Remote Attestation Agent for Secure Mobile Payment Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing financial transactions using consumer electronic devices are vulnerable to security threats due to the susceptibility of data transferred wirelessly, and there is a need for enhanced security and cooperation among multiple parties involved in the transaction process.
Innovation Solution
The integration of a Trusted Integrity Manager (TIM) with a Trusted Service Manager (TSM) provides additional security by verifying and authenticating user data through a mobile device's phone function, using an embedded secure element to manage and secure financial transactions, and implementing a Trusted Remote Attestation Agent (TRAA) to ensure device integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If wireless communication is used for financial transactions, then convenience and mobility are improved, but security vulnerability increases due to susceptibility to theft and malicious attacks
Solution Approach 1:
The system segments security functions into multiple components: a secure element within the mobile device for local authentication, a trusted service manager for service provisioning, and a trusted integrity manager for verifying device integrity. This segmentation allows wireless convenience while distributing security responsibilities to mitigate risks.
Solution Approach 2:
The patent introduces trusted intermediaries (trusted service manager and trusted integrity manager) that mediate between the mobile device and financial networks. These intermediaries verify device integrity and authenticate transactions, providing security without compromising wireless transaction convenience.
2Adaptability or versatility
If multiple parties are involved in the transaction process, then transaction capability and service coverage are improved, but system complexity increases due to coordination requirements
Solution Approach 1:
The trusted service manager and trusted integrity manager serve as universal components that handle multiple functions including authentication, authorization, device verification, and transaction monitoring. This multi-functionality reduces the need for separate specialized systems for each party, simplifying coordination while maintaining comprehensive transaction capability.
3Reliability
If additional verification mechanisms are implemented, then security and authentication reliability are improved, but processing time and transaction speed increase
Solution Approach 1:
The system performs preliminary integrity verification of the mobile device during the authentication phase, before the actual financial transaction occurs. The trusted integrity manager verifies device integrity in advance, so that during the transaction itself, only rapid authentication checks are needed, minimizing time loss while maintaining high reliability.
Data Source
AI summary
Systems and methods for use with a service provider and a consumer electronic device include a trusted remote attestation agent (TRAA) configured to perform a set of checking procedures or mechanisms to help ensure the security status of a consumer electronic device (e.g., a mobile terminal or phone) that holds financial instruments. The checking procedures may include: self-verifying integrity by the TRAA; checking for presence of a provisioning SIM card (one that was present when the financial instruments were enabled on the device); checking that a communication connection between the consumer electronic device and the service provider is available and active; and checking that communication connectivity to a home mobile network is available and active. The frequency of the checking mechanisms may be adjusted, for example, according to a risk-profile of a user associated with the device or the location (e.g., GPS location) of the device. The checks may be used, for example, to temporarily disable or limit the use of the financial instruments from the device.