Bridge application for user pin selection
Systems and methods related to a bridge application that facilitates interoperability between a remotely-served application and locally connected peripheral devices. The bridge application may execute on a local machine and be addressable at the loop-back address of the local machine. Requests issued to the bridge application may be verified as originating from a trusted source. In turn, requests from a locally performed and remotely-served application may be issued to local hardware resources such as peripheral devices or the like.
1. A method for communication of data corresponding to a customer-selected personal identification number (PIN) from a peripheral PIN entry device to a remotely-served instant card issue application, the method comprising:
executing a bridge application on a local machine with which a peripheral PIN entry device is in operative communication;
exposing an application programming interface (API) of the bridge application for receipt of PIN requests only on a loopback address of the local machine on which the bridge application is executed;
receiving a PIN request addressed to the loopback address at the bridge application from a remotely-served instant card issuance application, wherein the PIN request identifies a source of the PIN request corresponding to the remotely-served instant card issuance application;
verifying the source of the PIN request as a trusted source;
communicating the PIN request between the bridge application and the peripheral PIN entry device using a device driver on the local machine to acquire PIN data from the peripheral PIN entry device corresponding to a customer-selected PIN entered at the peripheral PIN entry device; and
returning the PIN data to the remotely-served instant card issuance application.
2. The method of claim 1 , wherein the PIN request comprises a hypertext transfer protocol (HTTP) request.
3. The method of claim 2 , wherein the PIN request is communicated using a cryptographic communication protocol.
4. The method of claim 1 , wherein the source comprises a card services provider remote from the local machine.
5. The method of claim 4 , wherein the method further comprises:
requesting the remotely-served instant card issuance application from the card services provider;
receiving the remotely-served instant card issuance application from the card services provider; and
communicating customer information corresponding to a card to be processed by the card services provider.
6. The method of claim 5 , further comprising:
generating, at the card services provider, the remotely-served instant card issuance application.
7. The method of claim 6 , wherein the PIN request is generated by a browser application executing on the local machine and performing the remotely-served instant card issuance application, and wherein the remotely-served instant card issuance application comprises a browser-based system user interface generated by a web service of the card services provider.
8. The method of claim 1 , wherein the remotely-served instant card issuance application comprises instructions for generation of the PIN request.
9. The method of claim 8 , wherein the remotely-served instant card issuance application is generated by a web service of a card services provider.
10. The method of claim 9 , wherein the remotely-served instant card issuance application is performed by a browser application executing on the local machine, and wherein the remotely-served instant card issuance application comprises a browser-based system user interface generated by the web service of the card services provider.
11. The method of claim 9 , wherein the remotely-served instant card issuance application is performed by an integrated banking application executing on the local machine by accessing a web API of the web service of the card services provider.
12. The method of claim 1 , wherein the PIN request is generated in response to selection of a customer-selected PIN option in the remotely serviced instant card issuance application for association with a card to be processed by the remotely-served instant card issuance application.
13. The method of claim 12 , wherein the verifying comprises comparing the source of the PIN request to at least one predetermined trusted source.
14. The method of claim 13 , wherein the at least one predetermined trusted source comprises a card services provider corresponding to the remotely-served instant card issuance application.
15. The method of claim 14 , wherein the response is provided to the card services provider corresponding to the remotely-served instant card issuance application.
16. The method of claim 15 , further comprising:
receiving, at a location associated with the local machine, a card generation command from the card services provider corresponding to the remotely-served instant card issuance application, wherein the card generation command comprises customer information and is associated with the PIN data.
17. The method of claim 16 , further comprising:
generating the card, at a card printer at the location associated with the local machine, in response to receiving the card generation command.
18. The method of claim 17 , wherein the generating comprises printing the card.
19. The method of claim 18 , wherein the customer information comprises a customer selected image, and wherein the printing comprises printing the customer selected image on the card.
20. The method of claim 18 , wherein the generating comprises encoding the customer information onto the card.
21. The method of claim 20 , wherein each step of the method is performed while the customer is present at the location associated with the local machine.
