Design and Implementation of a Keyboard Input Security System for Safe and Trusted E-Commerce


The KIPS Transactions:PartC, Vol. 13, No. 1, pp. 55-62, Feb. 2006
10.3745/KIPSTC.2006.13.1.55,   PDF Download:

Abstract

It is growing to use the E-Commerce, recently. However, if a cracking tool that detects the keyboard input is set up, users' input values and personal information could be taken away. This paper shows the design and implementation of security system that prevent the keyboard input information leaking. The ideas of this paper are encrypting the keyboard input values with using the keyboard interrupt hooking, the browser embedding program's decrypting the values in case of need and decrypting all values in the web server. The own input control was developed for direct attacks to the browser, and that the values of password fields which are showed as *(asterisk character) won't be decrypted in the client PC is different from other commercial keyboard input security systems. Consequently, this paper shows the chance of realizing a lot safer customer information protective system than before.


Statistics
Show / Hide Statistics

Statistics (Cumulative Counts from September 1st, 2017)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.


Cite this article
[IEEE Style]
S. W. Choi and K. T. Kim, "Design and Implementation of a Keyboard Input Security System for Safe and Trusted E-Commerce," The KIPS Transactions:PartC, vol. 13, no. 1, pp. 55-62, 2006. DOI: 10.3745/KIPSTC.2006.13.1.55.

[ACM Style]
Sung Wook Choi and Ki Tae Kim. 2006. Design and Implementation of a Keyboard Input Security System for Safe and Trusted E-Commerce. The KIPS Transactions:PartC, 13, 1, (2006), 55-62. DOI: 10.3745/KIPSTC.2006.13.1.55.