Apparatus for private personal identification number management

• US 7,167,843 B2
• Filed: 06/05/2002
• Issued: 01/23/2007
• Est. Priority Date: 06/05/2002
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: de Jong, Eduard
• Primary Examiner(s): Abdi; Kambiz
• Application Number:
  US10/164,490
• Publication Number:
  US 20030229597A1
• Time in Patent Office: 1,693 Days
• Field of Search: 705/1, 705/50, 705/64, 705/72, 713/180, 726/21, 726/27
• US Class Current: 705/72
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 30/018 Certifying business or products

Abstract

An apparatus for private personal identification number (PIN) management comprises a memory and a PIN comparator in communication with the memory. The PIN comparator is configured to ascertain a first delay period of a preceding PIN. The first delay period is greater than zero if the preceding PIN does not match a validated PIN and the first delay period equals zero if the preceding PIN matches the validated PIN. The PIN comparator is further configured to receive a current PIN after at least the first delay period and delay for a second delay period if the current PIN does not match the validated PIN. The second delay period is greater than the first delay period.

Claims

1. An apparatus for private personal identification number (PIN) management, the apparatus comprising:

means for ascertaining whether a delay period of a preceding PIN has expired wherein said delay period of said preceding PIN is a period of time that must expire before a current PIN can be received, and said delay period greater than zero upon said preceding PIN not matching a validated PIN;

means for receiving said current PIN after at least expiration of said delay period;

means for determining whether said current PIN matches said validated PIN; and

means for changing said delay period to a new delay period longer than said delay period for said preceding PIN upon said current PIN not matching said validated PIN, and for transferring to said means for ascertaining, wherein said current PIN becomes said preceding PIN and said new delay period is said delay period of said preceding PIN upon said means for changing transferring to said means for ascertaining.

2. The apparatus of claim 1, further comprising means for granting access to a service having restricted access when said current PIN matches said validated PIN.

3. An apparatus for private personal identification number (PIN) management, the apparatus comprising:

means for determining whether a delay period for receiving a request for a service has expired;

means for receiving said request for said service having restricted access upon expiration of said delay period, said request comprising a PIN entered by a user;

means for matching said PIN with another PIN that has been validated;

means for incrementing an exponent upon said PIN not matching said another PIN;

means for delaying for said delay period that is based at least on said exponent upon said PIN not matching said another PIN;

means for repeating said means for determining, said means for receiving, said means for matching, said means for incrementing wherein said means for incrementing increments said exponent, and said means for delaying until said means for matching finds a match; and

means for allowing access to said service based at least on said matching.

4. The apparatus of claim 3 wherein said means for delaying further comprises means for recording the start of said delay.

5. The apparatus of claim 3 wherein said means for delaying further comprises means for recording the end of said delay.

6. The apparatus of claim 5, further comprising means for resuming said delay when said end has not been recorded.

7. The apparatus of claim 3, further comprising means for initializing said exponent to 0 when said first PIN matches said second PIN.

8. The apparatus of claim 3 wherein said means for delaying further comprises:

means for initializing a counter to the value “

1”

;

means for left-shifting said counter based at least in part on the value of said exponent, the least significant bit of said counter being populated with the value “

0”

upon each left-shift operation; and

means for delaying for a predetermined time and decrementing said counter while said counter is nonzero.

9. The apparatus of claim 3 wherein said means for delaying further comprises:

means for initializing a counter to “

1”

;

means for left-shifting said counter based at least in part on the value of said exponent, the least significant bit of said counter being populated with the value “

1”

, upon each left-shift operation; and

means for delaying for a predetermined time and decrementing said counter while said counter is nonzero.

10. The apparatus of claim 3 wherein said means for receiving further comprises:

means for storing said first PIN in a persistent mutable memory; and

means for marking said stored first PIN as untested.

11. The apparatus of claim 10 wherein said means for delaying further comprises:

means for storing said exponent in said persistent mutable memory before initiation of said delay; and

means for storing an end-of-delay marker in said persistent mutable memory after completion of said delay.

