T/BMFIA 00001-2017 Mobile Security Financial Shield Specification
T/BMFIA 00001-2017 Mobile Security Financial Shield Specification
Basic Information
Scope
Scope: This specification defines and describes the service description of the mobile terminal security financial shield, terminal lifecycle management, service lifecycle management, key management, security requirements, and functional requirements. This specification is applicable to commercial banks, payment institutions, terminal manufacturers, and electronic certification service providers, and provides a reference for the provision of financial shield services based on electronic signature authentication on mobile terminals. This section only abstracts and standardizes financial shield services based on secure elements (SE) and trusted execution environments (TEE), and provides technical guidance for financial institutions to conduct digital certificate electronic authentication for mobile banking, online banking, or other payment-related businesses through financial shields. Main technical content: With the rapid popularity of mobile terminal financial services and the innovative development of the mobile Internet industry, the demand for mobile finance has evolved towards safety, convenience, and efficiency. Traditional online banking hardware Key devices based on digital certificate electronic authentication effectively address the security needs of online banking systems, but cannot adapt to the current demands of mobile terminal financial services. Adopting digital certificate electronic authentication methods on mobile terminals is an important means to ensure the security of financial transactions and customer funds. In order to provide digital certificate electronic authentication services on mobile terminals and improve the security of financial industry businesses, this standard is formulated.