Patent ID: 8423783

Claim:
A method, in a computing system, for secure PIN management of a user trusted device, the method comprising: detecting, by the user trusted device, a memory card coupled to the user trusted device; receiving, by the user trusted device, user input of an external PIN (ext_PIN); identifying, by the user trusted device, a key (K) associated with the external PIN, wherein the key is stored in the persistent memory; computing, by the user trusted device, a computed card PIN (card_PIN) using a function (ƒ) and the key as stored in the persistent memory and the external PIN forming the computed card PIN, wherein the computed card PIN is computed as card_PIN=ƒ(K, ext_PIN); responsive to the computed card PIN matching a card PIN of the memory card, unlocking, by the user trusted device, the memory card forming an unlocked memory card; responsive to the computed card PIN failing to match the card PIN of the memory card, determining, by the trusted device, whether the external PIN input by the user matches the card PIN of the memory card indicating that the user has forgotten the external PIN; responsive to the external PIN matching the card PIN of the memory card, unlocking, by the user trusted device, the memory card, forming the unlocked memory card; prompting, by the user trusted device, the user to enter a new external PIN; responsive to receiving the new external PIN from the user, generating, by the user trusted device, a new key using the new external PIN, the card PIN and the function (ƒ); and storing, by the user trusted device, the new key in the persistent memory.