Secure user authentication using a master secure element
The master secure element comprises a processor, a memory and a logic unit and at least controls the user input of the handset in order to secure the user authentication based on PIN entry. The PIN code is entered directly into the secure element with no possibility for the host processor to intercept the code or for a malware program to inject the code into the master secure element.
1. A connected device architecture comprising:
a master secure element including a multiplexer circuit and circuitry configured and arranged to control the multiplexer circuit;
a host circuit electrically connected to the master secure element via a first electrical pathway; and
a user input device including circuitry electrically coupled to the master secure element via a second electrical pathway that is separate from the first electrical pathway, the user input device being configured and arranged with the host and master secure element to operate in a secure mode such that a user input to secure user authentication is controlled by the master secure element, and in which the host is prevented from accessing the user input, and to operate in a non-secure mode in which the master secure element couples user inputs received at the user input device to the host circuit.
2. The connected device architecture of claim 1 further comprising:
a portable device housing including the host, the master secure element and the user input device; and
a subscriber identity module card within the portable device housing electrically coupled to the host and to the master secure element via circuitry on a circuit board on which the host and master secure element are coupled.
3. The connected device architecture of claim 1 wherein
the host includes a computer processor configured and arranged to communicate with the user input device in the non-secure mode which is different than the secure mode, and
the master secure element is configured and arranged to, while operating in the secure mode, provide user inputs received via the user input device directly to the master secure element and to prevent the host from accessing the user input.
4. The connected device architecture of claim 1 further comprising a security indicator electrically coupled to the master secure element, and configured and arranged to indicate that the device is operating in the secure mode and that user inputs provided to the user input device are inaccessible by the host.
5. The connected device architecture of claim 1 further comprising a display coupled to the host, and wherein the user input device is a touch screen.
6. The connected device architecture of claim 1 wherein the user input is selected from the group consisting of a personal identification number (PIN) and a password.
7. The connected device architecture of claim 1 further comprising a second user input device electrically coupled to the master secure element.
8. The connected device architecture of claim 7 wherein the second user input device is a fingerprint sensor.
9. The connected device architecture of claim 1 wherein the master secure element comprises:
a central processing unit (CPU) electrically coupled to a memory and a host interface circuit coupled to the host via the first electrical pathway;
an interface to the user input device including a keypad interface or a touch screen interface, electrically coupled to the multiplexer circuit; and
a user input device interface to the host electrically coupled to the multiplexer circuit wherein both the host interface and the user interface to the host are electrically coupled to the host.
10. The connected device architecture of claim 1 wherein the master secure element comprises:
a central processing unit (CPU);
a memory electrically coupled to the CPU;
a host interface electrically coupled to the CPU and to the host;
an interface to the user input device electrically coupled to the multiplexer circuit and to the user input device; and
a user input device interface to the host electrically coupled to the multiplexer circuit and to the host.
11. The connected device architecture of claim 10 wherein the master secure element further comprises a fingerprint sensor interface electrically coupled to the CPU.
12. The connected device architecture of claim 11 wherein the fingerprint sensor interface is electrically coupled to a fingerprint sensor.
13. The connected device architecture of claim 10 wherein the master secure element further comprises a subscriber identity module interface electrically coupled to the CPU.
14. The connected device architecture of claim 13 wherein the subscriber identity module interface is electrically coupled to a subscriber identity module card.
15. The connected device architecture of claim 10 wherein the master secure element further comprises a near-field communication (NFC) interface.
16. The connected device architecture of claim 15 wherein the NFC interface functions to allow a direct NFC connection to a contactless smart card.
17. The connected device architecture of claim 1 where the master secure element is securely coupled to a backend server.
18. The connected device architecture of claim 1 , wherein the master secure element is configured and arranged to control access to user inputs received at the user input device by the host by preventing the host from accessing the user input in a secure mode, and by coupling signals received from the user input device to the host in another mode.
19. An apparatus comprising:
a user input device including circuitry;
a host computer processor configured and arranged to communicate with and control the user input device in a non-secure mode;
a master secure element including a multiplexer circuit and circuitry configured and arranged to control the multiplexer circuit, the master secure element being electrically coupled to the host and to the user input device via separate electrical pathways, the master secure element being configured and arranged with the host computer processor to operate in a secure mode, which is different from the non-secure mode, by controlling the user input device and accessing user inputs received at the user input device, the host computer processor being prevented from accessing the user inputs while operating in the secure mode; and
a circuit board including a first circuit that connects the user input device to the master secure element, and a second circuit that connects the host computer processor to the master secure element, the second circuit being configured and arranged to provide inputs from the user input device to the host computer processor via the first circuit and the master secure element, under control of the master secure element.
20. The apparatus of claim 19 , further including a housing including the host computer processor and the master secure element, and wherein:
the circuitry configured and arranged to control the multiplexer circuit is a central processing unit (CPU) electrically coupled to a memory; and
the master secure element includes:
an interface of the host computer processor;
a touch screen interface electrically coupled to the multiplexer circuit; and
a touch screen interface to the host computer processor electrically coupled to the multiplexer circuit and to the host computer processor.
21. An apparatus comprising:
a user input circuit;
a host; and
a master secure element electrically connected to the user input circuit and to the host via separate electrical pathways, the master secure element including a multiplexer and a central processing unit (CPU), the master secure element being configured and arranged with the host and the user input circuit to
operate in a secure mode in which the master secure element CPU controls the multiplexer to couple user inputs from the user input circuit to the master secure element CPU, and in which the host is prevented from accessing the user inputs, and
operate in another mode in which the master secure element CPU controls the multiplexer to couple inputs from the user input device to the host.
22. The apparatus comprising of claim 21 , further including a backend server securely coupled to the master secure element.