as to be able to combine first video signals that result therefrom with second video signals that result from the second set of information under the control of the second operating system.
4. Display method according to claim 1 , wherein the second zone is situated on the screen at a first position easily identifiable by a user.
5. Display method according to claim 4 , wherein said first position is alternately permuted with a second position previously covered by the first zone.
6. Display method according to claim 1 , wherein the second zone is superimposed with or without transparency on the first zone at one or more positions in the screen.
7. Display method according to claim 6 , wherein at least one of said positions is moving on the screen.
8. Device for securely displaying datasets on a screen, wherein said device comprises:
a filter comprising:
an input for receiving a first data set edited by a first operating system, which is an unsecured operating system, and a second data set edited by a second operating system, which is a secured operating system;
an allocator configured for allocating:
a first area of said screen to said first dataset, independently of said unsecured operating system, and
a second area of said screen to said second dataset; and
an element configured to transfer said first dataset and said second dataset to the screen under the exclusive control of said second operating system, in order to produce a secured display of said second dataset.
9. Display device according to claim 8 , wherein the filter comprises at an input thereof a virtual video memory arranged to receive the first set of information under control of the first operating system and at an output thereof a real video memory for combining the two sets of information.
10. Display device according to claim 8 , wherein the filter is arranged to receive first video data generated by a standard processor and second video data generated by a secure processor, and for transferring into video memory a combination of the first and second video data.
11. Display device according to claim 8 , wherein the filter is arranged to receive first video signals coming from a first video controller and second video signals coming from a second video controller, and to transfer onto the screen a combination of the first and second video signals.
12. Display device according to claim 8 , wherein the filter is arranged to place the second zone on the screen at a first position easily identifiable by a user.
13. Display device according to claim 12 , wherein the filter is arranged to permute said first position alternately with a second position previously covered by the first zone.
14. Display device according to claim 8 , wherein the filter is arranged to superimpose the second zone on the first zone, with or without transparency, at one or more positions on the screen.
15. Display device according to claim 14 , wherein the filter is arranged to make at least one of said positions move on the screen.