Secure Smartphone Wallet Display Multiplexing Against Transaction Spoofing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing portable electronic devices that integrate blockchain transaction capabilities face security challenges due to exposure to internet attacks when a hardware wallet is embedded, as they lack sufficient security measures to prevent fraudulent manipulation of transaction data and user input validation.
Innovation Solution
A connected terminal with a secondary processor and an embedded secure element manages display and input operations, ensuring that only secure element-generated data is displayed and user validation is physically controlled, minimizing attack surfaces and preventing fraudulent transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a hardware wallet is embedded into a conventional mobile terminal platform, then transaction processing capability and convenience are improved, but security is worsened due to exposure to internet attacks and potential falsification of transaction information
Solution Approach 1:
The patent divides the terminal into two independent processor systems: a first processor running the operating system and applications, and a second processor dedicated to cryptographic operations and secure display. This segmentation isolates the security-critical functions from the potentially compromised application layer, allowing the embedded hardware wallet to process transactions conveniently while maintaining high security through architectural separation.
Solution Approach 2:
The second processor acts as an intermediary between the application processor and the display. It receives transaction information from the first processor, verifies its integrity, and selectively displays only authenticated information. This intermediary layer prevents fraudulent modification of transaction data while maintaining the convenience of integrated transaction processing in the mobile terminal.
2Adaptability or versatility
If the application processor displays transaction information, then user interface functionality is improved, but security is worsened due to potential falsification by malicious software
Solution Approach 1:
The second processor serves as a trusted intermediary between the application processor and the display device. It intercepts transaction information from the first processor, authenticates its integrity through cryptographic verification, and selectively renders only verified information on the display. This prevents malicious software running on the application processor from falsifying transaction information while preserving full user interface functionality.
Solution Approach 2:
The patent replaces the traditional software-based display control mechanism with a hardware-enforced verification mechanism. Instead of relying on trust in the operating system or application software to display correct information, the system uses a dedicated secure processor with cryptographic verification capabilities to physically control what appears on the display, making falsification resistant to software attacks.
3Ease of operation
If cryptographic keys are stored in an embedded secure element, then transaction convenience is improved, but security is worsened due to increased attack surface from network connectivity
Solution Approach 1:
The patent segments the processing functions by placing the secure element and cryptographic processor in a separate, isolated second processor system from the network-connected first processor. The secure element stores cryptographic keys and performs signing operations in isolation from internet-connected applications, while still enabling convenient transaction processing through the integrated mobile terminal interface. This segmentation reduces the attack surface despite network connectivity.
Solution Approach 2:
The patent extracts the security-critical cryptographic functions and key storage into a separate second processor that is isolated from the main application processor and its internet connections. This extraction removes the vulnerable combination of key storage and network access from the system architecture, allowing the embedded secure element to provide convenient transaction processing while being protected from internet-based attacks through physical and logical isolation.
Data Source
AI summary
Portable electronic device for performing a secure transaction, comprising an application processor (APP PROC), a secondary processor and an embedded secure element (eSE) connected to the application processor and to the secondary processor (PROC2), configured to perform certain steps of the transaction comprising at least one cryptographic calculation step involving a secret stored in the secure element. During the performance of a transaction, the secure element (eSE) transmits to the secondary processor (PROC2) display data, and the secondary processor is configured to display the display data transmitted by the secure element with priority over display data transmitted by the application processor.