METHOD AND SYSTEM FOR SECURING A PAYMENT TRANSACTION WITH TRUSTED CODE BASE

摘要

A mobile payment device (130) provides a trusted code base which obtains a password from a customer for processing a payment transaction and encrypts the password using a public key. The trusted code base may be provided on a removable system module such as a subscriber identity module that is inserted into the mobile payment device (130). Access to the trusted code base by unauthorized processes is prevented to protect the password while unencrypted. The mobile payment device (130) transmits the encrypted password over a network (140) to a transaction host (160). The transaction host (160) decrypts the encrypted password and applies the decrypted password to process the payment transaction.