Ahnlab, Inc.

Anhlab, Inc.

Jeom Gab Kim

Jong Hyun Kim

Security for a USB device is conducted in a protection mode for USB data by hooking an import table of a USB bus class driver, identifying a target IRP, into which the USB data to be protected is inputted, during the hooking routine, and intercepting a real USB data from the IRP. Therefore, input/output data of every USB devices, including a USB keyboard, can be protected in a USB bus class driver level to which a USB input/output request packet is transferred for the first time, thereby protecting the input/output data of the USB devices more safely and basically.

Apparatus and method for securing data of USB devices

Disclosed is a method of protecting an input/output packet of a USB device. The method includes: a) registering a filter driver to a USB host controller within a system, and loading the filter driver; b) generating a first filter driver object (filter device object; FiDO), monitoring input/output packets of all USB devices by attaching the first filter driver object (FiDO) to a device object (functional device object; FDO) for the USB host controller; c) determining if there is an identifier in the input/output packet; d) when it is determined that there is the identifier in the input/output packet, registering a data protection routine in the input/output packet; e) copying the input/output packet from the data protection routine to a predetermined region, and exchanging the input/output packet with a predetermined value.

Growing community of inventors

Seoul, South Korea

Jeom Gab Kim