WO2017027401A1 - Transaction processing method and client based on trusted execution environment - Google Patents

Transaction processing method and client based on trusted execution environment Download PDF

Info

Publication number
WO2017027401A1
WO2017027401A1 PCT/US2016/045848 US2016045848W WO2017027401A1 WO 2017027401 A1 WO2017027401 A1 WO 2017027401A1 US 2016045848 W US2016045848 W US 2016045848W WO 2017027401 A1 WO2017027401 A1 WO 2017027401A1
Authority
WO
WIPO (PCT)
Prior art keywords
server
environment
session key
secure environment
secure
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/US2016/045848
Other languages
French (fr)
Inventor
Jinhua Luo
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Alibaba Group Holding Ltd
Original Assignee
Alibaba Group Holding Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Ltd filed Critical Alibaba Group Holding Ltd
Publication of WO2017027401A1 publication Critical patent/WO2017027401A1/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/462—Content or additional data management e.g. creating a master electronic programme guide from data received from the Internet and a Head-end or controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
    • H04N21/4627—Rights management associated to the content
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0442—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/254—Management at additional data server, e.g. shopping server, rights management server
    • H04N21/2541—Rights Management
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
    • H04N21/266—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel
    • H04N21/26613—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel for generating or managing keys in general
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
    • H04N21/462—Content or additional data management e.g. creating a master electronic programme guide from data received from the Internet and a Head-end or controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
    • H04N21/4623—Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
    • H04L63/061—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key exchange, e.g. in peer-to-peer networks

