Reference Keyboard for Secure PIN Entry

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The security of transactional data, particularly PIN codes, is compromised when using mobile payment solutions due to the lack of security in communication terminals, which can be easily modified by fraudsters, and the use of random keyboards confuses users, leading to errors and dissatisfaction.

Innovation Solution

A method is introduced where a standard, inactive reference keyboard is displayed alongside or instead of a random keyboard to help users remember their PIN codes securely, allowing them to recall the digits and characters without entering incorrect codes, while preventing interception by masking the random keyboard.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a random keyboard is used for entering PIN codes, then security against interception is improved, but user satisfaction and accuracy deteriorate due to confusion and errors

Engineering Contradiction:
Improvesecurity against interceptionVSAvoiduser satisfaction and accuracy
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The solution segments the keyboard display into two distinct parts: a reference keyboard showing the standard layout for user guidance, and a random keyboard for actual secure input. This segmentation allows users to mentally map their PIN to the reference layout while the system processes input through the secure random layout, simultaneously achieving security and usability

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The reference keyboard acts as an intermediary between the user's memory of their PIN and the random keyboard input system. It provides a visual mediator that helps users locate their PIN digits without revealing the actual PIN or compromising security, bridging the gap between user cognition and secure input requirements

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If communication terminals are made more accessible and affordable, then payment accessibility is improved, but security against unauthorized modification deteriorates

Engineering Contradiction:
Improvepayment accessibilityVSAvoidsecurity against unauthorized modification
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The system creates a visual copy or representation of the standard keyboard layout (reference keyboard) that does not actually process input. This copy serves as a security mechanism by providing user guidance without being a functional input interface, allowing secure processing on the random keyboard while maintaining accessibility through familiar visual cues

Inventive Principle:
Principle #26Copying

3Reliability

If the random keyboard is displayed continuously, then security is maintained, but user error increases due to inability to recall code positions

Engineering Contradiction:
ImprovesecurityVSAvoidinput accuracy
Core Design Contradiction:
ReliabilityVSManufacturing precision

Solution Approach 1:

The reference keyboard is displayed preliminarily and continuously during the PIN entry process to establish a mental framework for users before and during input. This preliminary visual guidance prevents positioning errors by allowing users to mentally map their PIN digits to the reference layout, then accurately transfer this knowledge to the random keyboard input

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP3552190B1Method for securing data input, communication terminal and corresponding program
Publication Date: 2023.08.16 BANKS & ACQUIRERS INT HLDG SAS
  • EP3552190B1 patent drawingFigure 1~2
  • EP3552190B1 patent drawingFigure 3

AI summary

The invention relates to a method for securing the input of sensitive data, the method being implemented by a communication terminal comprising a processor for processing and a touch input screen on which the sensitive data input is carried out. Such a method comprises: a step (10) of displaying a randomised keypad for the input of the confidential code; a step (20) of receiving, by the processor, of a signal for displaying a reference keypad; a step (30) of displaying the reference keypad, said reference keypad being inactive.