Mobile phone shield is a mobile phone encryption technology that uses mobile phones to realize the traditional U-shield (USBKEY) function. It does not rely on hardware cryptographic chips and uses software to implement reliable cryptographic equipment, cryptographic operations and CA digital certificates. All functions are the core technology to achieve mobile Internet application security. Mobile Shield provides cryptographic computing support capabilities for mobile Internet applications and is used for identity authentication, electronic signatures, data protection, etc.
Product Features:
Highly secure - multiple encryption operations, digital certificate secure storage technology
Easy to use - the installation and use process only requires A mobile phone without relying on any additional hardware
Comprehensive functions - can cooperate with mobile banking, online banking, e-commerce, etc. for electronic signatures
On-the-air issuance-has the function of "on-the-air issuance" to reduce operating costs, Reduce counter service workload
Remote business - not only supports remote review and issuance of digital certificates, but also can be used for other remote businesses
Widely applicable - runs smoothly in various application scenarios
Basic functions:
Mobile banking:
When using mobile banking, call the MKEY mobile shield to realize the secondary echo of transfer information, and the mobile shield introduces digital certificates After completing the transaction signature, the security level is equivalent to the second-generation U-shield, realizing safe and convenient transfer and payment consumption, while meeting the needs of large-amount transfers.
Online banking:
When using online banking, you can remotely transplant the U-shield to the mobile shield without going to the bank counter. When conducting large-value transactions or transfers, the mobile shield can realize PC-side online banking transfers. Scan the QR code to confirm the operation, replacing the second-generation U-shield, realizing a truly safe and convenient mobile service.
Introduction of security unit:
SE is an independent chip used for storage of user account and payment information, as well as implementation of hardware encryption algorithms;
Mobile Shield Application Among them, SE is the embedded security module (eSE) built into the mobile phone, which further reduces the risk of physical attacks;
PKI is an infrastructure established using public key theory and technology to provide security services. PKI technology is the core of information security technology and is also the key and basic technology of e-commerce;
In the mobile shield application, the "digital certificate authentication method" based on PKI is used to effectively ensure the user's identity security and data transmission security. ;
Trusted Execution Environment:
TEE implements hardware-based isolation from Rich OS (usually Android, etc.) and has a higher security level than Rich OS;
TEE provides a secure execution environment for TA (trusted application), while also protecting the confidentiality, integrity and access rights of TA's resources and data;
Each TA in TEE is independent of each other, and They cannot access each other without authorization.
Supports multiple symmetric and asymmetric encryption and decryption algorithms;
In the mobile phone shield solution, the SE (security module) can only be accessed through TA, which enhances the security of data access.
During the use of TUI, it can be ensured that the TEE controls the screen and is isolated from REE and other TAs;
In the mobile shield application, TUI will be used to enter the PIN code, echo transaction information, and Wait for user confirmation.
The above is the detailed content of What does mobile shield mean?. For more information, please follow other related articles on the PHP Chinese website!