TPM Protected Device Secure Mobile Commerce
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional smartphone security measures, including trusted platform modules (TPM), are inadequate against impersonation and theft in mobile commerce transactions, as they rely on a 'web of trust' that can be compromised, necessitating enhanced security protocols to protect both data in transit and at rest.
Innovation Solution
Implementing a TPM-protected device that generates and manages a TPM key pair, with restricted access to the private key, to produce tokens and certificates for secure transactions, encrypts limited-use keys, and authenticates user credentials before decrypting them for transaction completion, thereby adding an extra layer of security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional TPM-based security protocols are used, then basic cryptographic functionality is provided, but security is compromised due to the web of trust being vulnerable to impersonation and theft
Solution Approach 1:
The patent segments the security architecture by introducing a hierarchical key management system where root of trust keys are separated from transaction keys. The TPM private key is isolated and never exposed, while multiple layers of cryptographic protection (TPM certificates, attestation certificates, encrypted LUK) create segmented security zones that prevent single-point compromises from affecting the entire system.
Solution Approach 2:
The patent implements preliminary security actions by pre-provisioning the device with TPM keys and certificates before any transactions occur. The LUK is encrypted with the TPM public key during initial setup, and attestation certificates are obtained in advance, creating a pre-established web of trust that validates the device's identity before any sensitive operations.
2Reliability
If TPM private key access is restricted to the TPM circuit, then cryptographic security is improved, but transaction processing complexity increases due to additional authentication steps
Solution Approach 1:
The patent introduces intermediary cryptographic components that mediate between the restricted TPM private key and transaction requirements. The LUK acts as an intermediary key that can be used for transactions without exposing the TPM private key. Attestation certificates serve as intermediaries that prove TPM presence and integrity without requiring the TPM private key to be accessible during transactions.
3Reliability
If the LUK is encrypted by the LUK provider using the TPM public key, then the LUK is protected in transit and at rest, but the provisioning process requires multiple certificates and credentials increasing system complexity
Solution Approach 1:
The patent performs preliminary provisioning actions where the device is pre-configured with TPM keys, attestation certificates, and the encrypted LUK during manufacturing or initial setup. This preliminary establishment of the cryptographic infrastructure eliminates the need for complex runtime key exchange and simplifies subsequent transactions, as the security framework is already in place before operational use.
Data Source
AI summary
Example apparatus and methods provide a device (e.g., smartphone) that is more secure for electronic commerce. An example device includes a trusted platform module (TPM) that stores a public key and a private key. The device is provisioned with account information, user information, and device information. The TPM uses the account, user, and device information to acquire attestation credentials and endorsement credentials. The device uses the account, user and device information along with the attestation credentials and endorsement credentials to acquire limited use keys (LUKs) that are encrypted with the public key. The LUKs will only be decrypted as needed to support an actual transaction at the time of the transaction. Before decrypting an LUK, the TPM will authenticate a user of the device at the time of the transaction using. for example, a personal identification number (PIN), fingerprint, or other personal information.