US 12,112,321 B2
Systems and methods for implementing a secure user interface
Prakash Tiwari, Hyderabad (IN); Shvetank Kumar Singh, Hyderabad (IN); Rajesh Yadav, Hyderabad (IN); Naga Chandan Babu Gudivada, Hyderabad (IN); Vidyasagar Gopireddy, Mahabubnagar (IN); Manish Sharma, Hyderabad (IN); and Utkarsh Mehta, San Diego, CA (US)
Assigned to QUALCOMM Incorporated, San Diego, CA (US)
Filed by QUALCOMM Incorporated, San Diego, CA (US)
Filed on Nov. 28, 2019, as Appl. No. 16/699,071.
Prior Publication US 2021/0166227 A1, Jun. 3, 2021
Int. Cl. G06Q 20/32 (2012.01); G06F 9/451 (2018.01); G06F 16/23 (2019.01); G06F 21/53 (2013.01); G06F 21/57 (2013.01); G06Q 20/10 (2012.01); G06Q 20/36 (2012.01); G06Q 20/38 (2012.01); G06Q 20/40 (2012.01); G06Q 40/06 (2012.01); H04L 29/06 (2006.01); H04W 12/06 (2021.01); H04W 12/08 (2021.01); G06F 21/31 (2013.01); G06F 21/32 (2013.01); G06F 21/45 (2013.01); G06Q 20/34 (2012.01); G06Q 40/02 (2023.01); H04W 4/14 (2009.01); H04W 12/062 (2021.01); H04W 12/72 (2021.01); H04W 60/00 (2009.01)
CPC G06Q 20/3823 (2013.01) [G06F 9/451 (2018.02); G06F 21/53 (2013.01); G06F 21/57 (2013.01)] 30 Claims
OG exemplary drawing
 
1. A method for implementing a secure user interface display on a computing device, comprising:
determining, by a secure application running in a secure execution environment of the computing device, that code for generating a data input element of a user interface of a client application running in a normal execution environment of the computing device includes code for generating a vulnerable data input element that allows freeform data entry;
preventing, by the secure application, execution of the code for generating the vulnerable data input element by the client application in response to determining, by the secure application, that the code for generating the data input element includes the code for generating the vulnerable data input element;
generating in the secure execution environment by the secure application a secure user interface display portion comprising a secure user interface element that is based on the data input element;
generating a non-secure display portion by the client application in the normal execution environment of the computing device;
combining the secure user interface display portion and the non-secure display portion into a combined display; and
presenting the combined display via a display device.