A method of operating an integrated circuit (IC) card that is configured to communicate with a card reader, wherein the IC card includes registered biometric information and registered PIN information, the method comprising:
- determining whether biometric information received from a user and the registered biometric information on the IC card match;
- in response to determining that the biometric information and the registered biometric information do not match, outputting to the card reader, a first response indicating a biometric verification fail;
- determining whether PIN information received from the card reader and the registered PIN information on the IC card match, responsive to receiving a PIN verification request from the card reader that was based on the first response indicating the biometric verification fail;
- and
- outputting to the card reader, a second response indicating whether the PIN information and the registered PIN information match.