Protecting sensitive information using an untrusted device

A computer program product for protecting sensitive information, the computer program product comprising a computer readable storage device having program instructions embodied therewith, the program instructions when executed by a processor to cause the processor to:

• responsive to determining that sensitive information is required by a server, establish a connection between the server and an untrusted device;
• responsive to receiving a public key from the server at the untrusted device, transmit the public key to a trusted device connected to the untrusted device;
• generate a Uniform Resource Locator (URL) for population with the sensitive information by the trusted device;
• transmit the generated URL to the trusted device, wherein the sensitive information is inputted on the trusted device through the untrusted device and the trusted device populated the generated URL with the sensitive information;
• receive an encrypted URL transmitted by the trusted device, wherein the encrypted URL is generated by the trusted device based on the generated URL and the encrypted URL includes the sensitive information encrypted with a first secret key, wherein the first secret key is the public key;
• forward the encrypted URL to the server, wherein the untrusted device is unable to use the first secret key to decrypt the sensitive information present in the encrypted URL;
• and
• responsive to receiving an authentication identification transmitted by the server based on the sensitive information, communicate with the server by using the authentication identification.

A computer system for protecting sensitive information, the computer system comprising a computer readable storage device having program instructions embodied therewith, the program instructions when executed by a processor to cause the processor to:

• responsive to determining that sensitive information is required by a server, establish a connection between the server and an untrusted device;
• responsive to receiving a public key from the server at the untrusted device, transmit the public key to a trusted device connected to the untrusted device;
• generate a Uniform Resource Locator (URL) for population with the sensitive information by the trusted device;
• transmit the generated URL to the trusted device, wherein the sensitive information is inputted on the trusted device through the untrusted device and the trusted device populated the generated URL with the sensitive information;
• receive an encrypted URL transmitted by the trusted device, wherein the encrypted URL is generated by the trusted device based on the generated URL and the encrypted URL includes the sensitive information encrypted with a first secret key, wherein the first secret key is the public key;
• forward the encrypted URL to the server, wherein the untrusted device is unable to use the first secret key to decrypt the sensitive information present in the encrypted URL;
• and
• responsive to receiving an authentication identification transmitted by the server based on the sensitive information, communicate with the server by using the authentication identification.