PIN Creation System Using Pre-computed Encrypted Lookup Tables
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Consumers face difficulties in creating a new PIN at non-secure devices, such as personal computers, due to the high security measures implemented by financial institutions, which require encryption and secure PIN pad devices for PIN handling, making it inconvenient to change PINs outside secure locations.
Innovation Solution
A method that allows consumers to create a PIN on a non-secure device by capturing and transmitting the PIN to a host, selecting a base encrypted PIN, and converting it to a final encrypted PIN using an actual account number, enabling PIN creation without the Host Security Module (HSM) operating in administrative mode.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the HSM operates in secure mode with encryption requirements, then security is improved, but ease of operation deteriorates because consumers cannot create PINs at non-secure devices
Solution Approach 1:
The PIN creation process is segmented into two distinct phases: (1) Pre-computation phase where the HSM generates and stores base encrypted PINs for all possible PIN values in a lookup table, and (2) Execution phase where the consumer's chosen PIN is looked up and converted to the final encrypted form. This segmentation allows the HSM to remain in secure mode while enabling PIN creation at non-secure devices.
Solution Approach 2:
The system performs preliminary action by pre-computing and storing base encrypted PINs for all possible PIN values before the consumer actually needs to create a PIN. This advance preparation eliminates the need for real-time encryption operations during PIN creation, allowing the HSM to stay in secure mode while still supporting remote PIN creation.
2Ease of operation
If the HSM operates in administrative mode to accept unencrypted PINs, then ease of operation is improved for remote PIN creation, but security deteriorates due to vulnerability to unauthorized access
Solution Approach 1:
The HSM performs preliminary encryption of all possible PINs and stores the results in a lookup table while in secure mode. This pre-computation eliminates the need to operate in administrative mode during actual PIN creation operations, maintaining security while enabling remote access.
Solution Approach 2:
Instead of storing unencrypted PINs or requiring real-time encryption operations, the system creates a copy of the encryption transformation in the form of a lookup table containing base encrypted PINs. This copy allows the system to perform secure PIN creation without putting the HSM in administrative mode.
3Reliability
If a secure PIN pad device is required for PIN entry, then security is improved, but adaptability deteriorates because consumers cannot change PINs at locations without secure PIN pads
Solution Approach 1:
The system separates the secure encryption function (performed by the HSM in secure mode) from the PIN entry function (performed at the consumer's device). The consumer can enter their PIN at any device including personal computers, and the HSM handles the secure encryption using pre-computed base encrypted PINs from the lookup table.
Solution Approach 2:
The lookup table containing base encrypted PINs acts as an intermediary between the consumer's unencrypted PIN entry and the HSM's secure encryption requirements. This intermediary allows the system to accept PINs from non-secure devices while maintaining security through the pre-computed encrypted forms stored in the table.
Data Source
AI summary
A user may select or create a PIN at a non-secure input device, such as a web-enabled personal computer. PINs are stored at a financial host in encrypted form, as PIN offsets. The user selected PIN and a corresponding account number are sent in clear text form to the host, which selects a base PIN offset corresponding to the PIN. A host security module within the host converts the base PIN offset to an actual PIN offset using the actual account number. The actual PIN offset (corresponding to the new PIN and the account number) is then stored at the financial host.