Method, apparatus, and system for generating transaction-signing one-time password
AssigneeXilix, Inc.
InventorsDong Keun YI, Geun Mook KIM, Byung Young LEE
Life of this patent
Estimating the term…
Abstract
Disclosed herein are a method, apparatus and system for generating a transaction-signing One-time password. The method includes transmitting a payment request to a payment server using a trusted application running on a client terminal, receiving transaction information in response to the transaction request, and generating a transaction-signing OTP including the transaction information as an input value by using the trusted application.
Claims26
A method for generating a transaction-signing One-Time Password (OTP), comprising:
- transmitting a payment request to a payment server using a trusted application running on a client terminal;
- receiving transaction information in response to the transaction request;
- and
- generating a transaction-signing OTP including the transaction information as an input value by using the trusted application,
- wherein an application processor of the client terminal is logically separated into a normal world and a Trusted Execution Environment (TEE), and
- wherein when the trusted application runs, the TEE has authority for all hardware and software operations of the client terminal, and a Trusted User Interface (TUI) displayed at a level higher than that of a normal UI is executed.
An apparatus for generating a transaction-signing OTP using a trusted application, comprising:
- an interface for transmitting a transaction request to a payment server through the trusted application and receiving transaction information in response to the transaction request;
- an OTP generation processor for generating a transaction-signing OTP using the received transaction information as an input value;
- and
- a display unit for displaying processing status of a transaction depending on a user's input using the interface, and displaying the received transaction information,
- wherein the interface transmits the transaction-signing OTP generated by the OTP generation processor to the payment server, receives results of verification, and displays the results of verification on the display unit.
- wherein an application processor of the client terminal is logically separated into a normal world and a Trusted Execution Environment (TEE), and
- wherein when the trusted application runs, the TEE has authority for all hardware and software operations of the client terminal, and a Trusted User Interface (TUI) displayed at a level higher than that of a normal UI is executed.
A system using a transaction-signing OTP, comprising:
- a client terminal for transmitting a transaction request using a trusted application, receiving transaction information in response to the transaction request, and generating a transaction-signing OTP including the transaction information as an input value;
- a payment server for receiving the transaction request and transmitting a transaction-signing request;
- a verification server for receiving the transaction-signing request and transferring the transaction-signing request to a push server;
- and
- the push server for receiving the transaction-signing request from the verification server, and transmitting the transaction information corresponding to the transaction-signing request to the client terminal,
- wherein an application processor of the client terminal is logically separated into a normal world and a Trusted Execution Environment (TEE), and
- wherein when the trusted application runs, the TEE has authority for all hardware and software operations of the client terminal, and a Trusted User Interface (TUI) displayed at a level higher than that of a normal UI is executed.
Dependencies are inferred from the claim text.