Method for securely interacting with a security element
OwnerStephan Spitz, Lutz Hammerschmidinventors
Life of this patent
Estimating the term…
Abstract
A method for secured interaction with a security module which is integrated into an end device, via an input device of the end device, the input device being reserved by a security application which is executable in a trustworthy region of the end device. Subsequently, first authentication data are input via the reserved input device. The security application derives from the first authentication data by a secret data stored in the trustworthy region second authentication data. The latter are subsequently encrypted by the security application and transferred to the security module and/or to a server. In the security module and/or the server the received, encrypted second authentication data are finally decrypted.
Claims13
-12. (canceled)
A method for secured interaction with a security module integrated in an end device, via an input device of the end device, comprising the steps of:
- reserving the input device by a security application executable in a trustworthy region of the end device;
- inputting first authentication data via the reserved input device;
- deriving second authentication data from the first authentication data by the security application by means of secret data stored in the trustworthy region;
- encrypting the second authentication data by the security application and transferring the encrypted second authentication data to at least one of the security module and a server;
- and
- decrypting the encrypted second authentication data in at least one of the security module and the server.
An end device, adapted for integrating a security module, comprising:
- an input device and a trustworthy region with a security application executable therein which is arranged to reserve the input device, to receive first authentication data via the reserved input device, to derive second authentication data from the first authentication data by secret data stored in the trustworthy region, to encrypt the second authentication data and to transfer them in encrypted form to a security module integrated into at least one of the end device and a server.
Dependencies are inferred from the claim text.