Definitions

  • the present disclosure relates to the field of smart television technologies, and in particular, to methods and clients of processing transactions based on a trusted execution environment. Background
  • smart televisions are able to provide a variety of interactive applications to users, and bring a superior personalized experience effect to the users.
  • operating systems of smart terminals are designed mainly to focus on functional requirements, without consideration from the security perspective.
  • corresponding system vulnerabilities are inevitable due to the open, complex and complicated nature of the entire system, leading to a continuous emergence of malicious programs that take advantage of these vul nerabilities to threaten application programs.
  • typical payment client software is developed based on software solutions, which has a drawback that malicious software, such as phishing software and Trojan viruses, can easily steal information entered by a user, e.g., an account number, a password, and transaction data, etc.
  • An objective of the present disclosure is to provide a transaction processing method and a client thereof based on a trusted execution environment, in order to solve the potential security problem of transaction information of a smart television device in existing technologies.
  • a transaction processing method based on a trusted execution environment may perform verification of a server in a secure environment, and obtain a public key of the server upon a successful verification. Moreover, the client may generate a session key in the secure environment, and encrypt the session key using the public key. The client may then transmit the encrypted session key to the server in a normal environment. Furthermore, the client may encrypt pre-obtained transaction information using the session key in the secure environment, and transmit the encrypted transaction information to the server in the normal environment. In implementation, the client may have passed a security check and/or access authorization of the secure environment in advance.
  • the client may further download a certificate of the server via a network in the normal environment, and store the certificate of the server in a share buffer.
  • the client may further switch from the normal environment to the secure environment, and obtain the certificate of the server from the share buffer in the secure environment.
  • the client may verify the certificate of the server using a pre-downloaded verification key in the secure environment, and store a public key of the certificate of the server in a secure buffer upon successfully verifying the certificate of the server.
  • the client may further store the encrypted session key in the share buffer, switch from the secure environment to the normal environment, obtain the encrypted session key from the share buffer in the normal environment, and transmit the encrypted session key to the server.
  • the transaction information may include information associated with a login account, a login password and a payment.
  • the client may further receive the login account in the normal environment, and receive the login password and information of the payment in the secure environment.
  • the client may receive the login account, the login password and the information of the payment in the secure environment.
  • the client may include a smart television client or a set-top box client.
  • a client which may include a verification module to verify a server in a secure environment and obtain a public key of the server upon a successful verification thereof; a session key generation module to generate a session key and encrypt the session key using the public key in the secure environment; a first transmission module to transmit the encrypted session key from the client to the server in a normal environment; an encryption module to encrypt pre-obtained transaction information using the session key in the secure environment; and a second transmission module to transmit the encrypted transaction information to the server in the normal environment, wherein the client has passed a security check and/or access authorization of the secure environment in advance.
  • the client may further include a first acquisition module to download a certificate of the server via a network in the normal environment, store the certificate of the server in a share buffer, and obtain the certificate of the server from the share buffer in the secure environment after switching from the normal environment to the secure environment.
  • the verification module may further verify the certificate of the server using a pre-downloaded verification key in the secure environment, and store a public key of the certificate of the server in a secure buffer after successfully verifying the certificate of the server.
  • the session key generation module may further store the encrypted session key in the share buffer.
  • the first transmission module may obtain the encrypted session key from the share buffer, and transmit the encrypted session key to the server in the normal environment.
  • the transaction information may include information associated with a login account, a login password and a payment.
  • the client may further include a second acquisition module to receive the login account in the normal environment, and receive the login password and information of the payment in the secure environment.
  • the client may receive the login account, the login password, and the information of the payment in the secure environment.
  • the client may include a smart television client or a set-top box client.
  • FIG. 1 is a flowchart of a transaction processing method based on a trusted execution environment according to an embodiment of the present disclosure.
  • FIG. 2 is a flowchart of verifying a certificate of a server according to an embodiment of the present disclosure.
  • FIG. 3 is a flowchart of generating a session key and uploading thereof to a server according to an embodiment of the present disclosure.
  • FIG. 4 is a flowchart of obtaining login information and performing a login according to an embodiment of the present disclosure.
  • FIG. 5 is a structural diagram of a client according to an embodiment of the present disclosure.
  • FIG. 6 is a structural diagram of a client according to another embodiment of the present disclosure.
  • a transaction processing method based on a trusted execution environment is provided.
  • the trusted execution environment (or TEE) technology provides a secure execution environment, so that codes operating in this mode are not attacked by malicious software.
  • TEE trusted execution environment
  • a basic principle thereof only trusted codes that pass a signature verification are able to operate in the TEE environment, and sensitive data that is operated by these codes is strictly protected in a secure memory and is not accessed by a non-TEE code.
  • two operating modes of environments are included.
  • One is Normal Environment (or Normal World), which is able to execute rich instructions, and is referred to as a Rich Execution Environment (REE).
  • the other mode is Secure Environment (or Secure World), which can only execute trusted instructions, and is referred to as a TEE environment.
  • these two operating environments can be switched between each other according to needs.
  • FIG. 1 shows a flowchart of a transaction processing method 100 based on a trusted execution environment according to an embodiment of the present disclosure. As shown in FIG. 1, the method 100 may include the following operations.
  • a client performs verification of a server in a secure environment, and obtains a public key of the server after the verification is passed, where the client may be a smart television client or a set-top box client.
  • the client generates a session key, and encrypts the session key using the public key in the secure environment.
  • the client transmits the encrypted session key to the server in a normal environment.
  • the client encrypts pre-obtained login information using the session key in the secure environment, and transmits the encrypted login information to the server in the normal environment.
  • the secure environment and the normal environment correspond to a secure region and an insecure region, respectively that are provided by performing a physical separation in CPU hardware through a particular mechanism (e.g., ARM * TrustZone or Tl M-Shield mechanism).
  • the secure environment provides a trusted execution environment (TEE) for sensitive applications or data.
  • TEE trusted execution environment
  • the secure environment performs a verification and/or access authorization for the client in advance.
  • the client passes the verification and/or the authorization of the secure environment in advance, and therefore can access a specified buffer (secure buffer) and a specified storage (secure storage) in the secure environment.
  • the client can perform operations in the secure environment.
  • performing operations such as a server certificate check, generation and encryption of a session key, secure input and secure transmission of transaction-related information in a secure environment can effectively protect the security of user login information and user private information.
  • FIG. 2 shows a flowchart of verifying a certificate of a server according to an embodiment of the present disclosure.
  • a method 200 may include the following operations.
  • a client downloads a certificate of a server via a network in a normal environment, wherein the client includes a networking module that is able to download the certificate of the server over the I nternet.
  • the certificate of the server is stored in a share buffer, where the share buffer is a buffer accessible in both normal environment and secure environment. I n other words, in both normal environment and secure environment, data can be stored into the share buffer, and the data that is stored in the share buffer can be obtained.
  • the normal environment is switched to the secure environment.
  • the client obtains the certificate of the server from the share buffer in the secure environment.
  • the client verifies the certificate of the server using a pre-downloaded verification key, obtains a public key of the certificate of the server after successfully verifying the certificate of the server, and stores the public key of the certificate of the server in a secure buffer.
  • the secure buffer is accessible only in the secure environment, that is, data stored in the secure buffer will not be attacked by malicious software.
  • the client can download a verification key (pub_serv_CA) that is used for verifying the certificate of the server from a secure storage to the secure buffer accessible in the secure environment.
