Method and system for securely entering identification data in order to authenticate a transaction carried out by means of a self-service terminal

摘要

For self-service terminals, such as e.g. cash machines, identification data in the form of a PIN are usually entered on the keyboard of the cash machine. Said keyboards have encryption mechanisms, are produced as EPPs (Encrypting ΡIΝ Pads) and are very expensive. When a PIN is entered, being watched cannot be ruled out. In order to solve these problems, a method and a system for authenticating and carrying out a transaction at a self-service terminal, particularly a cash machine (ATM), is specified, wherein the system comprises the following system components: a first computer-supported unit (PINSRV), which forms a second data set containing second elements (A, B, C,... J) for a first data set containing first elements (0, 1, 2, 3,... 9) from which identification data (PIN) are formed, each of which second elements is allocated, on a one-to-one basis, to one of the first elements; a screen (DISP) which is structurally connected to the self-service terminal (ATM) and displays the one-to-one allocation of the second elements to the first elements; a user terminal (MD) which is structurally separate from the self-service terminal (ATM), is allocated to a user (CSM) and displays the second elements (A, B, C,... J) and not the first elements (0, 1, 2, 3,... 9), in order to enable the user to enter the input data (#PIN) on the user terminal (MD); wherein an application program (MBA) implemented on the user terminal transmits the input data (#PIN) to a second computer-supported unit (SRV) which carries out the authentication of the transaction, and wherein the first computer-supported unit (PINSRV) manages the one-to-one allocation of the second elements (A, B, C,... J) to the first elements (0, 1, 2, 3,... 9).