System and method for encrypted smart card pin entry

A mobile device, including:

• an input device;
• a processor configured to:
• receive, over a wireless link from an untrusted reader device in wireless communication with an authentication device, a challenge comprising a public key stored by the authentication device, the mobile device, the reader device, and the authentication device being physically separate devices, the reader device and the authentication device being in wireless communication with each other;
• receive user-entered authentication information via the input device;
• encrypt the user-entered authentication information using the public key;
• transmit for receipt by the authentication device, over the wireless link and in response to the challenge, the encrypted user-entered authentication information;
• and
• receive a verification signal sent by the authentication device over the wireless link once the encrypted user-entered authentication information is decrypted using a private key stored by the authentication device, and is determined to match authentication information previously stored by the authentication device,
• in response to receiving the verification signal, the mobile device being enabled to encrypt or digitally sign a message for transmission from the mobile device, or decrypt or verify a message received by the mobile device.

A non-transitory computer-readable medium bearing code which, when executed by a processor of a mobile device, causes the mobile device to implement the method of:

• receiving, over a wireless link from an untrusted reader device in wireless communication with an authentication device, a challenge comprising a public key stored by the authentication device, the mobile device, the reader device, and the authentication device being physically separate devices, the reader device and the authentication device being in wireless communication with each other, the mobile device comprising a user mobile communication device configured to send and receive messages;
• receiving user-entered authentication information;
• encrypting the user-entered authentication information using the public key;
• transmitting to the authentication device, over the wireless link and in response to the challenge, the encrypted user-entered authentication information;
• and
• receiving a verification signal sent by the authentication device over the wireless link once the encrypted user-entered authentication information is decrypted using a private key stored by the authentication device, and is determined to match authentication information previously stored by the authentication device;
• in response to receiving the verification signal, the mobile device being enabled to encrypt or digitally sign a message for transmission from the mobile device, or decrypt or verify a message received by the mobile device.