Disposable PIN Features

From Net2MAX

Contents 1 Introduction 2 Typical Application 2.1 Authentication 2.2 Encryption

1 Introduction

The world's first disposable personal identification number.

If a user needs to transmit a Personal Identification Number (PIN) over an UNSECURED channel, he or she can generate a Disposable PIN in real-time that is DIFFERENT every time so it CANNOT be reused by people who has stolen it.

A single Disposable PIN can be used in for BOTH Authentication and Encryption. It will automatically drop into Authentication mode when there is no extra information supplied to it for the Encryption operation.

2 Typical Application

2.1 Authentication

Password Replacement

For use with Automatic Telling Machines (ATM), Telephone (prepaid phone cards, on-line banking), Messaging (SMS, instant messages, emails), Web (protection against keyboard loggers, spying in Internet cafes), Payment (replace static passwords, credit card CVV, on-line cheques).

An always changing Disposable PIN is supplied instead of a static password, making it much safer to use in all cases than passwords. In some cases, it can even be disclosed to others for one time usage by them!

Communication Signature

For use to certify any communications (e.g. emails, fax, instant messages, web, video, telephone).

Users (say bank customers) have an Disposable PIN with the bank, every time the bank send out communication to that customer, the bank also send out the customer's Disposable PIN with the communication. The customer can quick check to Disposable PIN to make sure that it is correct and thus the communication is genuine.

2.2 Encryption

Amount Approval

For use in on-line or in-person payment situations.

Instead of signing for a credit card payment (say at a restaurant), the Disposable PIN is generated by the purchaser with the most significant part of amount to be paid is encrypted inside. The payment processor can not only use the Disposable PIN to ensure that it is the purchaser is really the right person BUT ALSO compare the amount inside the Disposable PIN with the actual amount claimed by the restaurant.

Secret Passing

For use in on-line or in person transmission of secret information.

Instead of sending new PIN or password out by postal mail to the banking customers, the banks can send new PIN by email, encrypting it inside a Disposable PIN that the customer has with the bank.

Information Integrity

For use in on-line or in person transmission of accurate information.

Numeric information (time, dimension, quantity etc.) within a document can be encrypted inside a Disposable PIN that is sent along with the document. The receiver can decrypt the Disposable PIN and compared the value inside with the value on the document.