SECURITY FOR MOBILE APPLICATIONS

摘要

A mobile computing device has at least one processor and at least one memory together providing a first execution environment and a second execution environment logically isolated from the first execution environment. The following approach is taken to manage data items for an application executing the first execution environment. A trust relationship is established between a trust client in the second execution environment and a remote trusted party and the trust client receives one or more data items from the remote trusted party. On executing the application in the first execution environment, the trust client provides the data items or further data items derived therefrom to the application 213. Provision of these data items may be conditional upon a user authentication process. A suitable mobile computing device is also described.

主权项

1. A method of managing data items for an application in a mobile computing device, the mobile computing device having at least one processor and at least one memory together providing a first execution environment and a second execution environment logically isolated from the first execution environment, the method comprising:
establishing a trust relationship between a trust client in the second execution environment and a remote trusted party, the trust client receiving one or more data items from the remote trusted party; and executing the application in the first execution environment, the trust client providing the data items or further data items derived therefrom to the application.