Mobile payment system and method based on trusted execution environment

Abstract

The invention discloses a mobile payment system and method based on a trusted execution environment, and relates to the technical field of mobile payment. According to the mobile payment system, a hardware environment module, a client terminal application module and a trusted application module are connected in a pairwise mode. The mobile payment method includes the steps that a virtual card number of the client terminal application module is transmitted to the trusted application module to be processed, then the virtual card number is returned to the client terminal application module, and afterwards the virtual card number is transmitted to a POS front end for conducting verification and consumption. The mobile payment system and method based on the trusted execution environment are suitable for near field mobile payment equipment, and the security is high.

Description

technical field [0001] The present invention relates to the technical field of mobile payment, in particular to a mobile payment system and method based on Trusted Execution Environment (TEE, Trusted Execution Environment). Background technique [0002] With the rapid development of mobile Internet and mobile finance, mobile payment schemes emerge in endlessly, including near-field payment, remote payment, QR code payment, etc. Some mobile payment schemes need to bind bank cards, and some mobile payment schemes are controlled by SE (Security Element), SIM, SD and other security chips are completed, and some are completed by mobile phones. For the current mobile payment that is completely realized by mobile phones, such as mobile banking, it is not limited to the restrictions of operators or payment carriers. It only needs to install a mobile application to realize convenient and fast payment, but mobile phone Trojans, malicious plug-ins and other malicious software and The ...

AI Technical Summary

Problems solved by technology

For the current mobile payment that is completely realized by mobile phones, such as mobile banking, it is not limited to the restrictions of operators or payment carriers. It only needs to install a mobile application to realize convenient and fast payment. However, malware such as mobile phone Trojan horses and malicious plug-ins and The phenomenon of popular mobile apps being tampered with and disguised is becoming more and more serious. On the one hand, the terminal hardware of the mobile phone lacks security protection, and there are security holes in the system. Execution; on the other hand, system vulnerability makes it vulnerable to attacks. Illegal programs will use vulnerabilities to obtain special permissions, so that program codes and data cannot be protected. Attack programs can capture program data and modify program flows. In short, the current mobile The payment device lacks a trusted execution environment, and it is difficult to guarantee the security of funds and transactions, so the security of mobile payment is low

Images