Trusted Execution Environment for Secure Payment Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional point of sale devices are expensive and difficult to set up, and existing solutions that convert computing devices into point of sale systems are susceptible to hacking, compromising sensitive payment information due to the use of standard memory and processing techniques.
Innovation Solution
Implementing a trusted execution environment on computing devices to handle authentication data, using a second application program stored in a trusted execution environment separate from the first application program, ensuring additional authentication is performed at a higher security level without modifying existing payment instrument reading devices or software.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If standard memory and processing techniques are used in computing devices converted to point of sale systems, then device compatibility and ease of operation are improved, but security and reliability deteriorate due to susceptibility to hacking
Solution Approach 1:
The system divides the computing device into two distinct environments: a rich execution environment for running standard applications and a trusted execution environment for handling sensitive authentication operations. This segmentation allows the device to maintain ease of operation through standard software while isolating security-critical functions in a protected environment that is resistant to hacking and compromise.
2Reliability
If traditional point of sale devices are used, then security and reliability are improved, but device complexity and cost increase
Solution Approach 1:
The trusted execution environment is integrated into standard computing devices, enabling them to perform multiple functions: running general applications in the rich execution environment and handling secure authentication in the trusted execution environment. This multi-functionality allows a single device to provide both ease of operation and high security without requiring separate specialized hardware.
3Ease of operation
If authentication data is handled in standard memory areas, then ease of operation is improved, but security deteriorates due to greater risk of data compromise
Solution Approach 1:
The system extracts authentication data handling from the standard rich execution environment and places it exclusively in the trusted execution environment. This extraction ensures that sensitive authentication operations occur in an isolated, secure environment that is protected from attacks, while the rich execution environment continues to provide ease of operation for non-sensitive functions.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method for authentication facilitated via a trusted execution environment includes: reading payment credentials in a first application program stored in a first memory area of a computing device; transmitting an authentication request to a second application program stored in a trusted execution environment of the computing device separate from the first memory area; displaying a prompt for authentication data based on an instruction supplied by the second application program; receiving authentication data; transmitting the received authentication data to an external computing device; receiving, by the second application program of the computing device, an authentication result from the external computing device; and transmitting, by the second application program of the computing device, the authentication result to the first application program in response to the authentication request.