Yes, it is something like that.
I don't like the idea of disposable PVC cards... think what it would be like to throw away your credit card after every grocery-shopping trip!
re-statement:
Instead, having the merchant empty one of your wallets and send to the other would be ideal: he can't access the one he sends the change to. A bitcoind on your home computer would then refill the public address.
Another way of doing it, with the home-hosted bitcoind:
Have a public address 1CUST with a very small amount (~0.01 BTC). The merchant then charges a number of Satoshis from that to 1MERCH. The home-script sees this transaction. It multiplies the satoshis by some number (10,000?) and sends that amount to 1MERCH.
Both of these methods have a problem. They avoid giving out your main private key but:
1. With this method, the merchant could set up a program to rob your address as soon as it is filled back up
2. With this method, the merchant could charge the whole 0.01 BTC, causing your script to send 100 BTC to the merchant. You throw away the card, but the damage is done.
So really, I'm not seeing a viable way to make re-usable PVC bitcoin cards, given that there's no way short of rubber-hose cryptography to prove that someone owns such-and-such an address.
PVC cards would never be disposable, it would be crazy. XD
In a previous post I wrote the following, it seems feasible but depends on the multi signature.
Does not appear be the case, fear of stolen is very apparent in bitcoin, even above our local currency. Concentrate an impenetrable security system in a single piece of plastic, not even the pvc veterans have been able even (visa / mastercard ...).
When multisignature transactions are fully implemented in bitcoin clients, the operation of the cards could be adapted to the multisignature, so that each transaction must be authorized for a second private key, so even if we steal the private key of the card and our password to decrypt it, they could not operate ( could even dispense with encryption and key ) . Of course, this would add a further complication to the use of the card, a merchant will not let you go with the merchandise, hoping that later you grant permission the transaction.
Right now I can not think a simple option, anonymous and without relying on a centralized system to implement a system like this. Accepting all these drawbacks, one option would be to use a service like Twilio+CardAuthorizerServer, to link each card to the mobile phone number of user, in this way when making a transaction the CardAuthorizerServer may call immediately the customer, and through an key ( hold in the mobile keypad ) authorize the transaction, as the CardAuthorizerServer would have the second private key.
One option following this scheme without multi signature, could be as follows:
The card contains only a small amount of Bitcoins, enough for the fee, to make a payment issue an invalid transaction but with all the necessary information for payment. Thus the CardAuthorizerServer detect this transaction, would take the data and perform the transaction, after request phone confirmation.