US 12,450,588 B2
Method for processing a secure financial transaction using a commercial off-the-shelf or an internet of things device
Christopher Yew Chong Leong, Kuala Lumpur (MY); Joel Jin Ghee Tay, Kuala Lumpur (MY); Chee Ming Lim, Kuala Lumpur (MY); and Kar Hou Kon, Kuala Lumpur (MY)
Appl. No. 17/058,061
Filed by Christopher Yew Chong Leong, Kuala Lumpur (MY); Joel Jin Ghee Tay, Kuala Lumpur (MY); Chee Ming Lim, Kuala Lumpur (MY); and Kar Hou Kon, Kuala Lumpur (MY)
PCT Filed May 24, 2019, PCT No. PCT/MY2019/050032
§ 371(c)(1), (2) Date Nov. 23, 2020,
PCT Pub. No. WO2019/226042, PCT Pub. Date Nov. 28, 2019.
Claims priority of application No. PI 2018702015 (MY), filed on May 24, 2018.
Prior Publication US 2021/0209579 A1, Jul. 8, 2021
Int. Cl. G06Q 20/32 (2012.01); G06F 9/451 (2018.01); G06F 16/23 (2019.01); G06F 21/53 (2013.01); G06Q 20/10 (2012.01); G06Q 20/30 (2012.01); G06Q 20/34 (2012.01); G06Q 20/36 (2012.01); G06Q 20/38 (2012.01); G06Q 20/40 (2012.01); G06Q 40/06 (2012.01); H04L 9/32 (2006.01); H04L 29/06 (2006.01); H04W 12/06 (2021.01); H04W 12/08 (2021.01); G06F 21/31 (2013.01); G06F 21/32 (2013.01); G06F 21/45 (2013.01); G06F 21/57 (2013.01); G06Q 40/02 (2023.01); H04W 4/14 (2009.01); H04W 12/062 (2021.01); H04W 12/72 (2021.01); H04W 60/00 (2009.01)
CPC G06Q 20/3226 (2013.01) [G06Q 20/308 (2020.05); G06Q 20/321 (2020.05); G06Q 20/3278 (2013.01); G06Q 20/4016 (2013.01); H04L 9/3234 (2013.01)] 5 Claims
OG exemplary drawing
 
1. A method (500) for processing a secure financial transaction using a Commercial off-the-shelf (COTS)/Internet of Things (IoT) device, the method comprising:
requesting (502) by the COTS/IoT device, a Secure Provisioning Manager (SPM) to verify a device identity and download a Trusted Application (TA) in a Trusted Environment (TE) of the COTS/IoT device,
creating a security domain after the TA is downloaded and running for a first time in the COTS/IoT device, wherein the security domain is an environment where cryptographic keys associated with the TA are stored, and where the TA is encrypted,
wherein the TE is a secured part of the COTS/IoT device where the TA is executed, and wherein the TE is isolated from an operating system of the COTS/IoT device and is executed in parallel to the operating system of the COTS/IoT device on a TE part of a processor;
executing (504) an application on the COTS/IoT device;
determining a first distance of a tag is within a predetermined distance from the COTS/IoT device;
initiating (506) a resonance response based on the first distance being within the predetermined distance from the COTS/IoT device;
receiving (508) tag information from the tag;
determining a second distance of the tag, wherein the second distance is closer to the COTS/IoT device than the first distance; and
processing a secure financial transaction using the COTS/IoT device based on the received tag information by accessing the TE, wherein processing the secure financial transaction is initiated based on the second determined distance of the tag being closer to the COTS/IoT device than the first determined distance.