Seamless and secure cloud to computer pointer relay
A seamless and secure cloud to PC pointer relay allows a pointer/cursor to be moved between secure and unsecure windows while being displayed with smooth transitions and while transitioning between secure and unsecure data handling for pointer information. A secure input unit encrypts pointing device operations in the secure window. A user (host) computing device performs location calculations on encrypted data, which conceals pointing device operations in the secure window from the host operating system. The secure unit decrypts the encrypted data returned by the host operating system to determine the calculated pointer location information. The secure unit relays the calculated pointer operation information to the source of the secure window (e.g., remote cloud server) to process user interaction with the secure window while keeping the host operating system unaware of user activity in the secure window (e.g., other than position, if the host renders the pointer).
1 . A computing device comprising:
a central processing unit (CPU) configured to execute an operating system (OS);
a graphics unit configured to generate a combined image comprising a secure window generated by a secure processor and an unsecure window generated by the CPU;
a display unit configured to display the combined image;
an input unit configured to:
receive pointing device information generated by pointing device operation in the secure window and the unsecure window displayed by the display unit;
send pointing device reports to the OS for pointing device operation in the unsecure window to render the pointer in the unsecure window;
send encrypted pointing device reports to the OS for the pointing device operation in the secure window to conceal the pointing device operation in the secure window from the OS, the OS configured to perform calculations on the encrypted pointing device reports to generate encrypted calculated pointing device information in a manner such that the OS is unaware of user activity in the secure window;
receive the encrypted calculated pointing device information from the OS responsive to the encrypted pointing device reports;
decrypt the encrypted calculated pointing device information to determine calculated pointing device information for pointing device operations in the secure window; and
send the calculated pointing device information to at least one of the OS or to the secure processor to render the pointer in the secure window.
2 . The computing device of claim 1 , wherein the input unit is configured to send the calculated pointing device operation information to the secure processor to perform the rendering of the pointer in the secure window.
3 . The computing device of claim 1 , wherein the input unit is configured to send the calculated pointing device operation information to the OS to perform the rendering of the pointer in the secure window.
4 . The computing device of claim 1 , wherein the pointing device operation information in the secure window comprises pointer location coordinates, selection events, and scroll events.
5 . The computing device of claim 1 , wherein the input unit is further configured to:
encrypt information in the encrypted pointing device reports using homomorphic encryption; and
decrypt the encrypted calculated pointing device operation information using homomorphic decryption.
6 . The computing device of claim 1 , wherein the input unit is further configured to:
receive indications from the OS responsive to the pointing device entering and exiting the secure window.
7 . The computing device of claim 1 , wherein the secure processor is in a remote computing device.
8 . The computing device of claim 7 , wherein the remote computing device comprises a virtual machine.
9 . A method, comprising:
receiving pointing device information generated by pointing device operation in a secure window and an unsecure window displayed by a display unit;
sending pointing device reports to an operating system (OS) for the pointing device operation in the unsecure window to render the pointer in the unsecure window;
sending encrypted pointing device reports to the OS for the pointing device operation in the secure window to conceal the pointing device operation in the secure window from the OS, the OS configured to perform calculations on the encrypted pointing device reports to generate encrypted calculated pointing device information in a manner such that the OS is unaware of user activity in the secure window;
receiving the encrypted calculated pointing device information from the OS responsive to the encrypted pointing device reports;
decrypting the encrypted calculated pointing device information to determine calculated pointing device information for pointing device operations in the secure window; and
sending the calculated pointing device information to at least one of the OS or to a computing source of the secure window to render the pointer in the secure window.
10 . The method of claim 9 , wherein the sending of the calculated pointing device operation information comprises sending the calculated pointing device operation information in the secure window to the computing source of the secure window to perform the rendering of the pointer in the secure window.
11 . The method of claim 9 , wherein the sending of the calculated pointing device operation information comprises sending the calculated pointing device operation information in the secure window to the OS to perform the rendering of the pointer in the secure window.
12 . The method of claim 9 , wherein the pointing device operation information in the secure window comprises pointer location coordinates, selection events, and scroll events.
13 . The method of claim 9 , further comprising:
encrypting information in the encrypted pointing device reports using homomorphic encryption; and
decrypting the encrypted calculated pointing device operation information using homomorphic decryption.
14 . The method of claim 9 , further comprising:
receiving indications from the OS responsive to the pointing device entering and exiting the secure window.
15 . A computer-readable storage device having instructions recorded thereon that, when executed by a processor, implements a method comprising:
receiving pointing device information generated by pointing device operation in a secure window and an unsecure window displayed by a display unit;
sending pointing device reports to an operating system (OS) for the pointing device operation in the unsecure window to render the pointer in the unsecure window;
sending encrypted pointing device reports to the OS for the pointing device operation in the secure window to conceal the pointing device operation in the secure window from the OS, the OS configured to perform calculations on the encrypted pointing device reports to generate encrypted calculated pointing device information in a manner such that the OS is unaware of user activity in the secure window;
receiving the encrypted calculated pointing device information from the OS responsive to the encrypted pointing device reports;
decrypting the encrypted calculated pointing device information to determine calculated pointing device information for pointing device operations in the secure window; and
sending the calculated pointing device information to at least one of the OS or to a computing source of the secure window to render the pointer in the secure window.
16 . The computer-readable storage device of claim 15 , wherein the sending of the calculated pointing device operation information comprises sending the calculated pointing device operation information in the secure window to the computing source of the secure window to perform the rendering of the pointer in the secure window.
17 . The computer-readable storage device of claim 15 , wherein the sending of the calculated pointing device operation information comprises sending the calculated pointing device operation information in the secure window to the computing source of the secure window to perform the rendering of the pointer in the secure window.
18 . The computer-readable storage device of claim 15 , wherein the sending of the calculated pointing device operation information comprises sending the calculated pointing device operation information in the secure window to the OS to perform the rendering of the pointer in the secure window.
19 . The computer-readable storage device of claim 15 , wherein the pointing device operation information in the secure window comprises pointer location coordinates, selection events, and scroll events.
20 . The computer-readable storage device of claim 15 , the method further comprising:
encrypting information in the encrypted pointing device reports using homomorphic encryption; and
decrypting the encrypted calculated pointing device operation information using homomorphic decryption.