Method and system for maintaining secure data input and output

Abstract

Methods and systems for enhancing the security of data during input and output on a client computer system are provided to prevent attempts by unauthorized code to access, intercept, and/or modify data. Example embodiments provide a plurality of obfuscation techniques and security enhanced drivers that use these obfuscation techniques to prohibit unauthorized viewing/receiving of valid data. When the drivers are used together with the various obfuscation techniques, the security enhanced drivers provide mechanisms for “scheduling” the content of the storage areas used to store the data so that valid data is not available to unauthorized recipients. When unauthorized recipients attempt to access the “data,” they perceive or receive obfuscated data. The obfuscation techniques described include “copy-in,” “replace and restore,” and “in-place replacement” de-obfuscation/re-obfuscation techniques. In one embodiment, a security enhanced display driver, a security enhanced mouse driver, a security enhanced keyboard driver, and a security enhanced audio driver are provided. To complement the security enhancements, the methods and systems also provide for a watchdog mechanism to ensure that the driver is functioning as it should be and various user interface techniques for denoting security on a display device.

1 . A method in a computer system for ensuring the secure playback of audio data from an audio device, the computer system having an audio buffer to store audio data awaiting playback, comprising: 
 obfuscating the audio data in the audio buffer to create obfuscated data;    detecting an authorized request for the audio data; and    in response to the authorized request, dynamically de-obfuscating the obfuscated data to create valid data such that the valid data is accessible to only an authorized requestor and obfuscated data is accessible otherwise.    
   
   
       2 . The method of  claim 1  wherein obfuscating audio data comprises storing audio data in a plurality of audio buffers.  
   
   
       3 . The method of  claim 2  wherein the audio data is stored the plurality of audio buffers in a random or pseudo-random manner.  
   
   
       4 . The method of  claim 2  wherein distracter data is stored in the plurality of audio buffers along with the audio data.  
   
   
       5 . The method of  claim 1  wherein obfuscating audio data comprises encrypting the audio data.  
   
   
       6 . A computer readable media comprising instructions that cause a computer system to ensure the secure playback of audio data from an audio device, the computer system having an audio buffer to store audio data awaiting playback, comprising computer instructions that cause the computer to: 
 obfuscate the audio data in the audio buffer to create obfuscated data;    detect an authorized request for the audio data; and    in response to the authorized request, dynamically de-obfuscate the obfuscated data to create valid data such that the valid data is accessible to only an authorized requester and obfuscated data is accessible otherwise.    
   
   
       7 . The computer readable media of  claim 6  wherein obfuscating audio data comprises storing audio data in a plurality of audio buffers.  
   
   
       8 . The computer readable media of  claim 7  wherein distracter data is stored in the plurality of audio buffers along with the audio data.  
   
   
       9 . The computer readable media of  claim 7  wherein the audio data is stored the plurality of audio buffers in a random or pseudo-random manner.  
   
   
       10 . The computer readable media of  claim 6  wherein obfuscating audio data comprises encrypting the audio data.  
   
   
       11 . A system in a computing environment to ensure the secure playback of audio data from an audio device, the computer having an audio buffer to store audio data awaiting playback, comprising: 
 an obfuscation mechanism configured to obfuscate the audio data in the audio buffer to create obfuscated data;    a processor to detect an authorized request for the audio data; and    a scheduler configured to dynamically de-obfuscate the obfuscated data in response to the authorized request, to thereby create valid data such that the valid data is accessible to only an authorized requestor and obfuscated data is accessible otherwise.    
   
   
       12 . The system of  claim 11  wherein the obfuscation mechanism obfuscates audio data by storing audio data in a plurality of audio buffers.  
   
   
       13 . The system of  claim 12  wherein the obfuscation mechanism stores distracter data in the plurality of audio buffers along with the audio data.  
   
   
       14 . The system of  claim 12  wherein the obfuscation mechanism stores the audio data in the plurality of audio buffers in a random or pseudo-random manner.  
   
   
       15 . The system of  claim 11  wherein the obfuscation mechanism obfuscates audio data by encrypting the audio data.