System and method to protect privacy of personal-identification-number entry on consumer mobile device and computing apparatus
A system for accepting the input of a PIN comprises a first device receiving a randomized PIN layout derived on a fourth device. The randomized PIN layout is displayed on a display of the first device. A second device comprises an input for accepting a series of key presses to produce a PIN token. The PIN token indicating each of the series of key presses. A third device is in communication with the second device. The third device derives the randomized PIN layout and receives the PIN token from the second device without the PIN token being present on the first device. The third device combines the PIN layout and the PIN token to produce a PIN. The PIN is used to authenticate a transaction. The fourth and third devices each store a shared secret used to independently derive the randomized PIN layout on the fourth and third devices.
1. A plurality of devices to enable a user to enter a personal identification number (PIN) to authenticate a transaction, wherein:
the plurality of devices comprises a first device, a second device, a third device and a fourth device, wherein
the first device is communicatively coupled to the fourth device, and
a veracity of a point of sale terminal is authenticated by the first device and the second device based on the transaction;
the first device receives a randomized PIN layout derived by the fourth device, and displays the randomized PIN layout on a first display of the first device to enable the user to enter a series of key presses at the second device;
the second device accepts the series of key presses from the user to produce a PIN token indicating each of the series of key presses; and
the third device is communicatively coupled to the second device to:
derive the randomized PIN layout,
receive the PIN token from the second device without the PIN token being present on the first device, and
combine the randomized PIN layout and the PIN token to produce the PIN.
2. The plurality of devices of claim 1 wherein the fourth device and the third device store a shared secret.
3. The plurality of devices of claim 2 , wherein the shared secret is used to independently derive the randomized PIN layout on the fourth device and the third device.
4. The plurality of devices of claim 1 wherein the third device is located remotely from the first and second device.
5. The plurality of devices of claim 4 wherein the first and the second device are used to accept payments from a customer payment device.
6. The plurality of devices of claim 1 , wherein:
the third device is communicatively coupled to the fourth device; and
the fourth device transmits the randomized PIN layout to the third device.
7. The plurality of devices of claim 6 , wherein the randomized PIN layout is encrypted before transmission by the fourth device.
8. The plurality of devices of claim 7 , wherein:
the third device receives the encrypted randomized PIN layout; and
the third device decrypts the received encrypted randomized PIN layout.
9. The plurality of devices of claim 1 , wherein the PIN token is encrypted by the second device before transmission to the third device.
10. The plurality of devices of claim 1 , wherein the PIN token is based on positions corresponding to the series of key presses.
11. A method for authenticating a transaction using a plurality of devices comprising a first device, a second device, a third device and a fourth device, the method comprising:
displaying a randomized PIN layout on the first device,
the first device receiving the randomized PIN layout from the fourth device,
the fourth device deriving the randomized PIN layout,
the first device displaying the randomized PIN layout on a first display of the first device to enable a user to enter a series of key presses at the second device;
accepting, at an input of the second device, the series of key presses;
producing, by the second device, a PIN token based on the accepted series of key presses, the PIN token indicating each of the series of key presses; and
receiving the produced PIN token from the second device at the third device without the PIN token being present on the first device,
the third device deriving the randomized PIN layout,
the third device combining the randomized PIN layout and the PIN token to produce a PIN, and
the PIN being used to authenticate the transaction, and a veracity of a point of sale terminal is authenticated based on the transaction.
12. The method of claim 11 wherein the third device and the fourth device store a shared secret.
13. The method of claim 12 , wherein the shared secret used to independently derive the randomized PIN layout on the fourth device and the third device.
14. The method of claim 11 wherein the third device is located remotely from the first and second device.
15. The method of claim 14 wherein the first device and the second device are used to accept payments from a customer payment device.
16. The method of claim 11 , further comprising transmitting, by the fourth device, the randomized PIN layout to the third device.
17. The method of claim 16 , further comprising encrypting the randomized PIN layout prior to the transmitting to the third device.
18. The method of claim 17 , wherein the method further comprises:
receiving, by the third device, the encrypted randomized PIN layout; and
decrypting, by the third device, the received encrypted randomized PIN layout.
19. The method of claim 11 , further comprising encrypting the PIN token by the second device before transmission to the third device.
20. The method of claim 11 , wherein the PIN token is based on positions corresponding to the series of key presses.