Java card applet for DUKPT, Card HSM, Smart Card, Terminal
Management Key
Wisecard DUKPT is a cost-effective and user-friendly Java Applet
tool for customers to do key management, which ensures each
transaction has its own unique encryption key, with the benefit
that any compromise of an encryption key cannot be used to attack
either past or future transactions.
Features:
★ Based on Java card, easy to migrate among different card vendors;
★ Cost-efficient to expand to meet customers’ further requirements;
★ Provide interface to personalize BDKIPEKKEKPEK with secure
method;
★ Remote offline transaction is also supported;
Workflow:
•1. Personalize DUKPT-Client Applet with IPEK/KEK/PEK. – Terminal
Side;
•2. The (PIN/data, KSN) pair are received. –Terminal Side;
•3. Calculate the transaction key. –Terminal Side;
•4. The PIN is encrypted by transaction key, The PIN is encrypted
by transaction key. -Terminal Side.
DUKPT encryption system workflow:
• 1. Personalize DUKPT-HSM Applet with BDK/IPEK/KEK/PEK. – Host
Side
• 2. DUKPT-HSM Applet generate IPEK(s) depend on KSN entered by
user. – Host Side
• 3. Inject IPEK(s) into terminal. – Terminal Side
• 4. Terminal calculate transaction key. – Terminal Side
• 5. Terminal encrypt PIN/Data by transaction key. – Terminal Side
• 6. The (cryptogram, KSN) pair are received. – Host Side
• 7. The appropriate BDK (if the system has more than one) is
located. – Host Side
• 8. The receiving system first regenerates the IPEK, and then goes
through a process similar to that used on the originating system to
arrive at the same encrypting key that was used (the transaction
key). The Key Serial Number (KSN) provides the information needed
to do this. – Host Side
• 9. The cryptogram is decrypted by transaction key. – Host Side
Company Information:
Wisecard (a WiseGroup company) is a global solution provider that
has been providing innovative payment and secure solutions to
financial institutions, government entities and telco operators
worldwide.
Wisecard have been providing EMV smart card, EMV biometric card,
EMV perso software, card issuance, EMV embossers, Smart POS
machine, Android POS, POS terminals, smart banking, smart teller
machine, kiosk, vending machine, biometric POS, Hardware Secure
Module, mobile payment platform, private label card solution,
prepaid card solution, card management system to partners in more
than 60 countries worldwide. Wisecard’s product suite empower large
global financial institutions and government sectors as well as
small to medium sized retail banks.
Wisecard solutions are adapting to the highest and latest secure
standard, and the solutions have been fully tested and certified by
international test labs, like FBI, STQC, EMV, PCI DSS, PA DSS,
VISA, MasterCard, China UnionPay, JCB, AmEx, Discover, RuPay and
etc.
Notes: FBI, STQC, EMV, PCIDSS, PADSS, Visa, MasterCard, China
UnionPay, JCB, AmEx, Discover, RuPay is a registered trademark. All
trademarks referenced here are the property of the respective
owners.