  • a verification key (pub_serv_CA) that is used for verifying the certificate of the server from a secure storage to the secure buffer accessible in the secure environment.
  • FIG. 3 shows a flowchart of generating a session key and uploading the session key to a server according to an embodiment of the present disclosure.
  • a method 300 thereof may include the following operations.
  • a client generates a session key (Session Key) in a secure environment, and stores the session key into a secure buffer, where the session key is a key using a symmetric encryption algorithm, such session key is generated in each session between the client end and a server, and is terminated after the session is ended.
  • Session Key Session Key
  • a stored public key is read from the secure buffer, and the session key is encrypted using the public key to obtain an encrypted session key (Session Key').
  • the client stores the encrypted session key into a share buffer.
  • the secure environment is switched to a normal environment.
  • the client obtains the encrypted session key from the share buffer and transmits the encrypted session key to the server in the normal environment.
  • the server obtains the session key (Session Key') that is encrypted using the public key of the server.
  • the server may then decrypt the session key (Session Key') using a private key thereof to obtain a decrypted session key (Session Key).
  • the session key (Session Key) is used in subsequent login and payment operations.
  • FIG. 4 is a flowchart of obtaining login information and performing a login according to an embodiment of the present disclosure. As shown in FIG. 4, a method 400 thereof may include the following operations.
  • a client receives transaction data information such as a login account, a login password and payment information.
  • the payment information may include, but is not limited to, an account number tag (Tag), a payment amount, a bill number, payment merchant information, etc.
  • the login account may be received in a normal environment, and the login password and the payment information may be received in a secure environment. Alternatively, the login account number, the login password, and the payment information may be received in the secure environment.
  • transaction data information may be inputted by a user using an input device such as an infrared (IR) remote control, or a Bluetooth/WiFi remote control, etc.
  • the inputted data such as a login password and payment information, may directly be stored into a secure buffer.
  • the client encrypts the obtained transaction information using a session key in a secure environment.
  • the secure environment is switched into a normal environment.
  • the client transmits the encrypted transaction information to the server in the normal environment.
  • the server may decrypt the received transaction information using the session key obtained in FIG. 3 to obtain decrypted data information such as the login account, the login password, and the payment information.
  • the server may then verify an identity of the client based on the transaction information and perform operations such as subsequent transaction, which is not redundantly described in detail herein.
  • FIG. 5 shows a structural block diagram of a client 500 according to an embodiment of the present disclosure.
  • the client may be a smart television client or a set-top box client.
  • the client has passed a check and/or an authorization by a secure environment in advance, and thus is able to access a specified buffer (secure buffer) and a specified storage (secure storage) in the secure environment.
  • the client can perform operations in the secure environment.
  • the client may include one or more computing devices.
  • a computing device includes one or more Central Processing Units (CPUs), I/O interfaces, network interfaces and memory.
  • the client 500 may include one or more processors 502, an input/output (I/O) interface 504, a network interface 506 and memory 508.
  • the memory 508 may include a form of computer-readable media, e.g., a non-permanent storage device, random-access memory (RAM) and/or a nonvolatile internal storage, such as read-only memory (ROM) or flash RAM.
  • RAM random-access memory
  • ROM read-only memory
  • flash RAM flash random-access memory
  • the computer-readable media may include a permanent or non-permanent type, a removable or non-removable media, which may achieve storage of information using any method or technology.
  • the information may include a computer-readable instruction, a data structure, a program module or other data.
  • Examples of computer storage media include, but not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random-access memory (RAM), read-only memory (ROM), electronically erasable programmable read-only memory (EEPROM), quick flash memory or other internal storage technology, compact disk read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassette tape, magnetic disk storage or other magnetic storage devices, or any other non-transmission media, which may be used to store information that may be accessed by a computing device.
  • the computer-readable media does not include transitory media, such as modulated data signals and carrier waves.
  • the memory 508 may include program modules 510 and program data 512.
  • the program module 510 may include a verification module 514, a session key generation module 516, a first transmission module 518, an encryption module 520 and a second transmission module 522.
  • the structures and functions of the modules are described in detail hereinafter.
  • the verification module 514 performs verification of a server in a secure environment, and obtain a public key of the server after the verification is passed.
  • the session key generation module 516 generates a session key, and encrypts the session key using the public key in the secure environment.
  • the first transmission module 518 transmits the encrypted session key to the server in a normal environment. Furthermore, the session key generation module 516 stores the encrypted session key into a share buffer. After the secure environment is switched into the normal environment, the first transmission module 518 obtains the encrypted session key from the share buffer and transmits the encrypted session key to the server in the normal environment.
  • the encryption module 520 encrypts pre-obtained transaction information using the session key in the secure environment, where the transaction information includes a login account, a login password and payment information.
  • the second transmission module 522 transmits the encrypted transaction information to the server in the normal environment.
  • the first transmission module 518 and the second transmission module 522 may be integrated together, which is not repeatedly described in detail herein.
  • FIG. 6 shows a structural block diagram of a client 600 according to another embodiment of the present disclosure.
  • the client 600 may include one or more processors 602, an input/output (I/O) interface 604, a network interface 606 and memory 608.
  • the memory 608 may include a form of computer-readable media as described in the foregoing description.
  • the memory 608 may include program modules 610 and program data 612.
  • the program module 610 may include a verification module 614, a session key generation module 616, a first transmission module 618, an encryption module 620, a second transmission module 622, a first acquisition module 624, and a second acquisition module 626.
  • the verification module 614, the session key generation module 616, the first transmission module 618, the encryption module 620 and the second transmission module 622 are similar to the verification module 514, the session key generation module 516, the first transmission module 518, the encryption module 520, and the second transmission module 522 as shown in FIG. 5 respectively, and thus are not repeatedly described in detail herein.
  • the first acquisition module 624 may download a certificate of the server via a network in the normal environment, store the certificate of the server into the share buffer, and obtain the certificate of the server from the share buffer under the secure environment after the normal environment is switched to the secure environment. Furthermore, the verification module 614 verifies the certificate of the server obtained by the first acquisition module 624 using a pre-downloaded verification key, and stores the public key of the certificate of the server into the secure buffer in the secure environment after successfully verifying the certificate of the server.
  • the second acquisition module 626 may receive a login account in the normal environment, and receive a login password and payment information in the secure environment.
  • the second acquisition module 626 may receive the login account number, the login password and the payment information in the secure environment.
  • the encryption module 620 may obtain transaction information through the second acquisition module 626 and performs an encryption processing thereon.
  • the operations of the methods and the structural features of the apparatuses are corresponding to each other, and thus can be cross-referenced. Details thereof are not repeatedly described herein. According to the technical solutions of the present disclosure, by performing operations, such as a server certificate check, generation and encryption of a session key, secure input and secure transmission of transaction-related information, etc., in a secure environment, the security of user login information and private information is effectively ensured.
  • the embodiments of the present disclosure may be provided as a method, a system or a computer program product. Therefore, the present disclosure may be implemented in a form of a completely hardware embodiment, a completely software embodiment, or an embodiment of a combination of software and hardware. Moreover, the present disclosure may be achieved in a form of a computer program product that is implemented on one or more com puter usable storage media (including, but not limited to, a magnetic disk memory, a CD-ROM, an optical memory, etc.) that include computer usable program codes.
  • com puter usable storage media including, but not limited to, a magnetic disk memory, a CD-ROM, an optical memory, etc.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Signal Processing (AREA)
  • Databases & Information Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Multimedia (AREA)
  • Computer And Data Communications (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Storage Device Security (AREA)