12. The apparatus of claim 3 wherein

said means for receiving further comprises:

means for storing said first PIN in a persistent mutable memory; and

means for marking said stored first PIN as untested; and

said means for delaying further comprises;

means for storing said exponent in said persistent mutable memory upon initiation of said delay; and

means for storing an end-of-delay marker in said persistent mutable memory after completion of said delay.

13. The apparatus of claim 12 wherein said means for storing said first PIN further comprises:

means for allocating an entry in a list of entries in said persistent mutable memory; and

means for storing said first PIN in said allocated entry.

14. The apparatus of claim 12 wherein said means for matching further comprises marking said stored first PIN with the result of the test.

15. The apparatus of claim 12 wherein said means for delaying further comprises:

means for storing said exponent with said stored first PIN;

means for performing a delay determined by said stored exponent; and

means for marking said stored first PIN as tested successfully and said delay completed by setting said stored exponent to 0.

16. An apparatus for private personal identification number (PIN) management wherein the apparatus allows access to any service that is not PIN-protected, the apparatus comprising:

means for receiving a first access request for a service, said first request comprising a first PIN entered by a user;

means for determining a PIN status when said service is PIN-protected, said means for determining including means for delaying for a delay period, which increases exponentially with each successive failed access request, before receiving another access request; and

means for allowing access to said service based at least on said PIN status when said service is PIN-protected.

17. The apparatus of claim 16 wherein said means for determining further comprises:

means for ascertaining a first PIN test result;

means for indicating a successful PIN status when said first PIN test result indicates a successful PIN test;

means for testing said first PIN against a second PIN stored in a memory when said first PIN test result is unavailable or when said first PIN test result indicates an unsuccessful PIN test, said second PIN comprising a PIN that has been validated;

means for ascertaining a second PIN test result after said testing;

means for indicating a successful PIN status when said second PIN test result indicates a successful PIN test; and

means for indicating an unsuccessful PIN status when said second PIN test result indicates an unsuccessful PIN test.

18. The apparatus of claim 16 wherein said means for delaying comprises:

means for storing an exponent in a persistent mutable memory before initiation of said delay period; and

means for storing an end-of-delay marker in said persistent mutable memory after completion of said delay period; and

said means for ascertaining a first PIN test result comprises;

means for determining the presence of an end-of-delay marker in said persistent mutable memory; and

means for delaying for a delay period that is based at least on said stored exponent when said marker is not present in said persistent mutable memory.

19. The apparatus of claim 17 wherein said means for delaying comprises:

means for storing an exponent in a persistent mutable memory before initiation of said delay; and

means for storing an end-of-delay marker in said persistent mutable memory after completion of said delay; and

said means for ascertaining a second PIN test result is based at least in part on the presence of said end-of-delay marker in said persistent mutable memory and upon the result of said testing.

20. The apparatus of claim 17 wherein

said first PIN test result comprises a flag stored in a non-persistent mutable memory;

and

said second PIN test result comprises a flag stored in a non-persistent mutable memory.

21. The apparatus of claim 20 wherein said flag indicates an unsuccessful PIN test upon initialization of said non-persistent mutable memory.

22. The apparatus of claim 17 wherein said means for testing further comprises:

means for incrementing an exponent and delaying a delay period based at least in part on said exponent when said first PIN does not match said second PIN;

means for marking a session PIN flag to indicate a successful PIN test when said first PIN matches said second PIN; and

means for setting said exponent value to “

0”

when said first PIN matches said second PIN.

23. The apparatus of claim 17 wherein said means for delaying comprises:

means for storing an exponent in a persistent mutable memory before initiation of said delay, said exponent stored in a last entry of a buffer comprising a plurality of entries, each entry comprising a PIN, an exponent and an attempt reference ID, said attempt reference ID associated with a session used to enter said PIN; and

means for storing an end-of-delay marker in said persistent mutable memory after completion of said delay period;

said means for ascertaining a first PIN test result comprises;

means for determining the presence of said end-of-delay marker in said persistent mutable memory; and

means for delaying for a delay period that is based at least on said exponent when said marker is not present in said persistent mutable memory; and

said means for ascertaining a second PIN test result is based at least on the presence of said end-of-delay marker in said persistent mutable memory and upon the result of said testing.

