IP Library Granted Patent US 11,100,215
Granted Patent B2
US 11,100,215 · App. 15/760,101 · Granted Aug 24, 2021

Management of a display of a view of an application on a screen of an electronic data entry device, corresponding method, device and computer program product

Inventors: Remi Geraud (Paris, FR); Hiba Koudoussi (Paris, FR)
Assignee: INGENICO GROUP
G06F21/52G06F21/554G06F21/84G06K9/4604G06F2221/2143G06K2209/01
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,100,215
App. No.
15/760,101
Granted
Aug 24, 2021
Kind
B2
Abstract

A method is provided for managing a display of a view of an application, executed on a non-secured processor of an electronic data entry device that furthermore includes a secured processor. The application delivers at least one current view having a set of pixels to be displayed on a screen of the device. The managing is implemented under the control of the secured processor and includes: analysis of the current view, delivering at least one piece of data representing a presence of at least one suspect pattern; and, when a presence of a suspect pattern is detected within the current view, implementing by the secured processor at least one protection measure.

Claims (33)

1. A method comprising:

managing a display of a view of an application, said application being executed on a non-secured processor of an electronic data entry device that furthermore comprises a secured processor, said application delivering at least one current view, comprising a set of pixels, to be displayed on a screen of said device, wherein the managing comprises, under the control of said secured processor:

analysis of said current view, delivering at least one piece of data representing a presence of at least one suspect pattern within said current view, said suspect pattern being a graphic interface element or a combination of graphic interface elements prompting a user of the electronic data entry device to provide a piece of sensitive information, said analysis being implemented by a remote server with which said secured processor is capable of communicating by using a communications network and/or implemented by said secured processor of the electronic data entry device;

intercepting, within a secured memory, by the secured processor, any entry made by the user on the electronic data entry device throughout the time of execution of said analysis of the current view; and

when a presence of at least one suspect pattern is detected within said current view, implementing by the secured processor at least one protection measure.

2. The method according to claim 1 wherein the analysis comprises the following acts:

at least one of:

searching, within said set of pixels of said current view, for at least one graphic pattern, delivering a set of recognized patterns; and/or

performing character recognition on said current view, delivering or complementing a set of recognized patterns; and

searching, within said set of recognized patterns, for at least one suspect pattern.

3. The method according to claim 1 wherein the analysis is performed subsequently to the electronic data entry device displaying said current view on said screen of said device.

4. The method according to claim 1 wherein the analysis is performed on a view rendered in a buffer video memory prior to the electronic data entry device displaying said current view on said screen of said device.

5. The method according to claim 1 wherein the analysis of the current view is implemented when one of the following conditions is verified:

said application is absent from a predefined list of trusted applications;

said application is present in said predefined list of trusted applications, and said current view is absent from a list of known views for said application.

6. The method according to claim 1 , wherein said at least one protection measure, implemented by the secured processor when the presence of at least one suspect pattern is detected within the current view, belongs to the group consisting of:

non-display of said current view on the screen of said electronic data entry device;

elimination or concealment of at least one part of said current view on the screen of said electronic data entry device;

non-transmission, to said application, of data entered by the user in relation with said current view;

blocking of said application;

blocking of said electronic data entry device.

7. The method according to claim 1 wherein said electronic data entry device is a payment terminal.

8. An electronic data entry device comprising:

a screen;

a non-secured processor and a secured processor;

a non-transitory computer-readable medium comprising instructions stored thereon, which when executed by the secured processor configure the secured processor to manage a display of a view of an application executed on the non-secured processor, said application delivering at least one current view, comprising a set of pixels to be displayed on the screen of said device, wherein managing the display comprises the following acts under the control of the secured processor:

analyzing said current view and/or means for communication with a remote server capable of analyzing said current view, and delivering at least one piece of data representing a presence of at least one suspect pattern within said current view, said suspect pattern being a graphic interface element or a combination of graphic interface elements prompting a user of the electronic data entry device to provide a piece of sensitive information;

intercepting, within a secured memory, by the secured processor, any entry made b the user on the electronic data entry device throughout the time of execution of said analysis of the current view; and

implementing at least one protection measure by using the secured processor when a presence of at least one suspect pattern is detected within said current view.

9. A non-transitory computer readable medium comprising a computer program product stored thereon comprising program code instructions for executing a method for managing a display of a view of an application when the instructions are executed by a secured processor of an electronic data entry device, said application being executed on a non-secured processor of the electronic data entry device, said application delivering at least one current view, comprising a set of pixels, to be displayed on a screen of said device, wherein the managing comprises, under the control of said secured processor:

analysis of said current view, delivering at least one piece of data representing a presence of at least one suspect pattern within said current view, said suspect pattern being a graphic interface element or a combination of graphic interface elements prompting a user of the electronic data entry device to provide a piece of sensitive information, said analysis being implemented by a remote server with which said secured processor is capable of communicating by using a communications network and/or implemented by said secured processor of the electronic data entry device;

intercepting, within a secured memory by the secured processor, any entry made by the user on the electronic data entry device throughout the time of execution of said analysis of the current view; and

when a presence of at least one suspect pattern is detected within said current view, implementing by the secured processor at least one protection measure.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 17, 2021
From: INGENICO GROUP
To: BANKS AND ACQUIRERS INTERNATIONAL HOLDING
Reel/Frame 058173/0055 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 11, 2018
From: GERAUD, REMI; KOUDOUSSI, HIBA
To: INGENICO GROUP
Reel/Frame 046137/0048 →