T/BMFIA 00002-2018 Active Group standards

T/BMFIA 00002-2018 Mobile terminal based on TEE trusted human-machine interface technical specification

Publish Date: 2018-10-22 Implement Date: 2018-10-22 For services related to genuine standard inquiry, procurement, translation, and other related services in China, please Contact Us

Price: $ 20.00

Out of stock

Basic Information

Standard Code: T/BMFIA 00002-2018

Standard Type: Group standards

Standard Status: Active

is_force_gb: no

CCS Name: Finance, insurance

ICS Name: The application of information technology in banks

Publish Date: 2018-10-22

Implement Date: 2018-10-22

Scope

Scope: This standard provides an overview of TEE-based trusted human-machine interfaces on mobile terminals, functional controls, security requirements, etc. This standard is applicable to institutions and units such as commercial banks, payment institutions, and terminal manufacturers that use trusted human-machine interface technology on terminals. It provides a reference for them to implement secure information input/output services on mobile terminals. This standard only abstracts and standardizes trusted human-machine interface technology based on TEE (Trusted Execution Environment). It provides technical guidance for secure information input and output through trusted human-machine interfaces in mobile banking, online banking, or other payment-related services of commercial banks. Main technical content: With the rapid popularity of mobile terminal payment services and the innovative development of mobile Internet-related industries, the demand for mobile payment has evolved towards security, convenience, and efficiency. Due to the fact that existing terminal operating systems mainly address issues of convenience and functionality, traditional human-machine interfaces based on terminal operating systems have become unsuitable for meeting the current security needs of mobile terminal payment services. To enhance the security of mobile terminals in financial transactions and effectively prevent malicious software from monitoring, tampering, or screenshotting during mobile financial transactions, it is necessary to rely on the security of the TEE (Trusted Execution Environment) technology in existing mobile terminal devices and its strict security service management system. Adopting TEE-based trusted human-machine interface protection technology is an important means of ensuring users' safe behaviors such as password use, secure information display, and barcode display on mobile terminals. Therefore, it is necessary to effectively define, standardize, and guide t