| 摘要 |
<p>Simplified provisioning of a secure host card emulation (HCE) application. A consumer device e.g. a mobile phone having a secure element (SE), secure environment such as a trusted execution environment (TEE) or removable secure application processor e.g. a UICC or micro SD device is manufactured 310 and configured 311 with a number of secure processes fulfilling the requirements of various applications such as payment applications which are run based on cryptographic keys stored in the secure element. A customer selects and downloads an application 314 to the (non secure) application processor which provides the majority of functionality, this being easily distributed using known app stores. The application provider 316 communicates with a secure application provider 312 to either receive pre-programmed cryptographic keys from the security application on the device or to configure the device with its own user information, security processes and cryptographic keys via the security application provider and an application layer. Thus the additional security of the devices secure element can be employed but negotiations between the payment provider and mobile phone manufacturer are avoided, details in the secure element being accessible or configurable after retail.</p> |
