Secure PIN Verification for Mobile Payment Systems

A method comprising:

• receiving, electronically by a processor of a payment server, a communication from a merchant device of a merchant including an indication that a user is about to purchase an item from the merchant;
• accessing, by the processor, an account of the user;
• providing, by the processor, information representative of a random keypad to the merchant;
• receiving, by the processor from a mobile device of the user, touch screen information representative of which numbers on the random keypad were dragged and dropped by the user and to where the numbers were dragged and dropped;
• making, by the processor, a reconstructed PIN from the random keypad and the touch screen information;
• and
• determining if the reconstructed PIN is the PIN of the user and authorizing, by the processor, the purchase of the item if the reconstructed PIN is the PIN of the user.

A non-transitory machine-readable medium comprising a plurality of machine-readable instructions which when executed by one or more processors of a server are adapted to cause the server to perform a method comprising:

• receiving, electronically by a processor of a payment server, a communication from a merchant device of a merchant including an indication that a user is about to purchase an item from the merchant;
• accessing, by the processor, an account of the user;
• providing, by the processor, information representative of a random keypad to the merchant;
• receiving, by the processor from a mobile device of the user, touch screen information representative of which numbers on the random keypad were dragged and dropped by the user and to where the numbers were dragged and dropped;
• making, by the processor, a reconstructed PIN from the random keypad and the touch screen information;
• and
• determining if the reconstructed PIN is the PIN of the user and authorizing, by the processor, the purchase of the item if the reconstructed PIN is the PIN of the user.