Payment Authentication Using Trusted Execution Environment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile payment authentication processes require repeated user authentication for each transaction, leading to inefficiencies and delays, as they must individually verify user authentication data for each payment, which can result in timing out or errors.
Innovation Solution
Implementing a trusted execution environment (TEE) in electronic devices that stores authentication results securely and uses key access rules to authorize payments automatically if conditions are met, eliminating the need for repeated user authentication by leveraging secure key storage capabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If repeated user authentication is performed for each payment transaction, then security is maintained, but processing time increases and user experience deteriorates
Solution Approach 1:
The system performs preliminary authentication once and stores the authentication result in the trusted execution environment. Subsequent payment transactions within the same authentication session can proceed without requiring repeated user authentication, as the pre-performed authentication is reused for multiple transactions.
Solution Approach 2:
The authentication result obtained from the first payment transaction continues to be valid and reusable for subsequent payment transactions within the same authentication session. This continuous validity eliminates the need for repeated authentication actions, maintaining security while improving processing efficiency.
2Productivity
If authentication results are stored and reused for multiple transactions, then processing efficiency improves, but security risks increase
Solution Approach 1:
A trusted execution environment acts as an intermediary between the authentication mechanism and the payment processing system. This TEE securely stores and manages authentication results, providing a controlled environment that prevents unauthorized access while enabling efficient reuse of authentication data across multiple transactions.
Solution Approach 2:
The system changes the parameter of authentication result validity from single-use to multi-use within a defined session. By adjusting the validity scope and usage parameters of authentication results, the system enables efficient reuse while maintaining security through controlled parameter management in the trusted execution environment.
3Measurement precision
If individual authentication verification is performed for each payment, then authentication accuracy is maintained, but system complexity increases
Solution Approach 1:
The system performs authentication verification as a preliminary action once during the authentication session setup. The authentication accuracy is established in advance, and the verified result is then reused for subsequent transactions, eliminating the need for repeated verification while maintaining accuracy.
Solution Approach 2:
The trusted execution environment provides self-service functionality by automatically managing and validating authentication results without requiring repeated manual verification. The system serves itself by reusing authenticated data and automatically determining when re-authentication is necessary, reducing operational complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method, an electronic device, and computer readable medium for payment authentication are provided. The method includes receiving a device user authentication. The method also includes receiving a payment request. The method additionally includes determining whether one or more payment conditions corresponding to the device user authentication are satisfied upon receipt of the payment request. The method further includes authorizing a payment application to process the payment request when the one or more payment conditions is satisfied.