System and method for mobile pin synchronization

A server for synchronising a personal identification number (PIN) stored in a mobile computing device with a PIN value stored in a storage device operatively connected to the server, the server comprising:

• a receiver arranged to receive a request from the mobile computing device to record a PIN value, the request comprising the PIN value;
• PIN recovery apparatus for recovering the PIN value from the received request;
• PIN storage apparatus arranged to store the PIN value in the storage device;
• a processor for generating an instruction set executable by the mobile computing device, the instruction set comprising instructions for recording the PIN value in a secure hardware element comprised within the mobile computing device wherein the mobile computing device and the remote server share a first symmetrical encryption key, the first encryption key being stored on the secure hardware element and at the remote server;
• and
• a transmitter for transmitting the instruction set from the server to the mobile computing device to be executed on the mobile computing device in order to record the PIN value on the secure hardware element and to generate, at the secure hardware element, a second encryption key using the first encryption key and for encrypting the request with the second encryption key, wherein recovering the PIN value comprises generating the second encryption key at the remote server using the shared first symmetrical encryption key and using the generated second encryption key to recover the PIN value from the received request.

A mobile computing device arranged to synchronise a personal identification number (PIN) value with a PIN value stored on a remote server, the mobile computing device comprising:

• a transmitter arranged to transmit a request to record a PIN value to the remote server, the request comprising the PIN value wherein the PIN value is recovered from a received request and stored at the remote server;
• a receiver arranged to receive an instruction set from the remote server, the instruction set comprising instructions for recording the PIN value;
• a secure hardware element arranged to (i) execute the received instruction set, (ii) record the PIN value within a storage module local to the secure hardware element wherein the mobile computing device and the remote server share a first symmetrical encryption key, the first encryption key being stored on the secure hardware element and (iii) generate a second encryption key using the first encryption key and encrypting the request with the second encryption key wherein the second encryption key is generated at the remote server using the shared first symmetrical encryption key and the generated second encryption key is used to recover the PIN value from the received request;
• a secure processor for executing the received instruction set in order to record the PIN value on the mobile computing device;
• and
• a processor arranged to generate a confirmation message for transmittal to the remote server, the message confirming if the PIN value was correctly recorded on the mobile computing device.

A method of synchronising a personal identification number (PIN) at a server with a PIN value stored in a mobile computing device, the method comprising the steps of:

• receiving at the server a request to record the PIN value from the mobile computing device, the request comprising the PIN value;
• recovering the PIN value from the received request and storing the PIN value at the remote server;
• generating and transmitting an instruction set to the mobile computing device, the instruction set being arranged to record the PIN value on in a secure hardware element comprised within the mobile computing device, when the instruction set is executed on the mobile computing device wherein the mobile computing device and a remote server share a first symmetrical encryption key, the first encryption key being stored on the secure hardware element and at the remote server;
• generating at the secure hardware element, a second encryption key using the first encryption key and encrypting the request with the second encryption key, wherein the recovering step comprises generating the second encryption key at the remote server using the shared first symmetrical encryption key and using the generated second encryption key to recover the PIN value from the received request;
• and
• recording the PIN value in the secure hardware element storage device operatively coupled to the server upon receipt of a confirmation message from the mobile computing device by executing the instruction set, the confirmation message confirming that the PIN value was successfully written to the mobile computing device.

A method of synchronising a personal identification number (PIN) at a mobile computing device with a PIN value stored in a remote server, the method comprising the steps of:

• transmitting a request to record a new PIN value for the mobile computing device to the remote server, the request comprising the PIN value wherein the PIN value is recovered from the received request and stored at the remote server;
• receiving an instruction set from the remote server in reply to the request, the instruction set comprising instructions for recording the PIN value on a secure hardware element comprised in the mobile computing device;
• executing the instruction set on the mobile computing device in order to record the PIN value on a storage module local to the secure hardware element;
• and
• recording the PIN value within a storage module local to the secure hardware element wherein the mobile computing device and the remote server share a first symmetrical encryption key, the first encryption key being stored on the secure hardware element;
• generating a second encryption key using the first encryption key and encrypting the request with the second encryption key wherein the second encryption key is generated at the remote server using the shared first symmetrical encryption key and the generated second encryption key is used to recover the PIN value from the received request;
• and
• generating and transmitting a confirmation message to the remote server, the message confirming if the PIN value was correctly recorded on the mobile computing device.

A system for synchronising a personal identification number (PIN) value stored in a mobile computing device, with a PIN value stored on a remote server of, the mobile computing device comprising:

• a transmitter arranged to transmit a request to record the PIN value to the remote sever, the request comprising the PIN value wherein the PIN value is recovered from the received request and stored at the remote server;
• a receiver arranged to receive an instruction set from the remote server, the instruction set comprising instructions for recording the PIN value;
• a secure processor for (i) executing the received instruction set, (ii) recording the PIN value within a storage module local to the secure hardware element wherein the mobile computing device and the remote server share a first symmetrical encryption key, the first encryption key being stored on the secure hardware element and (iii) generating a second encryption key using the first encryption key and encrypting the request with the second encryption key wherein the second encryption key is generated at the remote server using the shared first symmetrical encryption key and the generated second encryption key is used to recover the PIN value from the received request;
• and
• a processor arranged to generate a confirmation message for transmittal to the remote server, the message confirming if the PIN value was correctly recorded on the mobile computing device;
• and wherein the remote server comprises:
• a receiver arranged to receive the request from the mobile device to record the PIN value;
• PIN recovery apparatus for recovering the PIN value from the received request;
• PIN storage apparatus arranged to store the PIN value in a storage device operatively connected to the server;
• a processor for generating the instruction set executable by the mobile computing device, the instruction set comprising the instructions for recording the PIN value in the mobile computing device;
• and
• a transmitter for transmitting the instruction set from the server to the mobile computing device.