Online secret encryption

A communication device comprising:

• a processor;
• and
• a computer readable medium, the computer readable medium comprising code, executable by the processor for performing operations comprising:
• providing, by a thin client on the communication device, a thin client identifier to a server computer during an interaction between the communication device and a portable device;
• receiving, by the thin client, an encrypted first cryptographic key from the server computer, wherein the encrypted first cryptographic key is a first cryptographic key that is encrypted with a second cryptographic key;
• deriving, by thin client, the second cryptographic key;
• decrypting, by the thin client, the encrypted first cryptographic key with the second cryptographic key;
• receiving, by the thin client, a secret from a user of the portable device;
• encrypting, by the thin client, the secret with the first cryptographic key;
• and
• providing, by the thin client, the encrypted secret to the server computer.