Current Problems
Single static PINs, when compromised, can grant attackers unfettered access.
- Phishing attacks
- Shoulder-surfing
- Malware interception
- Social engineering
Field of the Invention
The invention relates to secure authentication and transaction authorisation systems. It provides a dual-PIN mechanism requiring an initial user PIN followed by a dynamically generated, out-of-band PIN to complete sensitive operations.
Background of the Invention
Understanding the security challenges with conventional PIN-based systems
Our Solution
Keep PIN simplicity, add dynamic second-factor so knowledge of PIN₁ alone is never sufficient.
Knowledge of PIN₁ alone cannot complete any high-value or sensitive operation.
Summary of the Invention
Two-Stage PIN workflow with dynamic, time-limited PIN₂
PIN₁ Entry
User enters memorised PIN₁ into a trusted interface.
1
PIN₁ Verification
Server verifies PIN₁ against stored secure hash.
2
PIN₂ Generation & Transmission
Server generates cryptographically secure, time-limited PIN₂ and sends via the registered channel.
3
PIN₂ Entry & Verification
User enters PIN₂ within timeout; server verifies and grants access.
4
Use Cases
Real-world applications across industries
E-Wallet Transfer
Secure wallet transactions with dual authentication.
- User initiates transfer
- Enter PIN₁
- Receive PIN₂ via SMS
- Complete transaction
Cardless ATM Withdrawal
Withdraw cash without a card using dual PIN verification.
- Pre-enrol withdrawal
- Enter details at ATM
- PIN₁ verification
- SMS PIN₂ → Cash dispensed
App Login
Elevated access control for sensitive apps.
- Open app
- Enter PIN₁
- Receive PIN₂
- Access granted
Document Access
Secure PDF/document unlock with PIN₂.
- Request document
- PIN₁ entry
- PIN₂ delivery
- Decrypt & view
Card ATM Withdrawals
Add dynamic verification to classic card flows.
- Insert card
- PIN₁ verification
- SMS PIN₂
- Transaction complete
Offline Mode
Local, time-boxed PIN₂ when connectivity is absent.
- Open local container
- PIN₁ verification
- Local PIN₂ generation
- Access granted
System Components
Core components powering Double Pin Technology
User Device
Where users input PIN₁ and PIN₂.
Examples:
ATM terminals, smartphones, web apps
Authentication Server
Verifies PIN₁, generates PIN₂, authorises operations.
Examples:
Hardened infra, encryption, audit
Channel Interface/Gateway
Delivers PIN₂ securely to the user.
Examples:
SMS, email, push notifications
Secure Database
Encrypted storage for PIN hashes, profiles, logs.
Examples:
Salted hashes, channel addresses, flags
Registration Process
Simple onboarding to enable dual-PIN security
1
PIN₁ Selection
Choose a static PIN₁ and register secure channels.
2
Channel Verification
Verify ownership of SMS/email/push before activation.
3
System Activation
Enable dual-PIN with optional offline capabilities.