Trusted indicators to secure visual outputs

Patent metadata

Field	Value
Publication number	US-12045376-B2
Application number	US-202117373686-A
Country	US
Kind code	B2
Filing date	Jul 12, 2021
Priority date	Feb 5, 2016
Publication date	Jul 23, 2024
Grant date	Jul 23, 2024

Abstract

An example apparatus includes: memory; instructions in the apparatus; and at least one processor to execute the instructions to: check for proof of trust information in one or more pre-determined positions in a trusted digital image, the proof of trust information including a secure output marker, the secure output marker indicative of information corresponding to a trusted output area of the trusted digital image; decrypt the secure output marker using one or more security keys from a trusted execution environment (TEE), the TEE isolated from a computing application; and enable activation of a trusted output indicator in response to a match between first data corresponding to the secure output marker and second data corresponding to the trusted output area of the trusted digital image.

First claim

What is claimed is:

1. A method comprising:
checking for proof of trust information at a pixel position in a trusted digital image, the proof of trust information including a secure output marker, the secure output marker including location display coordinates of a trusted output area of the trusted digital image, an area size of the trusted output area, and a hash value, the hash value based on content of the trusted output area;
decrypting the secure output marker using one or more security keys from a trusted execution environment (TEE), the TEE isolated from a computing application; and
enabling activation of a trusted output indicator after a match between first data corresponding to the secure output marker of the trusted digital image and second data corresponding to the trusted output area of the trusted digital image.

2. The method of claim 1 , wherein the TEE is a secure enclave to prevent the computing application or a software stack from accessing the one or more security keys.

3. The method of claim 1 , further including illuminating the trusted output indicator.

4. The method of claim 1 , wherein the proof of trust information encodes position information in the trusted digital image.

5. The method of claim 1 , wherein the decrypting is to lookup the hash value indicated by the secure output marker to determine the second data corresponding to the trusted output area of the trusted digital image.

6. The method of claim 1 , further including enabling deactivation of the trusted output indicator after a change in the proof of trust information.

7. An apparatus comprising:
memory;
instructions in the apparatus; and
processor circuitry, the instructions to cause the processor circuitry to:
check for proof of trust information at a pixel position in a trusted digital image, the proof of trust information including a secure output marker, the secure output marker including location display coordinates of a trusted output area of the trusted digital image, an area size of the trusted output area, and a hash value, the hash value based on content of the trusted output area;
decrypt the secure output marker using one or more security keys from a trusted execution environment (TEE), the TEE isolated from a computing application; and
enable activation of a trusted output indicator after a match between first data corresponding to the secure output marker of the trusted digital image and second data corresponding to the trusted output area of the trusted digital image.

8. The apparatus of claim 7 , wherein the TEE is a secure enclave, the TEE to prevent the computing application or a software stack from accessing the one or more security keys.

9. The apparatus of claim 7 , further including one or more light emitting diodes in the trusted output indicator.

10. The apparatus of claim 7 , further including a highlightable border disposed outside of a display area of a display device, the highlightable border to implement the trusted output indicator.

11. The apparatus of claim 7 , wherein the proof of trust information encodes position information in the trusted digital image.

12. The apparatus of claim 7 , wherein the processor circuitry is to execute the instructions to lookup the hash value indicated by the secure output marker to determine the second data corresponding to the trusted output area of the trusted digital image.

13. A storage device or storage disk comprising instructions to cause processor circuitry to at least:
check for proof of trust information at a pixel position in a trusted digital image, the proof of trust information including a secure output marker, the secure output marker including location display coordinates of a trusted output area of the trusted digital image, an area size of the trusted output area, and a hash value, the hash value based on content of the trusted output area;
decrypt the secure output marker using one or more security keys from a trusted execution environment (TEE), the TEE isolated from a computing application; and
enable activation of a trusted output indicator after a match between first data corresponding to the secure output marker of the trusted digital image and second data corresponding to the trusted output area of the trusted digital image.

14. The storage device or storage disk of claim 13 , wherein the instructions are to cause the processor circuitry to enable activation of the trusted output indicator by enabling activation of one or more light emitting diodes.

15. The storage device or storage disk of claim 13 , wherein the instructions are to cause the processor circuitry to enable activation of the trusted output indicator by enabling highlighting of a border disposed outside of a display area of a display device.

16. The storage device or storage disk of claim 13 , wherein the instructions are to cause the processor circuitry to decode position information in the trusted digital image from the proof of trust information.

17. The storage device or storage disk of claim 13 , wherein the instructions are to cause the processor circuitry to lookup the hash value indicated by the secure output marker to determine the second data corresponding to the trusted output area of the trusted digital image.

Assignees

• Mcafee Llc

Inventors

• Pogorelik Oleg
• Smith Ned
• Muttik Igor
• Nayshtut Alex

Classifications

• H04L2209/34

  Encoding or coding, e.g. Huffman coding or error correction · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• G06T2201/0065

  Extraction of an embedded watermark; Reliable detection · CPC title

• G06F21/16 Primary

  Program or content traceability, e.g. by watermarking · CPC title

• G06F21/1063

  Personalisation · CPC title