Virtual machine formjacking protection

Abstract

A processing system may obtain from a client device an input to access an online form, where the client device is accessing a webpage via an application, the webpage being provided by the processing system and including an option to access the online form, and the input comprising a selection of the option. The processing system may further obtain from the client device a verification that an instantiation of a virtual machine on the client device is permitted for accessing the online form, provide to the client device a configuration code for instantiating the virtual machine, provide the online form to the virtual machine via the client device, where the virtual machine is instantiated on the client device in accordance with the configuration code, and where the virtual machine is distinct from the application, and obtain form data of the online form from the virtual machine via the client device.

What is claimed is: 
     
         1 . A method comprising:
 obtaining from a client device, by a processing system including at least one processor, an input to access an online form, wherein the client device is accessing a webpage via an application of the client device, wherein the webpage is provided by the processing system and includes an option to access the online form, and wherein the input comprises a selection of the option to access the online form;   providing, to the client device by the processing system, a configuration code for instantiating a virtual machine on the client device;   providing, by the processing system, the online form to the virtual machine via the client device, wherein the virtual machine is instantiated on the client device in accordance with the configuration code, wherein the virtual machine is distinct from the application; and   obtaining, by the processing system, form data of the online form from the virtual machine via the client device.   
     
     
         2 . The method of  claim 1 , further comprising:
 verifying resources of the client device.   
     
     
         3 . The method of  claim 1 , further comprising:
 transmitting an instruction to the client device to tear-down the virtual machine, in response to the obtaining the form data.   
     
     
         4 . The method of  claim 1 , wherein the virtual machine is configured with at least one isolated processor resource of the client device, at least one isolated memory resource of the client device, or at least one isolated network interface card resource of the client device, in accordance with the configuration code. 
     
     
         5 . The method of  claim 1 , wherein at least one of:
 the virtual machine is configured with a restriction to communicate with a single internet protocol address;   the virtual machine is configured to disable a screen capture feature of the client device; or   the virtual machine is configured to disable a clipboard feature of the client device.   
     
     
         6 . The method of  claim 1 , wherein the virtual machine is configured to establish a secure connection to a controller of a user input component of the client device, wherein the secure connection to the controller uses a one-time scrambling code that is associated with the virtual machine, wherein data from the user input component is passed to the virtual machine via the controller in accordance with the one-time scrambling code. 
     
     
         7 . The method of  claim 1 , wherein the providing the online form and the obtaining the form data are through a first tunnel between the processing system and the virtual machine. 
     
     
         8 . The method of  claim 7 , wherein a second tunnel is established for a session between the client device and the processing system, wherein the client device accesses the webpage via the application of the client device through the second tunnel, and wherein the input to access the online form is obtained through the second tunnel. 
     
     
         9 . The method of  claim 1 , wherein the online form is to enter at least one of:
 payment information; or   personal information.   
     
     
         10 . A non-transitory computer-readable medium storing instructions which, when executed by a processing system including at least one processor, cause the processing system to perform operations, the operations comprising:
 obtaining from a client device an input to access an online form, wherein the client device is accessing a webpage via an application of the client device, wherein the webpage is provided by the processing system and includes an option to access the online form, and wherein the input comprises a selection of the option to access the online form;   providing a configuration code for instantiating a virtual machine on the client device;   providing the online form to the virtual machine via the client device, wherein the virtual machine is instantiated on the client device in accordance with the configuration code, wherein the virtual machine is distinct from the application; and   obtaining form data of the online form from the virtual machine via the client device.   
     
     
         11 . The non-transitory computer-readable medium of  claim 10 , wherein the virtual machine is configured with at least one isolated processor resource of the client device, at least one isolated memory resource of the client device, or at least one isolated network interface card resource of the client device, in accordance with the configuration code. 
     
     
         12 . An apparatus comprising:
 a processing system including at least one processor; and   a non-transitory computer-readable medium storing instructions which, when executed by the processing system, cause the processing system to perform operations, the operations comprising:
 obtaining from a client device an input to access an online form, wherein the client device is accessing a webpage via an application of the client device, wherein the webpage is provided by the processing system and includes an option to access the online form, and wherein the input comprises a selection of the option to access the online form; 
 providing to the client device a configuration code for instantiating a virtual machine on the client device; 
 providing the online form to the virtual machine via the client device, wherein the virtual machine is instantiated on the client device in accordance with the configuration code, wherein the virtual machine is distinct from the application; and 
 obtaining form data of the online form from the virtual machine via the client device. 
   
     
     
         13 . The apparatus of  claim 12 , the operations further comprising:
 verifying resources of the client device.   
     
     
         14 . The apparatus of  claim 12 , the operations further comprising:
 transmitting an instruction to the client device to tear-down the virtual machine, in response to the obtaining the form data.   
     
     
         15 . The apparatus of  claim 12 , wherein the virtual machine is configured with at least one isolated processor resource of the client device, at least one isolated memory resource of the client device, or at least one isolated network interface card resource of the client device, in accordance with the configuration code. 
     
     
         16 . The apparatus of  claim 12 , wherein at least one of:
 the virtual machine is configured with a restriction to communicate with a single internet protocol address;   the virtual machine is configured to disable a screen capture feature of the client device; or   the virtual machine is configured to disable a clipboard feature of the client device.   
     
     
         17 . The apparatus of  claim 12 , wherein the virtual machine is configured to establish a secure connection to a controller of a user input component of the client device, wherein the secure connection to the controller uses a one-time scrambling code that is associated with the virtual machine, wherein data from the user input component is passed to the virtual machine via the controller in accordance with the one-time scrambling code. 
     
     
         18 . The apparatus of  claim 12 , wherein the providing the online form and the obtaining the form data are through a first tunnel between the processing system and the virtual machine. 
     
     
         19 . The apparatus of  claim 18 , wherein a second tunnel is established for a session between the client device and the processing system, wherein the client device accesses the webpage via the application of the client device through the second tunnel, and wherein the input to access the online form is obtained through the second tunnel. 
     
     
         20 . The apparatus of  claim 12 , wherein the online form is to enter at least one of:
 payment information; or   personal information.