Method and apparatus for securing pass codes during transmission from capture to delivery
A user can securely enter a shared secret such as a pass code code, pass code or combination of symbols, in a generic computing environment, and deliver it securely to the recipient via an arbitrary network. As an example of such environment, pass code codes protecting an ATM card often need to be communicated to a bank's validation system. The pass code can be entered via a Web interface and delivered over the Internet via third-party network operators while never being exposed to intermediaries.
1 . A pass code transport system comprising:
a user input means for entering a pass code, wherein the user input means is software and/or hardware and the user input means is operated by a user computing device;
a key server that provides public keys of destination recipients to the user input means;
a communications channel for carrying a message comprising at least the pass code encrypted by the public key of a destination recipient for the message, wherein the message could pass through an untrusted network and zero or more intermediate recipients;
wherein the message is not easily decodable at an intermediate point between the user input means and the destination recipient.