Patent ID: 9158942
Filing Date: 2015-10-13
Classification: G06F,G06T

Abstract:
1. A computer-implemented method for securing display output data, the method comprising: registering a process as a protected process via a trusted memory service layer; marking a first portion of a process address space as an isolated display buffer associated with the protected process and a second portion of the process address space as a place holder display buffer associated with the protected process; marking a portion of a graphics memory space as an access controlled graphics memory region; providing a virtual sprite device and an associated virtual sprite memory region; invoking, in response to a reception of sensitive data into the isolated display buffer, an application programming interface via a windows manager to receive information associated with the place holder display buffer associated with the protected process; transferring the sensitive data in the isolated display buffer to the virtual sprite device memory region; transferring the sensitive data in the virtual sprite device memory region to the access controlled graphics memory region; and providing the sensitive data in the access controlled graphics memory region to a display device, wherein the isolated display buffer is isolated from the operating system via a secure sprite pipeline to protect from potential malware access, wherein the sensitive data is visually presented on the display device via a virtual sprite that overlays and emulates part of an underlying frame buffer data field such that a user is presented with little change in the appearance of the information displayed on the display device, wherein the place holder display buffer is open to the operating system, and wherein fake and/or non-sensitive data corresponding to the sensitive data is associated with the place holder display buffer so as to be open to the operating system and potentially susceptible to malware access.