Product Specification

Java card applet for DUKPT, Transaction Key Management system, Card HSM, PKI, PSAM, ISAM Applet

Features:

★ Based on Java card, easy to migrate among different card vendors;

★ Cost-efficient to expand to meet customers’ further requirements;

★ Provide interface to personalize BDKIPEKKEKPEK with secure method;

★ Remote offline transaction is also supported;

★ All security operations are carried out inside the card.

★ Easy to expand to meet customer’s further requirements;

DUKPT server application features:

• Generate IPEK (Clear or encrypted under KEK depend on parameter)
• PIN Encryption Command (PIN can be clear or encrypted under PEK depend on parameter)
• PIN Decryption Command
• Data Encryption Command
• Data Decryption Command
• MAC Calculating Command

DUKPT encryption system workflow:

• 1. Personalize DUKPT-HSM Applet with BDK/IPEK/KEK/PEK. – Host Side

• 2. DUKPT-HSM Applet generate IPEK(s) depend on KSN entered by user. – Host Side

• 3. Inject IPEK(s) into terminal. – Terminal Side

• 4. Terminal calculate transaction key. – Terminal Side

• 5. Terminal encrypt PIN/Data by transaction key. – Terminal Side

• 6. The (cryptogram, KSN) pair are received. – Host Side

• 7. The appropriate BDK (if the system has more than one) is located. – Host Side

• 8. The receiving system first regenerates the IPEK, and then goes through a process similar to that used on the originating system to arrive at the same encrypting key that was used (the transaction key). The Key Serial Number (KSN) provides the information needed to do this. – Host Side

• 9. The cryptogram is decrypted by transaction key. – Host Side

Workflow:

•1. Personalize DUKPT-Client Applet with IPEK/KEK/PEK. – Terminal Side;

•2. The (PIN/data, KSN) pair are received. –Terminal Side;

•3. Calculate the transaction key. –Terminal Side;

•4. The PIN is encrypted by transaction key, The PIN is encrypted by transaction key. -Termina

DUKPT client application features:

• Inject IPEK(IPEK Clear or encrypted under KEK depend on parameter)

• PIN Encryption Command(PIN can be clear or encrypted under PEK depend on parameter)

• Data Encryption Command

• Data Decryption Command

• MAC Calculating Command

Company Information:

Wisecard (a WiseGroup company) is a global solution provider that has been providing innovative payment and secure solutions to financial institutions, government entities and telco operators worldwide.

Wisecard have been providing EMV smart card, EMV biometric card, EMV perso software, card issuance, EMV embossers, Smart POS machine, Android POS, POS terminals, smart banking, smart teller machine, kiosk, vending machine, biometric POS, Hardware Secure Module, mobile payment platform, private label card solution, prepaid card solution, card management system to partners in more than 60 countries worldwide. Wisecard’s product suite empower large global financial institutions and government sectors as well as small to medium sized retail banks.

Wisecard solutions are adapting to the highest and latest secure standard, and the solutions have been fully tested and certified by international test labs, like FBI, STQC, EMV, PCI DSS, PA DSS, VISA, MasterCard, China UnionPay, JCB, AmEx, Discover, RuPay and etc.

Notes: FBI, STQC, EMV, PCIDSS, PADSS, Visa, MasterCard, China UnionPay, JCB, AmEx, Discover, RuPay is a registered trademark. All trademarks referenced here are the property of the respective owners.