System and method for encrypted smart card PIN entry

A smart card adapted to authenticate a user at a user device, the smart card comprising:

• a memory adapted to store a private key, a public key, and predetermined authentication information, at least the private key being stored in a secure portion of memory;
• an interface adapted to communicate with a smart card reader physically separate from the user device, wirelessly transmit a challenge comprising at least the public key to the user device via the smart card reader over a wireless communication link, and receiver encrypted authentication information from the user device over the wireless communication link via the smart card reader in response to the challenge, the encrypted authentication information comprising user-entered authentication information encrypted by the public key;
• and
• a processor adapted to execute a decryption algorithm on the received encrypted authentication information using the private key to obtain decrypted authentication information, compare the decrypted authentication information with the predetermined authentication information, and generate a verification signal if the decrypted authentication information and the predetermined authentication information match.

A system for authenticating a user, the system comprising:

• a smart card comprising a microprocessor and a memory for storing a private key, a public key, and predetermined authentication information, the memory comprising secure memory for storing at least the private key, and the microprocessor being configured to execute a decryption algorithm using the private key and to perform a comparison of the predetermined authentication information against received authentication information;
• a user device for receiving input from the user, the user device being configured to encrypt input;
• and
• a smart card reader physically separate from the user device and in wireless communication with the user device, for providing communication means between the smart card and the user device;
• wherein when the smart card is in communication with the user device via the smart card reader, the smart card is configured to transmit to the user device a challenge comprising the public key, the user device is configured to encrypt, using the public key, authentication information inputted by a user and to transmit the encrypted authentication information to the smart card via the smart card reader in response to the challenge, and the smart card is further configured to decrypt the encrypted authentication information thus received from the user device using the decryption algorithm and the private key to provide decrypted authentication information such that the microprocessor may perform a comparison of the predetermined authentication information against the decrypted authentication information, and such that the smart card reader never receives or communicates unencrypted authentication information.