Patent ID: 8504097

Claim:
A system on a mobile phone for configuring a secure partition in a trusted security zone, comprising: a processor that executes virtualization software and comprises a first virtual processor and a second virtual processor, wherein the second virtual processor comprises the trusted security zone; a plurality of secure partitions residing in the trusted security zone, wherein the trusted security zone executes a dedicated operation system; a first application stored in the first virtual processor, wherein the first application selects the secure partition from the plurality of secure partitions in the trusted security zone for performing a transaction associated with the first application and sends the selection to a second application stored in the trusted security zone; a near field communication transceiver; the second application stored in the trusted security zone, wherein the second application receives the selection from the first application and in response to receiving the selection, couples the near field communication transceiver to the secure partition residing in the trusted security zone via direct connection to a hardware port associated with the trusted security zone on the processor prior to beginning the transaction, and wherein the second application enables run-time execution in the trusted security zone based on receiving a signal from the near field communication transceiver; and the secure partition residing in the trusted security zone, wherein the secure partition is not directly accessible from the first application.