Secure PIN Entry via Peripheral Encryption Grid
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile devices are insecure for PIN entry due to vulnerabilities from malware and hacked operating systems, which can capture user input for unauthorized access.
Innovation Solution
A system comprising a mobile computing device and a peripheral device with an encryption engine, where the mobile device displays a grid without digits, and the peripheral device displays a randomized grid for PIN entry, with positional inputs sent to the peripheral device for decoding and encryption, ensuring secure PIN transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If PIN entry is performed using software on mobile devices with touch screens, then convenience and ease of operation are improved, but security deteriorates due to malware and hacked operating systems that can capture user input
Solution Approach 1:
The system divides the PIN entry process into two separate components: a mobile computing device that provides the user interface and collects positional inputs, and a peripheral device that performs the actual PIN decoding and encryption. This segmentation ensures that the mobile device never handles the actual PIN digits, maintaining security while preserving ease of operation through the mobile device's convenient interface.
Solution Approach 2:
The peripheral device acts as an intermediary between the user and the PIN verification system. It receives positional inputs from the mobile device, maps them to actual PIN digits using its own display grid, and performs encryption before transmitting the PIN to the verification system. This intermediary role prevents malware on the mobile device from accessing the PIN.
2Reliability
If a peripheral device with encryption engine is used for secure PIN entry, then security is improved, but device complexity increases
Solution Approach 1:
The encryption functionality is extracted from the mobile computing device and placed in a separate peripheral device. This allows the mobile device to remain relatively simple while the peripheral device handles the complex cryptographic operations. The peripheral device contains the encryption engine and security credentials, separating security complexity from the main mobile device.
3Reliability
If the peripheral device displays a randomized grid of digits, then security against capture is improved, but the difficulty of detecting and measuring the correct positions increases
Solution Approach 1:
The peripheral device's digit grid is dynamically randomized, with digit positions changing between different PIN entry attempts or sessions. This dynamic repositioning ensures that even if malware captures the grid layout, it cannot use that information to determine the correct PIN digits for future attempts, as the positions will have changed.
Solution Approach 2:
The system uses feedback through the dual-display mechanism where the mobile device shows positional inputs and the peripheral device shows the corresponding digit grid. This feedback loop allows the user to visually correlate their input positions with the actual digits they are entering, maintaining ease of use despite the randomized positions.
Data Source
AI summary
A system for entering a secure Personal Identification Number (PIN) into a mobile computing device includes a mobile computing device and a peripheral device that are connected via a data communication link. The mobile computing device includes a mobile application and a display and the mobile application runs on the mobile computing device and displays a grid on the mobile computing device display. The peripheral device includes a display and an encryption engine, and the peripheral device display displays a grid corresponding to the grid displayed on the mobile computing device display. Positional inputs on the mobile computing device grid are sent to the peripheral device and the peripheral device decodes the positional inputs into PIN digits and generates an encrypted PIN and then sends the encrypted PIN back to the mobile computing device.