Why isn't the PIN pad on a touch screen? When working with credit cards and chip/PIN systems the entry of the PIN needs to be secure. This usually means the s

Why isn't the PIN pad on a touch screen? When working with credit cards and chip/PIN systems the entry of the PIN needs to be secure. This usually means the scanning lines from the keypad go directly to a security-hardened subprocessor inside the pump - the same one reading the PAN from the EMV chip or magstripe. Then the PIN/PAN block is encrypted and sent off to the application processor and/or bank to complete the transaction. If PIN entry was offloaded to the application processor, that processor would need to be audited to make sure of certain requirements (PIN isn't sniffable, it isn't held in RAM after deallocation, encryption isn't breakable, etc). At the end of the day it pretty much has to be as hardened as the little subprocessor attached to the EMV reader, except any change to the app now needs to be recertified like the subprocessor is. PCI is beginning to come around to allowing PIN entry on non-secure devices, see the following standard for more information: https://blog.pcisecuritystandards.org/new-pci-software-pin-entry-on-cots-standard https://blog.pcisecuritystandards.org/new-pci-software-pin-e... Or why not allow people to place their orders from their own screens? This exists. https://itunes.apple.com/us/app/exxon-mobil-speedpass/id668175318?mt=8 https://itunes.apple.com/us/app/exxon-mobil-speedpass/id6681... https://play.google.com/store/apps/details?id=com.webmarketing.exxonmpl https://play.google.com/store/apps/details?id=com.webmarketi...