Abstract

A transaction processing client based on a trusted execution environment is disclosed. The client verifies a server in a secure environment, obtains a public key of the server upon successful verification, generates a session key and encrypts the session key using the public key in the secure environment, transmits the encrypted session key to the server in a normal environment, encrypts pre-obtained transaction information using the session key in the secure environment, and transmits the encrypted transaction information to the server in the normal environment. The present disclosure effectively ensures the security of user login information and user private information.

Description

TRANSACTION PROCESSING METHOD AND CLIENT BASED ON TRUSTED EXECUTION ENVIRONMENT
Cross Reference to Related Patent Application
This application claims foreign priority to Chinese Patent Application No.
2015140484684.1 filed on August 7, 2015, entitled "Transaction Processing Method and Client Based on Trusted Execution Environment", which is hereby incorporated by reference in its entirety. Technical Field
The present disclosure relates to the field of smart television technologies, and in particular, to methods and clients of processing transactions based on a trusted execution environment. Background
Compared with traditional televisions, smart televisions are able to provide a variety of interactive applications to users, and bring a superior personalized experience effect to the users. However, operating systems of smart terminals are designed mainly to focus on functional requirements, without consideration from the security perspective. Furthermore, corresponding system vulnerabilities are inevitable due to the open, complex and complicated nature of the entire system, leading to a continuous emergence of malicious programs that take advantage of these vul nerabilities to threaten application programs. Currently, typical payment client software is developed based on software solutions, which has a drawback that malicious software, such as phishing software and Trojan viruses, can easily steal information entered by a user, e.g., an account number, a password, and transaction data, etc. Although a number of software protection measures such as firewalls and antivirus software may be used for providing corresponding protection, complete software protection cannot be achieved due to the continuous emergence of a variety of new virus programs and frequent updates and upgrades of the system. In short, since information, such as account numbers, passwords and transaction data, etc., that is entered by a user of a smart television is stored in insecure memory under existing technologies, these pieces of information can be easily stolen by malicious software. Summary
This Summary is provided to introduce a selection of concepts in a simplified form that are further described below in the Detailed Description. This Summary is not intended to identify all key features or essential features of the claimed subject matter, nor is it intended to be used alone as an aid in determining the scope of the claimed subject matter. The term "techniques," for instance, may refer to device(s), system(s), method(s) and/or computer-readable instructions as permitted by the context above and throughout the present disclosure.
An objective of the present disclosure is to provide a transaction processing method and a client thereof based on a trusted execution environment, in order to solve the potential security problem of transaction information of a smart television device in existing technologies.
According to embodiments of the present disclosure, a transaction processing method based on a trusted execution environment is provided. In implementations, a client may perform verification of a server in a secure environment, and obtain a public key of the server upon a successful verification. Moreover, the client may generate a session key in the secure environment, and encrypt the session key using the public key. The client may then transmit the encrypted session key to the server in a normal environment. Furthermore, the client may encrypt pre-obtained transaction information using the session key in the secure environment, and transmit the encrypted transaction information to the server in the normal environment. In implementation, the client may have passed a security check and/or access authorization of the secure environment in advance.
Prior to performing the verification of the server in the secure environment, the client may further download a certificate of the server via a network in the normal environment, and store the certificate of the server in a share buffer. The client may further switch from the normal environment to the secure environment, and obtain the certificate of the server from the share buffer in the secure environment.
When performing the verification of the server in the secure environment, the client may verify the certificate of the server using a pre-downloaded verification key in the secure environment, and store a public key of the certificate of the server in a secure buffer upon successfully verifying the certificate of the server.
In response to encrypting the session key using the public key, the client may further store the encrypted session key in the share buffer, switch from the secure environment to the normal environment, obtain the encrypted session key from the share buffer in the normal environment, and transmit the encrypted session key to the server.
In implementations, the transaction information may include information associated with a login account, a login password and a payment. In implementations, prior to encrypting the pre-obtained transaction information using the session key in the secure environment, the client may further receive the login account in the normal environment, and receive the login password and information of the payment in the secure environment. Alternatively, the client may receive the login account, the login password and the information of the payment in the secure environment.
In implementations, the client may include a smart television client or a set-top box client.
According to the embodiments of the present disclosure, a client is provided, which may include a verification module to verify a server in a secure environment and obtain a public key of the server upon a successful verification thereof; a session key generation module to generate a session key and encrypt the session key using the public key in the secure environment; a first transmission module to transmit the encrypted session key from the client to the server in a normal environment; an encryption module to encrypt pre-obtained transaction information using the session key in the secure environment; and a second transmission module to transmit the encrypted transaction information to the server in the normal environment, wherein the client has passed a security check and/or access authorization of the secure environment in advance. In implementations, the client may further include a first acquisition module to download a certificate of the server via a network in the normal environment, store the certificate of the server in a share buffer, and obtain the certificate of the server from the share buffer in the secure environment after switching from the normal environment to the secure environment.
In implementations, the verification module may further verify the certificate of the server using a pre-downloaded verification key in the secure environment, and store a public key of the certificate of the server in a secure buffer after successfully verifying the certificate of the server.
In implementations, the session key generation module may further store the encrypted session key in the share buffer. After switching from the secure environment to the normal environment, the first transmission module may obtain the encrypted session key from the share buffer, and transmit the encrypted session key to the server in the normal environment.
In implementations, the transaction information may include information associated with a login account, a login password and a payment. In implementations, the client may further include a second acquisition module to receive the login account in the normal environment, and receive the login password and information of the payment in the secure environment. Alternatively, the client may receive the login account, the login password, and the information of the payment in the secure environment.
In implementations, the client may include a smart television client or a set-top box client.
According to technical solutions of the present disclosure, by performing operations such as a server certificate check, generation and encryption of a session key, secure input and secure transmission of transaction-related information in a secure environment, the security of user login information and user private information is effectively ensured.
Brief Description of the Drawings
The drawings described herein are used for providing a deeper understanding of the present disclosure, and constitute a part of the disclosure. Illustrative embodiments of the present disclosure and a description thereof are used for illustrating the present disclosure, and should not be construed as improper limitations to the present disclosure. I n the drawings:
FIG. 1 is a flowchart of a transaction processing method based on a trusted execution environment according to an embodiment of the present disclosure.
FIG. 2 is a flowchart of verifying a certificate of a server according to an embodiment of the present disclosure.
FIG. 3 is a flowchart of generating a session key and uploading thereof to a server according to an embodiment of the present disclosure.
FIG. 4 is a flowchart of obtaining login information and performing a login according to an embodiment of the present disclosure.
FIG. 5 is a structural diagram of a client according to an embodiment of the present disclosure.
FIG. 6 is a structural diagram of a client according to another embodiment of the present disclosure.
Detailed Description
In order to understand the objectives, technical solutions, and advantages of the present disclosure in a better manner, the technical solutions of the present disclosure are clearly and fully described hereinafter with reference to exemplary embodiments and accompanying drawings. Apparently, the described embodiments represent merely a part of and not all of the embodiments of the present disclosure. All other embodiments obtained by one of ordinary skill in the art based on the embodiments of the present disclosure without making any creative effort shall fall within the scope of protection of the present disclosure.
According to an embodiment of the present disclosure, a transaction processing method based on a trusted execution environment is provided. The trusted execution environment (or TEE) technology provides a secure execution environment, so that codes operating in this mode are not attacked by malicious software. According to a basic principle thereof, only trusted codes that pass a signature verification are able to operate in the TEE environment, and sensitive data that is operated by these codes is strictly protected in a secure memory and is not accessed by a non-TEE code. In the present disclosure, two operating modes of environments are included. One is Normal Environment (or Normal World), which is able to execute rich instructions, and is referred to as a Rich Execution Environment (REE). The other mode is Secure Environment (or Secure World), which can only execute trusted instructions, and is referred to as a TEE environment. Moreover, these two operating environments can be switched between each other according to needs.
FIG. 1 shows a flowchart of a transaction processing method 100 based on a trusted execution environment according to an embodiment of the present disclosure. As shown in FIG. 1, the method 100 may include the following operations.
At S102, a client performs verification of a server in a secure environment, and obtains a public key of the server after the verification is passed, where the client may be a smart television client or a set-top box client.
At S104, the client generates a session key, and encrypts the session key using the public key in the secure environment.
At S106, the client transmits the encrypted session key to the server in a normal environment.
At S108, the client encrypts pre-obtained login information using the session key in the secure environment, and transmits the encrypted login information to the server in the normal environment.
In the embodiments of the present disclosure, the secure environment and the normal environment correspond to a secure region and an insecure region, respectively that are provided by performing a physical separation in CPU hardware through a particular mechanism (e.g., ARM * TrustZone or Tl M-Shield mechanism). The secure environment provides a trusted execution environment (TEE) for sensitive applications or data. The secure environment performs a verification and/or access authorization for the client in advance.
The client passes the verification and/or the authorization of the secure environment in advance, and therefore can access a specified buffer (secure buffer) and a specified storage (secure storage) in the secure environment. In other words, the client can perform operations in the secure environment. According to the embodiments of the present disclosure, performing operations such as a server certificate check, generation and encryption of a session key, secure input and secure transmission of transaction-related information in a secure environment can effectively protect the security of user login information and user private information.
