Display Integrity Assurance for SMS Transaction Authorization

Secure online transactions with human users normally require visual display for verifying the correctness of central elements of the transaction before it is submitted. When commodity computer platforms get exposed to the Internet, even for a short period, there is a real and substantial risk that they become infected with malware that can modify anything on the computer, including what is displayed to the user and what is being sent over the Internet. This threat makes visual verification of transaction data unreliable and undermines other security mechanisms used to protect online transactions. This paper proposes a secure optical inspection technique for verifying the integrity of transaction data in online transactions. This technique provides protection against the highly advanced threat of a malware that manipulates transaction data as well as displayed data on the visual display of the client platform.