Dont send the cc info. Use private key to authenticate yourself. Digitally sign the transaction id and the date so people cant record the info and reuse it.

I guess the issue is that people may lose or forget their keys or people can gain access to the signing device. It is harder to understand than using password for verification so people like my parents do not trust it.