Segregated PIN Layout and Token Entry for Mobile Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for secure PIN entry on consumer mobile devices are inadequate as they often require the PIN layout and PIN token to coexist on the same device, creating a single point of attack and compromising privacy.
Innovation Solution
A system comprising multiple devices where the PIN layout is displayed on one device and the PIN token is entered on another, with neither the PIN layout nor the PIN token present on the same device, ensuring that encryption keys are also segregated across different devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If PIN layout and PIN token are stored on the same device, then device functionality is simplified, but security is compromised due to single point of attack
Solution Approach 1:
The system divides the PIN entry functionality into two separate devices: a first device that displays the PIN layout and a second device that captures the PIN token. This segmentation ensures that neither device alone possesses both the layout and token, eliminating the single point of attack while maintaining complete functionality through their coordinated interaction.
Solution Approach 2:
The invention extracts the PIN layout display function from the PIN token capture function, placing them on separate devices. The first device is dedicated to displaying the randomized PIN layout, while the second device is dedicated to capturing the PIN token, thereby removing the security vulnerability of having both components on the same device.
2Reliability
If traditional payment terminals are used for PIN entry, then security is maintained, but cost is too high for small merchants
Solution Approach 1:
The system enables standard mobile devices to perform secure PIN entry functionality that previously required dedicated payment terminals. By utilizing the camera and display of common smartphones or tablets, the invention makes secure PIN capture accessible to small merchants without requiring expensive specialized equipment.
Solution Approach 2:
The invention uses the device's camera to capture an image of the PIN layout displayed on another device's screen. This optical copying method allows the system to obtain the PIN layout information without physical contact or specialized card readers, significantly reducing hardware costs while maintaining security.
3Object-affected harmful factors
If randomized PIN layout is implemented on the same device as PIN entry, then privacy is improved, but the device becomes a single point of attack
Solution Approach 1:
The system segments the randomized PIN layout display and PIN token capture into separate devices. The first device generates and displays the randomized layout, while the second device captures the token. This segmentation maintains the privacy benefits of randomization while preventing the concentration of all security-critical components in a single device.
Solution Approach 2:
The invention introduces an optical intermediary (camera) that transfers the PIN layout information from the first device to the second device without electronic data exchange. This intermediary mechanism allows the randomized layout to be used for privacy protection while ensuring that the layout data never electronically resides on the same device as the token capture functionality.
Data Source
AI summary
A system for accepting the input of a PIN comprises a first device receiving a randomized PIN layout derived on a fourth device. The randomized PIN layout is displayed on a display of the first device. A second device comprises an input for accepting a series of key presses to produce a PIN token. The PIN token indicating each of the series of key presses. A third device is in communication with the second device. The third device derives the randomized PIN layout and receives the PIN token from the second device without the PIN token being present on the first device. The third device combines the PIN layout and the PIN token to produce a PIN. The PIN is used to authenticate a transaction. The fourth and third devices each store a shared secret used to independently derive the randomized PIN layout on the fourth and third devices.