Patent ID: 8495374

Claim:
A method for configuring a smart card for use with a client computer, the method comprising: receiving, by a server computer, a personal identification number provided by a user; generating, by the server computer, a random modifier; calculating, by the server computer, a prime personal identification number based on the personal identification number and the random modifier; encrypting, by the server computer, the random modifier using a randomly-generated data key; and securely storing the prime personal identification number and the encrypted random modifier on the smart card, wherethe encrypted random modifier is configured to be decrypted based on an integrity key that includes a system code that uniquely identifies a configuration state of the client computer held tamperproof by the client computer, and where the encrypted random modifier is further configured to be decrypted based on a storage root key held secret by the client computer, the integrity key securely stored on the client computer.