Secure pin entry using a virtual terminal
AssigneeApple Inc.
InventorsFrank Andries van den Berg, Rahul Narayan Singh, Neilson Proulx-Marcil, Jean-Francois Riendeau, Mamta Devi
Life of this patent
Estimating the term…
Abstract
Techniques for using a virtual terminal on a multipurpose device for PIN entry to authorize a data transfer are described herein. These techniques provide the secure receipt of each PIN digit by the device and encryption of the PIN multipurpose device and while the PIN entry data is transferred, while still providing the information to a server for further processing.
Claims20
A method, comprising:
- receiving, by a reader application of a user device, a personal identification number (PIN) request associated with an encrypted data transfer;
- receiving, by the reader application, a first digit of a plurality of digits of the PIN;
- overwriting, by the reader application, a memory location of a previously-stored digit of the plurality of digits by storing the first digit in the memory location;
- generating, by the reader application, a first encrypted digit by encrypting the first digit with a public key;
- transmitting, by the reader application, the first encrypted digit to a secure element of the user device;
- decrypting, by the secure element, the plurality of digits of the PIN with a private key, wherein the private key is associated with the public key;
- and
- generating, by the secure element, a PIN blob based at least in part on the plurality of digits of the PIN.
A user device, comprising:
- one or more memories;
- one or more processors in communication with the one or more memories and configured to execute instructions stored in the one or more memories to cause the user device to:
- receive, by a reader application of the user device, a personal identification number (PIN) request associated with an encrypted data transfer;
- receive, by the reader application, a first digit a plurality of digits of the PIN;
- overwriting, by the reader application, a memory location of a previously-stored digit of the plurality of digits by storing the first digit in the memory location;
- generating, by the reader application, a first encrypted digit by encrypting the first digit with a public key;
- transmit, by the reader application, the first encrypted digit to a secure element of the user device;
- and
- a secure element configured to:
- decrypt the plurality of digits of the PIN with a private key, wherein the private key is associated with the public key;
- and
- generate a PIN blob based at least in part on the plurality of digits of the PIN.
A non-transitory computer-readable storage medium having stored thereon program instructions that, when executed by one or more processors of a user device, cause the user device to perform operations comprising:
- receiving, by a reader application of the user device, a personal identification number (PIN) request associated with an encrypted data transfer;
- receiving, by the reader application, a first digit a plurality of digits of the PIN;
- overwriting, by the reader application, a memory location of a previously-stored digit of the plurality of digits by storing the first digit in the memory location;
- generating, by the reader application, a first encrypted digit by encrypting the first digit with a public key;
- transmitting, by the reader application, the first encrypted digit to a secure element of the user device;
- and
- receiving a PIN blob based at least in part on the plurality of digits, wherein the secure element is configured to decrypt the plurality of digits with a private key and generate the PIN blob based at least in part on the plurality of digits, wherein the private key is associated with the public key.
Dependencies are inferred from the claim text.