Detecting fraud using operational parameters for a peripheral
A secure provisioning manifest used to authenticate and securely communicate with peripherals attached to a computer is provided with techniques to withdraw the authentication and terminate the secure communications with any peripheral when operating parameters for the peripheral indicate that there is a security threat associated with the peripheral. A secure I/O module, that is separate from an operating system and transaction software executed by a processor of the computer, uses the secure provisioning manifest to establish a secure encrypted session for communicating with each peripheral attached to the computer when a peripheral is authenticated and able to establish a secure encrypted session. The secure I/O module uses current and known operating parameters for each peripheral to periodically determine if a peripheral has been compromised by a security threat.
1. A method implemented by a secure I/O module of a computer, the computer includes a main processor that executes an operating system but cannot access elements within the secure I/O module, the method comprising:
determining that the secure I/O module is authorized to communicate with a peripheral attached to the computer using a secure provisioning manifest stored in the secure I/O module, wherein determining further includes processing the secure I/O module independent of the operating system, the operating system has no driver for or control over the secure I/O module, wherein the operating system and the secure I/O module reside on a same motherboard as one another and the secure I/O module includes a different processor from the main processor and the secure I/O module further includes separate network hardware and software not available to the operating system for communication with remote computers over a network and processes communication over a different path within the motherboard when communicating over the network from an operating system communication path processed by the operating system
authenticating the peripheral using information from the secure provisioning manifest;
establishing a secure encrypted communication session with the authenticated peripheral, wherein the operating system has no control over the secure encrypted communication system;
polling periodically following initial authentication of the peripheral to obtain current operating parameters for the authenticated peripheral; and
terminating the secure encrypted communication session and withdrawing authentication for the peripheral when one or more of the current operating parameters for the peripheral fails to correlate with corresponding known operating parameters for peripheral.
2. The method of claim 1 , wherein establishing a secure encrypted communication session further comprises receiving encrypted data using the secure encrypted communications session that can only be decrypted by the secure I/O module and not by the operating system.
3. The method of claim 1 , wherein polling periodically further comprises using the secure encrypted communication session to obtain the portion of the current operating parameters maintained by the authenticated peripheral.
4. The method of claim 1 , wherein the operating parameters include a total power-on time for the authenticated peripheral and wherein the correlation fails when the absolute difference between the value for the current total power-on time and the value for a known total power-on time is greater than a predetermined time-on value.
5. The method of claim 4 , wherein the predetermined time-on value is generally equal to the polling period used to obtain the current operating parameters.
6. The method of claim 1 , wherein the operating parameters include at least one checksum value for allocated memory and a checksum value for un-allocated memory of the authenticated peripheral and wherein the correlation fails when any of the current checksum values from the authenticated peripheral do not match corresponding known checksum values stored in the secure provisioning manifest for the authenticated peripheral.
7. The method of claim 1 , wherein the operating parameters include a value for the total number of secure messages sent and received by the authenticated peripheral using the secure encrypted communication session and wherein the correlation fails when the current value for the total number of secure messages sent and received by the authenticated peripheral does not match a known value maintained by the secure module for the total number of secure messages sent to and received from the authenticated peripheral using the secure encrypted communication session.
8. The method of claim 1 , wherein the operating parameters include a value for the electric current used to power the authenticated peripheral and wherein the correlation fails when the current value for the electric current varies by more than a predetermined value from a known electric current value.
9. The method of claim 1 , wherein the operating parameters include a value for the total number of successful reads of a magnetic stripe and a value for the total number of unsuccessful reads of a magnetic stripe by the authenticated peripheral and wherein the correlation fails when either of the current read values do not match corresponding known read values maintained by the secure I/O module.
10. The method of claim 1 , wherein the operating parameters include a value for the number of electrical loads on a USB bus used for communications between the computer and the authenticated peripheral and wherein the correlation fails when the current value for the number of electrical loads does not match the value for a known number of electrical loads for the authenticated peripheral.
11. A computer comprising:
a main processor configured to execute an operating system of a motherboard for the computer; and
a secure I/O module of the motherboard, the secure I/O module including a processor that is different from the main processor, and the secure I/O module including separate network hardware and software not available to the operating system to communicate with remote computers over a network and the secure I/O module to communicate over a different path within the motherboard when communicating over the network from an operating system communication path processed by the operating system, and the processor of the secure I/O module adapted to execute computer instructions that when executed by the processor cause the processor to:
communicate with the main processor and a peripheral connected to the computer independent of the operating system and without control of the operating system;
determine that information received from the peripheral matches information stored in the secure provisioning manifest;
use a secure provisioning manifest to authenticate and establish a secure encrypted communication session with the peripheral in response to the information received from the peripheral matching the information stored in the secure provisioning manifest, the operating system having no control over the secure encrypted communication session;
poll periodically following initial authentication of the peripheral to obtain current operating parameters for the authenticated peripheral where communications with the authenticated peripheral to obtain current operating parameters maintained by the authenticated peripheral use the secure encrypted communication session; and
terminate the secure encrypted communication session and withdraw authentication for the peripheral if one or more of the current operating parameters of the peripheral fails to correlate with corresponding known operating parameters for peripheral.
12. The computer of claim 11 , where the processor of the secure I/O module is further adapted to generate a logical peripheral interface that uses the secure encrypted session to communicate with the peripheral and where the operating system executed by the main processor causes the main processor to use the logical peripheral interface to control and communicate with the peripheral.
13. The computer of claim 11 , where the processor of the secure I/O module is further adapted to store one or more of the obtained current operating parameters as the known operating parameters for the authenticated peripheral if the correlation passes.
14. The computer of claim 11 , where the operating parameters include a total power-on time for the authenticated peripheral and where the correlation fails when the absolute difference between the value for the current total power-on time and the value for a known total power-on time is greater than a predetermined time-on value.
15. The computer of claim 14 , where the predetermined time-on value is generally equal to the polling period used to obtain current operating parameters.
16. The computer of claim 11 , where the operating parameters include at least one checksum value for allocated memory and a checksum value for un-allocated memory of the authenticated peripheral and where the correlation fails when any of the current checksum values from the authenticated peripheral do not match corresponding known checksum values stored in the secure provisioning manifest for the authenticated peripheral.
17. The computer of claim 11 , where the operating parameters include a value for the total number of secure messages sent and received by the authenticated peripheral using the secure encrypted session and where the correlation fails when the current value for the total number of secure messages sent and received by the authenticated peripheral does not match a known value maintained by the secure I/O module for the total number of secure messages sent to and received from the authenticated peripheral using the secure encrypted session.
18. The computer of claim 11 , where the operating parameters include a value for the electric current used to power the authenticated peripheral and where the correlation fails when the current value for the electric current varies by more than a predetermined value from a known electric current value.
19. The computer of claim 11 , where the operating parameters include a value for the total number of successful reads of a magnetic stripe and a value for the total number of unsuccessful reads of a magnetic stripe by the authenticated peripheral and where the correlation fails when the either current read values do not match corresponding known values maintained by the secure I/O module.
20. The computer of claim 11 , where the operating parameters include a value for the number of electrical loads on a USB bus used for communications between the computer and the authenticated peripheral and where the correlation fails when the current value for the number of electrical loads does not match the value for a known number of electrical loads for the authenticated peripheral.