User Terminal Payment Security via Hardware Password Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cell phone payment systems are vulnerable to malicious software capturing passwords due to the lack of secure input mechanisms, compromising payment safety when the operating system is compromised.
Innovation Solution
A user terminal with a multi-channel selection switch, password processing module, and security IC chip that allows switching between password input and normal input modes, ensuring password data is processed and stored securely within hardware, preventing software from accessing sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the operating system and software are used to process password input, then the ease of operation is improved, but the security against malicious software is worsened
Solution Approach 1:
The patent divides the input processing into two separate channels: a first input channel that bypasses the operating system and software to directly access the security IC chip, and a second input channel that uses the normal software processing path. This segmentation ensures that password input can occur through a secure hardware path independent of the compromised software layer.
Solution Approach 2:
The patent introduces a multi-channel selection switch as an intermediary component that routes input signals to different processing paths. This switch acts as a mediator between the input device and the processing systems, enabling selective connection to either the secure direct hardware path or the normal software path based on the current mode.
2Adaptability or versatility
If the security IC chip stores user ID and bank card information physically in the cell phone, then the payment functionality is improved, but the vulnerability to password capture by malicious software is worsened
Solution Approach 1:
The patent extracts the password input processing from the vulnerable software environment and places it in a dedicated secure hardware path that directly connects the input device to the security IC chip, bypassing the operating system and any potential malicious software that could capture passwords.
Solution Approach 2:
The patent creates a localized secure processing environment for password input that is isolated from the general-purpose software system. This local quality ensures that only authorized hardware components can access the password input stream, while the rest of the system remains unaffected.
3Reliability
If a multi-channel selection switch and separate password processing module are added, then the security against malicious software is improved, but the device complexity is worsened
Solution Approach 1:
The multi-channel selection switch serves multiple functions: it routes normal input through the operating system, routes password input directly to the security IC chip, and can be controlled by both software and hardware signals. This multi-functionality reduces the need for separate dedicated components for each function.
Solution Approach 2:
The patent combines the password processing capabilities within the security IC chip itself, merging the secure element functions with the input routing logic. This integration reduces the number of separate components needed compared to having entirely separate password processing hardware.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention provides a user terminal and a payment system. The user terminal comprises an input device, a multi-channel selection switch, an application module, a processor, a password processing module, and a security IC chip containing information on user's ID and/or banking card therein, wherein the multi-channel selection switch is coupled with the input device, the password processing module and the processor, the password processing module is coupled with the processor, and the security IC chip is coupled with the password processing module; the application module controls the multi-channel selection switch via the processor so as to place the user terminal in a password input mode or in a normal input mode. The invention ensures the safety in entering the user's password in hardware configuration so that even when software system of the user terminal is not safe in itself, the safety of input password can be ensured.