Method for the execution and processing of data, corresponding device and computer program

Patent metadata

Field	Value
Publication number	US-11025973-B2
Application number	US-201715437702-A
Country	US
Kind code	B2
Filing date	Feb 21, 2017
Priority date	Mar 3, 2016
Publication date	Jun 1, 2021
Grant date	Jun 1, 2021

Abstract

A method for executing a user application is disclosed. The method is implemented within a communications terminal of the type having a trusted environment. The trusted environment has a secured storage space and a secured applications execution module. The method has: a step of reception, within the trusted environment, of an instruction for launching a user application; a step of transmission, to a server, of a request for executing said user application; a step of reception, from the server, by a video-rendering application that is executed within the trusted environment, of a video stream resulting from the execution, on the server, of said user application; and a step for displaying said video stream on a screen of said communications terminal accessible from said trusted environment.

First claim

The invention claimed is:

1. A method for executing a payment application, the method being implemented within a communications terminal, wherein the communication terminal comprises a trusted environment, said trusted environment comprising a secured storage space and a secured applications execution module implemented in a secured component, the method comprising:
receiving a selection on the communications terminal, from a user of said communications terminal, the payment application to be executed;
receiving, by the communications terminal, from the user of said communications terminal, connection data for said payment application, said connection data comprising at least one piece of data identifying said user of said communications terminal and at least one piece of data for identifying said payment application;
receiving, by the communications terminal, within the trusted environment, an instruction for launching the payment application, from said user;
transmitting, by the communications terminal, through a secured communications module of the trusted environment, to a server, a request for remotely executing said payment application, said request comprising said connection data and at least one piece of data identifying said communications terminal;
receiving, by the communications terminal, from the server, by a video-rendering application executed within the trusted environment, a video stream resulting from remote execution, on the server, of said payment application, as a function of said connection data and said at least one piece of data identifying said communications terminal; and
displaying said video stream on a screen of said communications terminal accessible from said trusted environment through a decoding application for decoding video streams, the decoding application being executed within the trusted environment.

2. The method for executing according to claim 1 , further comprising, prior to said transmitting said execution request, setting up, by said trusted environment, with said server, a secured transmission channel.

3. The method for executing according to claim 1 , further comprising, prior to the displaying the video stream, decrypting said video stream.

4. The method for executing according to claim 1 , wherein said request for executing said payment application comprises at least one piece of data for identifying a user and at least one piece of data for identifying said payment application.

5. A method for executing a payment application within a server, the method comprising:
selecting on a communications terminal, by a user of said communications terminal, the payment application to be executed;
providing, by the user of said communications terminal, connection data for said payment application, said connection data comprising at least one piece of data identifying said user of said communications terminal and at least one piece of data for identifying said payment application;
receiving, by the server, from a trusted environment of the communications terminal through a secured communications module of said trusted environment, a request for executing said payment application, said request comprising said connection data and at least one piece of data identifying said communications terminal;
obtaining, by the server, at least one piece of data needed for executing said payment application as a function of said connection data, the at least one piece of data identifying said communications terminal and a source of complementary data;
instantiating, by the server, said payment application, activating the execution of said payment application;
obtaining, by the server, a video stream coming from execution of said payment application; and
transmitting said video stream, by the server, to said trusted environment of said communications terminal through a secured channel managed by said trusted environment of said communications terminal, provoking displaying said video stream on a screen of said communications terminal accessible from said trusted environment through a decoding application for decoding video streams, the decoding application being executed within the trusted environment.

6. The method for executing according to claim 5 , wherein instantiating said payment application comprises:
searching, within an application storage data structure, for said payment application, said search being based on at least one piece of data of said request for execution of service; and
loading, within a memory of said server, a virtual machine and a step for launching said payment application within said virtual machine.

7. A communications terminal of the type comprising a trusted environment, said trusted environment comprising a secured storage space and a secured applications executing module, the terminal being capable of executing at least one application within said trusted environment implemented in a secured component, said terminal comprising:
means for allowing a user of said communications terminal, to select, on the communication terminal, the payment application to execute;
means for providing connection data for said payment application, said connection data comprising at least one piece of data identifying said user of said communications terminal and at least one piece of data for identifying said payment application;
means for receiving, within the trusted environment through a secured communications module, an instruction for launching a payment application;
means for transmitting, thru a secured communications module of the trusted environment, a request for remotely executing said payment application to a server, said request comprising said connection data and at least one piece of data identifying said communications terminal;
means for receiving, from the server, by a video-rendering application executed within the trusted environment, a video stream resulting from remote execution, on the server, of said payment application, as a function of said connection data and said at least one piece of data identifying said communications terminal; and
means for displaying said video stream on a screen of said communications terminal, accessible from said trusted environment through a decoding application for decoding video streams, the decoding application being executed within the trusted environment.

8. A server for execution of a payment application comprising:
means for receiving, from a trusted environment of a communications terminal through a secured communications module of said trusted environment, a request for executing said payment application, said request comprising connection data and at least one piece of data identifying said communications terminal, said connection data comprising at least one piece of data identifying said user of said communications terminal and at least one piece of data for identifying said payment application;
means for obtaining at least one piece of data needed for executing said payment application as a function of said connection date, the at least one piece of data identifying said communications terminal and a source of complementary data;
means for instantiating said payment application, activating the execution of said payment application;
means for obtaining a video stream coming from execution of said payment application; and
means for transmitting said video stream, through a secured channel managed by said trusted environment of said communications terminal, to said trusted environment of said communications terminal, of, provoking displaying said video stream on a screen of said communications terminal accessible from said trusted environment through a decoding application for decoding video streams, the decoding application being executed within

Assignees

• Ingenico Group

Inventors

• Quentin Pierre

Classifications

• G06F21/53 Primary

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• H04N21/2541 Primary

  Rights Management (protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08) · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• G06Q20/102

  Bill distribution or payments · CPC title

• H04N21/42623

  involving specific decryption arrangements · CPC title