24. The apparatus of claim 23, further comprising means for delaying for a delay period based at least in part on said exponent of said last entry when the current delay has been interrupted.

25. The apparatus of claim 23 wherein said last entry is validated when said exponent of said last entry is 0.

26. The apparatus of claim 23 wherein said last entry is invalid when said exponent of said last entry is nonzero.

27. The apparatus of claim 23, further comprising means for indicating a previous delay has been interrupted when the exponent of a buffer entry immediately preceding said last buffer does not equal the exponent of said last buffer entry.

28. The apparatus of claim 23, further comprising means for indicating said last entry is associated with said current session when the session ID of said last buffer entry equals the session ID of the current session.

29. The apparatus of claim 23 wherein said means for testing further comprises:

means for recording a PIN compare attempt in said buffer;

means for delaying when said first PIN does not match the PIN in a validated entry; and

marking a delay result in said buffer.

30. The apparatus of claim 29 wherein said means for recording further comprises:

means for determining empty entries in said buffer;

means for determining the last entered entry in said buffer based at least in part on the entry number of each entry in said buffer;

means for creating a new entry comprising an exponent that equals one plus the exponent of said last entered entry;

means for storing said new entry in one of said empty entries; and

means for marking said new entry as the last entry.

31. The apparatus of claim 30 wherein said means for delaying further comprises:

means for locating a validated entry in said buffer, said validated entry having an exponent value of 0;

means for loading the PIN value from said last buffer entry; and

means for delaying for a delay period based at least in part on said exponent value read from said last entry.

32. The apparatus of claim 29 wherein said means for marking a delay result further comprises:

means for copying the buffer entry stored immediately prior to said delaying to create a new entry;

means for setting the exponent value of said new entry to 0 when said first PIN equals said second PIN; and

means for storing said new entry in said persistent mutable memory.

33. The apparatus of claim 17 wherein said means for delaying comprises:

means for storing said exponent in said persistent mutable memory before initiation of said delay, said exponent stored in a last entry of a buffer comprising a plurality of entries, each entry comprising a scrambled PIN, an exponent and an attempt reference ID, said attempt reference ID associated with a session used to enter said PIN; and

means for storing an end-of-delay marker in said persistent mutable memory after completion of said delay period;

said means for ascertaining a first PIN test result comprises;

means for determining the presence of said end-of-delay marker in said persistent mutable memory; and

means for delaying for a delay period that is based at least on said exponent when said marker is not present in said persistent mutable memory; and

said ascertaining a second PIN test result is based at least on the presence of said end-of-delay marker in said persistent mutable memory and upon the result of said testing.

34. The apparatus of claim 33, further comprising means for delaying for a delay period based at least in part on said exponent in said last entry when the current delay has been interrupted.

35. The apparatus of claim 33 wherein said last entry is validated when said exponent of said last entry is 0.

36. The apparatus of claim 33 wherein said last entry is invalid when said exponent of said last entry is nonzero.

37. The apparatus of claim 33, further comprising means for indicating a previous delay has been interrupted when the exponent of an entry immediately preceding said last does not equal the exponent of said last entry.

38. The apparatus of claim 33, further comprising means for indicating said last entry is associated with said current session when the session ID of said last entry equals the session ID of the current session.

39. The apparatus of claim 33 wherein said means for testing further comprises:

means for recording a PIN compare attempt in said buffer;

means for delaying when a first scrambled PIN does not match a second scrambled PIN that has been validated, said first scrambled PIN comprising said first PIN scrambled with a first key, said second scrambled PIN comprising a second PIN scrambled with said first key, said second scrambled PIN and said first key stored in a validated entry; and

means for marking a delay result in said buffer.

40. The apparatus of claim 39 wherein said first key comprises a randomized key.

41. The apparatus of claim 39 wherein said first key comprises a session ID.

42. The apparatus of claim 39 wherein said means for recording further comprises:

means for determining empty entries in said buffer;

means for determining the last entered entry in said buffer based at least in part on the entry number of each entry in said buffer;

means for creating a new entry comprising a PIN that equals said first PIN, said new entry further comprising an exponent that equals one plus the exponent of said last entered entry;

means for scrambling the PIN of said new entry with a second key;

means for storing said new entry in one of said empty entries; and

means for marking said new entry as the last entry.

