Secure Function Module in Transaction Terminal for HCE Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Host Card Emulation (HCE) payment applications face security risks due to storing critical information in a low-security execution environment, making them vulnerable to data theft, and require internet connectivity for transaction processing, which limits efficiency.
Innovation Solution
A transaction method utilizing a secure function module in a Trusted Execution Environment (TEE) within a transaction terminal to locally store and process secure transaction data, including generating or obtaining secure transaction data without online access, ensuring security and efficiency by eliminating network dependency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If critical information is stored in the Rich Execution Environment (REE) for HCE applications, then ease of operation is improved, but security is worsened due to vulnerability to data theft
Solution Approach 1:
The system segments the execution environment into two distinct parts: REE for running HCE applications and TEE for secure data storage and processing. This segmentation allows applications to operate in the convenient REE while critical information is protected in the secure TEE, resolving the contradiction between ease of operation and security.
Solution Approach 2:
The TEE acts as an intermediary between the HCE application in REE and the external world. It provides secure data processing services to the application without exposing the critical information to the untrusted REE environment, thus maintaining both operational convenience and security.
2Reliability
If secure transaction data is obtained from the server during transaction, then security is improved, but productivity is worsened due to requirement for internet connectivity
Solution Approach 1:
The system performs preliminary actions by pre-establishing the secure TEE environment and pre-processing data in the TEE before actual transactions occur. This allows the terminal to process transaction data locally using pre-configured secure algorithms and keys stored in TEE, eliminating the need for real-time server connectivity during transactions while maintaining security.
Solution Approach 2:
The TEE enables the terminal to serve itself by providing local secure data processing capabilities. The terminal can independently perform encryption, decryption, and secure computation operations using resources and algorithms stored in the TEE, without requiring external server assistance during the transaction process, thus improving productivity while maintaining security.
Data Source
AI summary
A transaction method includes: receiving, by a secure function module of a transaction terminal, a first transaction message sent by a transaction application module, where the first transaction message includes a first identifier and/or a secure transaction data requirement parameter; obtaining, by the secure function module, secure transaction data according to the first transaction message, or the first transaction message and a second identifier, where the second identifier is used to uniquely identify the secure function module; sending, by the secure function module, the secure transaction data to the transaction application module; and sending, by the transaction application module, a second transaction message to an acquiring terminal, where the second transaction message includes the secure transaction data, the first identifier, and a third identifier, and the third identifier is used to identify the transaction terminal.