# US 12,001,596 B2 · Transaction security processing method and apparatus, and terminal device for using a trusted application in association with an audio file

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,001,596 B2
- Document ID: US12001596B2
- Status: Granted
- Kind: B2
- Application number: 17/359,846
- Filed: 2021-06-28
- Published: 2021-10-21
- Granted: 2024-06-04
- Earliest claimed: 2018-12-29
- Assignees: Huawei Technologies Co., Ltd.
- Applicants: Huawei Technologies Co., Ltd.
- Inventors: Xiaochu Wang; Peng Zhang; Gaosheng Yin
- Web page: https://patentgrep.com/patent/US12001596B2

## CPC

- G06F 21/84: output devices, e.g. displays or monitors
- G06F 3/165: {Management of the audio stream, e.g. setting of volume, audio stream path}
- G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine
- G06F 21/54: by adding security routines or objects to programs
- G06F 21/556: {involving covert channels, i.e. data leakage between processes (inhibiting the analysis of circuitry or operation with measures against power attack G06F21/755)}
- G06F 21/602: {Providing cryptographic facilities or services}
- G06Q 20/3227: {using secure elements embedded in M-devices}
- G06Q 20/326: {Payment applications installed on the mobile devices}
- G06Q 20/3272: {using an audio code}
- G06Q 20/3829: {involving key management}
- G06Q 20/401: {Transaction verification}
- G06F 2221/031: Protect user input by software means
- G09B 21/006: {using audible presentation of the information}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G09B: EDUCATIONAL OR DEMONSTRATION APPLIANCES; APPLIANCES FOR TEACHING, OR COMMUNICATING WITH, THE BLIND, DEAF OR MUTE; MODELS; PLANETARIA; GLOBES; MAPS; DIAGRAMS (devices for psychotechnics or for testing reaction times A61B5/16; games, sports, amusements A63; projectors, projector screens G03B)

## Abstract

The technology of this application relates to a transaction security processing method and apparatus, and a terminal device. The method includes receiving, in a rich execution environment (REE), a screen jump instruction triggered by a user in a first screen, where the screen jump instruction is used for jumping to a second screen, and the second screen can be displayed in a trusted execution environment (TEE), and entering the TEE and loading a trusted application (TA) in the TEE. The method further includes obtaining a first audio file from storage space on an REE side and playing the first audio file by using the TA, where the first audio file is used to represent that the terminal device is currently running in a trusted environment, and displaying the second screen generated by using the TA.

## Claims

### Claim 1

A transaction security processing method, applied to a terminal device that includes a rich execution environment (REE) and a trusted execution environment (TEE), the method comprising:
receiving, in the REE, a screen jump instruction triggered by a user on a first screen, wherein the screen jump instruction is used for jumping to a second screen, and the second screen is displayable only in the TEE;
entering the TEE and loading a trusted application (TA) in the TEE;
obtaining a first audio file from storage space on an REE side and playing the first audio file by using the TA, wherein the first audio file is pre-stored by the user and represents that the terminal device is currently running in a trusted environment; and
displaying the second screen generated by using the TA.

### Claim 2 (depends on 1)

The method according to claim 1, wherein before obtaining the first audio file from the storage space on the REE side and playing the first audio file by using the TA, the method further comprises:
adjusting a mode of an audio output device of the terminal device to a first mode by using the TA, wherein
when the audio output device is in the first mode, the audio output device is controlled by using the TA, and
playing the first audio file by using the TA comprises controlling, by using the TA, the audio output device to play the first audio file.

### Claim 3 (depends on 2)

The method according to claim 2, wherein adjusting the mode of the audio output device to the first mode comprises:
invoking a first interface, that includes an interface in the REE, by using the TA to adjust the mode of the audio output device of the terminal device to the first mode.

### Claim 4 (depends on 1)

The method according to claim 1, wherein obtaining the first audio file from the storage space on the REE side comprises:
invoking a first interface, that includes an interface in the REE, by using the TA to obtain the first audio file from the storage space on the REE side.

### Claim 5 (depends on 1)

The method according to claim 1, wherein obtaining the first audio file from the storage space on the REE side comprises:
obtaining an encrypted first audio file from the storage space on the REE side by using the TA, wherein playing the first audio file by using the TA comprises decrypting the encrypted first audio file by using the TA by using a key stored on a TEE side to obtain a decrypted first audio file; and
playing the decrypted first audio file by using the TA.

### Claim 6 (depends on 2)

The method according to claim 2, wherein after displaying the second screen generated by using the TA, the method further comprises:
adjusting the mode of the audio output device of the terminal device to a second mode by using the TA, wherein when the audio output device is in the second mode, the audio output device is controlled by using a client application (CA) running in the REE.