43. The apparatus of claim 42 wherein said means for delaying further comprises:

means for locating said validated entry in said buffer;

means for loading said first PIN from said last entry;

means for scrambling said first PIN with said first key to create said first scrambled PIN; and

means for delaying for a delay period based at least in part on said exponent value read from said last entry.

44. The apparatus of claim 43 wherein said means for scrambling said first PIN further comprises means for applying an exclusive “

OR”

operation to said first PIN and said first key.

45. The apparatus of claim 43 wherein said means for delaying for a delay period further comprises means for performing a number of unit delays, said number based at least in part on said exponent, each of said unit delays comprising:

means for initializing a result to 0; and

means for applying a bit-wise exclusive “

OR”

operation to said result, said first scrambled PIN and said second scrambled PIN.

46. The apparatus of claim 39 wherein said means for marking a delay result further comprises:

means for copying said PIN compare attempt entry to create a new entry;

means for setting the exponent value of said new entry to 0 when said result is 0; and

means for storing said new entry in said persistent mutable memory.

47. An apparatus for private personal identification number (PIN) management, the apparatus comprising:

a memory; and

a PIN comparator in communication with said memory, said PIN comparator configured to;

ascertain whether a delay period of a preceding PIN has expired wherein said delay period of said preceding PIN is a period of time that must expire before a current PIN entry can be received, and said delay period greater than zero upon said preceding PIN not matching a validated PIN;

receive said current PIN after at least expiration of said delay period; and

change said delay period to a new delay period longer than said delay period for said preceding PIN upon said current PIN not matching said validated PIN, and for transferring to said ascertaining, wherein said current PIN becomes said preceding PIN and said new delay period is said delay period of said preceding PIN upon said changing transferring to said ascertaining.

48. The apparatus of claim 47 wherein said PIN comparator is further configured to grant access to a service having restricted access when said current PIN matches said validated PIN.

49. An apparatus for private personal identification number (PIN) management, the apparatus comprising:

a first memory for storing an exponent and another PIN that has been validated, said first memory comprising a persistent mutable memory;

a second memory for storing a session PIN flag and a PIN, said second memory comprising a non-persistent mutable memory; and

a PIN comparator in communication with said first memory and said second memory, said PIN comparator configured to;

determine whether a delay period for receiving a request for a service has expired;

receive said request for said service having restricted access upon expiration of said delay period, said request comprising said PIN;

match said PIN with said another PIN;

increment an exponent upon said PIN not matching said another PIN;

delay for said delay period that is based at least on said exponent when said PIN does not match said another PIN;

repeat said determining, said receiving, said matching, said incrementing wherein said incrementing increments said exponent and said delaying until said matching finds a match; and

allow access to said service based at least on said matching.

50. The apparatus of claim 49 wherein said apparatus comprises a smart card.

51. The apparatus of claim 50 wherein said smart card comprises a Java Card™

technology-enabled smart card.

52. The apparatus of claim 50 wherein said smart card comprises a COMA (Code Division Multiple Access) technology-enabled smart card.

53. The apparatus of claim 50 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

54. The apparatus of claim 50 wherein said smart card comprises a WIM (Wireless Interface Module).

55. The apparatus of claim 50 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

56. The apparatus of claim 50 wherein said smart card comprises a UIM (User Identity Module).

57. The apparatus of claim 50 wherein said smart card comprises a R-UIM (Removable User Identity Module).

58. The apparatus of claim 49 wherein said apparatus comprises a mobile phone.

59. The apparatus of claim 49 wherein said PIN comparator is further configured to record the start of said delay.

60. The apparatus of claim 49 wherein said PIN comparator is further configured to record the end of said delay.

61. The apparatus of claim 60 wherein said PIN comparator is further configured to resume said delay when said end has not been recorded.

62. The apparatus of claim 49 wherein said PIN comparator is further configured to delay for said delay period based at least in part on said exponent after receiving a second request for said service when said first PIN does not match said second PIN.

63. The apparatus of claim 49 wherein said PIN comparator is further configured to delay for said delay period based at least in part on said exponent before determining whether a third PIN associated with a second request for said service matches said second PIN when said first PIN does not match said second PIN.

