Secure keyboard resource limiting access of user input to destination resource requesting the user input
A secure keyboard resource executed in a network device detects a user input, and generates a user input data structure representing the user input relative to input options presented to the user, the user input data structure based on the secure keyboard resource identifying a position of the user input relative to the input options. The secure keyboard resource sends the user input data structure to one or more executable destination resources, having requested supply of the user input data structure responsive to a user selection, only via a corresponding data path providing the destination resource with access to the user input data structure, for execution of a service by the one or more executable destination resources based on the user input data structure. The secure keyboard resource thus minimizes spying by limiting access of the user input data structure to the destination resource via the data path.
1 . A method comprising:
detecting, by a secure keyboard resource executed in a network device, a user input by a user via a device interface circuit of the network device;
generating, by the secure keyboard resource executed in the network device, a user input data structure representing the user input relative to input options presented to the user, the user input data structure based on the secure keyboard resource identifying a position of the user input relative to the input options;
detecting, by the network device, an authorization by the user of one or more executable destination resources to receive the user input data structure; and
sending, by the secure keyboard resource executed in the network device, the user input data structure to the one or more executable destination resources authorized by the user and having requested supply of the user input data structure responsive to a user selection, wherein the sending of the user input data structure is only via a corresponding data path providing the one or more executable destination resources with access to the user input data structure, for execution of a service by the one or more executable destination resources based on the user input data structure;
the sending of the user input data structure by the secure keyboard resource only via the data path to the one or more executable destination resources preventing any unauthorized sending of the user input data structure to any unauthorized resource.
2 . The method of claim 1 , wherein:
the one or more executable destination resources is executed in the network device;
the data path is an inter-process communications channel established by a device operating system, executed by the network device, according to a prescribed operating system inter-process security policy.
3 . The method of claim 2 , further comprising:
receiving, by the secure keyboard resource from the device operating system, a first notification of an input field having a prescribed input type at a memory location allocated by the device operating system; and
causing a presentation of the input options to the user based on the prescribed input type;
the sending including writing the user input data structure into the memory location, and sending a second notification that causes the device operating system to transfer access of the user input data structure in the memory location to the one or more executable destination resources.
4 . The method of claim 3 , further comprising encrypting, by the secure keyboard resource, the user input data structure into an encrypted data structure based on a public key received by the secure keyboard resource and the prescribed input type indicating encryption support;
the writing including writing, into the memory location, the encrypted data structure as an encrypted representation of the user input data structure;
the second notification enabling a security adapter resource associated with the one or more executable destination resources to decrypt the encrypted data structure, for delivery of the user input data structure following decryption thereof to the one or more executable destination resources.
5 . The method of claim 1 , further comprising:
receiving, by the secure keyboard resource, a public key generated by a secure executable container associated with the one or more executable destination resources; and
encrypting the user input data structure into an encrypted data structure, using the public key, for transfer of the encrypted data structure via the data path.
6 . The method of claim 5 , wherein the secure executable container is executed in the network device, the method further comprising:
generating, by the secure keyboard resource, a plurality of user input data structures representing respective user inputs;
generating, by the secure keyboard resource, a sequence of encrypted data structures based on the respective user input data structures;
generating, by the secure keyboard resource, a Gaussian noise stream based on generating a plurality of encrypted noise data structures, and inserting the encrypted noise data structures within the sequence of encrypted data structures prior to sending the Gaussian noise stream via the data path.
7 . The method of claim 6 , further comprising:
decrypting, by a security adapter resource executed in the network device, the encrypted data structures and the encrypted noise data structures in the Gaussian noise stream received from the data path;
discarding, by the security adapter resource, the encrypted noise data structures following decryption thereof; and
delivering the plurality of user input data structures decrypted from the Gaussian noise stream to the one or more executable destination resources executed in the network device.
8 . The method of claim 5 , wherein:
the secure executable container is executed in a second network device that is reachable via a secure peer-to-peer data network that provides the data path; and
the receiving includes receiving the public key, generated by the secure executable container executed in the second network device, according to a prescribed salutation protocol.
9 . The method of claim 8 , wherein:
the generating includes inserting the user input data structure as an updated hypercontent field of a message object that is referenced in a conversation object allocated for secure keyboard communications with the one or more executable destination resources;
the inserting causing an instant update of the message object by the secure executable container via the secure peer-to-peer data network.
10 . The method of claim 1 , further comprising:
detecting, by the secure keyboard resource, a sequence of the user inputs; and
generating, by the secure keyboard resource, an auto-assist input as a recommendation that replaces the sequence of user inputs, the generating based on auto-assist analytics executed within the network device without any transmission of any of the sequence of the user inputs to any analytics resource outside control by a federation entity securely allocated to the user and comprising the network device; and
sending, by the secure keyboard resource, a second data structure specifying the recommendation to the one or more executable destination resources via the data path.
