System and method for secure transactions with a trusted execution environment (TEE)
AssigneeSamsung Electronics Co., Ltd.
InventorsYifei Wang, An Liu, Pai Peng, Peng Ning
Life of this patent
Estimating the term…
Abstract
A mobile communications device includes a near field communications (NFC) port and processor. The processor executes a trusted application within a trusted execution environment (TEE) for processing sensitive data. Additionally, the processor executes a NFC driver within the TEE for providing a secure channel between the trusted application and the NFC port such that sensitive data being exchanged across the secure channel are inaccessible to other processes being executed by the processor.
Claims18
A mobile communications device comprising:
- a near field communications (NFC) port;
- a processor;
- and
- a memory containing instructions that, when executed by the processor, cause the mobile communications device to:
- implement a kernel space;
- execute a trusted application within a trusted execution environment (TEE) for processing protected data, wherein the TEE is separate from the kernel space;
- encrypt the protected data in the TEE;
- receive a request for the protected data from an external device communicatively connected to the mobile communications device via the NFC port;
- responsive to receiving the request from the external device, pass the encrypted protected data to
- an NFC driver executing within the TEE;
- responsive to passing the encrypted protected data to the NFC driver executing within the TEE, disable a second NFC driver executing within the kernel space;
- and
- pass the encrypted protected data from the NFC driver executing within the TEE to the NFC port.
A method of performing a transaction within a mobile device having a near field communications (NFC) port, the method comprising:
- executing, by a processor of the mobile device, a trusted application within a trusted execution environment (TEE) to process protected data, wherein the TEE is outside of a kernel space implemented by the processor;
- encrypting the protected data in the TEE;
- receiving a request for the protected data from an external device, the external device communicatively connected to the mobile device via the NFC port;
- responsive to receiving the request from the external device, passing the encrypted protected data to
- an NFC driver executing within the TEE;
- responsive to passing the encrypted protected data to the NFC driver executing within the TEE, disabling a second NFC driver executing within the kernel space;
- and
- passing the encrypted protected data from the NFC driver executing within the TEE to the NFC port.
Dependencies are inferred from the claim text.