Patent ID: 8566959

Claim:
An information security apparatus which prevents leakage of input information input by a user using an input device, the information security apparatus comprising: a program storage unit storing a protected program and an unprotected program; a program execution unit including (i) a protected domain, which is an execution environment of the protected program, and (ii) an unprotected domain, which is an execution environment of the unprotected program; an input receiving unit operable to receive, from the input device, input information indicating an instruction to a program being executed by the program execution unit and operable to notify the program execution unit of receipt of input; a decoy information storage unit storing decoy information; a judgment unit operable to (i) acquire an acquisition request for the input information for which the receipt has been notified to the program execution unit, and (ii) judge whether or not the program, which has output the acquisition request, is being executed in the protected domain; and an input control unit operable to, (i) when the judgment unit judges that the program is being executed in the protected domain, output the input information to the program execution unit without change, and (ii) when the judgment unit judges that the program is not being executed in the protected domain, output the decoy information to the program execution unit in replacement of the input information.