Abstract: Encrypting sensitive information sent using an interactive voice response (IVR) system. The systems and methods may include an HSM that provides a secure platform to encrypt the sensitive information. They may also include interfaces with IVR systems and transaction processing hosts. The systems and methods may interact directly with a customer using an IVR to receive the sensitive information. They may also provide for a secure platform to validate the strength of the information, such as a PIN or password, prior to further processing of the sensitive information.

Abstract: Disclosing a secure personal identification number (“PIN”) associated with a financial account to an account holder. A PIN reveal application can interact with a hardware security module (“HSM”) to decrypt and disclose the PIN to the account holder one or more PIN character(s) at a time. The account holder also can set a new PIN in a secure manner. A PIN set application can interact with the HSM to encrypt PIN characters received by the PIN set application from the account holder. The HSM provides a secure platform to encrypt and decrypt the secure PIN.

Abstract: Disclosing a secure personal identification number (“PIN”) associated with a financial account to an account holder. A PIN reveal application can interact with a hardware security module (“HSM”) to decrypt and disclose the PIN to the account holder one or more PIN character(s) at a time. The account holder also can set a new PIN in a secure manner. A PIN set application can interact with the HSM to encrypt PIN characters received by the PIN set application from the account holder. The HSM provides a secure platform to encrypt and decrypt the secure PIN.

Abstract: Encrypting sensitive information sent using an interactive voice response (IVR) system. The systems and methods may include an HSM that provides a secure platform to encrypt the sensitive information. They may also include interfaces with IVR systems and transaction processing hosts. The systems and methods may interact directly with a customer using an IVR to receive the sensitive information. They may also provide for a secure platform to validate the strength of the information, such as a PIN or password, prior to further processing of the sensitive information.

Abstract: Automatically managing the lifecycle of encryption keys. The systems and methods include a workflow engine and workflows that implement actions that generate, maintain, replace, and destroy encryption keys. Workflows may trigger other workflows to automate each step in an encryption key's lifecycle. The systems and methods include reporting on and auditing of the entire hierarchy of keys managed by the system.