Secure PIN Entry via Intermediary Display Unit
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mobile devices are insecure for processing financial transactions with IC chip cards due to malware risks, making it difficult to securely input PINs associated with integrated circuit chips.
Innovation Solution
A system and method that uses a mobile device with sensors and processors to detect and transmit character selections to a display unit, allowing secure input of PINs through a network interface, with the display unit encrypting and transmitting the final PIN state for secure authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a mobile device is used to process financial transactions with IC chip cards, then convenience and accessibility are improved, but security is worsened due to malware risks
Solution Approach 1:
The patent introduces a display unit as an intermediary device between the mobile device and the IC chip card reader. The display unit receives the PIN input from the user and transmits it securely to the mobile device, acting as a mediator that prevents direct access to the PIN input process by potentially malicious software on the mobile device. This resolves the contradiction by maintaining mobile payment convenience while enhancing security through architectural separation.
2Ease of operation
If a PIN is displayed on a mobile device screen for user input, then ease of input is improved, but security is worsened because malware can capture the PIN
Solution Approach 1:
The display unit serves as an intermediary that handles PIN display and input collection separately from the mobile device. The mobile device communicates with the display unit through secure network connections, but does not directly handle the PIN input interface. This architectural separation ensures that even if malware is present on the mobile device, it cannot capture the PIN as the display unit mediates all PIN-related operations.
Solution Approach 2:
The system segments the PIN input functionality into a separate display unit from the mobile device processing unit. The display unit is responsible for displaying and receiving PIN input, while the mobile device handles transaction processing. This segmentation isolates the sensitive PIN input process from potential security compromises on the mobile device.
3Adaptability or versatility
If sensors and processors are added to the mobile device to detect and transmit character selections, then functionality is improved, but device complexity increases
Solution Approach 1:
The display unit is designed as a self-service component that independently handles PIN display, input detection through its sensors, and secure transmission to the mobile device. By making the display unit autonomous in handling PIN operations, the mobile device does not need to incorporate complex PIN detection hardware, thus reducing overall system complexity while maintaining enhanced functionality.
Data Source
AI summary
Systems and methods for credential character selection are provided. The system includes one or more sensors configured to detect a character selection and generate a character selection signal, and detect a character selection completion and generate a character selection completion signal. The system also includes one or more processors coupled to the one or more sensors, the one or more processors configured to receive the character selection signal and the character selection completion signal, and generate an output signal based on the received character selection signal that includes components of a credential. The system also includes a network interface component configured to transmit the output signal. The credential characters may be components of a PIN or password. Moreover, the credential character selections may be made on one device, but displayed on a separate coupled device. The character selections may be a selection of a character or a modification of character.