Microsoft Patents a Way to Hide Your Mouse Clicks from Your Own Computer
Your computer's operating system sees nearly everything you do, including where you click inside sensitive apps. Microsoft's latest patent describes a way to encrypt that activity so the OS itself stays in the dark.
What Microsoft's secure pointer relay actually does
Imagine you're using a secure banking or medical app that runs from a remote server, displayed inside a window on your laptop. You'd assume the sensitive data you click on stays private, but there's a catch: your computer's own operating system normally tracks every mouse movement and click, which means it could theoretically expose what you're doing inside that window.
Microsoft's patent describes a system that plugs that gap. When your cursor moves into a secure window, a dedicated security chip on the device takes over. It encrypts your mouse activity before the main operating system ever sees it. The OS still does the math to figure out where the cursor is on screen, but it does that math on scrambled data, so it never learns what you actually clicked or did.
The decrypted result gets sent directly to the remote cloud server running your app, keeping the local machine effectively blind to your actions inside that window.
… performing a calculation upon the encrypted pointing device information, by execution of the OS by the CPU and without the OS decrypting the pointing device information, to generate encrypted calculated pointing device information; …
Translation: The main computer calculates where the mouse went while keeping the click data entirely scrambled.
How the secure chip hides clicks from the host OS
The system introduces a secure input unit, a dedicated processor on the device that operates separately from the main CPU and operating system. When your cursor enters a window flagged as secure, the device switches into a protected mode.
Here's the step-by-step flow:
- Your mouse movements and clicks inside the secure window are encrypted by the secure processor before the main OS receives them.
- The OS performs its normal location calculation (figuring out where the pointer is on screen) entirely on that encrypted data, using a technique called homomorphic-style computation (math you can do on scrambled numbers without unscrambling them first).
- The secure processor decrypts the result to get the actual pointer position and action.
- That decrypted information is sent to the remote cloud server hosting the secure window, so it can respond to what you clicked.
The host OS may still render the cursor visually on screen, but it only knows the pointer's position, not what action was taken or what data was touched. The transition between secure and normal windows is designed to appear smooth to the user, with no visible interruption.
What this means for cloud apps handling sensitive data
For businesses running sensitive applications through cloud services, such as healthcare portals, legal document platforms, or financial dashboards, the weak link has often been the local machine. If your work laptop is compromised, an attacker could monitor what you click inside those apps. This patent's approach moves the risk window: the local OS becomes a blind relay rather than a witness.
Microsoft's steady investment in cloud security filings suggests the company is treating the boundary between local hardware and cloud apps as a serious attack surface. For everyday users, the practical payoff would be cloud-hosted apps that are meaningfully more private even on a shared or managed computer.
That makes this Microsoft's 398th filing in our Microsoft coverage since May, adding to a run that includes copying chart styles and spotting skewed data.
The core idea is elegant: your mouse movements inside a sensitive window get scrambled before the computer's main brain ever sees them, so even your own machine cannot spy on what you are doing in a secure session. The math still works out, the cursor still moves smoothly, but the details stay hidden.
Getting this to market requires a dedicated security chip separate from the main processor, which is not standard in most computers people actually own today. That means Microsoft either needs device makers to build new hardware, or needs to find a way to lean on security chips already sitting inside some business laptops.
That second option is the shortest road to a real product. If existing chips can be coaxed into handling this task fast enough to keep a cursor feeling instant and natural, this moves from a research idea to a feature that enterprise customers, the ones who need it most, could plausibly see in a few years.
There are more where this came from
We read every patent application Big Tech publishes and send you the ones worth knowing. Plain English, free, every week.
The drawings
6 drawing sheets from US 2026/0268029 A1 · click any drawing to enlarge
Want this weekly breakdown for a company we don't cover? Patentlyze Pro →