System and method for transaction security enhancement
View Patent ↗The present disclosure involves a system that includes a computer memory storage component configured to store computer programming instructions and a computer processor component operatively coupled to the computer memory storage component. The computer processor component is configured to run a secure operating system and a non-secure operating system in parallel. The secure and non-secure operating systems are isolated from each other. The computer processor component is configured to execute code to perform the following operations: receiving an authentication request from an application that is run by the non-secure operating system, wherein the authentication request contains credentials of the application; communicating with a secure applet that is run by the secure operating system, and wherein the communicating includes transferring the credentials of the application to the secure applet; and authenticating and vetting the application based on the credentials of the application.
1. A system, comprising:
a computer memory storage component configured to store computer programming instructions; and
a computer processor component operatively coupled to the computer memory storage component, wherein the computer processor component is configured to provide a secure operating environment and a non-secure operating environment separate and independent from the secure operating environment, and wherein the computer processor component is configured to execute code to perform the following operations:
receiving a request from a mobile application to verify itself, wherein the request contains an authentication instrument assigned to a provider of the mobile application, wherein the mobile application is executed within the non-secure operating environment;
communicating with a secure applet that is executed in the secure operating environment, wherein the communicating includes sending the authentication instrument to the secure applet; and
verifying the mobile application at least in part by using the secure applet, wherein the verifying comprises comparing the authentication instrument sent to the secure applet with a corresponding authentication instrument stored in the secure operating environment.
2. The system of claim 1 , wherein the computer processor provides the secure operating environment and the non-secure operating environment concurrently.
3. The system of claim 2 , wherein the computer processor provides the secure operating environment and the non-secure operating environment on a single electronic chip.
4. The system of claim 2 , wherein electronic communications are conducted between the secure operating environment and the non-secure operating environment through a monitor module.
5. The system of claim 1 , further comprising a display screen, and wherein the operations further comprise: communicating, via a visual representation on the display screen, a successful verifying of the mobile application.
6. The system of claim 1 , wherein the verifying is performed without accessing any remote server.
7. The system of claim 1 , wherein the secure applet is provided by a third party payment provider, and wherein the mobile application is provided by a merchant.
8. The system of claim 1 , wherein the computer memory storage component and the computer processor component are components of a smartphone or a computer tablet.
9. A method, comprising:
receiving a request from a mobile application to verify itself, wherein the request contains an authentication instrument assigned to a provider of the mobile application, wherein the mobile application is executed within a non-secure operating environment on a mobile electronic device;
communicating with a secure applet that is executed in a secure operating environment on the mobile electronic device, wherein the secure operating environment and the non-secure operating environment are separate and independent from each other, and wherein the communicating includes sending the authentication instrument to the secure applet; and
verifying the mobile application at least in part by using the secure applet, wherein the verifying comprises comparing the authentication instrument sent to the secure applet with a corresponding authentication instrument stored in the secure operating environment.
10. The method of claim 9 , wherein the secure operating environment and the non-secure operating environment are provided concurrently.
11. The method of claim 10 , wherein the secure operating environment and the non-secure operating environment are provided on a single electronic chip.
12. The method of claim 10 , further comprising: conducting electronic communications between the secure operating environment and the non-secure operating environment through a monitor module.
13. The method of claim 9 , further comprising: communicating, via a visual representation on a display screen, a successful verifying of the mobile application.
14. The method of claim 9 , wherein the verifying is performed without accessing any remote server.
15. The method of claim 9 , wherein the secure applet is provided by a third party payment provider, and wherein the mobile application is provided by a merchant.
16. The method of claim 9 , wherein the receiving, the communicating, and the verifying are performed by a smartphone or a computer tablet.
17. An apparatus comprising a non-transitory, tangible machine-readable storage medium storing a computer program, wherein the computer program contains machine-readable instructions that when executed electronically by processors, perform:
receiving a request from a mobile application to verify itself, wherein the request contains an authentication instrument assigned to a provider of the mobile application, wherein the mobile application is executed within a non-secure operating environment on a mobile electronic device;
communicating with a secure applet that is executed in a secure operating environment on the mobile electronic device, wherein the secure operating environment and the non-secure operating environment are separate and independent from each other, and wherein the secure operating environment and the non-secure operating environment are provided concurrently, and wherein the communicating includes sending the authentication instrument to the secure applet; and
verifying the mobile application at least in part by using the secure applet and without accessing any remote server, wherein the verifying comprises comparing the authentication instrument sent to the secure applet with a corresponding authentication instrument stored in the secure operating environment.
18. The apparatus of claim 17 , wherein:
the secure operating environment and the non-secure operating environment are provided on a single electronic chip; and
electronic communications are conducted between the secure operating environment and the non-secure operating environment through a monitor module on the electronic chip.
19. The apparatus of claim 17 , further comprising: communicating, via a visual representation on a display screen, a successful verifying of the mobile application.
20. The apparatus of claim 17 , wherein the secure applet is provided by a third party payment provider, and wherein the mobile application is provided by a merchant.