Embedded secure element for authentication, storage and transaction within a mobile terminal

A secure element, comprising:

• an interface to a processor, the processor implementing conventional functions for a mobile device and being configured with at least one privileged mode of program execution;
• a secure processor coupled to the processor via a secure link;
• a power management integrated circuit (PMIC), coupled to the processor, the PMIC implementing conventional power management functions and comprising a storage area where a cryptographic key and sensitive data are stored;
• wherein the cryptographic key and the sensitive data are provided to the processor such that in the at least one privileged mode of program execution, the processor is enabled to implement a trusted operation that is selected from a group consisting of identification (ID) document reading, identification (ID) document emulation, financial transaction, and user authentication;
• and
• wherein an initial credential is programmed into the secure element in a factory before the secure element is assembled into a mobile device in the factory and is provided by an entity that is different from a manufacturer of the mobile device and provides a user specific credential encrypted with the initial credential to authenticate the trusted operation.

A method of processing a trusted transaction in a secure element, comprising:

• receiving a request for the trusted transaction, the trusted transaction being associated with an operation selected from a write operation and a read operation, the sensitive data being written into a secure memory in a write operation and read from the secure memory in a read operation;
• processing the request for the trusted transaction;
• verifying and authenticating the trusted transaction and a user that makes the request;
• processing the sensitive data when the trusted transaction and the user are verified,
• wherein the sensitive data is encrypted and written into the secure memory in the write operation, and read from the secure memory and decrypted in the read operation;
• wherein the secure element is embedded in a mobile device and authorized to process the trusted transaction, and an initial credential, provided by an entity that is different from a manufacturer of the mobile device, is programmed into the secure element in a factory before the secure element is assembled into the mobile device in the factory;
• and
• wherein the request includes a user specific credential that is encrypted with the initial credential and generated by the entity.