Exemplary embodiments of the present disclosure are described in detail hereinafter with reference to FIGS. 2-4. FIG. 2 shows a flowchart of verifying a certificate of a server according to an embodiment of the present disclosure. As shown in FIG. 2, a method 200 may include the following operations.
At S202, a client downloads a certificate of a server via a network in a normal environment, wherein the client includes a networking module that is able to download the certificate of the server over the I nternet.
At S204, the certificate of the server is stored in a share buffer, where the share buffer is a buffer accessible in both normal environment and secure environment. I n other words, in both normal environment and secure environment, data can be stored into the share buffer, and the data that is stored in the share buffer can be obtained.
At S206, the normal environment is switched to the secure environment.
At S208, the client obtains the certificate of the server from the share buffer in the secure environment.
At S210, in the secure environment, the client verifies the certificate of the server using a pre-downloaded verification key, obtains a public key of the certificate of the server after successfully verifying the certificate of the server, and stores the public key of the certificate of the server in a secure buffer. The secure buffer is accessible only in the secure environment, that is, data stored in the secure buffer will not be attacked by malicious software.
When the secure environment is initialized, the client can download a verification key (pub_serv_CA) that is used for verifying the certificate of the server from a secure storage to the secure buffer accessible in the secure environment.
FIG. 3 shows a flowchart of generating a session key and uploading the session key to a server according to an embodiment of the present disclosure. As shown in FIG. 3, a method 300 thereof may include the following operations. At S302, a client generates a session key (Session Key) in a secure environment, and stores the session key into a secure buffer, where the session key is a key using a symmetric encryption algorithm, such session key is generated in each session between the client end and a server, and is terminated after the session is ended.
At S304, a stored public key is read from the secure buffer, and the session key is encrypted using the public key to obtain an encrypted session key (Session Key').
At S306, the client stores the encrypted session key into a share buffer.
At S308, the secure environment is switched to a normal environment.
At S310, the client obtains the encrypted session key from the share buffer and transmits the encrypted session key to the server in the normal environment.
In implementations, after the above operations are performed, the server obtains the session key (Session Key') that is encrypted using the public key of the server. The server may then decrypt the session key (Session Key') using a private key thereof to obtain a decrypted session key (Session Key). The session key (Session Key) is used in subsequent login and payment operations.
FIG. 4 is a flowchart of obtaining login information and performing a login according to an embodiment of the present disclosure. As shown in FIG. 4, a method 400 thereof may include the following operations.
At S402, a client receives transaction data information such as a login account, a login password and payment information. In implementations, the payment information may include, but is not limited to, an account number tag (Tag), a payment amount, a bill number, payment merchant information, etc. In implementations, the login account may be received in a normal environment, and the login password and the payment information may be received in a secure environment. Alternatively, the login account number, the login password, and the payment information may be received in the secure environment.
In a real application, transaction data information may be inputted by a user using an input device such as an infrared (IR) remote control, or a Bluetooth/WiFi remote control, etc. The inputted data, such as a login password and payment information, may directly be stored into a secure buffer. At S404, the client encrypts the obtained transaction information using a session key in a secure environment.
At S406, the secure environment is switched into a normal environment.
At S408, the client transmits the encrypted transaction information to the server in the normal environment.
In implementations, after receiving the transaction information that is encrypted using the session key, the server may decrypt the received transaction information using the session key obtained in FIG. 3 to obtain decrypted data information such as the login account, the login password, and the payment information. The server may then verify an identity of the client based on the transaction information and perform operations such as subsequent transaction, which is not redundantly described in detail herein.
FIG. 5 shows a structural block diagram of a client 500 according to an embodiment of the present disclosure. The client may be a smart television client or a set-top box client. Moreover, the client has passed a check and/or an authorization by a secure environment in advance, and thus is able to access a specified buffer (secure buffer) and a specified storage (secure storage) in the secure environment. In other words, the client can perform operations in the secure environment. In implementations, the client may include one or more computing devices. In a typical configuration, a computing device includes one or more Central Processing Units (CPUs), I/O interfaces, network interfaces and memory. By way of example and not limitations, the client 500 may include one or more processors 502, an input/output (I/O) interface 504, a network interface 506 and memory 508.
The memory 508 may include a form of computer-readable media, e.g., a non-permanent storage device, random-access memory (RAM) and/or a nonvolatile internal storage, such as read-only memory (ROM) or flash RAM. The memory 508 is an example of computer-readable media.
The computer-readable media may include a permanent or non-permanent type, a removable or non-removable media, which may achieve storage of information using any method or technology. The information may include a computer-readable instruction, a data structure, a program module or other data. Examples of computer storage media include, but not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random-access memory (RAM), read-only memory (ROM), electronically erasable programmable read-only memory (EEPROM), quick flash memory or other internal storage technology, compact disk read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassette tape, magnetic disk storage or other magnetic storage devices, or any other non-transmission media, which may be used to store information that may be accessed by a computing device. As defined herein, the computer-readable media does not include transitory media, such as modulated data signals and carrier waves.
In implementations, the memory 508 may include program modules 510 and program data 512. The program module 510 may include a verification module 514, a session key generation module 516, a first transmission module 518, an encryption module 520 and a second transmission module 522. The structures and functions of the modules are described in detail hereinafter.
The verification module 514 performs verification of a server in a secure environment, and obtain a public key of the server after the verification is passed. The session key generation module 516 generates a session key, and encrypts the session key using the public key in the secure environment. The first transmission module 518 transmits the encrypted session key to the server in a normal environment. Furthermore, the session key generation module 516 stores the encrypted session key into a share buffer. After the secure environment is switched into the normal environment, the first transmission module 518 obtains the encrypted session key from the share buffer and transmits the encrypted session key to the server in the normal environment. The encryption module 520 encrypts pre-obtained transaction information using the session key in the secure environment, where the transaction information includes a login account, a login password and payment information. The second transmission module 522 transmits the encrypted transaction information to the server in the normal environment. In implementations, the first transmission module 518 and the second transmission module 522 may be integrated together, which is not repeatedly described in detail herein.
FIG. 6 shows a structural block diagram of a client 600 according to another embodiment of the present disclosure. As shown in FIG. 6, the client 600 may include one or more processors 602, an input/output (I/O) interface 604, a network interface 606 and memory 608. The memory 608 may include a form of computer-readable media as described in the foregoing description.
In implementations, the memory 608 may include program modules 610 and program data 612. The program module 610 may include a verification module 614, a session key generation module 616, a first transmission module 618, an encryption module 620, a second transmission module 622, a first acquisition module 624, and a second acquisition module 626. I n implementations, the verification module 614, the session key generation module 616, the first transmission module 618, the encryption module 620 and the second transmission module 622 are similar to the verification module 514, the session key generation module 516, the first transmission module 518, the encryption module 520, and the second transmission module 522 as shown in FIG. 5 respectively, and thus are not repeatedly described in detail herein.
In implementations, the first acquisition module 624 may download a certificate of the server via a network in the normal environment, store the certificate of the server into the share buffer, and obtain the certificate of the server from the share buffer under the secure environment after the normal environment is switched to the secure environment. Furthermore, the verification module 614 verifies the certificate of the server obtained by the first acquisition module 624 using a pre-downloaded verification key, and stores the public key of the certificate of the server into the secure buffer in the secure environment after successfully verifying the certificate of the server.
In implementations, the second acquisition module 626 may receive a login account in the normal environment, and receive a login password and payment information in the secure environment. Alternatively, the second acquisition module 626 may receive the login account number, the login password and the payment information in the secure environment. Furthermore, the encryption module 620 may obtain transaction information through the second acquisition module 626 and performs an encryption processing thereon.
In the present disclosure, the operations of the methods and the structural features of the apparatuses are corresponding to each other, and thus can be cross-referenced. Details thereof are not repeatedly described herein. According to the technical solutions of the present disclosure, by performing operations, such as a server certificate check, generation and encryption of a session key, secure input and secure transmission of transaction-related information, etc., in a secure environment, the security of user login information and private information is effectively ensured.
One skilled in the art should understand that the embodiments of the present disclosure may be provided as a method, a system or a computer program product. Therefore, the present disclosure may be implemented in a form of a completely hardware embodiment, a completely software embodiment, or an embodiment of a combination of software and hardware. Moreover, the present disclosure may be achieved in a form of a computer program product that is implemented on one or more com puter usable storage media (including, but not limited to, a magnetic disk memory, a CD-ROM, an optical memory, etc.) that include computer usable program codes.
It should further be noted that terms such as "comprise", "include" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, product or apparatus that includes a series of elements would not only include these elements, but also include other element(s) that is/are not explicitly listed, or further include element(s) that is/are inherent in the process, method, product or apparatus. Without further restrictions, an element defined by a phrase "comprising a ..." does not preclude a n additional inclusion of other identical element(s) in a process, method, product or apparatus that include this element.
Exemplary embodiments of the present disclosure are described in the foregoing, and are not intended to limit the present disclosure. One skilled in the art should understand that the present disclosure may have various modifications and variations. Any modification, equivalent replacement, improvement or the like made with the spirit and principle of the present disclosure should be included within the scope of appended claims of the present disclosure.