64. The apparatus of claim 49 wherein said PIN comparator is further configured to delay for said delay period based at least in part on said exponent before receiving a second request for said service when said first PIN does not match said second PIN.

65. The apparatus of claim 49 wherein said PIN comparator is further configured to initialize said exponent to 0 when said first PIN matches said second PIN.

66. The apparatus of claim 49 wherein said PIN comparator is further configured to:

initialize a counter to the value “

1”

;

left-shift said counter based at least in part on the value of said exponent, the least significant bit of said counter being populated with the value “

0”

upon each left-shift operation; and

delay for a predetermined time and decrementing said counter while said counter is nonzero.

67. The apparatus of claim 49 wherein said PIN comparator is further configured to:

initialize a counter to “

1”

;

left-shift said counter based at least in part on the value of said exponent, the least significant bit of said counter being populated with the value “

1”

upon each left-shift operation; and

delay for a predetermined time and decrementing said counter while said counter is nonzero.

68. The apparatus of claim 49 wherein said PIN comparator is further configured to:

store said first PIN in a persistent mutable memory; and

mark said stored first PIN as untested.

69. The apparatus of claim 68 wherein said PIN comparator is further configured to:

store said exponent in said persistent mutable memory before initiation of said delay; and

store an end-of-delay marker in said persistent mutable memory after completion of said delay.

70. The apparatus of claim 49 wherein said PIN comparator is further configured to:

store said first PIN in said second memory;

mark said stored first PIN as untested;

store said exponent in second memory upon initiation of said delay period; and

store an end-of-delay marker in said second memory after completion of said delay period.

71. The apparatus of claim 70 wherein said PIN comparator is further configured to store said first PIN by allocating an entry in a list of entries in said second memory and storing said first PIN in said allocated entry.

72. The apparatus of claim 70 wherein said PIN comparator is further configured to mark said stored first PIN with the result of the test.

73. The apparatus of claim 70 wherein said PIN comparator is further configured to

store said exponent with said stored first PIN;

perform a delay determined by said stored exponent; and

mark said stored first PIN as tested successfully and said delay completed by setting said stored exponent to 0.

74. An apparatus for private personal identification number (PIN) management wherein the apparatus allows access to any service that is not PIN-protected, the apparatus comprising:

a first memory for storing an exponent and a second PIN that has been validated, said first memory comprising a persistent mutable memory;

a second memory for storing a session PIN flag and a first PIN, said second memory comprising a non-persistent mutable memory; and

a PIN comparator in communication with said first memory and said second memory, said PIN comparator configured to;

receive a first access request for a service, said first request comprising a first PIN entered by a user;

determine a PIN status when said service is PIN-protected, said determining including delaying for a delay period, which increases exponentially with each successive failed access request, before receiving another access request; and

allow access to said service based at least on said PIN status when said service is PIN-protected.

75. The apparatus of claim 74 wherein said PIN comparator is further configured to:

ascertain a first PIN test result;

indicate a successful PIN status when said first PIN test result indicates a successful PIN test;

test said first PIN against a second PIN stored in a memory when said first PIN test result is unavailable or when said first PIN test result indicates an unsuccessful PIN test, said second PIN comprising a PIN that has been validated;

ascertain a second PIN test result after said testing;

indicate a successful PIN status when said second PIN test result indicates a successful PIN test; and

indicate an unsuccessful PIN status when said second PIN test result indicates an unsuccessful PIN test.

76. The apparatus of claim 75 wherein said PIN comparator is further configured to:

store an exponent in a first memory before initiation of said delay;

store an end-of-delay marker in said first memory after completion of said delay;

determine the presence of an end-of-delay marker in said first memory; and

delay for a delay period based at least in part on said stored exponent when said marker is not present in said first memory.

77. The apparatus of claim 75 wherein said PIN comparator is further configured to:

store an exponent in said first memory before initiation of said delay;

store an end-of-delay marker in said first memory after completion of said delay; and

base said second PIN test result upon the presence of said end-of-delay marker in said first memory and upon the result of said testing.

