I like the idea the user is submitting their public key and thus there is never any risk of anyone knowing the private key but the owner of the card.

Goodluck on your sales!