Nor- mally, any SMS capable application can read any SMS message that is received by the phone, as we discussed in Section 4.2. We create a virtual dedicated chan- nel inside the mobile phone OS by removing certain SMS messages from the general delivery process on the phone and redirecting them to a special OTP application. Messages sent via this dedicated channel are secure against local interception. The endpoint of the virtual dedicated channel is an application with similar functionality to the default SMS application. It receives and stores SMS messages. The only difference is that it will only receive OTP messages, and that its message store cannot be read by other applications. The protection is ensured by the use of application private storage. From now on, we refer to this as the OtpMessages application.