78. The apparatus of claim 75 wherein

said first PIN test result comprises a flag stored in said second memory;

and

said second PIN test result comprises a flag stored in said second memory.

79. The apparatus of claim 78 wherein said flag is configured to indicate an unsuccessful PIN test upon initialization of said second memory.

80. The apparatus of claim 75 wherein said PIN comparator is further configured to:

increment an exponent and delay a delay period based at least in part on said exponent when said first PIN does not match said second PIN;

mark a session PIN flag to indicate a successful PIN test when said first PIN matches said second PIN; and

set said exponent value to “

0”

when said first PIN matches said second PIN.

81. The apparatus of claim 75 wherein said PIN comparator is further configured to:

store an exponent in said first memory before initiation of said delay period, said exponent stored in a last entry of a buffer comprising a plurality of entries, each entry comprising a PIN, an exponent and an attempt reference ID, said attempt reference ID associated with a session used to enter said PIN;

store an end-of-delay marker in said persistent mutable memory after completion of said delay period;

ascertain a first PIN test result by determining the presence of said end-of-delay marker in said persistent mutable memory and delaying for a delay period that is based at least on said exponent when said marker is not present in said persistent mutable memory; and

ascertain a second PIN test result based at least on the presence of said end-of-delay marker in said first memory and upon the result of said test.

82. The apparatus of claim 81 wherein said PIN comparator is further configured to delay for a delay period based at least in part on said exponent of said last entry when the current delay has been interrupted.

83. The apparatus of claim 81 wherein said last entry is validated when said exponent of said last entry is 0.

84. The apparatus of claim 81 wherein said last entry is invalid when said exponent of said last entry is nonzero.

85. The apparatus of claim 81 wherein said PIN comparator is further configured to indicate a previous delay has been interrupted when the exponent of a buffer entry immediately preceding said last buffer does not equal the exponent of said last buffer entry.

86. The apparatus of claim 81 wherein said PIN comparator is further configured to:

record a PIN compare attempt in said buffer upon initiation of said test;

delay when said first PIN does not match the PIN in a validated entry; and

mark a delay result in said buffer.

87. The apparatus of claim 86 wherein said PIN comparator is further configured to record said PIN compare attempt by:

determining empty entries in said buffer;

determining the last entered entry in said buffer based at least in part on the entry number of each entry in said buffer;

creating a new entry comprising an exponent that equals one plus the exponent of said last entered entry;

storing said new entry in one of said empty entries; and

marking said new entry as the last entry.

88. The apparatus of claim 87 wherein said PIN comparator is further configured to delay by:

locating a validated entry in said buffer, said validated entry having an exponent value of 0;

loading said first PIN from said last entry; and

delaying for a delay period based at least in part on said exponent value read from said last entry.

89. The apparatus of claim 86 wherein said marking a delay result further comprises:

copying the buffer entry stored immediately prior to said delaying to create a new entry;

setting the exponent value of said new entry to 0 when said first PIN equals said second PIN; and

storing said new entry in said first memory.

90. The apparatus of claim 75 wherein said PIN comparator is further configured to:

store said exponent in said persistent mutable memory before initiation of said delay, said exponent stored in the last entry of a buffer comprising a plurality of entries, each entry comprising a scrambled PIN, an exponent and an attempt reference ID, said attempt reference ID associated with a session used to enter said PIN;

store an end-of-delay marker-in said persistent mutable memory after completion of said delay;

ascertain a first PIN test result by determining the presence of said end-of-delay marker in said persistent mutable memory and delaying for a delay period based at least in part on said exponent when said marker is not present in said persistent mutable memory; and

ascertain a second PIN test result based at least in part on the presence of said end-of-delay marker in said first memory and upon the result of said test.

91. The apparatus of claim 90 wherein said PIN comparator is further configured to delay for a delay period based at least in part on said exponent of said last entry when the current delay has been interrupted.

92. The apparatus of claim 90 wherein said last entry is validated when said exponent of said last entry is 0.

93. The apparatus of claim 90 wherein said last entry is invalid when said exponent of said last entry is nonzero.

94. The apparatus of claim 90 wherein said PIN comparator is further configured to indicate a previous delay has been interrupted when the exponent of a buffer entry immediately preceding said last buffer does not equal the exponent of said last buffer entry.

