Securing data gathering devices of a personal computing device while performing sensitive data gathering activities to prevent the misappropriation of personal user data gathered therewith
A functional library can secure data gathering devices of a personal computing device on behalf of a secure application program to provide a more secure computing session during which sensitive data gathering activities are performed using any of those data gathering devices. The functional library, when incorporated within a personal computing device, creates a secure personal computing device on which to execute application programs such as mobile banking applications. The secure functional library acquires exclusive access to one or more of a predetermined plurality of the data gathering devices on behalf of a calling secure software application. Exclusive access is achieved by gaining access to each of the predetermined set and then locking that access throughout either the entire computing session, or at least until the execution of sensitive data gathering activities being performed during that computing session have been completed. The data gathering devices to be included in the predetermined set can be those that are deemed particularly vulnerable to exploitation in view of the types of sensitive data gathering activities to be conducted, or simply all of them for maximum security. The predetermined set can be defined and set for a particular application, or they can be defined more generally within the context of specific sensitive tasks or activities to be conducted.
1. A personal computing device comprising:
a camera;
a memory;
at least one processor coupled to the camera and the memory;
a camera driver executable by the at least one processor and configured to acquire exclusive access to the camera for a secure application executing on the at least one processor; and
a secure functional library executable by the at least one processor and configured to:
receive, from the secure application, a call to acquire exclusive access to the camera;
attempt to terminate all non-secure application programs accessing the camera;
notify the secure application in response to being unable to terminate one or more of the non-secure application programs accessing the camera; and
in response to being able to terminate all the non-secure application programs accessing the camera:
acquire exclusive access to the camera via the camera driver in response to receiving the call to acquire exclusive access to the camera from the secure application;
provide the exclusive access to the camera to the secure application;
receive, from the secure application, a call to release the exclusive access to the camera; and
release, via the camera driver, the exclusive access to the camera in response to receiving the call to release the exclusive access to the camera from the secure application.
2. The personal computing device of claim 1 , wherein the personal computing device includes at least one of a smartphone and a tablet.
3. The personal computing device of claim 1 , wherein the secure functional library has system level privilege to terminate all non-secure application programs accessing the camera.
4. The personal computing device of claim 1 , wherein the secure functional library has application level privilege to terminate all non-secure application programs accessing the camera.
5. The personal computing device of claim 4 , wherein the secure functional library is further configured to notify a user in response to the secure functional library being unable to terminate one of the non-secure application programs accessing the camera.
6. The personal computing device of claim 1 , further comprising the secure application.
7. The personal computing device of claim 6 , wherein the secure application is a banking application.
8. A method of securing a personal computing device including a camera, the method comprising:
instantiating a secure functional library on the personal computing device;
receiving, by the secure functional library, a call to acquire exclusive access to the camera from a secure application executing on the personal computing device;
attempting, by the secure functional library, to terminate all non-secure application programs accessing the camera;
notifying, by the secure functional library, the secure application in response to being unable to terminate one or more of the non-secure application programs accessing the camera; and
in response to being able to terminate all the non-secure application programs accessing the camera:
acquiring, by the secure functional library, exclusive access to the camera via a camera driver in response to receiving the call to acquire exclusive access to the camera from the secure application;
providing, by the secure functional library, the exclusive access to the camera to the secure application;
receiving, by the secure functional library, a call to release the camera from the secure application; and
releasing, by the secure functional library via the camera driver, the exclusive access to the camera in response to receiving the call to release the exclusive access to the camera from the secure application.
9. The method of claim 8 , wherein instantiating the secure functional library includes instantiating the secure functional library within at least one of a smartphone and a tablet.
10. The method of claim 8 , wherein instantiating the secure functional library includes instantiating the secure functional library with system level privilege to terminate all non-secure application programs accessing the camera.
11. The method of claim 8 , wherein instantiating the secure functional library includes instantiating the secure functional library with application level privilege to terminate all non-secure application programs accessing the camera.
12. The method of claim 11 , further comprising notifying, by the secure functional library, a user in response to being unable to terminate one of the non-secure application programs accessing the camera.
13. The method of claim 8 , further comprising instantiating the secure application.
14. The method of claim 13 , wherein instantiating the secure application includes instantiating a banking application.
15. A non-transitory computer readable medium storing sequences of instruction for securing a personal computing device including a camera, the computer readable medium comprising instructions configured to instruct at least one processor to:
instantiate a secure functional library;
receive, by the secure functional library, a call to acquire exclusive access to the camera from a secure application executing on the at least one processor;
attempt, by the secure functional library, to terminate all non-secure application programs accessing the camera;
notify, by the secure functional library, the secure application in response to being unable to terminate one or more of the non-secure application programs accessing the camera; and
in response to being able to terminate all the non-secure application programs accessing the camera:
acquire, by the secure functional library, exclusive access to the camera via a camera driver in response to receiving the call to acquire exclusive access to the camera from the secure application;
provide, by the secure functional library, the exclusive access to the camera to the secure application;
receive, by the secure functional library, a call to release the camera from the secure application; and
release, by the secure functional library via the camera driver, the exclusive access to the camera in response to receiving the call to release the exclusive access to the camera from the secure application.