Virtual Terminal PIN Entry Using a Secure Element
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional PIN entry systems require dedicated hardware devices separate from multipurpose devices, such as dongles, and often translate PINs into proprietary formats that necessitate data transfer service providers to decrypt sensitive information, compromising security.
Innovation Solution
A virtual terminal hosted by a secure element on a multipurpose device encrypts PINs and data transfers using integrated hardware, enabling secure PIN entry without separate hardware and allowing decryption only by authorized platforms, ensuring data security through multiple layers of encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional PIN entry systems use dedicated hardware devices (dongles) separate from multipurpose devices, then hardware functionality is provided, but device complexity increases and security is compromised due to proprietary format translation
Solution Approach 1:
The patent merges the terminal functionality into the multipurpose device itself, eliminating the need for separate dongles. The multipurpose device's processor directly executes the terminal application and handles PIN entry and data transfer operations, combining what were previously separate hardware components into a single integrated system.
Solution Approach 2:
The multipurpose device is designed to perform multiple functions: it serves as both a general-purpose computing device and a secure terminal for PIN entry and data transfer. The terminal application can be executed on this universal device, allowing it to replace dedicated hardware while maintaining security through its processor-based architecture.
2Ease of operation
If conventional systems translate PINs into proprietary formats, then data transfer capability is enabled, but security deteriorates because service providers must decrypt sensitive information
Solution Approach 1:
The patent changes the data format parameter by using standardized formats instead of proprietary translations. The terminal application communicates with the multipurpose device using standard data formats, eliminating the need for proprietary format translation and the associated security risks of decryption by service providers.
3Reliability
If dedicated hardware devices are used for PIN entry, then security functionality is provided, but ease of operation decreases due to separate device requirements
Solution Approach 1:
By merging the terminal functionality into the multipurpose device, users no longer need to physically connect separate dongles or devices. The PIN entry and data transfer operations are performed directly within the multipurpose device's interface, improving ease of operation while maintaining security through the integrated processor-based system.
Data Source
AI summary
Techniques for using a virtual terminal on a multipurpose device for PIN entry to authorize a data transfer are described herein. These techniques provide the secure receipt of each PIN digit by the device and encryption of the PIN multipurpose device and while the PIN entry data is transferred, while still providing the information to a server for further processing.