Methods and systems for obfuscating entry of sensitive data at mobile devices
Systems and methods are disclosed for obfuscating entry of sensitive data at a mobile device, which may be infected with a rogue application configured to steal the sensitive data. One method comprises detecting a prompt for a user to enter sensitive data at a mobile device, and activating one or more of an audio speaker and a vibration motor of the mobile device. The activation of the one or more of the audio speaker and the vibration motor is terminated in response detection conclusion of the user's entry of sensitive data the mobile device.
1. A computer-implemented method for obfuscating entry of sensitive data at a mobile device, comprising:
detecting a prompt for a user to enter sensitive data at the mobile device;
concurrently detecting an angular movement and a directional movement of the mobile device;
activating one or more of an audio speaker and a vibration motor of the mobile device;
sending a first signal to one or more sensors of the mobile device, wherein the first signal causes the one or more sensors of the mobile device to generate false readings;
in response to determining that a predetermined time period has elapsed without correct personal identification number (PIN) entry from the user, sending a second signal to the one or more sensors of the mobile device, wherein the second signal causes the one or more sensors of the mobile device to halt generating false readings and to resume normal readings; and
terminating the activation of the one or more of the audio speaker and the vibration motor of the mobile device.
2. The method of claim 1 , wherein activating the one or more of the audio speaker and the vibration motor of the mobile device sends vibrations to one or more sensors of the mobile device.
3. The method of claim 2 , wherein the one or more sensors of the mobile device comprise: a gyroscope, an accelerometer, and a magnetometer.
4. The method of claim 1 , wherein the mobile device is infected with a rogue application configured to determine the sensitive data using one or more sensors of the mobile device.
5. The method of claim 1 , wherein the sensitive data comprises personal identification number (PIN).
6. A system for obfuscating entry of sensitive data at a mobile device comprising:
one or more processors; and
a non-transitory computer readable medium storing instructions which, when executed by the one or more processors, cause the one or more processors to perform a method comprising:
detecting a prompt for a user to enter sensitive data at the mobile device;
concurrently detecting an angular movement and a directional movement of the mobile device;
activating one or more of an audio speaker and a vibration motor of the mobile device;
sending a first signal to one or more sensors of the mobile device, wherein the first signal causes the one or more sensors of the mobile device to generate false readings;
in response to determining that a predetermined time period has elapsed without correct personal identification number (PIN) entry from the user, sending a second signal to the one or more sensors of the mobile device, wherein the second signal causes the one or more sensors of the mobile device to halt generating false readings and to resume normal readings; and
terminating the activation of the one or more of the audio speaker and the vibration motor of the mobile device.
7. The system of claim 6 , wherein activating the one or more of the audio speaker and the vibration motor of the mobile device sends vibrations to one or more sensors of the mobile device.
8. The system of claim 7 , wherein the one or more sensors of the mobile device comprise: a gyroscope, an accelerometer, and a magnetometer.
9. The system of claim 6 , wherein the mobile device is infected with a rogue application configured to determine the sensitive data using one or more sensors of the mobile device.
10. The system of claim 6 , wherein the sensitive data comprises personal identification number (PIN).
11. A non-transitory computer readable medium for obfuscating entry of sensitive data at a mobile device, the non-transitory computer readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to perform a method comprising:
detecting a prompt for a user to enter sensitive data at the mobile device;
concurrently detecting an angular movement and a directional movement of the mobile device;
activating one or more of an audio speaker and a vibration motor of the mobile device;
sending a first signal to one or more sensors of the mobile device, wherein the first signal causes the one or more sensors of the mobile device to generate false readings;
in response to determining that a predetermined time period has elapsed without correct personal identification number (PIN) entry from the user, sending a second signal to the one or more sensors of the mobile device, wherein the second signal causes the one or more sensors of the mobile device to halt generating false readings and to resume normal readings; and
terminating the activation of the one or more of the audio speaker and the vibration motor of the mobile device.
12. The non-transitory computer readable medium of claim 11 , wherein activating the one or more of the audio speaker and the vibration motor of the mobile device sends vibrations to one or more sensors of the mobile device.
13. The non-transitory computer readable medium of claim 12 , wherein the one or more sensors of the mobile device comprise: a gyroscope, an accelerometer, and a magnetometer.
14. The non-transitory computer readable medium of claim 11 , wherein the mobile device is infected with a rogue application configured to determine the sensitive data using one or more sensors of the mobile device.