__This__ is where all those trusted app parts should go - a smart card with e-ink display that can provide high security assurance level and where I won't mind that it's locked down because it has only one purpose.
__Not__ to my smartphone, effectively preventing me from modifying the system in the name of security. A banking app can use a card like this and on the display I could for example see where a transaction would go and then I could accept it, possibly even with a biometric identification.
This would enable me to keep my smartphone customizable and banking apps secure at the same time.
Comments
__This__ is where all those trusted app parts should go - a smart card with e-ink display that can provide high security assurance level and where I won't mind that it's locked down because it has only one purpose.
__Not__ to my smartphone, effectively preventing me from modifying the system in the name of security. A banking app can use a card like this and on the display I could for example see where a transaction would go and then I could accept it, possibly even with a biometric identification.
This would enable me to keep my smartphone customizable and banking apps secure at the same time.
[apologies for the rant]
And it would communicate using?
NFC, with the smartphone, but the smartphone would not need to be trusted, it would just relay encrypted + signed data.