Mobile platform credibility payment system and method

Abstract

The invention discloses a mobile platform credibility payment system and method. The system comprises a credibility operating system, an ordinary operating system, a virtual machine manager, a safety browser, a monitoring program and a hardware layer. The method comprises the steps that customized mirror image documents of the operating systems are stored into a storage card, and the mirror image documents are measured through a TPM chip every time before the operating systems are started; the mobile platform credibility payment system is named as the credibility operating system, the credibility operating system can be updated only through authorization of a third-party credibility mechanism, a user uses the ordinary mobile phone operating system at ordinary times, however, when detecting that the user wants to make payments, the credibility payment system can be automatically switched into the credibility operating system for carrying out the payment operation, and a website needed by the payment operation is encrypted after being verified by a payment website database and is loaded into the credibility operating system. The mobile platform credibility payment system provides the payment environment with the high safety protection for a user, and meanwhile the mobile platform credibility payment system can support hardware platforms of different frameworks due to the fact that the method is based on the virtualization technology.

Description

[0001] technical field [0002] The invention belongs to the field of Internet technology, and relates to a mobile platform trusted payment system and method, in particular to a trusted platform module (Trusted Platform Module, TPM) and virtualization technology-based trusted payment system and method. Background technique [0003] With the increasing popularity of smart phones, mobile payment has also been widely used, and the attacks on mobile payment have also increased sharply. The research on mobile payment security has gradually received attention. Virtualization technology has been widely used in research because of its strict independence and security performance provided by secure communication. [0004] Virtualization technology provides isolation and secure communication between multiple virtual execution environments, namely virtual machines. The trusted measurement ensures the integrity of applications and data. In 2012, Giovanni Russell of the University of...

AI Technical Summary

Problems solved by technology

In 2012, Giovanni Russell of the University of Auckland in New Zealand and others proposed a policy-based Android framework called MOSES, which can provide isolation protection for applications and data, but it lacks the integrity measurement of the operating environment

In 2011, Jeremy Andrus of Columbia University and others successfully realized running multiple virtual phones on one phone. The lightweight virtualization method he used tried to share some storage between different virtual phones to save resources, but he The virtual machine cannot be transferred between different mobile devices, and at the same time, it does not consider whether the integrity of the virtual mobile phone is damaged

However, this method mainly uses the ARM CPU to isolate the system and lacks platform versatility

In addition, for the trusted execution environment, only isolation technology is used, it is not measured, and it lacks integrity protection

Images