22. The method of claim 1 , wherein the PIN request comprises an encrypted PIN request.
23. The method of claim 22 , wherein the PIN data comprises encrypted PIN data.
24. The method of claim 23 , wherein the encrypted PIN data comprises an encrypted PIN block generated by the peripheral PIN entry device in response to, and corresponding to, the customer-selected PIN entered by the customer at the peripheral PIN entry device.
25. The method of claim 24 , wherein the encrypted PIN data comprises:
a PIN cryptogram comprising the customer-selected PIN encrypted using an encryption key unique to the peripheral PIN entry device, and
a key serial number comprising a unique value corresponding to the encrypted PIN block associated with the PIN request and the peripheral PIN entry device.
26. A system for interface between a remotely-served instant card issuance application and a peripheral personal identification number (PIN) entry device at a local machine for customer-selected PIN entry in connection with the remotely serviced instant card issuance application, the system comprising:
a local machine;
a peripheral PIN entry device for generation of PIN data corresponding to a customer-selected PIN entered by a customer, the peripheral PIN entry device being in operative communication with the local machine via a device driver executed on the local machine;
a remotely-served instant card issuance application performed on the local machine and operative to generate a PIN request, wherein the PIN request identifies a source of the PIN request corresponding to the remotely-served instant card issuance application;
a bridge application executing on the local machine that exposes an application programming interface (API) for receipt of the PIN request only on at a loopback address of the local machine, wherein the bridge application only authorizes requests received on the loopback address from a trusted source for interface with the peripheral PIN entry device to retrieve the PIN data from the peripheral PIN entry device for return of the PIN data to the remotely-served instant card issuance application.
27. The system of claim 26 , wherein the PIN request comprises a hypertext transfer protocol (HTTP) request.
28. The system of claim 27 , wherein the PIN request is communicated using a cryptographic communication protocol.
29. The system of claim 26 , further comprising:
a card services provider remote from the local machine that generates the remotely-served instant card issuance application.
30. The system of claim 29 , further comprising:
a browser application executing on the local machine, wherein the remotely-served instant card issuance application is performed by the browser application;
wherein the remotely-served instant card issuance application comprises a browser-based system user interface generated by a web service of the card services provider.
31. The system of claim 26 , wherein the remotely-served instant card issuance application is generated by a web service of a card services provider.
32. The system of claim 31 , further comprising:
a browser application executing on the local machine, wherein the remotely-served instant card issuance application is performed by the browser application; and
wherein the remotely-served instant card issuance application comprises a browser-based system user interface generated by a web service of the card services provider.
33. The system of claim 31 , further comprising:
an integrated banking application executing on the local machine, wherein the remotely-served instant card issuance application is performed by the integrated banking application by accessing a web API of the web service of the card services provider.
34. The system of claim 26 , wherein the trusted source comprises a card services provider corresponding to the remotely-served instant card issuance application.
35. The system of claim 34 , further comprising:
a card printer at a location associated with the local machine, wherein the card printer receives a card generation command from the card services provider corresponding to the remotely-served instant card issuance application, wherein the card generation command comprises customer information and is associated with the PIN data.
36. The system of claim 35 , wherein the card printer generates the card based on the card generation command.
37. The system of claim 36 , wherein the card printer encodes at least a portion of the customer information onto the card.
38. The system of claim 26 , wherein the PIN request comprises an encrypted PIN request.
39. The system of claim 38 , wherein the PIN data comprises encrypted PIN data.
40. The system of claim 39 , wherein the encrypted PIN data comprises an encrypted PIN block generated by the peripheral PIN entry device in response to, and corresponding to, the customer-selected PIN entered by the customer at the peripheral PIN entry device.
41. The system of claim 40 , wherein the encrypted PIN data comprises:
a PIN cryptogram comprising the customer-selected PIN encrypted using an encryption key unique to the peripheral PIN entry device, and
a key serial number comprising a unique value corresponding to the encrypted PIN block associated with the PIN request and the peripheral PIN entry device.