Hardware-integrated cryptographic signing and encryption for human interface device actions
A human interface device (HID) such as a keyboard or a mouse receives data, the HID cryptographically signs the data using a private key of a first user. The HID generates a report using the cryptographically signed data, and transmits the report to a processor for use in authenticating that the data were input by a human.
1 . A process comprising:
receiving at a human interface device (HID) data relating to input at the HID;
cryptographically signing the data using a private key of a first user;
generating a report using the cryptographically signed data; and
transmitting the report to a processor for use in authenticating that the data were input by a human.
2 . The process of claim 1 , comprising: applying one or more of a timestamp of the data input at the HID and a nonce as part of the cryptographically signed data.
3 . The process of claim 2 , comprising: encrypting the data with a public key of a second user.
4 . The process of claim 3 , wherein the report comprises the cryptographically signed data, the encrypted data, the nonce, the timestamp, and attestation details; and enabling support of additional security layers within a standard HID communication framework.
5 . The process of claim 3 , wherein the processor comprises a host computer.
6 . The process of claim 5 , wherein the host computer comprises a cloud service.
7 . The process of claim 6 , comprising: registering the HID with the host computer; wherein the HID is associated with an account of the first user at the host computer.
8 . The process of claim 7 , comprising: transmitting the data to the host computer; and receiving back from the host computer one or more of host data and an action as a function of the host computer encrypting the data using a private key of the host computer, the host computer verifying the encrypted data using the public key, and the host computer verifying that the data were input by an authorized human administrator.
9 . The process of claim 1 , wherein the data comprise a single keystroke or a single mouse click.
10 . The process of claim 1 , wherein the private key of the first user is securely stored in the HID.
11 . The process of claim 1 , wherein the cryptographic signing comprises a quantum resistant algorithm.
12 . A system comprising:
a human interface device (HID); and
an HID processor couple to the HID;
wherein the HID and the HID processor are configured for:
receiving at the HID data relating to input at the HID;
cryptographically signing the data using a private key of a first user;
generating a report using the cryptographically signed data; and
transmitting the report to a second processor for use in authenticating that the data were input by a human.
13 . The system of claim 12 , wherein the HID and the HID processor are configured for applying one or more of a timestamp of the data input at the HID and a nonce as part of the cryptographically signed data.
14 . The system of claim 13 , wherein the HID and the HID processor are configured for encrypting the data with a public key of a second user.
15 . The system of claim 14 , wherein the report comprises the cryptographically signed data, the encrypted data, the nonce, the timestamp, and attestation detail; and enabling support of additional security layers within a standard HID communication framework.
16 . The system of claim 14 , wherein the second processor comprises a host computer.
17 . The system of claim 16 , wherein the host computer comprises a cloud service.
18 . The system of claim 17 , wherein the HID and the HID processor are configured to registering the HID with the host computer; and wherein the HID is associated with an account of the first user at the host computer.
19 . The system of claim 18 , wherein the HID and the HID processor are configured for transmitting the data to the host computer; and receiving back from the host computer one or more of host data and an action as a function of the host computer encrypting the data using a private key of the host computer, the host computer verifying the encrypted data using the public key, and the host computer verifying that the data were input by an authorized human administrator.
20 . The system of claim 12 , wherein the data comprise a single keystroke or a single mouse click; wherein the private key of the first user is securely stored in the HID; and wherein the cryptographic signing comprises a quantum resistant algorithm.