Trusted security zone watermark

• US 9,104,840 B1
• Filed: 03/05/2013
• Issued: 08/11/2015
• Est. Priority Date: 03/05/2013
• Status: Active Grant

• Current Assignee: T-Mobile Innovations LLC (Deutsche Telekom AG)
• Original Assignee: Sprint Communications Company LP (Deutsche Telekom AG)
• Inventors: Paczkowski, Lyle W., Parsel, William M., Persson, Carl J., Schlesener, Matthew C.
• Primary Examiner(s): Rahim, Monjour
• Application Number:
  US13/786,450
• Time in Patent Office: 889 Days
• Field of Search: 726/26, 726/16
• US Class Current: 1/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode

Abstract

Embodiments relate generally to methods and systems for creating and using a watermark for verification of operation in a trusted security zone of a mobile device. The watermark may be created or chosen by a user and may be unique to the user. The watermark may be stored in a trusted security zone of the mobile device and may not be accessible from any other area of the mobile device. The watermark may comprise one or more of an image, an audio file, a video, a shape, a signature, a word, a phrase, or a number. The watermark may be verified by a user before operation of a secure application executed in the trusted security zone of the mobile device, and the watermark may also be present throughout the use of a secure application.

Claims

1. A method for creating a trusted security zone watermark during the start-up procedure of a mobile device comprising:

operating a mobile device comprising a trusted security zone;

opening a start-up application executed in the trusted security zone;

capturing an image using the mobile device while executing the start-up application;

storing the image in the trusted security zone, wherein access to the trusted security zone is restricted to the start-up application and to one or more secure applications;

designating the image as a watermark for the mobile device;

in response to a user accessing ay secure application of the one or more secure applications configured to execute in the trusted security zone, presenting, by the mobile device, the watermark, wherein the presentation of the watermark verifies to the user that the secure application is being executed in the trusted security zone of the mobile device, and wherein the same watermark is presented regardless of which secure application of the one or more secure applications is accessed by the user; and

prompting the user for confirmation that the watermark is present and correct before allowing the secure application to access trusted information in the trusted security zone.

2. The method of claim 1 wherein the watermark comprises a background image visible during the operation of the secure application.

3. The method of claim 1 wherein the watermark comprises an icon visible in a portion of screen of the mobile device during the operation of the secure application.

4. The method of claim 1 wherein the image is verified by the user before operation of the secure application.

5. The method of claim 1 wherein the watermark is presented by the mobile device in some form throughout the operation of the secure application.

6. The method of claim 1 wherein the image comprises a photo captured using a camera of the mobile device.

7. The method of claim 1 wherein the image comprises a shape, letter, word, phrase, signature or a combination captured using a touch screen or keypad of the mobile device.

8. A method for creating a trusted security zone watermark during the start-up procedure of a mobile device comprising:

operating a mobile device comprising a trusted security zone;

opening a start-up application executed in the trusted security zone;

inputting a media file using the mobile device while operating the start-up application;

storing the media file in the trusted security zone, wherein access to the trusted security zone is restricted to the start-up application and to one or more secure applications;

designating the media file as a watermark for the mobile device;

in response to a user accessing any secure application of the one or more secure applications configured to execute in the trusted security zone, presenting, by the mobile device, the watermark, wherein the presentation of the watermark verifies to the user that the secure application is being executed in the trusted security zone of the mobile device, and wherein the same watermark is presented regardless of which secure application of the one or more secure applications is accessed by the user; and

prompting the user for confirmation that the watermark is present and correct before allowing the secure application to access trusted information in the trusted security zone.

9. The method of claim 8 wherein a media file comprises one or more of an image, an audio file, a video, a word, a phrase, or a number.

10. The method of claim 8 wherein inputting a media file comprises one or more of capturing, typing, recording, filming, drawing, or using a keypad.

11. The method of claim 8 wherein the watermark is presented by the mobile device throughout the use of the secure application, wherein the watermark is presented by being visible, heard, or otherwise able to be noticed by the user.

12. The method of claim 8 wherein the media file comprises a photo captured using a camera of the mobile device.

13. The method of claim 8 wherein the media file comprises a combination of two of the following:

an image, an audio file, a video, a shape, a signature, a word, a phrase, or a number.

14. The method of claim 8 wherein the media file comprises an image selected by the user from a group of images provided by the start-up application.

15. A method of verifying that a user is operating a mobile device in a trusted security zone comprising:

executing a secure application of a plurality of secure applications, wherein the secure application is executed in a trusted security zone of a mobile device;

presenting, by the mobile device, a watermark for the mobile device to a user regardless of which secure application of the plurality of secure applications is accessed by the user, wherein the presence of the watermark provides verification to the user that the secure application is executing in the trusted security zone, and wherein the watermark comprises one or more of an image, an audio file, a video, a word, a phrase, a number, or set of numbers;

prompting, by the mobile device, the user for confirmation that the watermark is present and correct before the secure application is allowed to access trusted information in the trusted security zone; and

in response to the prompting and before the secure application is allowed to access the trusted information in the trusted security zone, receiving, by the mobile device, indication from the user that the watermark is present and correct wherein the watermark remains present in some form for the duration of the execution of the secure application.

16. The method of claim 15 wherein presenting the watermark and receiving indication are performed by a separate secure application.

17. The method of claim 16 wherein the separate secure application is a start-up application, wherein the start-up application creates and stores the watermark.

18. The method of claim 15 wherein presenting the watermark comprises:

displaying an image at high resolution for initial verification by the user;

displaying the image in an altered fashion throughout the operation of the secure application; and

displaying the image at high resolution at one or more points during the operation of the secure application as requested by the user.

19. The method of claim 15 wherein the watermark comprises a background image present throughout the use of the secure application.

20. The method of claim 15 wherein the watermark comprises a word, phrase, number, or set of numbers visible throughout the use of the secure application.