Secure Card Reader PIN Entry via Segmented Input
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional chip card readers are bulky and expensive, and when used with mobile devices, they pose a risk of PIN theft due to the integration of PIN entry and display, making them vulnerable to malware and unauthorized access.
Innovation Solution
A card reader with a display and sensors that separates PIN entry from the mobile device, allowing users to input PINs securely by modifying and selecting characters on the reader, which are then stored and submitted for authorization, while keeping sensitive information away from the mobile device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If PIN entry and display are integrated into the mobile device, then ease of operation is improved, but security is worsened due to vulnerability to malware and unauthorized access
Solution Approach 1:
The system divides the PIN entry functionality into separate components: the card reader handles character display and sensor input, while the mobile device handles communication and transaction processing. This segmentation prevents malware on the mobile device from accessing the PIN, as the PIN never appears on the mobile device display.
Solution Approach 2:
The card reader acts as an intermediary device between the card and the mobile device. It includes a display and sensors that allow PIN entry without requiring the mobile device to handle sensitive input, thus protecting against malware while maintaining ease of operation through the mobile device's communication capabilities.
2Reliability
If a card reader with display and sensors is used to separate PIN entry from the mobile device, then security is improved, but device complexity is worsened
Solution Approach 1:
The card reader is designed to work with multiple mobile devices through universal connection interfaces (such as audio jacks or USB), allowing a single card reader unit to serve multiple purposes and reduce overall system complexity despite adding security features.
Data Source
AI summary
A card reader comprising a display configured to optionally graphically display a character; one or more sensors configured to receive user input, wherein the one or more sensors are configured to send one or more signals that modify and select the character; a microcontroller configured to process the user input, wherein the processing comprises modifying or selecting the character based on user input at the one or more sensors; and memory configured to store selected characters based on processing the user input.