Java card applet for DUKPT, Transaction Key Management system, Card
HSM, PKI, PSAM, ISAM Applet
Features:
★ Based on Java card, easy to migrate among different card vendors;
★ Cost-efficient to expand to meet customers’ further requirements;
★ Provide interface to personalize BDKIPEKKEKPEK with secure
method;
★ Remote offline transaction is also supported;
★ All security operations are carried out inside the card.
★ Easy to expand to meet customer’s further requirements;
DUKPT server application features:
- Generate IPEK (Clear or encrypted under KEK depend on parameter)
- PIN Encryption Command (PIN can be clear or encrypted under PEK
depend on parameter)
- PIN Decryption Command
- Data Encryption Command
- Data Decryption Command
- MAC Calculating Command
DUKPT encryption system workflow:
• 1. Personalize DUKPT-HSM Applet with BDK/IPEK/KEK/PEK. – Host
Side
• 2. DUKPT-HSM Applet generate IPEK(s) depend on KSN entered by
user. – Host Side
• 3. Inject IPEK(s) into terminal. – Terminal Side
• 4. Terminal calculate transaction key. – Terminal Side
• 5. Terminal encrypt PIN/Data by transaction key. – Terminal Side
• 6. The (cryptogram, KSN) pair are received. – Host Side
• 7. The appropriate BDK (if the system has more than one) is
located. – Host Side
• 8. The receiving system first regenerates the IPEK, and then goes
through a process similar to that used on the originating system to
arrive at the same encrypting key that was used (the transaction
key). The Key Serial Number (KSN) provides the information needed
to do this. – Host Side
• 9. The cryptogram is decrypted by transaction key. – Host Side
Workflow:
•1. Personalize DUKPT-Client Applet with IPEK/KEK/PEK. – Terminal
Side;
•2. The (PIN/data, KSN) pair are received. –Terminal Side;
•3. Calculate the transaction key. –Terminal Side;
•4. The PIN is encrypted by transaction key, The PIN is encrypted
by transaction key. -Termina
DUKPT client application features:
• Inject IPEK(IPEK Clear or encrypted under KEK depend on
parameter)
• PIN Encryption Command(PIN can be clear or encrypted under PEK
depend on parameter)
• Data Encryption Command
• Data Decryption Command
• MAC Calculating Command
Company Information:
Wisecard (a WiseGroup company) is a global solution provider that
has been providing innovative payment and secure solutions to
financial institutions, government entities and telco operators
worldwide.
Wisecard have been providing EMV smart card, EMV biometric card,
EMV perso software, card issuance, EMV embossers, Smart POS
machine, Android POS, POS terminals, smart banking, smart teller
machine, kiosk, vending machine, biometric POS, Hardware Secure
Module, mobile payment platform, private label card solution,
prepaid card solution, card management system to partners in more
than 60 countries worldwide. Wisecard’s product suite empower large
global financial institutions and government sectors as well as
small to medium sized retail banks.
Wisecard solutions are adapting to the highest and latest secure
standard, and the solutions have been fully tested and certified by
international test labs, like FBI, STQC, EMV, PCI DSS, PA DSS,
VISA, MasterCard, China UnionPay, JCB, AmEx, Discover, RuPay and
etc.
Notes: FBI, STQC, EMV, PCIDSS, PADSS, Visa, MasterCard, China
UnionPay, JCB, AmEx, Discover, RuPay is a registered trademark. All
trademarks referenced here are the property of the respective
owners.