### Claim 7 (depends on 1)

The method according to claim 1, further comprising:
receiving, by using the TA, audio information entered by a first user and collected by an audio input device, wherein the audio input device is in a first mode;
generating the first audio file based on the audio information by using the TA; and
saving the first audio file to the storage space on the REE side by using the TA.

### Claim 8 (depends on 7)

The method according to claim 7, wherein saving the first audio file to the storage space comprises:
invoking a first interface, that includes an interface in the REE, by using the TA to save the first audio file to the storage space on the REE side.

### Claim 9 (depends on 7)

The method according to claim 7, wherein saving the first audio file to the storage space comprises:
encrypting the first audio file by using the TA by using a key to obtain the encrypted first audio file;
saving the key to the storage space on the TEE side by using the TA; and
saving the encrypted first audio file to the storage space on the REE side by using the TA.

### Claim 10 (depends on 1)

The method according to claim 1, wherein an audio feature of the first audio file includes a voice feature of the user.

### Claim 11

A terminal device, comprising:
a processor; and
a memory configured to store computer readable instructions that, when executed by the processor, cause the processor to:
receive, in a rich execution environment (REE), a screen jump instruction triggered by a user on a first screen, wherein the screen jump instruction is used for jumping to a second screen, and the second screen is configured for display in a trusted execution environment(TEE);
enter the TEE and load a trusted application (TA) in the TEE;
obtain a first audio file from storage space on an REE side and play the first audio file by using the TA, wherein the first audio file is pre-stored by the user and represents that the terminal device is currently running in a trusted environment; and
display the second screen generated by using the TA.

### Claim 12 (depends on 11)

The terminal device according to claim 11, wherein the processor is further caused to:
adjust a mode of an audio output device of the terminal device to a first mode by using the TA, wherein when the audio output device is in the first mode, the audio output device is controlled by using the TA; and
control, by using the TA, the audio output device to play the first audio file.

### Claim 13 (depends on 12)

The terminal device according to claim 12, wherein the processor is further caused to:
invoke a first interface, that includes an interface in the REE, by using the TA to adjust the mode of the audio output device of the terminal device to the first mode.

### Claim 14 (depends on 11)

The terminal device according to claim 11, wherein the processor is further caused to:
invoke a first interface, that includes an interface in the REE, by using the TA to obtain the first audio file from the storage space on the REE side.

### Claim 15 (depends on 11)

The terminal device according to claim 11, wherein the processor is further caused to:
obtain an encrypted first audio file from the storage space on the REE side by using the TA; and
decrypt the encrypted first audio file by using the TA by using a key stored on a TEE side to obtain a decrypted first audio file; and
play the decrypted first audio file by using the TA.

### Claim 16 (depends on 12)

The terminal device according to claim 12, wherein the processor is further caused to:
adjust the mode of the audio output device of the terminal device to a second mode by using the TA, wherein when the audio output device is in the second mode, the audio output device is controlled by using a client application (CA) running in the REE.

### Claim 17 (depends on 11)

The terminal device according to claim 11, wherein the processor is further caused to:
receive, by using the TA, audio information that is entered by a first user and that is collected by an audio input device, wherein the audio input device is in a first mode;
generate the first audio file based on the audio information by using the TA; and
save the first audio file to the storage space on the REE side by using the TA.

### Claim 18

A non-transitory storage medium having computer readable instructions that, when executed by one or more processors, cause the one or more processors to provide execution comprising:
receiving, in a rich execution environment (REE), a screen jump instruction triggered by a user on a first screen, wherein the screen jump instruction is used for jumping to a second screen, and the second screen is configured for display in a trusted execution environment(TEE); and
entering the TEE and loading a trusted application (TA) in the TEE;
obtaining a first audio file from storage space on an REE side and playing the first audio file by using the TA, wherein the first audio file is pre-stored by the user and represents that the terminal device is currently running in a trusted environment; and
displaying the second screen generated by using the TA.

### Claim 19 (depends on 18)

The non-transitory storage medium according to claim 18, wherein the one or more processors further being caused to provide execution comprising:
adjusting a mode of an audio output device of the terminal device to a first mode by using the TA, wherein when the audio output device is in the first mode, the audio output device is controlled by using the TA; and
controlling, by using the TA, the audio output device to play the first audio file.

### Claim 20 (depends on 18)

The non-transitory storage medium according to claim 18, wherein obtaining the first audio file from the storage space on the REE side comprises:
obtaining an encrypted first audio file from the storage space on the REE side by using the TA, wherein playing the first audio file by using the TA comprises decrypting the encrypted first audio file by using the TA by using a key stored on a TEE side to obtain a decrypted first audio file; and
playing the decrypted first audio file by using the TA.