Claims

Claims What is claimed is:
1. A method implemented by a client device including one or more computing devices, the method comprising:
performing verification of a server in a secure environment, and obtaining a public key of the server in the secure environment after the verification is passed;
generating a session key and encrypting the session key using the public key in the secure environment;
transmitting the encrypted session key to the server in a normal environment; and encrypting pre-obtained transaction information using the session key in the secure environment, and transmitting the encrypted transaction information to the server in the normal environment.
2. The method of claim 1, further comprising:
downloading a certificate of the server over a network, and storing the certificate of the server into a share buffer in the normal environment; and
obtaining the certificate of the server from the share buffer in the secure environment after switching from the normal environment to the secure environment.
3. The method of claim 2, wherein performing the verification of the server in the secure environment includes verifying the certificate of the server using a pre-downloaded verification key and storing a public key of the certificate of the server into a secure buffer in the secure environment after successfully verifying the certificate of the server.
4. The method of claim 1, further comprising:
storing the encrypted session key into a share buffer after the session key is encrypted using the public key; and
obtaining the encrypted session key from the share buffer in the normal environment, and transmitting the encrypted session key to the server in the normal environment after switching from the secure environment to the normal environment.
5. The method of claim 1, wherein the transaction information includes a login account, a login password and payment information.
6. The method of claim 5, wherein the login account is received in the normal environment, and the login password and the payment information is received in the secure environment.
7. The method of claim 5, wherein the login account, the login password and the payment information are received in the secure environment.
8. The method of claim 1, wherein the client device comprises a smart television or a set-top box.
9. A client device comprising:
one or more processors;
memory;
a verification module stored in the memory and executable by the one or more processors to perform verification of a server in a secure environment, and obtain a public key of the server in the secure environment after the verification is passed;
a session key generation module stored in the memory and executable by the one or more processors to generate a session key in the secure environment, and encrypt the session key using the public key in the secure environment;
a first transmission module stored in the memory and executable by the one or more processors to transmit an encrypted session key to the server in a normal environment; an encryption module stored in the memory and executable by the one or more processors to encrypt pre-obtained transaction information using the session key in the secure environment; and a second transmission module stored in the memory and executable by the one or more processors to transmit the encrypted transaction information to the server in the normal environment.
10. The client device of claim 9, further comprising a first acquisition module stored in the memory and executable by the one or more processors to download a certificate of the server over a network in the normal environment, store the certificate of the server into a share buffer in the normal environment;, and obtain the certificate of the server from the share buffer in the secure environment after the normal environment is switched to the secure environment.
11. The client device of claim 107 wherein the verification module further verifies the certificate of the server using a pre-downloaded verification key in the secure environment, and store a public key of the certificate of the server into a secure buffer in the secure environment after the certificate of the server is successfully verified.
12. The client device of claim 9, wherein the session key generation module further stores the encrypted session key into a share buffer, and wherein the first transmission module further obtains the encrypted session key from the share buffer in the normal environment, and transmit the encrypted session key to the server after the secure environment is switched to the normal environment.
13. The client device of claim 9, wherein the transaction information includes a login account, a login password and payment information.
14. The client device of claim 13, further comprising a second acquisition module stored in the memory and executable by the one or more processors to receive the login account in the normal environment, and receive the login password and the payment information in the secure environment.
15. The client device of claim 13, further comprising a second acquisition module stored in the memory and executable by the one or more processors to receive the login account, the login password and the payment information in the secure environment.
16. The client device of claim 9, wherein the client has passed a security check and/or an access authorization of the secure environment in advance.
17. One or more computer-readable media storing executable instructions that, when executed by one or more processors, cause the one or more processors to perform acts comprising:
performing verification of a server in a secure environment, and obtaining a public key of the server in the secure environment after the verification is passed;
generating a session key and encrypting the session key using the public key in the secure environment;
transmitting the encrypted session key to the server in a normal environment; and encrypting pre-obtained transaction information using the session key in the secure environment, and transmitting the encrypted transaction information to the server in the normal environment.
18. The one or more computer-readable media of claim 17, the acts further comprising: downloading a certificate of the server over a network in the normal environment, and storing the certificate of the server into a share buffer in the normal environment;
obtaining the certificate of the server from the share buffer in the secure environment after switching from the normal environment to the secure environment.
19. The one or more computer-readable media of claim 18, wherein performing the verification of the server in the secure environment includes verifying the certificate of the server using a pre-downloaded verification key and storing a public key of the certificate of the server into a secure buffer in the secure environment after successfully verifying the certificate of the server.
20. The one or more computer-readable media of claim 17, the acts further comprising: storing the encrypted session key into a share buffer after the session key is encrypted using the public key; and
obtaining the encrypted session key from the share buffer in the normal environment, and transmitting the encrypted session key to the server in the normal environment after switching from the secure environment to the normal environment.
PCT/US2016/045848 2015-08-07 2016-08-05 Transaction processing method and client based on trusted execution environment Ceased WO2017027401A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510484684.1A CN106454528A (en) 2015-08-07 2015-08-07 Service processing method based on trusted execution environment and client side
CN201510484684.1 2015-08-07

