Method and end device for securely inputting access code
AssigneeGiesecke+Devrient Mobile Security GmbH
InventorUllrich Martini
Life of this patent
Estimating the term…
Abstract
The invention provides a method for securely inputting an access code to an input interface of a mobile end device. During an input time period covering the process of inputting the access code, at least one or some sensors of the end device that are uninvolved in the input of the access code, said sensors being respectively arranged for capturing sensor variables by sensor, are hindered from capturing and/or passing on the respective sensor variable. Possible sensors are acceleration sensors or a digital camera. The method prevents the access code from being spied out by means of the deactivated sensors.
Claims10
A mobile end device comprising:
- an input interface via which an access code is input, comprising at least one sensor,
- a bus connection by which, during an input time period covering a process of inputting the access code to the input interface of the mobile end device, at least one or more sensors of the mobile end device that each capture a respective sensor variable and are uninvolved in the input of the access code can be hindered from capturing or passing on the respective sensor variable;
- wherein the bus connection is further configured to hinder the one or more sensors from capturing or from passing on each respective sensor variable by separating the one or more sensors from a supply of power;
- a trusted execution environment controlled by a secure operating system in which security software is implemented by which the one or more sensors are hindered from capturing or passing on the respective sensor variable, wherein the security software comprises PIN input software, implemented in the trusted execution environment by a PIN input application or PIN input driver, through which the mobile end device is monitored for impending input of the access code;
- one or more sensor drivers for each of the one or more sensors, wherein the PIN input software controls the one or more sensor drivers by causing them to also hinder the one more sensors from capturing or passing on each respective sensor variable when the impending input of the access code is recognized by the PIN input software,
- wherein each of the one or more sensor drivers comprises an insecure sensor driver implemented outside the trusted execution environment that the PIN input software can cause to be deactivated, and a secure sensor driver implemented within the trusted execution environment.
Dependencies are inferred from the claim text.