System and method to protect privacy of personal-identification-number entry on consumer mobile device and computing apparatus

A method for authenticating a transaction using a plurality of devices comprising a first device, a second device, a third device, and a fourth device, the method comprising:

• displaying a randomized PIN layout on the first device,
• the first device receiving the randomized PIN layout from the fourth device,
• the fourth device deriving the randomized PIN layout, and
• the first device displaying the randomized PIN layout on a first display of the first device to enable a user to enter a series of key presses at the second device;
• accepting, at an input of the second device, the series of key presses;
• producing, by the second device, a PIN token based on said accepted series of key presses, the PIN token indicating each key press of the series of key presses;
• and
• receiving the PIN token from the second device at the third device without the PIN token being present on the first device,
• the third device deriving the randomized PIN layout,
• the third device combining the randomized PIN layout and the PIN token to produce a PIN, and
• the PIN being used to authenticate the transaction, wherein the transaction is used to authenticate a veracity of a point of sale terminal.