[leeber]

Strange, why not just have the user choose a password or a typical 4-digit pin? This would still be way more secure than using the CVC number.