IP Library Granted Patent US 11,800,363
Granted Patent B2
US 11,800,363 · App. 17/534,334 · Granted Oct 24, 2023

Methods and systems for obfuscating entry of sensitive data at a point-of-sale (POS) device

Inventors: Daren L Pickering (Rugby, GB); Jonathan Stewart Vokes (London, GB); Marc Massar (Coxheath, GB); Danny K. Russell (London, GB)
Assignee: Worldpay, LLC
H04W12/30G06F21/6245G06Q20/3278H04W12/128
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,800,363
App. No.
17/534,334
Granted
Oct 24, 2023
Kind
B2
Abstract

Systems and methods are disclosed for obfuscating entry of sensitive data at a mobile device, which may be infected with a rogue application configured to steal the sensitive data. One method comprises detecting a prompt for a user to enter sensitive data at a mobile device, and activating one or more of an audio speaker and a vibration motor of the mobile device. The activation of the one or more of the audio speaker and the vibration motor is terminated in response detection conclusion of the user's entry of sensitive data the mobile device.

Claims (60)

1. A computer-implemented method for obfuscating entry of sensitive data in a point-of-sale (POS) device infected with a rogue application, comprising:

generating a user interface element in a user interface of the POS device for at least one user to enter the sensitive data;

detecting, via one or more sensors, a movement of the POS device, one or more movement patterns of the at least one user while entering the sensitive data, or a combination thereof;

instructing, by a secure application, a phone speaker to generate noise data for a predetermined time period, wherein sound waves from the noise data causes the POS device to vibrate, and wherein the vibration causes a noisy sensor readings; and

transmitting, by the secure application, the noisy sensor readings to the rogue application configured to determine the sensitive data using the one or more sensors of the POS device.

2. The computer-implemented method of claim 1 , further comprising:

altering, by the secure application, a sensor readings of the movement of the POS device, the one or more movement patterns of the at least one user, or a combination thereof,

wherein the altering includes turning off the one or more sensors, disabling a transmission of the sensor readings, or a combination thereof.

3. The computer-implemented method of claim 2 , wherein the altering of the sensor readings further comprising:

transmitting, by the secure application, one or more signals to the one or more sensors to add noise to the sensor reading and causing the one or more sensors to generate false readings; and

transmitting, by the secure application, the false readings to the rogue application.

4. The computer-implemented method of claim 3 , further comprising:

detecting, by the secure application, a conclusion of the sensitive data entry by the at least one user; and

instructing, by the secure application, to the one or more sensors to resume regular measurements.

5. The computer-implemented method of claim 1 , further comprising:

detecting, by the secure application, a conclusion of the sensitive data entry by the at least one user; and

terminating, by the secure application, an operation of the phone speaker from generating the noise data.

6. The computer-implemented method of claim 1 , further comprising:

determining, by the secure application, the predetermined time period to enter the sensitive data has elapsed; and

terminating, by the secure application, an operation of the phone speaker from generating the noise data.

7. The computer-implemented method of claim 1 , further comprising:

instructing, by the secure application, a vibration motor of the POS device to randomly turn on or turn off during the entry of the secure data to deliver random motor vibrations to the one or more sensors.

8. The computer-implemented method of claim 1 , wherein the noise data includes randomized sounds generated by the phone speaker of the POS device, and wherein the randomized sounds changes the movement patterns of the at least one user while entering the sensitive data by causing distractions to a muscle memory of the at least one user.

9. The computer-implemented method of claim 1 , wherein the movement of the POS device includes an angular movement, a directional movement, a latitude movement, or a combination thereof.

10. The computer-implemented method of claim 1 , wherein the one or more sensors include a gyroscope to measure a rotation of the POS device, an accelerometer to measure a vector displacement of the POS device in a three-dimensional space, a magnetometer to measure a magnetic field, or a combination thereof.

11. A system for obfuscating entry of sensitive data in a point-of-sale (POS) device infected with a rogue application, comprising:

one or more processors; and

a non-transitory computer readable medium storing instructions which, when executed by the one or more processors, cause the one or more processors to perform a method comprising:

generating a user interface element in a user interface of the POS device for at least one user to enter the sensitive data;

detecting, via one or more sensors, a movement of the POS device, one or more movement patterns of the at least one user while entering the sensitive data, or a combination thereof;

instructing, by a secure application, a phone speaker to generate noise data for a predetermined time period, wherein sound waves from the noise data causes the POS device to vibrate, and wherein the vibration causes a noisy sensor readings; and

transmitting, by the secure application, the noisy sensor readings to the rogue application configured to determine the sensitive data using the one or more sensors of the POS device.

12. The system of claim 11 , further comprising:

altering, by the secure application, a sensor readings of the movement of the POS device, the one or more movement patterns of the at least one user, or a combination thereof,

wherein the altering includes turning off the one or more sensors, disabling a transmission of the sensor readings, or a combination thereof.

13. The system of claim 12 , wherein the altering of the sensor readings further comprising:

transmitting, by the secure application, one or more signals to the one or more sensors to add noise to the sensor reading and causing the one or more sensors to generate false readings; and

transmitting, by the secure application, the false readings to the rogue application.

14. The system of claim 13 , further comprising:

detecting, by the secure application, a conclusion of the sensitive data entry by the at least one user; and

instructing, by the secure application, to the one or more sensors to resume regular measurements.

15. The system of claim 11 , further comprising:

detecting, by the secure application, a conclusion of the sensitive data entry by the at least one user; and

terminating, by the secure application, an operation of the phone speaker from generating the noise data.

16. The system of claim 11 , further comprising:

determining, by the secure application, the predetermined time period to enter the sensitive data has elapsed; and

terminating, by the secure application, an operation of the phone speaker from generating the noise data.

17. The system of claim 11 , further comprising:

instructing, by the secure application, a vibration motor of the POS device to randomly turn on or turn off during the entry of the secure data to deliver random motor vibrations to the one or more sensors.

18. A non-transitory computer readable medium for obfuscating entry of sensitive data in a point-of-sale (POS) device infected with a rogue application, the non-transitory computer readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to perform a method comprising:

generating a user interface element in a user interface of the POS device for at least one user to enter the sensitive data;

detecting, via one or more sensors, a movement of the POS device, one or more movement patterns of the at least one user while entering the sensitive data, or a combination thereof;

instructing, by a secure application, a phone speaker to generate noise data for a predetermined time period, wherein sound waves from the noise data causes the POS device to vibrate, and wherein the vibration causes a noisy sensor readings; and

transmitting, by the secure application, the noisy sensor readings to the rogue application configured to determine the sensitive data using the one or more sensors of the POS device.

19. The non-transitory computer readable medium of claim 18 , further comprising:

altering, by the secure application, a sensor readings of the movement of the POS device, the one or more movement patterns of the at least one user, or a combination thereof,

wherein the altering includes turning off the one or more sensors, disabling a transmission of the sensor readings, or a combination thereof.

20. The non-transitory computer readable medium of claim 19 , wherein the altering of the sensor readings further comprising:

transmitting, by the secure application, one or more signals to the one or more sensors to add noise to the sensor reading and causing the one or more sensors to generate false readings; and

transmitting, by the secure application, the false readings to the rogue application.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 3, 2021
From: PICKERING, DAREN L.; VOKES, JONATHAN STEWART; MASSAR, MARC; RUSSELL, DANNY K.
To: WORLDPAY, LLC
Reel/Frame 058284/0011 →
Continuity (2)
Continuation 16235179 · Dec 28, 2018
Related Publication 20220086647A1 · Mar 17, 2022