Web Server Bypass of Backend Process on Near Field Communications and Secure Element Chips

摘要

A mobile access terminal providing access to data in a secure element of the mobile access terminal is provided. The mobile access terminal comprises the secure element; a web browser; a near field communications system; an over-the-air proxy; an application programming interface layer; and a web server residing on a secure storage area of the mobile access terminal, wherein the web browser is provided with exclusive access to the web server.

主权项

1. A mobile access terminal providing access to secure information in a secure element of the mobile access terminal comprising:
the secure element storing the secure information; a web browser configured to transmit a secure information request to a server and transmit the secure information to a vendor; a trusted security zone, wherein the trusted security zone provides at least one chipset with a hardware root of trust, a secure execution environment for applications, and secure access to peripherals; and the server residing and executing within at least one of the secure element or the trusted security zone of the mobile access terminal, wherein the server is configured to provide access to the secure information stored in the secure element exclusively to the web browser in response to receiving the secure information request from the web browser, and wherein the server is configured to block access to the secure information stored in the secure element when receiving secure information requests from entities other than the web browser.