Patent ID: 11887120
Assignee: NCR ATLEOS CORPORATION
Field: Control (Instruments)
Classification: CPC G | IPC G

Claim 13:
14. A method for touchless entry of a personal identification number (PIN) at a self-service terminal, the self-service terminal including a wireless interface for communicating wirelessly with a mobile device, comprising:
reading a primary account number of a customer from a bank card of the customer via a card reader at the self-service terminal;
establishing a wireless communication channel directly between the mobile device of the customer and the wireless interface included within an encrypting PIN pad module at the self-service terminal by scanning for and locating an open PIN entry application on the mobile device of the customer after reading the primary account number of the customer from the bank card of the customer at the self-service terminal;
verifying a public key of the self-service terminal at the mobile device;
formatting a PIN for the customer into a PIN-block that does not include a primary account number for the customer;
encrypting only the PIN-block for the customer at the mobile device;
transmitting the encrypted PIN-block to a host associated with the self-service terminal for signing the encrypted PIN;
receiving the host-signed encrypted PIN-block at the mobile device;
transmitting only the host-signed encrypted PIN-block from the mobile device to the self-service terminal;
verifying the host signature of the host-signed encrypted PIN-block at the self-service terminal;
decrypting the encrypted PIN-block at the self-service terminal, and
wherein the mobile device of the customer never receives or stores the primary account number of the customer.