SYSTEM AND METHOD FOR INDICATING ENTRY OF PERSONAL IDENTIFICATION NUMBER

1 . A method, comprising:

receiving, from an application executing on a first device that is communicatively coupled to a card reader, a set of signals from the card reader, the set of signals comprising a notification of a card in the card reader, one or more addresses, and a request for a personal identification number (PIN) verification;

in response to the request for the PIN verification, transmitting, by the first device, a prompt to a second device, the second device different from the first device and identified based on the one or more addresses, wherein the prompt comprises an instruction to a user to submit a PIN to the first device;

randomly selecting, by the first device, one or more variables that adjust one or more display parameters of a PIN pad displayed by the first device;

rendering, on a display of the first device, the PIN pad having the one or more display parameters adjusted based on the one or more variables; and

receiving, by the first device, a PIN entered by the user on the PIN pad rendered by the first device.

2 . The method of claim 1 , wherein a portion of the application is encrypted, the method further comprising:

authenticating the application with a terminal management server (TMS);

receiving, by the first device from the TMS in response to the authentication of the application, a decryption key; and

decrypting, using the decryption key, the encrypted portion of the application.

3 . The method of claim 2 , wherein the application executes within a sandbox associated with an application class, the application class based on at least one of an attribute field from the application, a signing key of the application, or information obtained from the TMS during authentication of the application.

4 . The method of claim 1 , wherein the one or more display parameters comprise a location of a keypad relative to an edge of a touchscreen, a size of the keypad, one or more sizes of one or more buttons within the keypad, and one or more positions of one or more groups of the one or more buttons within the keypad.

5 . The method of claim 1 , wherein the notification comprises at least one of a visual indication, an audio indication, or a motion indication.

6 . The method of claim 1 , wherein the prompt is transmitted over a messaging medium comprising at least one of Short Message Service (SMS), electronic mail, or instant messaging.

7 . The method of claim 1 , wherein a portion of the application executes within a trusted execution environment (TEE).

8 . The method of claim 1 , wherein the one or more display parameters are randomized.

9 . The method of claim 8 , wherein the randomization is performed using one or more probability distributions.

10 . A non-transitory machine-readable medium, having instructions stored thereon, which when executed by a computer system, cause the computer system to perform operations, comprising:

receiving, from an application executing on a first device that is communicatively coupled to a card reader, a set of signals from the card reader, the set of signals comprising a notification of a card in the card reader, one or more addresses, and a request for a personal identification number (PIN) verification;

in response to the request for the PIN verification, transmitting, by the first device, a prompt to a second device, the second device different from the first device and identified based on the one or more addresses, wherein the prompt comprises an instruction to a user to submit a PIN to the first device;

randomly selecting, by the first device, one or more variables that adjust one or more display parameters of a PIN pad displayed by the first device;

rendering, on a display of the first device, the PIN pad having the one or more display parameters adjusted based on the one or more variables; and

receiving, by the first device, a PIN entered by the user on the PIN pad rendered by the first device.

11 . The non-transitory machine-readable medium of claim 10 , wherein a portion of the application is encrypted, the operations further comprising:

authenticating the application with a terminal management server (TMS);

receiving, by the first device from the TMS in response to the authentication of the application, a decryption key; and

decrypting, using the decryption key, the encrypted portion of the application.

12 . The non-transitory machine-readable medium of claim 11 , wherein the application executes within a sandbox associated with an application class, the application class based on at least one of an attribute field from the application, a signing key of the application, or information obtained from the TMS during authentication of the application.

13 . The non-transitory machine-readable medium of claim 10 , wherein the one or more display parameters comprise a location of a keypad relative to an edge of a touchscreen, a size of the keypad, one or more sizes of one or more buttons within the keypad, and one or more positions of one or more groups of the one or more buttons within the keypad.

14 . The non-transitory machine-readable medium of claim 10 , wherein the prompt is transmitted over a messaging medium comprising at least one of Short Message Service (SMS), electronic mail, or instant messaging.

15 . The non-transitory machine-readable medium of claim 10 , wherein the one or more display parameters are randomized.

16 . A first device, comprising:

a memory; and

a processor, coupled with the memory, configured to:

receive, from an application executing on the first device that is communicatively coupled to a card reader, a set of signals from the card reader, the set of signals comprising a notification of a card in the card reader, one or more addresses, and a request for a personal identification number (PIN) verification,

in response to the request for the PIN verification, transmit a prompt to a second device, the second device different from the first device and identified based on the one or more addresses, wherein the prompt comprises an instruction to a user to submit a PIN to the first device,

randomly select one or more variables that adjust one or more display parameters of a PIN pad displayed by the first device,

render, on a display, the PIN pad having the one or more display parameters adjusted based on the one or more variables, and

receive a PIN entered by the user on the PIN pad rendered by the first device.

17 . The first device of claim 16 , wherein a portion of the application is encrypted, and the processor is further configured to:

authenticate the application with a terminal management server (TMS);

receive, from the TMS in response to the authentication of the application, a decryption key; and

decrypt, using the decryption key, the encrypted portion of the application.

18 . The first device of claim 17 , wherein the application executes within a sandbox associated with an application class, the application class based on at least one of an attribute field from the application, a signing key of the application, or information obtained from the TMS during authentication of the application.

19 . The first device of claim 16 , wherein the one or more display parameters comprise a location of a keypad relative to an edge of a touchscreen, a size of the keypad, one or more sizes of one or more buttons within the keypad, and one or more positions of one or more groups of the one or more buttons within the keypad.

20 . The first device of claim 16 , wherein the prompt is transmitted over a messaging medium comprising at least one of Short Message Service (SMS), electronic mail, or instant messaging.