Publications (1)

Publication Number Publication Date
WO2017027401A1 true WO2017027401A1 (en) 2017-02-16

Family

ID=57984118

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2016/045848 Ceased WO2017027401A1 (en) 2015-08-07 2016-08-05 Transaction processing method and client based on trusted execution environment

Country Status (4)

Country Link
US (1) US10432611B2 (en)
CN (1) CN106454528A (en)
TW (1) TW201707468A (en)
WO (1) WO2017027401A1 (en)

Families Citing this family (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102015114544A1 (en) * 2015-08-31 2017-03-02 Uniscon Universal Identity Control Gmbh Method for secure and efficient access to connection data
KR102604046B1 (en) * 2016-11-28 2023-11-23 삼성전자주식회사 Method for Managing Program and Electronic Device supporting the same
CN108513135A (en) * 2017-02-27 2018-09-07 诺基亚技术有限公司 Image encryption and decryption
US10528749B2 (en) * 2017-03-20 2020-01-07 Huawei Technologies Co., Ltd. Methods and apparatus for containerized secure computing resources
CN107318148B (en) * 2017-06-27 2020-09-08 北京小米移动软件有限公司 Wireless local area network access information storage method and device
CN111066284B (en) * 2017-10-09 2021-06-29 华为技术有限公司 A business certificate management method, terminal and server
WO2019084908A1 (en) * 2017-11-03 2019-05-09 Nokia Technologies Oy Method and apparatus for trusted computing
CN109905350B (en) * 2017-12-08 2022-08-12 阿里巴巴集团控股有限公司 A data transmission method and system
CN109039598A (en) * 2018-07-03 2018-12-18 福建天晴数码有限公司 Data transfer encryption method, client and server-side
CN110781492B (en) * 2018-07-31 2023-09-26 阿里巴巴集团控股有限公司 Data processing methods, devices, equipment and storage media
CN110881015B (en) * 2018-09-05 2021-10-01 程强 System and method for processing user information
CN109815659A (en) * 2018-12-15 2019-05-28 深圳壹账通智能科技有限公司 WEB project-based security authentication method, device, electronic device and storage medium
CN110060055B (en) * 2019-03-18 2022-04-08 杭州秘猿科技有限公司 Digital asset hosting method and device in block chain and electronic equipment
ES2872101T3 (en) * 2019-04-26 2021-11-02 Advanced New Technologies Co Ltd Distributed key management for trusted runtime environments
CN110245518B (en) * 2019-05-31 2024-05-17 创新先进技术有限公司 Data storage method, device and equipment
US10783277B2 (en) 2019-05-31 2020-09-22 Alibaba Group Holding Limited Blockchain-type data storage
CN111047443B (en) * 2019-11-29 2021-01-12 支付宝(杭州)信息技术有限公司 User scoring method and device, electronic equipment and computer readable storage medium
CN111127014B (en) * 2019-12-25 2023-09-19 中国银联股份有限公司 Transaction information processing method, server, user terminal, system and storage medium
CN111859442A (en) * 2020-01-21 2020-10-30 北京嘀嘀无限科技发展有限公司 Rights configuration method, rights configuration system, and computer-readable storage medium
CN113268737A (en) * 2020-02-15 2021-08-17 阿里巴巴集团控股有限公司 Environment security verification method, system and client
CN111538995B (en) * 2020-04-26 2021-10-29 支付宝(杭州)信息技术有限公司 A data storage method, device and electronic device
CN111510462B (en) * 2020-04-28 2022-07-08 拉扎斯网络科技（上海）有限公司 Communication method, system, apparatus, electronic device, and readable storage medium
CN111510918B (en) * 2020-04-28 2022-08-02 拉扎斯网络科技（上海）有限公司 Communication method, system, apparatus, electronic device, and readable storage medium
CN111885091B (en) * 2020-08-07 2022-04-29 北京经纬恒润科技股份有限公司 Secure communication method, device, equipment and storage medium
CN112350922A (en) * 2020-10-16 2021-02-09 卓尔智联(武汉)研究院有限公司 Mail processing method, device, server and storage medium
CN114124434B (en) * 2021-09-26 2024-09-17 支付宝(杭州)信息技术有限公司 TEE-based network communication method, device and system
CN114143117B (en) * 2022-02-08 2022-07-22 阿里云计算有限公司 Data processing method and device
CN114866409B (en) * 2022-04-27 2024-03-26 阿里巴巴（中国）有限公司 Password acceleration method and device based on password acceleration hardware

