Method and apparatus for secure online credit card transactions and banking

A security method for detecting a fraudulent online financial transaction conducted remotely between a computer and a financial institution, in which a second record of said financial transaction is stored in memory at said financial institution, comprising the steps of:

• providing a trustworthy hardware device (THD);
• recording said computer's user interface during said financial transaction at said THD;
• downloading said second record of said financial transaction;
• comparing the THD recorded interface during said financial transaction against the second record to detect a discrepancy;
• and
• detecting a fraudulent transaction conducted by a program on the user's computer based on a discrepancy.

A security method for detecting a fraudulent financial transaction conducted remotely between a computer and an ecommerce entity (bank or merchant server), comprising the steps of:

• providing a trustworthy hardware device (THD);
• recording said computer's user interface during said financial transaction at said THD in order to create a first record of said financial transaction;
• storing user secrets in memory of said THD;
• establishing a secure encrypted and authenticated communication channel between said THD and said ecommerce entity;
• entering user secrets into said secure encrypted and authenticated communication channel between said THD and said ecommerce entity;
• sending plaintext of said financial transaction from said computer to said THD;
• creating a second record of said financial transaction from said plaintext;
• comparing said first record against said second record to detect a discrepancy;
• and detecting a fraudulent transaction conducted by a program on the user's computer based on a discrepancy.

A system for detecting fraudulent financial transactions conducted by a program on a computer, comprising:

• a trustworthy hardware device (THD) including a computer processor and a non-transitory storage media storing cryptographic keys and user secrets, and a recorder for recording a user interface of said program on said user's computer by any one or more of videos, photographs, and audio recordings;
• a source for providing a record of one or more financial transactions initiated at said computer by a user of said computer;
• and
• means for uploading said record of financial transactions from said source and comparing said record to said recorded user interface and detecting a fraudulent transaction conducted by said program on said computer based on a comparison discrepancy.