Point of sale (POS) personal identification number (PIN) security
AssigneeeBay Inc.
InventorAttaullah Baig
Life of this patent
Estimating the term…
Loading patent…
AssigneeeBay Inc.
InventorAttaullah Baig
Estimating the term…
A key is securely injected into a POS PIN pad processor in its usual operating environment. In response to entry of a personal identification number (PIN) into a PIN pad, the processor puts the PIN into a PIN block; puts additional random data into the PIN block; and encrypts the entire PIN block using asymmetric cryptography with a public key derived from the injected key residing in the PIN pad processor. The corresponding private key may be held securely and secretly by an acquirer processor for decrypting the PIN block to retrieve the PIN. The encrypted random data defends the PIN against dictionary attacks. Time stamp data and constant data encrypted with the PIN block enables a defense of the PIN against replay attacks and tampering. The method may also include accepting the PIN from a mobile phone in communication with the processor.
A system comprising:
A computer processor implemented method comprising:
A computer program product comprising a non-transitory computer readable medium having computer readable and executable code for instructing a processor to perform a method, the method comprising:
Dependencies are inferred from the claim text.