Authentication Device & Related Methods

Abstract

The invention provides a portable device for input of a Personal Identification Code (PIC). It comprises a card reading component and a touch screen. The screen is arranged and configured to display a pinpad and receive a PIC upon entry by a user via the pinpad. The card reading component and the touch screen are integral to the input device. The device can comprise a mobile phone, which may have a camera. The device can be a handheld card payment terminal for use in financial transactions, where a user's PIN must be authenticated. A security mechanism may be used with the device wherein an image of a scrambled keypad is displayed over an operable keypad, this enabling the device to store an encoded version of the user's input. As the user's real PIN is never stored in the device, no bank session key needs to be stored or encrypted. This enables the terminal to be produced at a lower cost then prior art arrangements.

Dependencies are inferred from the claim text.