Contactless card personal identification system

A system, comprising:

• at least one processor;
• and
• at least one non-transitory storage media storing instructions, that when executed by the at least one processor, cause the at least one processor to perform operations including
• receiving one or more personal identification numbers in connection with a transaction requested by a contactless card;
• encrypting a generated random number associated with the transaction and transmitting the encrypted generated random number to the contactless card;
• receiving, from the contactless card, a first digital signature generated by the contactless card based on the encrypted generated random number;
• generating a second digital signature using the generated random number and one or more personal identification numbers (PINs);
• and
• executing the transaction upon the second digital signature matching the first digital signature.

A computer program product comprising a non-transitory machine-readable medium storing instructions that, when executed by at least one programmable processor, cause the at least one programmable processor to perform operations comprising:

• initiating, using a contactless card, a transaction;
• receiving one or more personal identification numbers in connection with the transaction;
• encrypting a generated random number associated with the transaction and transmitting the encrypted generated random number to the contactless card;
• receiving, from the contactless card, a first digital signature generated by the contactless card based on the encrypted generated random number, the first digital signature being a message authentication code (MAC) cryptogram generated by encoding at least the generated random number and the one or more personal identification numbers (PINs) stored by the contactless card;
• generating a second digital signature using the generated random number and one or more personal identification numbers (PINs), the second digital signature being an expected message authentication (MAC) cryptogram generated using the generated random number and the one or more personal identification numbers (PINs);
• and
• executing the transaction upon the second digital signature matching the first digital signature.