Method for the secure interaction of a user with a mobile terminal and a further entity

A method for secure interaction of a user's mobile terminal and a further entity, the method comprising:

• transmitting a secret or an image of the secret generated by a one-way function and an individual datum from the user's mobile terminal to a backend;
• transmitting the image and the individual datum from the backend to a protected execution environment of a processor of the user's mobile terminal;
• registering the user at a secure user interface of the user's mobile terminal, wherein the individual datum is shown to the user via the user's mobile terminal and wherein the user is authenticated with the secret;
• enabling interaction of the user with a secure element of the user's mobile terminal which has a secure connection to the protected execution environment via the secure user interface of the user's mobile terminal and the protected execution environment based on the authentication;
• and
• enabling interaction of the secure element with the further entity via a secured connection based on the authentication,
• wherein the secure user interface is thereafter declared as a secure device by the protected execution environment based on the authentication.

A system for secure interaction of a user with a mobile terminal and a further entity, the system comprising:

• a backend in which a secret or an image of the secret and of an individual datum transmitted from a user is generated by a one-way function and stored, wherein the backend transmits the image and the individual datum to a protected execution environment of a processor of the mobile terminal for storage;
• a secure user interface of the mobile terminal for registration and authentic interaction of the user, wherein the individual datum is shown to the user;
• a secure element of the mobile terminal which, with the protected execution environment, comprises a secure connection;
• and
• a further entity for protected communication with the secure element of the mobile terminal,
• wherein the user is authenticated using the secret,
• wherein authentication enables interaction of the user with the a secure element of the mobile terminal using the secure connection to the protected execution environment via the secure user interface and the protected execution environment,
• wherein authentication further enables interaction of the secure element with the further entity via the secured connection, and
• wherein the secure user interface is thereafter declared as a secure device by the protected execution environment based on the authentication.