Secure transactions using a personal device

1. A non-transitory machine-readable medium including instructions for secure transactions using a personal device, which when executed by a machine, cause the machine to perform the operations including:

receiving at a secure server from the personal device, an indication to begin a secure transaction to access a resource with an access code;

randomizing an initial keypad representation of a physical keypad of the secure server to produce a randomized keypad representation;

transmitting the randomized keypad representation to the personal device for presentation by the personal device to a user of the personal device, the randomized keypad representation presented as augmented reality content with respect to the physical keypad;

receiving a series of key presses from the user at the physical keypad of the secure server, the physical keypad of the secure server being separate from personal device, the key presses actuating keys of the physical keypad, the key presses corresponding to the access code as presented on the randomized keypad representation displayed on the personal device, and the keys pressed on the physical keypad being pressed in a different sequence than the access code; and

verifying that the series of key presses correspond to the access code.

2. The non-transitory machine-readable medium of claim 1 , wherein the secure server is an automated teller machine.

3. The non-transitory machine-readable medium of claim 1 , wherein the personal device comprises a worn device.

4. The non-transitory machine-readable medium of claim 3 , wherein the worn device comprises an eyeglasses system.

5. The non-transitory machine-readable medium of claim 1 , wherein receiving the indication to begin the secure transaction comprises receiving an access card in a card reader of the secure server, the access card provided by the user of the personal device.

6. The non-transitory machine-readable medium of claim 1 , wherein receiving the indication to begin the secure transaction comprises receiving a request from an application operating on the personal device.

7. The non-transitory machine-readable medium of claim 1 , wherein transmitting the randomized keypad representation comprises transmitting locations of keys to the personal device to use when displaying the randomized keypad representation.

8. The non-transitory machine-readable medium of claim 1 , wherein transmitting the randomized keypad representation comprises transmitting an image to the personal device for presentation in a heads-up display.

9. The non-transitory machine-readable medium of claim 8 , wherein the presentation in the heads-up display is overlaid on the physical keypad of the secure server.

10. The non-transitory machine-readable medium of claim 1 , wherein verifying that the series of key presses correspond to the access code comprises:

mapping the randomized keypad representation to the initial keypad representation to obtain a cipher;

obtaining a mapped access code based on the series of key presses;

deciphering the mapped access code to obtain a deciphered access code; and

comparing the deciphered access code to the access code.

11. The non-transitory machine-readable medium of claim 1 , wherein the access code is a personal identification number.

12. The non-transitory machine-readable medium of claim 1 , wherein the receiving the indication to begin the secure transaction and then transmitting the randomized keypad representation to the personal device are conducted over a secure communications channel.

13. The non-transitory machine-readable medium of claim 12 , wherein the secure communications channel comprises a communication channel between a trusted execution environment (TEE) of the secure server and a trusted execution environment (TEE) of the personal device.

14. The non-transitory machine-readable medium of claim 13 , wherein the communication channel between the TEE of the secure server and the personal device is implemented with an enhanced privacy identifier.

15. The non-transitory machine-readable medium of claim 1 , further comprising authenticating the user of the personal device before transmitting the randomized keypad representation.

16. The non-transitory machine-readable medium of claim 15 , wherein authenticating the user of the personal device comprises:

using a secure communications channel between the secure server and the personal device; and

receiving an indication m the personal device that the user is recognized by the personal device.

17. A system to secure transactions using a personal e, tare system comprising:

a randomization circuit to randomize a keypad representation of a physical keypad to produce a randomized keypad representation;

a communication circuit to:

receive from the personal device, an indication to begin a secure transaction to access a resource with an access code; and

transmit the randomized keypad representation to the personal device presentation by the personal device to a user of the personal device, the randomized keypad representation presented as augmented reality content with respect to a physical keypad;

the physical keypad to receive a series of key presses from the user, the key presses actuating keys of the physical keypad, the key presses corresponding to the access code as presented on the randomized keypad representation displayed on the personal device, and the keys pressed on the physical keypad being pressed in a different sequence than the access code; and

a security circuit to verify that the series of key presses correspond to the access code.

18. The system of claim 17 , wherein to verify that the series of key presses correspond to the access code, the security circuit is to:

map the randomized keypad representation to the initial keypad representation to obtain a cipher;

obtain a mapped access code based on the series of key presses;

decipher the mapped access code to obtain a deciphered access code; and

compare the deciphered access code to the access code.

19. A method for secure transactions using a personal device, the method comprising:

receiving at a secure server from the personal device, an indication to begin a secure transaction to access a resource with an access code;

randomizing an initial keypad representation of a physical pa of the secure server to produce a randomized keypad representation;

transmitting the randomized keypad representation to the personal device for presentation by the personal device to a user of the personal device, the randomized keypad representation presented as augmented reality content with respect to the physical keypad;

receiving a series of key presses from the user at the physical keypad of the secure server, the physical keypad of the secure server being separate from personal device, the key presses actuating keys of the physical keypad, the key presses corresponding to the access code as presented on the randomized keypad representation displayed on the personal device, and the keys pressed on the physical keypad being pressed in a different sequence than the access code; and

verifying that the series of key presses correspond to the access code.

20. The method of claim 19 , further comprising authenticating the user of the personal device before transmitting the randomized keypad representation.

21. The method of claim 19 , wherein verifying that the series of key presses correspond to the access code comprises:

mapping the randomized keypad representation tote initial keypad representation to obtain a cipher;

obtaining a mapped access code based on the series of key presses;

deciphering the mapped access code to obtain a deciphered access code; and

comparing the deciphered access code to the access code.

22. The method of claim 19 , wherein the access code is a personal identification number.

23. The method of claim 19 , wherein the receiving the indication to begin the secure transaction and then transmitting the randomized keypad representation to the personal device are conducted over a secure communications channel.

24. The method of claim 23 , wherein the secure communications channel comprises a communication channel between a trusted execution environment (TEE) of the secure server and a trusted execution environment (TEE) of the personal device.

25. The method of claim 24 , wherein the communication channel between the TEE of the secure server and the personal device is implemented with an enhanced privacy identifier.