Smart Card PIN Entry Encryption via Public Key
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smart card systems that rely on user-entered PIN or password authentication expose sensitive information to untrusted hardware, as the authentication data is transmitted in the clear, risking capture or replication by malicious devices.
Innovation Solution
An enhanced smart card system that encrypts user-entered authentication data using a public key before transmission, with the smart card decrypting and verifying the information using a private key, ensuring that unencrypted data never reaches the smart card reader, and incorporating a nonce to prevent replay attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the smart card reader is used to receive PIN or password from the user, then user authentication can be performed, but the authentication information is transmitted in the clear and can be captured or replicated by untrusted hardware
Solution Approach 1:
The patent introduces an intermediary encryption mechanism between the user and the smart card reader. The user's PIN or password is encrypted using the smart card's public key before being transmitted to the reader. This intermediary encryption layer prevents untrusted hardware from capturing usable authentication data, as the encrypted information cannot be decrypted without the private key stored securely in the smart card.
Solution Approach 2:
The patent applies preliminary encryption action to the authentication data before it leaves the user's input device. By encrypting the PIN or password with the smart card's public key in advance, the system ensures that even if the data is intercepted during transmission or stored by the reader, it remains unusable. This preliminary protective action eliminates the vulnerability of clear-text transmission.
2Reliability
If the smart card reader stores or processes the PIN or password, then authentication verification can be performed, but the reader has access to sensitive information that could be retained or passed to adversaries
Solution Approach 1:
The encryption mechanism serves as an intermediary that allows the smart card reader to verify authentication without directly accessing the plaintext PIN or password. The reader receives and processes encrypted data, performing verification based on cryptographic validation rather than direct comparison of clear-text credentials. This intermediary approach maintains verification reliability while preventing information exposure.
Solution Approach 2:
The patent extracts the sensitive authentication information from the transmission and processing path of the smart card reader. By using public-key encryption, the actual PIN or password never needs to be present in the reader's memory or processing units. Only the encrypted form traverses the communication channel, effectively extracting the plaintext credential from the vulnerable path while maintaining verification capability.
3Object-affected harmful factors
If encryption is implemented using public key infrastructure, then authentication data security is improved, but system complexity increases due to key management and encryption operations
Solution Approach 1:
The smart card performs self-service by generating and storing its own private key securely within its hardware. The card autonomously manages its cryptographic credentials without requiring external key management infrastructure. This self-service approach to key management reduces system complexity, as the smart card independently handles the most complex aspect of public-key infrastructure while the reader only needs to implement standard encryption/decryption operations.
Data Source
AI summary
A smart card, system, and method for securely authorizing a user or user device using the smart card is provided. The smart card is configured to provide, upon initialization or a request for authentication, a public key to the user input device such that the PIN or password entered by the user is encrypted before transmission to the smart card via a smart card reader. The smart card then decrypts the PIN or password to authorize the user. Preferably, the smart card is configured to provide both a public key and a nonce to the user input device, which then encrypts a concatenation or other combination of the nonce and the user-input PIN or password before transmission to the smart card. The smart card reader thus never receives a copy of the PIN or password in the clear, allowing the smart card to be used with untrusted smart card readers.