Secure Processor View Analysis for Fraud Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic data entry devices designed for secure operations face challenges in balancing security with flexibility, as they are vulnerable to fraudulent applications that can deceive users and steal confidential information, especially when they include non-secure processors capable of running third-party applications.
Innovation Solution
A method for managing the display of views on electronic data entry devices with both secure and non-secure processors, where the secure processor analyzes the current view for suspicious patterns and implements protective measures to prevent data recovery by potentially fraudulent applications, including blocking the display, obscuring sensitive information, or intercepting user input.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a non-secure processor is added to enable third-party applications, then flexibility and adaptability are improved, but security and reliability deteriorate due to potential fraudulent applications
Solution Approach 1:
The device is segmented into two distinct processors: a secure processor for certified applications and a non-secure processor for third-party applications. This segmentation allows the system to maintain high security for critical operations while enabling flexibility through open applications, resolving the contradiction by isolating security risks to specific segments.
Solution Approach 2:
The secure processor acts as an intermediary that controls and monitors all operations involving confidential data, even when applications run on the non-secure processor. This intermediary mechanism enables third-party applications to run flexibly while maintaining security through the secure processor's oversight and intervention capabilities.
2Reliability
If security measures are strengthened to prevent fraudulent applications, then reliability is improved, but device complexity and ease of operation worsen
Solution Approach 1:
The secure processor automatically performs security verification and monitoring functions without requiring user intervention. The system self-manages security through automated detection of suspicious patterns and automatic implementation of protective measures, reducing operational complexity while maintaining high security.
Solution Approach 2:
The system employs strong security measures including encryption, authentication, and automated suspicious pattern detection that actively and aggressively protect against threats. These accelerated security mechanisms provide robust protection without requiring complex user management, as the security operations are handled automatically by the secure processor.
3Reliability
If automated suspicious pattern detection is implemented, then security is improved, but processing time and productivity may worsen due to additional analysis steps
Solution Approach 1:
The secure processor performs preliminary analysis of application requests and views before they are fully executed or displayed. By detecting suspicious patterns in advance and implementing protective measures proactively, the system prevents security threats without requiring extensive post-processing analysis, thus maintaining processing speed while enhancing security.
Solution Approach 2:
The suspicious pattern detection is applied selectively to specific critical areas such as views requesting confidential information or unusual application behaviors. Rather than analyzing every operation uniformly, the system focuses security analysis on locally critical points, improving security efficiency without unnecessarily slowing down general processing.
Data Source
Figure 1~3
Figure 2
AI summary
The invention proposes a technique which relates to a method for managing a display of a view of an application (AppC) executed on a non-secure processor (PNS) of an electronic data input device which also includes a secure processor. The application (AppC) outputs at least one current view (VC), including a set of pixels, to be displayed on a screen of said device. Said method, implemented under the control of the secure processor, includes: a step of analysing (AN) the current view (VC), outputting at least one data item representative of the presence of at least one suspicious pattern; and, when the presence of at least one suspicious pattern is detected within the current view (VC), a step of implementing (PT), by means of the secure processor, at least one protection measure.