Secure Execution Environment for Mobile Information Entry
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smart mobile devices lack sufficient security measures for entering sensitive information, as their operating systems are designed for openness and practicality, making it vulnerable to information leakage and security hazards, even when using customized virtual keyboards.
Innovation Solution
A system that divides a mobile device into two areas: a non-secure execution environment for general operations and a secure execution environment for sensitive information entry, where the information is encrypted using a key stored in the secure area, and authenticated by a background server, ensuring that sensitive information is not intercepted by malicious software.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a customized virtual keyboard is used to enter particular information, then the information is encrypted and security is improved, but the touch information and displayed content may still be intercepted by malicious software in the same execution environment
Solution Approach 1:
The system divides the mobile device into two separate execution environments: a non-security execution environment for general applications and a secure execution environment for sensitive information entry. This segmentation isolates the security-critical operations from malicious software in the non-secure environment, preventing interception of touch information and displayed content while maintaining encryption capabilities.
Solution Approach 2:
The system introduces a secure execution environment as an intermediary layer between the user input and the non-secure application environment. This intermediary environment handles all sensitive operations (input capture, encryption, display) and communicates only encrypted results to the non-secure environment, blocking malicious software from accessing raw sensitive data.
2Reliability
If the systematic default keyboard is shielded by a built-in virtual keyboard, then particular information cannot be stolen by malicious software directly, but the running environment remains non-secure and touch information may be intercepted
Solution Approach 1:
The system creates a distinct secure execution environment separated from the non-secure environment where the systematic default keyboard operates. By segmenting the execution contexts, touch information and displayed content within the secure environment cannot be intercepted by malicious software in the non-secure environment, while still allowing the systematic keyboard to function in its original context.
3Ease of operation
If a custom virtual keyboard is deployed in the non-secure execution environment, then information entry functionality is provided, but the environment is still vulnerable to information leakage
Solution Approach 1:
The secure execution environment acts as an intermediary that provides information entry functionality while maintaining security. It captures user input, performs encryption, and displays content within its secure boundaries, then communicates only encrypted results to the non-secure environment, thus providing ease of operation without exposing sensitive information to leakage.
Solution Approach 2:
The system applies different security qualities to different parts of the system: the secure execution environment has high security properties for handling sensitive operations, while the non-secure environment maintains general functionality. This local differentiation of security quality allows information entry functionality in the non-secure environment without compromising overall security.
Data Source
AI summary
A system for securely entering particular information includes a mobile device and a background server. The mobile device includes a first area which is a non-secure environment, a second area which is a secure environment and a switching module implementing switchings between the first and second areas. At least one first application module for executing a business function application is provided in the first area. A second application module for executing a particular information entering application and an encryption module for encrypting entered particular information are provided in the second area. If a particular information entering is required by the first application module, the switching module triggers the second application module to perform the particular information entering, and returns, to the first application module, an encryption result obtained by encrypting the entered particular information. The background server includes an authentication module for authenticating the encryption result.