System and method for securing a user interface
The invention relates to a method for securing a user interface that comprises a user interface including one or more peripheral hardware devices of the user interface for interaction with said interface, said peripheral hardware devices being driven by driver software, and one or more applications using the user interface. The invention also relates to a method for securing such an interface. The system of the invention is characterised in that the same further comprises a hypervisor and one or more virtual machines, the drivers of the peripheral hardware devices of the user interface being divided into two portions, i.e. a main portion of said drivers under the control of the hypervisor and a front-end portion of said drivers under the control of the virtual machines, wherein the front-end portion of the securing software component is in charge of managing the front-end portion of the drivers and the main portion of the securing software component is in charge of managing the main portion of the drivers. The invention can particularly be used in onboard systems.
1. A system for securing a user interface comprising:
a user interface hardware peripheral device to interact with a user interface, where the user interface hardware peripheral device is driven by driver software;
a plurality of applications using the user interface;
a hypervisor having direct access to the user interface hardware peripheral device;
a plurality of virtual machines each allowing the execution of the applications using the user interface, where the virtual machines do not have direct access to the hardware peripheral device; and
a user interface securing software component comprising a frontend part controlled by the virtual machines, where the frontend part of the securing software is located in the virtual machines, and a main part controlled by the hypervisor, where the main part of the securing software is located in the hypervisor wherein the user interface securing component secures an interaction between a user and the user interface by marshalling the interaction over the main part and the frontend part,
the driver software is split in two parts, where one main part of the driver software is placed under the control of the hypervisor, a frontend part of the driver software is placed under the control of the virtual machines, the frontend part of the securing software component manages the frontend part of the driver software, the main part of the securing software component manages the main part of the driver software and an application of the plurality of applications located in a given one of the plurality of virtual machines accesses the user interface via the frontend of the securing software and the frontend of the driver software also located in the given one of the plurality of virtual machines.
2. The system according to claim 1 , wherein the user interface hardware peripheral devices comprise at least one user information input device and a screen.
3. The system according to claim 1 , wherein the main part of the user interface software component comprises logic for displaying and controlling the display of a graphical interface component in the user interface, for the entry of information by the user.
4. The system according to claim 1 , wherein the main part of the user interface software component comprises logic for validating identification and/or authentication information entered by the user.
5. The system according to claim 1 , wherein the information exchanged between the main part of the securing component and the frontend part of that component is secured with the help of encryption and/or signing keys.
6. The system according to claim 1 , wherein the information exchanged between the frontend part of the securing software component and an application of the virtual machine comprising that frontend part is secured by means of encryption and/or signing keys.
7. A method for securing a user interface, comprising the following stages:
provision of a user interface hardware peripheral device for interacting with a user interface, where the user interface hardware peripheral device is driven by driver software;
provision of a hypervisor and of a plurality of virtual machines allowing the execution of a plurality of applications using the user interface, where the virtual machines do not have direct access to the hardware peripheral device, a securing software component comprising a frontend part controlled by the virtual machines, where the said frontend part of the securing software is located in the virtual machines, and a main part controlled by the hypervisor, where the main part of the securing software is located in the said hypervisor wherein the user interface securing component secures an interaction between a user and the user interface by marshalling the interaction over the main part and the frontend part, and the driver software of the user interface is split in two parts, where one main part of the driver software is placed under the control of the hypervisor, a frontend part of the driver software is placed under the control of the virtual machines, the frontend part of the securing software component manages the frontend part of the driver software, the main part of the securing software component manages the main part of the driver software and an application of the plurality of applications located in a given one of the plurality of virtual machines accesses the user interface via the frontend of the securing software and the frontend of the driver software also located in the given one of the plurality of virtual machines;
execution of an application of a virtual machine;
activation of a secure system mode upon a request from the application;
secure display of information controlled by the main part of the securing software component, where the hypervisor directly accesses the user interface hardware peripheral devices; then
deactivation of the secure system mode.
8. The method according to claim 7 , wherein:
the application requires the entry of user information;
the entry request is transmitted to the main part of the software component;
an information entry graphical component is displayed under the direct control of the securing software component;
the user enters user information;
and
the user information is validated.
9. The method according to claim 8 , wherein the user information is validated by the main part of the securing software component, or is sent to the frontend part of the said component or even the requesting application, for validation.
10. The method according to claim 9 , wherein the user information is validated against data stored in the memory of the main part of the securing software component.
11. The method according to claim 10 , wherein the application requires the establishment or updating of information stored in the memory of the securing software component, in that the information is entered by the user, and in that it is recorded in the main part of the securing software component.
12. The method according to claim 8 , further comprising the following stages, where:
the application requires the secure display of information;
the display request is sent to the main part of the software component; and
the information is displayed under the direct control of the said software component.