User Terminal Payment Security via Hardware Password Isolation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing cell phone payment systems are vulnerable to malicious software capturing passwords due to the lack of secure input mechanisms, compromising payment safety when the operating system is compromised.

Innovation Solution

A user terminal with a multi-channel selection switch, password processing module, and security IC chip that allows switching between password input and normal input modes, ensuring password data is processed and stored securely within hardware, preventing software from accessing sensitive information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the operating system and software are used to process password input, then the ease of operation is improved, but the security against malicious software is worsened

Engineering Contradiction:
Improvepassword input convenienceVSAvoidpayment security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent divides the input processing into two separate channels: a first input channel that bypasses the operating system and software to directly access the security IC chip, and a second input channel that uses the normal software processing path. This segmentation ensures that password input can occur through a secure hardware path independent of the compromised software layer.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a multi-channel selection switch as an intermediary component that routes input signals to different processing paths. This switch acts as a mediator between the input device and the processing systems, enabling selective connection to either the secure direct hardware path or the normal software path based on the current mode.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If the security IC chip stores user ID and bank card information physically in the cell phone, then the payment functionality is improved, but the vulnerability to password capture by malicious software is worsened

Engineering Contradiction:
Improvepayment functionalityVSAvoidpassword capture risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the password input processing from the vulnerable software environment and places it in a dedicated secure hardware path that directly connects the input device to the security IC chip, bypassing the operating system and any potential malicious software that could capture passwords.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent creates a localized secure processing environment for password input that is isolated from the general-purpose software system. This local quality ensures that only authorized hardware components can access the password input stream, while the rest of the system remains unaffected.

Inventive Principle:
Principle #3Local quality

3Reliability

If a multi-channel selection switch and separate password processing module are added, then the security against malicious software is improved, but the device complexity is worsened

Engineering Contradiction:
Improvepassword input securityVSAvoidhardware structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The multi-channel selection switch serves multiple functions: it routes normal input through the operating system, routes password input directly to the security IC chip, and can be controlled by both software and hardware signals. This multi-functionality reduces the need for separate dedicated components for each function.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent combines the password processing capabilities within the security IC chip itself, merging the secure element functions with the input routing logic. This integration reduces the number of separate components needed compared to having entirely separate password processing hardware.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentEP2706699B1User terminal and payment system
Publication Date: 2017.08.23 CHINA UNIONPAY
  • EP2706699B1 patent drawingFigure 1
  • EP2706699B1 patent drawingFigure 2
  • EP2706699B1 patent drawingFigure 3

AI summary

The invention provides a user terminal and a payment system. The user terminal comprises an input device, a multi-channel selection switch, an application module, a processor, a password processing module, and a security IC chip containing information on user's ID and/or banking card therein, wherein the multi-channel selection switch is coupled with the input device, the password processing module and the processor, the password processing module is coupled with the processor, and the security IC chip is coupled with the password processing module; the application module controls the multi-channel selection switch via the processor so as to place the user terminal in a password input mode or in a normal input mode. The invention ensures the safety in entering the user's password in hardware configuration so that even when software system of the user terminal is not safe in itself, the safety of input password can be ensured.