System and method for end-to-end key management

A mobile device, comprising:

• a processor configured to execute a mobile payment application in a user domain of the mobile device, the user domain comprising an operating environment in which mobile applications are executed and accessed by a user of the mobile device;
• and
• an importer configured to import a plurality of encryption keys for use by the mobile payment application into a system domain of the mobile device, the system domain comprising a more secure operating environment controlled by an operating system of the mobile device;
• wherein the processor is further configured to encrypt payment information of the mobile payment application in the system domain using one or more of the imported keys while executing the mobile payment application in the user domain.

A non-transitory computer readable medium having stored therein instructions that when executed cause a computer to perform a method of a mobile device, the method comprising:

• executing a mobile payment application in a user domain of the mobile device, the user domain comprising an operating environment in which mobile applications are executed and accessed by a user of the mobile device;
• importing a plurality of encryption keys for use by the mobile payment application into a system domain of the mobile device, the system domain comprising a more secure operating environment controlled by an operating system of the mobile device;
• encrypting payment information of the mobile payment application in the system domain using one or more of the imported keys while executing the mobile payment application in the user domain;
• and
• transmitting the encrypted payment information to a merchant.