95. The apparatus of claim 90 wherein said PIN comparator is further configured to:

record a PIN compare attempt in said buffer in said buffer upon initiation of said test;

delay when a first scrambled PIN does not match a second scrambled PIN that has been validated, said first scrambled PIN comprising said first PIN scrambled with a first key, said second scrambled PIN comprising a second PIN scrambled with said first key, said second scrambled PIN and said first key stored in a validated entry; and

mark a delay result in said buffer.

96. The apparatus of claim 95 wherein said first key comprises a randomized key.

97. The apparatus of claim 95 wherein said first key comprises a session ID.

98. The apparatus of claim 95 wherein said PIN comparator is further configured to record said PIN compare attempt by:

determining empty entries in said buffer;

determining the last entered entry in said buffer based at least in part on the entry number of each entry in said buffer;

creating a new entry comprising a PIN that equals said first PIN, said new entry further comprising an exponent that equals one plus the exponent of said last entered entry;

scrambling the PIN of said new entry with a second key;

storing said new entry in one of said empty entries; and

marking said new entry as the last entry.

99. The apparatus of claim 98 wherein said PIN comparator is further configured to delay by:

locating said validated entry in said buffer, said validated entry having an exponent value of 0;

loading said first PIN from said last entry;

scrambling said first PIN with said first key to create said first scrambled PIN; and

delaying for a delay period based at least in part on said exponent value read from said last entry.

100. The apparatus of claim 99 wherein said PIN comparator is further configured to scramble said first PIN further by applying an exclusive “

OR”

operation to said first PIN and said first key.

101. The apparatus of claim 99 wherein said PIN comparator is further configured to delay for a delay period by performing a number of unit delays, said number based at least in part on said exponent, each of said unit delays comprising:

initializing a result to 0; and

applying a bit-wise exclusive “

OR”

operation to said result, said first scrambled PIN and said second scrambled PIN.

102. The apparatus of claim 95 wherein said PIN comparator is further configured to mark a delay result further by:

copying said PIN compare attempt entry to create a new entry;

setting the exponent value of said new entry to 0 when said result is 0; and

storing said new entry in said first memory.

103. An apparatus for private personal identification number (PIN) management, the apparatus comprising:

a first memory for storing a plurality of entries, each of said entries comprising an entry number, a PIN field, an exponent, and an attempt reference, said exponent indicating the amount of time to delay when said PIN does not match a second PIN that has been validated, said first memory comprising a persistent mutable memory;

a second memory for storing a session PIN flag, a session ID and a PIN, said second memory comprising a non-persistent mutable memory; and

a PIN comparator in communication with said first memory and said second memory, said PIN comparator configured to store an attempt entry in said plurality of entries to mark the beginning of a PIN comparison, said PIN comparator further configured to store a result entry in said plurality of entries to mark the result of comparing said PIN with said second PIN, said PIN comparator further configured to delay for a delay period, based at least in part on the exponent of one of said plurality of entries when said PIN does not match said second PIN, before receipt of an another access attempt is permitted; and

said PIN comparator still further configured to determine a PIN status including increasing exponentially said delay period with each successive failed access attempt.

104. An apparatus for private personal identification number (PIN) management, the apparatus comprising:

a first memory for storing a plurality of entries, each of said entries comprising an entry number, a scrambled PIN data, an exponent, and an attempt reference, said first memory comprising a persistent mutable memory;

a second memory for storing a session PIN flag, a session ID and a PIN, said second memory comprising a non-persistent mutable memory; and

a PIN comparator in communication with said first memory and said second memory, said PIN comparator configured to store an attempt entry in said plurality of entries to mark the beginning of a PIN comparison, said PIN comparator further configured to store a result entry in said plurality of entries to mark the result of comparing a previously stored scrambled PIN with the result of scrambling said PIN with a key, said PIN comparator further configured to delay for a delay period, based at least in part on the exponent of one of said plurality of entries when said result does not match said validated PIN, before receipt of an another access attempt is permitted; and

said PIN comparator still further configured to determine a PIN status including increasing exponentially said delay period with each successive failed access attempt.