System and method to protect privacy of personal-identification-number entry on consumer mobile device and computing apparatus
A system for accepting the input of a PIN comprises a first device receiving a randomized PIN layout derived on a fourth device. The randomized PIN layout is displayed on a display of the first device. A second device comprises an input for accepting a series of key presses to produce a PIN token. The PIN token indicating each of the series of key presses. A third device is in communication with the second device. The third device derives the randomized PIN layout and receives the PIN token from the second device without the PIN token being present on the first device. The third device combines the PIN layout and the PIN token to produce a PIN. The PIN is used to authenticate a transaction. The fourth and third devices each store a shared secret used to independently derive the randomized PIN layout on the fourth and third devices.
1. A system to enable a user to enter a personal identification number (PIN) to authenticate a transaction, the system comprising:
a plurality of devices comprising a first device, a second device, a third device, and a fourth device, wherein the first device and the second device use the transaction to authenticate a veracity of a point of sale terminal;
the first device receives a randomized PIN layout derived by the fourth device, and displays the randomized PIN layout on a first display of the first device to enable the user to enter a series of key presses at the second device;
the second device accepts the series of key presses from the user to produce a PIN token indicating each key press of the series of key presses; and
the third device is coupled to the second device to:
derive the randomized PIN layout,
receive the PIN token from the second device without the PIN token being present on the first device, and
combine the randomized PIN layout and the PIN token to produce the PIN.
2. A method for authenticating a transaction using a plurality of devices comprising a first device, a second device, a third device, and a fourth device, the method comprising:
displaying a randomized PIN layout on the first device,
the first device receiving the randomized PIN layout from the fourth device,
the fourth device deriving the randomized PIN layout, and
the first device displaying the randomized PIN layout on a first display of the first device to enable a user to enter a series of key presses at the second device;
accepting, at an input of the second device, the series of key presses;
producing, by the second device, a PIN token based on said accepted series of key presses, the PIN token indicating each key press of the series of key presses; and
receiving the PIN token from the second device at the third device without the PIN token being present on the first device,
the third device deriving the randomized PIN layout,
the third device combining the randomized PIN layout and the PIN token to produce a PIN, and
the PIN being used to authenticate the transaction, wherein the transaction is used to authenticate a veracity of a point of sale terminal.