System and method for PIN entry on mobile devices

• US 10,409,976 B2
• Filed: 10/19/2018
• Issued: 09/10/2019
• Est. Priority Date: 12/12/2012
• Status: Active Grant

• Current Assignee: Stripe, Inc.
• Original Assignee: BBPOS Limited
• Inventors: Lo, Chi Wah
• Primary Examiner(s): Siddiqi, Mohammad A
• Application Number:
  US16/165,226
• Publication Number:
  US 20190050553A1
• Time in Patent Office: 326 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 2203/0383 Remote input, i.e. interface arrangements in which the signals generated by a pointing device are transmitted to a PC at a remote location, e.g. to a PC in a LAN
• CPC Class Codes: G06F 3/013 Eye tracking input arrangements G06F3/015 takes precedence
• CPC Class Codes: G06F 3/0233 Character input methods
• CPC Class Codes: G06F 3/038 Control and interface arrangements therefor, e.g. drivers or device-embedded control circuitry
• CPC Class Codes: G06F 3/04886 by partitioning the display area of the touch-screen or the surface of the digitising tablet into independently controllable areas, e.g. virtual keyboards or menus
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/77 Graphical identity

Abstract

A system for entering a secure Personal Identification Number (PIN) into a mobile computing device includes a mobile computing device and a peripheral device that are connected via a data communication link. The mobile computing device includes a mobile application and a display and the mobile application runs on the mobile computing device and displays a grid on the mobile computing device display. The peripheral device includes a display and an encryption engine, and the peripheral device display displays a grid corresponding to the grid displayed on the mobile computing device display. Positional inputs on the mobile computing device grid are sent to the peripheral device and the peripheral device decodes the positional inputs into PIN digits and generates an encrypted PIN and then sends the encrypted PIN back to the mobile computing device.

Claims

1. A system for a user to enter a secure Personal Identification Number (PIN) into a mobile computing device comprising:

a mobile computing device comprising a mobile application and a display, wherein the mobile application runs on the mobile computing device and displays a mobile computing device grid on the display;

a peripheral device comprising a display and an encryption engine, wherein the peripheral device is separated from the mobile computing device, and wherein the display of the peripheral device displays a peripheral device grid corresponding to the mobile computing device grid displayed on the mobile computing device display,

wherein the peripheral device is connected to the mobile computing device via a data communication link;

wherein the peripheral device grid is generated by the peripheral device and displayed by the display of the peripheral device based on a request received by the peripheral device, the request transmitted by the mobile computing device via the data communication link, the peripheral device grid displaying positional information not displayed on the mobile computing device grid, wherein the positional information displayed on the peripheral device grid enables the user to enter positional inputs on the mobile computing device grid; and

wherein the positional inputs entered on the mobile computing device grid are sent to the peripheral device, and the peripheral device;

decodes the positional inputs into PIN digits;

generates an encrypted PIN; and

sends the encrypted PIN back to the mobile computing device.

2. The system of claim 1, wherein the mobile application displays the mobile computing device grid on the mobile computing device display without showing any digits.

3. The system in claim 1, wherein the peripheral device grid comprises a randomized grid of digits.

4. The system of claim 1, wherein the peripheral device grid randomizes a position of each digit on the peripheral device grid after each positional input.

5. The system in claim 1, wherein the encryption engine in the peripheral device stores one or more cryptographic keys and wherein the one or more cryptographic keys are used to generate the encrypted PIN.

6. The system in claim 1 wherein the encryption engine in the peripheral device performs at least one cryptographic operation.

7. The system in claim 1, wherein the data communication link comprises either a wired or wireless data communication link, wherein:

the wired data communication link comprises one of USB, Firewire, RS232 or audio jack interface, and

the wireless data communication link comprises one of WiFi, Bluetooth, Infrared, or NFC interface.

8. The system in claim 1, wherein the peripheral device comprises one of a magnetic card reader, EMV card reader, NFC reader, keypad, or biometrics readers.

9. The system of claim 1, wherein the mobile computing device comprises one of mobile phones, personal digital assistants (PDAs), netbooks, tablet computers, notebook computers, electronic readers, digital music players, digital video players, or game consoles.

10. The system of claim 1, wherein the positional inputs on the mobile computing device are provided via one of touch screens, mouse clicks, track ball, or eyeball movement tracking devices.

11. A system for a user to securely enter a Personal Identification Number (PIN), comprising:

an application running on a first device having a first device display, wherein the application displays a first device grid for positional input capture on the first device display;

a second device comprising a second device display and an encryption engine, wherein;

the first device is coupled to the second device via a data communication link;

the second device receives a request from the application to generate a second device grid and display the generated second device grid, the request transmitted via the data communication link;

the second device generates the second device grid and the second device display displays the generated second device grid based on the received request, wherein;

the second device grid comprises a representation of a digits grid not displayed on the first device grid; and

the displaying of the representation of the digits grid enables the user to securely enter positional inputs on the first device grid;

the positional inputs entered on the first device grid are captured and transmitted to the second device via the data communication link;

the second device decodes the positional inputs into PIN digits;

the encryption engine generates an encrypted PIN from the decoded PIN digits; and

the second device transmits the encrypted PIN back to the first device.

12. The system of claim 11, wherein the first device is a mobile device.

13. The system of claim 12, wherein the second device is a peripheral device.

14. The system of claim 11, wherein:

the encryption engine performs at least one cryptographic operation; and

the encryption engine stores one or more cryptographic keys, wherein the one or more cryptographic keys are used to generate the encrypted PIN.

15. The system of claim 11, wherein the data communication link comprises either a wired or wireless data communication link, wherein:

the wired data communication link comprises one of USB, Firewire, RS232 or audio jack interface, and

the wireless data communication link comprises one of WiFi, Bluetooth, infrared, or NFC interface.

16. The system of claim 11, wherein the second device comprises one of a magnetic card reader, an EMV card reader, an NFC reader, keypad, or biometrics readers.

17. The system of claim 11, wherein the first device comprises one of mobile phones, personal digital assistants (PDAs), netbooks, tablet computers, notebook computers, electronic readers, digital music players, digital video players, or game consoles.

18. The system of claim 11, wherein the application displays the first device grid on the first device display without showing any digits.

19. The system of claim 11, wherein the second device grid comprises a randomized grid of digits.

20. The system of claim 19, wherein the second device grid randomizes a position of each digit on the second device grid after each positional input.

21. A method for entering a secure Personal Identification Number (PIN), comprising:

providing an application to;

run on a first device comprising a first device display;

display a first device grid on the first device display for positional input capture; and

transmit a request to generate a second device grid over a data communication link;

providing a second device comprising a second device display and an encryption engine to;

receive the request to generate the second device grid from the data communication link;

generate and display the second device grid on the second device display in response to the received request, wherein;

the second device grid comprises a representation of a digits grid, wherein the representation of the digits grid not displayed on the first device grid; and

the displaying of the representation of the digits grid enables a user to securely enter positional inputs on the first device grid;

receive the entered positional inputs captured from the first device grid;

decode the received positional inputs into PIN digits;

generate, using the encryption engine, an encrypted PIN from the decoded PIN digits; and

transmit the encrypted PIN back to the first device.

22. The method of claim 21, wherein the first device is a mobile device and the second device is a peripheral device.