PkBox EMV

Inte offers its product PkBox EMV as security server. EMV PkBox back end is used whenever it is necessary to use the more widespread standard and owners cryptographic algorithms. In this way you can treat the amount of security in the manner used by the interbank and payment circuits.

Encryption for data integrity

In the world of electronic payments and card management, encryption is the main tool to ensure data integrity, authentication of the applicant and the treatment of data involved in a secure transaction. Thanks to PkBox EMV the deployment of applications that can apply encryption to the data becomes simple and straightforward. The different available APIs are simple and help safeguard the investments that may have already incurred. Fault tolerance ensures service levels required by the Customer. The use of cryptographic devices certified protect private keys set by the control units.

 

Managing Keys

The supported key features of management and integration within the HSM device are:

  1. Manual input plaintext is divided into N components (minimum 2). Keys can be entered via keyboard (usually for the system test environment) or via PIN PED directly connected to the HSM device. The keys, that are inserted through the mechanism are typically keys transport (ZMK) or top-level key (HMK).The types of supported keys are: DES, DES2, DES3 and AES (128, 256.512 bits).
  2. Import of ecrypted key. Keys can be imported into the HSM device mode key-encrypted transport.Imported keys are entered via the keyboard of the server as the key value is already protected. Therefore there is no need to use your PIN PED. The types of supported keys are: DES, DES2, DES3 e AES (128, 256,512 bit).
  3. Random gene rating. The value of a key within the HSM device can be randomly generated. The types of supported keys are: DES, DES2, DES3, AES (128, 256,512 bit) e RSA.
  4. Cancellation key. A specific key can be permanently removed within the HSM device
  5. Management of Backup / Restore key. The types of supported key are: DES, DES2, DES3 e AES (128, 256,512 bit).
  6. Manage Backup / Restore keys

Features

PkBox EMV offers security features that are implemented in firmware tab HSM to ensure the highest level of security and protection of keys.
Moreover, different functions are arranged in different services. This division can raise the level of safety provided by PkBox EMV solution. Usable cryptographic commands are separated by application services that can access the individual installations. The applications that manage the authorization process can not use the commands needed to process Issuing.

Issuing. The Issuing module contains all the cryptographic controls that are necessary to cards issuing processes and PIN generation (eg PVV, CVV, CVV2, calculating offsets, ...) .
EMV. The module makes available cryptographic commands related to EMV services for “data preparation" (customizing cards), authentication and key derivation.
Authorization. The Authorization Form provides the following cryptographic controls in the management of authorization and validation of messages: ( MAC calculation and check - Monitoring and transcoding PinBlock - Validation IN/ PVV - Change PIN - Check CVV/CVV2 - Management of 3D secure cryptograms and EMV).
Petrol. Petrol module includes a set of commands in the management of authorization and validation of messages relating to fuel cards (Shell management circuits, DVK, ROUTEX, Uta and Lomo).
New modules and new features are constantly being implemented to enable PkBox EMV as cryptographic engine in the treatment of the amount of security PkBox EMV is combined with electronic payment applications, card processing and anything else that is of a specific interest of the client.