Trusted module based secure electronic transaction scheme

We propose a trusted computing module based secure electronic transaction architecture, which uses trusted equipment as the identity authentication and transaction authorization terminal. The framework binds authentication and authorization in e-transaction operations and guarantee the secure sensitive operation is executed properly in an isolated, trusted, auditable environment. Our approach thwarts Man-in-the-Middle attacks, and protects user´s account from keyloggers and most forms of spyware and fends off the authorization hijack attack efficiently.