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020129245A1 (en) * 1998-09-25 2002-09-12 Cassagnol Robert D. Apparatus for providing a secure processing environment
US20060039560A1 (en) * 2004-08-18 2006-02-23 Wasilewski Anthony J Utilization of encrypted hard drive content by one DVR set-top box when recorded by another
US7062658B1 (en) * 2001-07-26 2006-06-13 Cisco Technology, Inc Secure digital appliance and method for protecting digital content
US20080005030A1 (en) * 2006-06-30 2008-01-03 Scientific-Atlanta, Inc. Secure Escrow and Recovery of Media Device Content Keys
US20110145562A1 (en) * 2009-12-10 2011-06-16 General Instrument Corporation System and method for securely transfering content from set-top box to personal media player

Family Cites Families (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6581162B1 (en) 1996-12-31 2003-06-17 Compaq Information Technologies Group, L.P. Method for securely creating, storing and using encryption keys in a computer system
US7500098B2 (en) 2004-03-19 2009-03-03 Nokia Corporation Secure mode controlled memory
CN1753359B (en) * 2004-09-24 2011-01-19 华为技术有限公司 Method of implementing SyncML synchronous data transmission
US8332653B2 (en) 2004-10-22 2012-12-11 Broadcom Corporation Secure processing environment
CN101340281B (en) * 2007-07-02 2010-12-22 联想(北京)有限公司 Method and system for safe login input on network
CN101916388B (en) * 2010-07-27 2013-06-05 武汉天喻信息产业股份有限公司 Smart SD card and method for using same for mobile payment
CN101964793A (en) * 2010-10-08 2011-02-02 上海银联电子支付服务有限公司 Method and system for transmitting data between terminal and server and sign-in and payment method
WO2012174427A2 (en) * 2011-06-16 2012-12-20 OneID Inc. Method and system for determining authentication levels in transactions
EP4322465A3 (en) * 2011-12-15 2024-04-17 Daedalus Prime LLC Method and device for secure communications over a network using a hardware security engine
CN103595530B (en) * 2012-08-17 2017-04-26 华为技术有限公司 Software secret key updating method and device
EP2936761B1 (en) * 2012-12-20 2019-07-24 Telefonaktiebolaget LM Ericsson (publ) Technique for enabling a client to provide a server entity
WO2014138626A1 (en) * 2013-03-08 2014-09-12 Robert Bosch Gmbh Systems and methods for maintaining integrity and secrecy in untrusted computing platforms
CN105765598B (en) * 2013-12-24 2020-11-24 英特尔公司 Privacy enforcement via localization personalization
CN103745155A (en) 2014-01-03 2014-04-23 东信和平科技股份有限公司 Credible Key and safe operation method thereof
US9569602B2 (en) * 2014-03-20 2017-02-14 Oracle International Corporation Mechanism for enforcing user-specific and device-specific security constraints in an isolated execution environment on a device
CN104010044B (en) 2014-06-12 2018-02-23 北京握奇数据系统有限公司 Application based on credible performing environment technology is limited installation method, manager and terminal
CN104125216B (en) 2014-06-30 2017-12-15 华为技术有限公司 A kind of method, system and terminal for lifting credible performing environment security
US9455979B2 (en) * 2014-07-31 2016-09-27 Nok Nok Labs, Inc. System and method for establishing trust using secure transmission protocols
US9639839B2 (en) * 2014-08-12 2017-05-02 Egis Technology Inc. Fingerprint recognition control methods for payment and non-payment applications
US9722775B2 (en) * 2015-02-27 2017-08-01 Verizon Patent And Licensing Inc. Network services via trusted execution environment
CN104700268B (en) 2015-03-30 2018-10-16 中科创达软件股份有限公司 A kind of method of mobile payment and mobile device

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020129245A1 (en) * 1998-09-25 2002-09-12 Cassagnol Robert D. Apparatus for providing a secure processing environment
US7062658B1 (en) * 2001-07-26 2006-06-13 Cisco Technology, Inc Secure digital appliance and method for protecting digital content
US20060039560A1 (en) * 2004-08-18 2006-02-23 Wasilewski Anthony J Utilization of encrypted hard drive content by one DVR set-top box when recorded by another
US20080005030A1 (en) * 2006-06-30 2008-01-03 Scientific-Atlanta, Inc. Secure Escrow and Recovery of Media Device Content Keys
US20110145562A1 (en) * 2009-12-10 2011-06-16 General Instrument Corporation System and method for securely transfering content from set-top box to personal media player

Also Published As

Publication number Publication date
TW201707468A (en) 2017-02-16
US10432611B2 (en) 2019-10-01
CN106454528A (en) 2017-02-22
US20170041312A1 (en) 2017-02-09

Similar Documents

Publication Publication Date Title
US10432611B2 (en) Transaction processing method and client based on trusted execution environment
US10469469B1 (en) Device-based PIN authentication process to protect encrypted data
KR102221541B1 (en) Method and device for providing and obtaining graphic code information, and terminal
CN107743133B (en) Mobile terminal and access control method and system based on trusted security environment
US10666642B2 (en) System and method for service assisted mobile pairing of password-less computer login
CN109075976B (en) Certificate issuance depending on key authentication
CN110492990B (en) Private key management method, device and system in blockchain scenario
CN106104542B (en) Content Protection for Data as a Service (DaaS)
US9853957B2 (en) DRM protected video streaming on game console with secret-less application
US9363259B2 (en) Performing client authentication using onetime values recovered from barcode graphics
US10164963B2 (en) Enforcing server authentication based on a hardware token
CN107005407B (en) Remote password service using TPM of server
US20170063827A1 (en) Data obfuscation method and service using unique seeds
CN108616352B (en) Dynamic password generation method and system based on secure element
US8977857B1 (en) System and method for granting access to protected information on a remote server
CN109145628B (en) Data acquisition method and system based on trusted execution environment
WO2024198933A1 (en) Private key protection method, server access method, system, device, and storage medium
KR101690989B1 (en) Method of electric signature using fido authentication module
US9621546B2 (en) Method of generating one-time password and apparatus for performing the same
JP6188633B2 (en) Computer system, computer, semiconductor device, information processing method, and computer program
CN108235067B (en) Authentication method and device for video stream address
CN115277082B (en) Verification method and device for third party application
KR20190070691A (en) Program executing authority authentication method and system
CN115941336A (en) Data processing method, device and equipment
HK1233808A1 (en) Service processing method based on trusted execution environment and client side

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16835707

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16835707

Country of ref document: EP

Kind code of ref document: A1