IP Library Granted Patent US 10,409,976
Granted Patent B2
US 10,409,976 · App. 16/165,226 · Granted Sep 10, 2019

System and method for PIN entry on mobile devices

Inventor: Chi Wah Lo (Tsuen Wan, HK)
Assignee: BBPOS LIMITED
G06F21/35G06F3/013G06F3/0233G06F3/038G06F3/04886G06F21/31G06F21/72H04W12/06H04W12/12G06F2203/0383
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,409,976
App. No.
16/165,226
Granted
Sep 10, 2019
Kind
B2
Abstract

A system for entering a secure Personal Identification Number (PIN) into a mobile computing device includes a mobile computing device and a peripheral device that are connected via a data communication link. The mobile computing device includes a mobile application and a display and the mobile application runs on the mobile computing device and displays a grid on the mobile computing device display. The peripheral device includes a display and an encryption engine, and the peripheral device display displays a grid corresponding to the grid displayed on the mobile computing device display. Positional inputs on the mobile computing device grid are sent to the peripheral device and the peripheral device decodes the positional inputs into PIN digits and generates an encrypted PIN and then sends the encrypted PIN back to the mobile computing device.

Claims (60)

1. A system for a user to enter a secure Personal Identification Number (PIN) into a mobile computing device comprising:

a mobile computing device comprising a mobile application and a display, wherein the mobile application runs on the mobile computing device and displays a mobile computing device grid on the display;

a peripheral device comprising a display and an encryption engine, wherein the peripheral device is separated from the mobile computing device, and wherein the display of the peripheral device displays a peripheral device grid corresponding to the mobile computing device grid displayed on the mobile computing device display,

wherein the peripheral device is connected to the mobile computing device via a data communication link;

wherein the peripheral device grid is generated by the peripheral device and displayed by the display of the peripheral device based on a request received by the peripheral device, the request transmitted by the mobile computing device via the data communication link, the peripheral device grid displaying positional information not displayed on the mobile computing device grid, wherein the positional information displayed on the peripheral device grid enables the user to enter positional inputs on the mobile computing device grid; and

wherein the positional inputs entered on the mobile computing device grid are sent to the peripheral device, and the peripheral device:

decodes the positional inputs into PIN digits;

generates an encrypted PIN; and

sends the encrypted PIN back to the mobile computing device.

2. The system of claim 1 , wherein the mobile application displays the mobile computing device grid on the mobile computing device display without showing any digits.

3. The system in claim 1 , wherein the peripheral device grid comprises a randomized grid of digits.

4. The system of claim 1 , wherein the peripheral device grid randomizes a position of each digit on the peripheral device grid after each positional input.

5. The system in claim 1 , wherein the encryption engine in the peripheral device stores one or more cryptographic keys and wherein the one or more cryptographic keys are used to generate the encrypted PIN.

6. The system in claim 1 wherein the encryption engine in the peripheral device performs at least one cryptographic operation.

7. The system in claim 1 , wherein the data communication link comprises either a wired or wireless data communication link, wherein:

the wired data communication link comprises one of USB, Firewire, RS232 or audio jack interface, and

the wireless data communication link comprises one of WiFi, Bluetooth, Infrared, or NFC interface.

8. The system in claim 1 , wherein the peripheral device comprises one of a magnetic card reader, EMV card reader, NFC reader, keypad, or biometrics readers.

9. The system of claim 1 , wherein the mobile computing device comprises one of mobile phones, personal digital assistants (PDAs), netbooks, tablet computers, notebook computers, electronic readers, digital music players, digital video players, or game consoles.

10. The system of claim 1 , wherein the positional inputs on the mobile computing device are provided via one of touch screens, mouse clicks, track ball, or eyeball movement tracking devices.

11. A system for a user to securely enter a Personal Identification Number (PIN), comprising:

an application running on a first device having a first device display, wherein the application displays a first device grid for positional input capture on the first device display;

a second device comprising a second device display and an encryption engine, wherein:

the first device is coupled to the second device via a data communication link;

the second device receives a request from the application to generate a second device grid and display the generated second device grid, the request transmitted via the data communication link;

the second device generates the second device grid and the second device display displays the generated second device grid based on the received request, wherein:

the second device grid comprises a representation of a digits grid not displayed on the first device grid; and

the displaying of the representation of the digits grid enables the user to securely enter positional inputs on the first device grid;

the positional inputs entered on the first device grid are captured and transmitted to the second device via the data communication link;

the second device decodes the positional inputs into PIN digits;

the encryption engine generates an encrypted PIN from the decoded PIN digits; and

the second device transmits the encrypted PIN back to the first device.

12. The system of claim 11 , wherein the first device is a mobile device.

13. The system of claim 12 , wherein the second device is a peripheral device.

14. The system of claim 11 , wherein:

the encryption engine performs at least one cryptographic operation; and

the encryption engine stores one or more cryptographic keys, wherein the one or more cryptographic keys are used to generate the encrypted PIN.

15. The system of claim 11 , wherein the data communication link comprises either a wired or wireless data communication link, wherein:

the wired data communication link comprises one of USB, Firewire, RS232 or audio jack interface, and

the wireless data communication link comprises one of WiFi, Bluetooth, infrared, or NFC interface.

16. The system of claim 11 , wherein the second device comprises one of a magnetic card reader, an EMV card reader, an NFC reader, keypad, or biometrics readers.

17. The system of claim 11 , wherein the first device comprises one of mobile phones, personal digital assistants (PDAs), netbooks, tablet computers, notebook computers, electronic readers, digital music players, digital video players, or game consoles.

18. The system of claim 11 , wherein the application displays the first device grid on the first device display without showing any digits.

19. The system of claim 11 , wherein the second device grid comprises a randomized grid of digits.

20. The system of claim 19 , wherein the second device grid randomizes a position of each digit on the second device grid after each positional input.

21. A method for entering a secure Personal Identification Number (PIN), comprising:

providing an application to:

run on a first device comprising a first device display;

display a first device grid on the first device display for positional input capture; and

transmit a request to generate a second device grid over a data communication link;

providing a second device comprising a second device display and an encryption engine to:

receive the request to generate the second device grid from the data communication link;

generate and display the second device grid on the second device display in response to the received request, wherein:

the second device grid comprises a representation of a digits grid, wherein the representation of the digits grid not displayed on the first device grid; and

the displaying of the representation of the digits grid enables a user to securely enter positional inputs on the first device grid;

receive the entered positional inputs captured from the first device grid;

decode the received positional inputs into PIN digits;

generate, using the encryption engine, an encrypted PIN from the decoded PIN digits; and

transmit the encrypted PIN back to the first device.

22. The method of claim 21 , wherein the first device is a mobile device and the second device is a peripheral device.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 27, 2022
From: BBPOS LIMITED
To: STRIPE, INC.
Reel/Frame 061790/0031 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 19, 2018
From: LO, CHI WAH
To: BBPOS LIMITED
Reel/Frame 047234/0774 →
Continuity (3)
Continuation 14100076 · Dec 9, 2013
Provisional Application 61736116 · Dec 12, 2012
Related Publication 20190050553A1 · Feb 14, 2019