Secure PIN Verification for Mobile Payment Systems
Methods and systems are provided for secure electronic payment for merchandise at a point of sale. The secure verification of a personal identification number (PIN) via a mobile payment system is facilitated. A memory stores account information for a plurality of users, the account information includes a personal identification number (PIN) for at least some of the users. A processor receives a communication including an indication of a desire of a user to purchase an item from a merchant. The processor accesses an account of the user and provides a random keypad to the merchant. The user uses the random keypad to enter the PIN. The processor receives touch screen information from a mobile device of the user and makes a reconstructed PIN from the random keypad and the touch screen information. The processor authorizes the purchase if the reconstructed PIN is the PIN of the user.
1 . A system comprising:
a memory storing account information for a user, the account information including a personal identification number (PIN) for the user;
a processor operable to:
receive a communication from a merchant device of a merchant including an indication that the user is about to purchase an item from the merchant;
access an account of the user;
provide information representative of a random keypad to the merchant;
receive from a mobile device of the user touch screen information representative of which numbers on the random keypad were dragged and dropped by the user and to where the numbers were dragged and dropped;
make a reconstructed PIN from the random keypad and the touch screen information; and
determine if the reconstructed PIN is the PIN of the user and authorize the purchase of the item if the reconstructed PIN is the PIN of the user.
2 . The system of claim 1 , wherein the communication comprises a merchant ID and a first token that is representative of a shopping cart of the user.
3 . The system of claim 2 , wherein the random keypad is provided to the merchant via a second token.
4 . The system of claim 1 , wherein providing the random keypad to the merchant comprises providing a random number to the merchant and wherein the random keypad is derivable from the random number.
5 . The system of claim 1 , wherein providing the random keypad to the merchant comprises providing a non-repeating random sequence of ten digits to the merchant.
6 . The system of claim 1 , wherein the touch screen information is information representative of which numbers on the random keypad were tapped by the user.
7 . (canceled)
8 . The system of claim 1 , wherein the system is a payment server.
9 . A method comprising:
receiving, electronically by a processor of a payment server, a communication from a merchant device of a merchant including an indication that a user is about to purchase an item from the merchant;
accessing, by the processor, an account of the user;
providing, by the processor, information representative of a random keypad to the merchant;
receiving, by the processor from a mobile device of the user, touch screen information representative of which numbers on the random keypad were dragged and dropped by the user and to where the numbers were dragged and dropped;
making, by the processor, a reconstructed PIN from the random keypad and the touch screen information; and
determining if the reconstructed PIN is the PIN of the user and authorizing, by the processor, the purchase of the item if the reconstructed PIN is the PIN of the user.
10 . The method of claim 9 , wherein the communication comprises a merchant ID and a first token that is representative of a shopping cart of the user.
11 . The method of claim 10 , wherein the random keypad is provided to the merchant via a second token.
12 . The method of claim 9 , wherein providing the random keypad to the merchant comprises providing a random number to the merchant and wherein the random keypad is derivable from the random number.
13 . The method of claim 9 , wherein providing the random keypad to the merchant comprises providing a non-repeating random sequence of ten digits to the merchant.
14 . The method of claim 9 , wherein the touch screen information is information representative of which numbers on the random keypad were tapped by the user.
15 . The method of claim 9 , wherein the touch screen information is information respectative of which numbers on the random keypad were tapped by the user.
16 . A non-transitory machine-readable medium comprising a plurality of machine-readable instructions which when executed by one or more processors of a server are adapted to cause the server to perform a method comprising:
receiving, electronically by a processor of a payment server, a communication from a merchant device of a merchant including an indication that a user is about to purchase an item from the merchant;
accessing, by the processor, an account of the user;
providing, by the processor, information representative of a random keypad to the merchant;
receiving, by the processor from a mobile device of the user, touch screen information representative of which numbers on the random keypad were dragged and dropped by the user and to where the numbers were dragged and dropped;
making, by the processor, a reconstructed PIN from the random keypad and the touch screen information; and
determining if the reconstructed PIN is the PIN of the user and authorizing, by the processor, the purchase of the item if the reconstructed PIN is the PIN of the user.
17 . The non-transitory machine-readable medium of claim 16 , wherein the communication comprises a merchant ID and a first token that is representative of a shopping cart of the user.
18 . The non-transitory machine-readable medium of claim 17 , wherein the random keypad is provided to the merchant via a second token.
19 . The non-transitory machine-readable medium of claim 16 , wherein providing the random keypad to the merchant comprises providing a random number to the merchant and wherein the random keypad is derivable from the random number.
20 . The non-transitory machine-readable medium of claim 16 , wherein providing the random keypad to the merchant comprises providing a non-repeating random sequence of ten digits to the merchant.
21 . The non-transitory machine-readable medium of claim 16 , wherein the touch screen information is information representative of which numbers on the random keypad were tapped by the user.
22 . (canceled)