Management of a display of a view of an application on a screen of an electronic data entry device, corresponding method, device and computer program product

Patent metadata

Field	Value
Publication number	US-11100215-B2
Application number	US-201615760101-A
Country	US
Kind code	B2
Filing date	Sep 15, 2016
Priority date	Sep 15, 2015
Publication date	Aug 24, 2021
Grant date	Aug 24, 2021

Abstract

A method is provided for managing a display of a view of an application, executed on a non-secured processor of an electronic data entry device that furthermore includes a secured processor. The application delivers at least one current view having a set of pixels to be displayed on a screen of the device. The managing is implemented under the control of the secured processor and includes: analysis of the current view, delivering at least one piece of data representing a presence of at least one suspect pattern; and, when a presence of a suspect pattern is detected within the current view, implementing by the secured processor at least one protection measure.

First claim

The invention claimed is:

1. A method comprising:
managing a display of a view of an application, said application being executed on a non-secured processor of an electronic data entry device that furthermore comprises a secured processor, said application delivering at least one current view, comprising a set of pixels, to be displayed on a screen of said device, wherein the managing comprises, under the control of said secured processor:
analysis of said current view, delivering at least one piece of data representing a presence of at least one suspect pattern within said current view, said suspect pattern being a graphic interface element or a combination of graphic interface elements prompting a user of the electronic data entry device to provide a piece of sensitive information, said analysis being implemented by a remote server with which said secured processor is capable of communicating by using a communications network and/or implemented by said secured processor of the electronic data entry device;
intercepting, within a secured memory, by the secured processor, any entry made by the user on the electronic data entry device throughout the time of execution of said analysis of the current view; and
when a presence of at least one suspect pattern is detected within said current view, implementing by the secured processor at least one protection measure.

2. The method according to claim 1 wherein the analysis comprises the following acts:
at least one of:
searching, within said set of pixels of said current view, for at least one graphic pattern, delivering a set of recognized patterns; and/or
performing character recognition on said current view, delivering or complementing a set of recognized patterns; and

searching, within said set of recognized patterns, for at least one suspect pattern.

3. The method according to claim 1 wherein the analysis is performed subsequently to the electronic data entry device displaying said current view on said screen of said device.

4. The method according to claim 1 wherein the analysis is performed on a view rendered in a buffer video memory prior to the electronic data entry device displaying said current view on said screen of said device.

5. The method according to claim 1 wherein the analysis of the current view is implemented when one of the following conditions is verified:
said application is absent from a predefined list of trusted applications;
said application is present in said predefined list of trusted applications, and said current view is absent from a list of known views for said application.

6. The method according to claim 1 , wherein said at least one protection measure, implemented by the secured processor when the presence of at least one suspect pattern is detected within the current view, belongs to the group consisting of:
non-display of said current view on the screen of said electronic data entry device;
elimination or concealment of at least one part of said current view on the screen of said electronic data entry device;
non-transmission, to said application, of data entered by the user in relation with said current view;
blocking of said application;
blocking of said electronic data entry device.

7. The method according to claim 1 wherein said electronic data entry device is a payment terminal.

8. An electronic data entry device comprising:
a screen;
a non-secured processor and a secured processor;
a non-transitory computer-readable medium comprising instructions stored thereon, which when executed by the secured processor configure the secured processor to manage a display of a view of an application executed on the non-secured processor, said application delivering at least one current view, comprising a set of pixels to be displayed on the screen of said device, wherein managing the display comprises the following acts under the control of the secured processor:
analyzing said current view and/or means for communication with a remote server capable of analyzing said current view, and delivering at least one piece of data representing a presence of at least one suspect pattern within said current view, said suspect pattern being a graphic interface element or a combination of graphic interface elements prompting a user of the electronic data entry device to provide a piece of sensitive information;
intercepting, within a secured memory, by the secured processor, any entry made b the user on the electronic data entry device throughout the time of execution of said analysis of the current view; and
implementing at least one protection measure by using the secured processor when a presence of at least one suspect pattern is detected within said current view.

9. A non-transitory computer readable medium comprising a computer program product stored thereon comprising program code instructions for executing a method for managing a display of a view of an application when the instructions are executed by a secured processor of an electronic data entry device, said application being executed on a non-secured processor of the electronic data entry device, said application delivering at least one current view, comprising a set of pixels, to be displayed on a screen of said device, wherein the managing comprises, under the control of said secured processor:
analysis of said current view, delivering at least one piece of data representing a presence of at least one suspect pattern within said current view, said suspect pattern being a graphic interface element or a combination of graphic interface elements prompting a user of the electronic data entry device to provide a piece of sensitive information, said analysis being implemented by a remote server with which said secured processor is capable of communicating by using a communications network and/or implemented by said secured processor of the electronic data entry device;
intercepting, within a secured memory by the secured processor, any entry made by the user on the electronic data entry device throughout the time of execution of said analysis of the current view; and
when a presence of at least one suspect pattern is detected within said current view, implementing by the secured processor at least one protection measure.

Assignees

• Ingenico Group

Inventors

• Geraud Remi
• Koudoussi Hiba

Classifications

• G06F21/554 Primary

  involving event detection and direct action · CPC title

• G06F21/52 Primary

  during program execution, e.g. stack integrity {; Preventing unwanted data erasure; Buffer overflow} · CPC title

• G06F2221/2143

  Clearing memory, e.g. to prevent the data from being stolen · CPC title

• G06F21/84

  output devices, e.g. displays or monitors · CPC title

• G06K2209/01

  Physics · mapped topic