11 . One or more non-transitory tangible media encoded with logic for execution by a machine and when executed by the machine operable for:
detecting, by a secure keyboard resource executed by the machine implemented as a network device, a user input by a user via a device interface circuit of the network device;
generating, by the secure keyboard resource, a user input data structure representing the user input relative to input options presented to the user, the user input data structure based on the secure keyboard resource identifying a position of the user input relative to the input options;
detecting an authorization by the user of one or more executable destination resources to receive the user input data structure; and
sending, by the secure keyboard resource, the user input data structure to the one or more executable destination resources authorized by the user and having requested supply of the user input data structure responsive to a user selection, wherein the sending of the user input data structure is only via a corresponding data path providing the one or more executable destination resources with access to the user input data structure, for execution of a service by the one or more executable destination resources based on the user input data structure;
the sending of the user input data structure by the secure keyboard resource only via the data path to the one or more executable destination resources preventing any unauthorized sending of the user input data structure to any unauthorized resource.
12 . The one or more non-transitory tangible media of claim 11 , wherein:
the one or more executable destination resources is executed in the network device;
the data path is an inter-process communications channel established by a device operating system, executed by the network device, according to a prescribed operating system inter-process security policy.
13 . The one or more non-transitory tangible media of claim 12 , further operable for:
receiving, by the secure keyboard resource from the device operating system, a first notification of an input field having a prescribed input type at a memory location allocated by the device operating system; and
causing a presentation of the input options to the user based on the prescribed input type;
the sending including writing the user input data structure into the memory location, and sending a second notification that causes the device operating system to transfer access of the user input data structure in the memory location to the one or more executable destination resources.
14 . The one or more non-transitory tangible media of claim 13 , further operable for encrypting, by the secure keyboard resource, the user input data structure into an encrypted data structure based on a public key received by the secure keyboard resource and the prescribed input type indicating encryption support;
the writing including writing, into the memory location, the encrypted data structure as an encrypted representation of the user input data structure;
the second notification enabling a security adapter resource associated with the one or more executable destination resources to decrypt the encrypted data structure, for delivery of the user input data structure following decryption thereof to the one or more executable destination resources.
15 . The one or more non-transitory tangible media of claim 11 , further operable for:
receiving, by the secure keyboard resource, a public key generated by a secure executable container associated with the one or more executable destination resources; and
encrypting the user input data structure into an encrypted data structure, using the public key, for transfer of the encrypted data structure via the data path.
16 . The one or more non-transitory tangible media of claim 15 , further operable for:
generating, by the secure keyboard resource, a plurality of user input data structures representing respective user inputs;
generating, by the secure keyboard resource, a sequence of encrypted data structures based on the respective user input data structures;
generating, by the secure keyboard resource, a Gaussian noise stream based on generating a plurality of encrypted noise data structures, and inserting the encrypted noise data structures within the sequence of encrypted data structures prior to sending the Gaussian noise stream via the data path.
17 . The one or more non-transitory tangible media of claim 16 , further operable for:
decrypting, by a security adapter resource executed in the network device, the encrypted data structures and the encrypted noise data structures in the Gaussian noise stream received from the data path;
discarding, by the security adapter resource, the encrypted noise data structures following decryption thereof; and
delivering the plurality of user input data structures decrypted from the Gaussian noise stream to the one or more executable destination resources executed in the network device.
18 . The one or more non-transitory tangible media of claim 11 , further operable for:
detecting, by the secure keyboard resource, a sequence of the user inputs; and
generating, by the secure keyboard resource, an auto-assist input as a recommendation that replaces the sequence of user inputs, the generating based on auto-assist analytics executed within the network device without any transmission of any of the sequence of the user inputs to any analytics resource outside control by a federation entity securely allocated to the user and comprising the network device; and
sending, by the secure keyboard resource, a second data structure specifying the recommendation to the one or more executable destination resources via the data path.
19 . An apparatus implemented as a physical machine, the apparatus comprising:
non-transitory machine readable media configured for storing executable machine readable code comprising a secure keyboard resource;
a device interface circuit configured for detecting a user input by a user of the apparatus, the apparatus implemented as a network device executing communications with a second network device via a data network; and
a processor circuit configured for executing the machine readable code, and when executing the machine readable code operable for:
detecting, by the secure keyboard resource, the user input,
generating, by the secure keyboard resource, a user input data structure representing the user input relative to input options presented to the user, the user input data structure based on the secure keyboard resource identifying a position of the user input relative to the input options,
detecting, by the network device, an authorization by the user of one or more executable destination resources to receive the user input data structure, and
sending, by the secure keyboard resource, the user input data structure to the one or more executable destination resources authorized by the user and having requested supply of the user input data structure responsive to a user selection, wherein the sending of the user input data structure is only via a corresponding data path providing the one or more executable destination resources with access to the user input data structure, for execution of a service by the one or more executable destination resources based on the user input data structure;
the sending of the user input data structure by the secure keyboard resource only via the data path to the one or more executable destination resources preventing any unauthorized sending of the user input data structure to any unauthorized resource.
20 . The apparatus of claim 19 , wherein the processor circuit is further configured for:
receiving, by the secure keyboard resource, a public key generated by a secure executable container associated with the one or more executable destination resources; and
encrypting the user input data structure into an encrypted data structure, using the public key, for transfer of the encrypted data structure via the data path.