This document is a preview generated by EVS

Size: px

Start display at page:

Download "This document is a preview generated by EVS"

Heather Hunt
5 years ago
Views:

1 CEN WORKSHOP CWA August 2015 AGREEMENT ICS ; ; English version Extensions for Financial Services (XFS) interface specification Release Part 6: PIN Keypad Device Class Interface - Programmer's Reference This CEN Workshop Agreement has been drafted and approved by a Workshop of representatives of interested parties, the constitution of which is indicated in the foreword of this Workshop Agreement. The formal process followed by the Workshop in the development of this Workshop Agreement has been endorsed by the National Members of CEN but neither the National Members of CEN nor the CEN-CENELEC Management Centre can be held accountable for the technical content of this CEN Workshop Agreement or possible conflicts with standards or legislation. This CEN Workshop Agreement can in no way be held as being an official standard developed by CEN and its Members. This CEN Workshop Agreement is publicly available as a reference document from the CEN Members National Standard Bodies. CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United Kingdom. EUROPEAN COMMITTEE FOR STANDARDIZATION COMITÉ EUROPÉEN DE NORMALISATION EUROPÄISCHES KOMITEE FÜR NORMUNG CEN-CENELEC Management Centre: Avenue Marnix 17, B-1000 Brussels 2015 CEN All rights of exploitation in any form and by any means reserved worldwide for CEN national Members. Ref. No.:CWA :2015 E

2 Table of Contents European foreword Introduction Background to Release XFS Service-Specific Programming PIN Keypad Encrypting Touch Screen (ETS) References Info Commands WFS_INF_PIN_STATUS WFS_INF_PIN_CAPABILITIES WFS_INF_PIN_KEY_DETAIL WFS_INF_PIN_FUNCKEY_DETAIL WFS_INF_PIN_HSM_TDATA WFS_INF_PIN_KEY_DETAIL_EX WFS_INF_PIN_SECUREKEY_DETAIL WFS_INF_PIN_QUERY_LOGICAL_HSM_DETAIL WFS_INF_PIN_QUERY_PCIPTS_DEVICE_ID WFS_INF_PIN_GET_LAYOUT Execute Commands Normal PIN Commands WFS_CMD_PIN_CRYPT WFS_CMD_PIN_IMPORT_KEY WFS_CMD_ PIN_DERIVE_ KEY WFS_CMD_ PIN_ GET_PIN WFS_CMD_PIN_LOCA L_DES WFS_CMD_PIN_CREATE_OFFSET WFS_CMD_PIN_LOCAL_EUROCHEQUE WFS_CMD_PIN_LOCA L_VISA WFS_CMD_ PIN_PRESENT_IDC WFS_CMD_ PIN_ GET_PINBLOCK WFS_CMD_ PIN_ GET_ DATA WFS_CMD_ PIN_INITIA LIZATION WFS_CMD_ PIN_LOCA L_BA NKSYS WFS_CMD_ PIN_BANKSYS_IO WFS_CMD_PIN_RESET WFS_CMD_ PIN_HSM_SET_TDATA WFS_CMD_PIN_SECURE_MSG_SEND WFS_CMD_ PIN_SECURE_MSG_ RECEIVE WFS_CMD_ PIN_ GET_JOURNA L WFS_CMD_PIN_IMPORT_KEY_EX WFS_CMD_PIN_ENC_IO WFS_CMD_ PIN_HSM_INIT WFS_CMD_ PIN_SECUREKEY_ ENTRY WFS_CMD_ PIN_ GENERATE_KCV WFS_CMD_ PIN_SET_ GUIDANCE_ LIGHT WFS_CMD_ PIN_MAINTAIN_PIN

3 WFS_CMD_PIN_KEYPRESS_BEEP WFS_CMD_ PIN_SET_PINBLOCK_ DATA WFS_CMD_ PIN_SET_ LOGICA L_ HSM WFS_CMD_ PIN_IMPORT_KEYBLOCK WFS_CMD_ PIN_POW ER_SA VE_ CONTROL WFS_CMD_ PIN_DEFINE_ LA YOUT WFS_CMD_PIN_START_AUTHENTICATE WFS_CMD_ PIN_AUTHENTICATE WFS_CMD_ PIN_ GET_PINBLOCK_EX WFS_CMD_PIN_SYNCHRONIZE_ COMMAND Common commands for Remote Key Loading Schemes WFS_CMD_PIN_START_KEY_EXCHANGE Remote Key Loading Using Signature s WFS_CMD_PIN_IMPORT_RSA_PUBLIC_KEY WFS_CMD_PIN_EXPORT_RSA_ISSUER_SIGNED_ITEM WFS_CMD_PIN_IMPORT_RSA_SIGNED_DES_KEY WFS_CMD_PIN_GENERATE_RSA_KEY_PAIR WFS_CMD_PIN_EXPORT_RSA_EPP_SIGNED_ITEM Remote Key Loading with Certificates WFS_CMD_ PIN_LOAD_ CERTIFICATE WFS_CMD_PIN_GET_CERTIFICATE WFS_CMD_ PIN_REPLACE_ CERTIFICATE WFS_CMD_PIN_IMPORT_RSA_ENCIPHERED_PKCS7_KEY WFS_CMD_ PIN_LOAD_ CERTIFICATE_ EX WFS_CMD_PIN_IMPORT_RSA_ENCIPHERED_PKCS7_KEY_EX EMV WFS_CMD_PIN_EMV_IMPORT_PUBLIC_KEY WFS_CMD_ PIN_DIGEST Events WFS_EXEE_PIN_KEY WFS_SRVE_PIN_INITIALIZED WFS_SRVE_PIN_ILLEGAL_KEY_ACCESS WFS_SRVE_PIN_OPT_REQUIRED WFS_SRVE_PIN_CERTIFICATE_CHANGE WFS_SRVE_PIN_HSM_TDATA_CHANGED WFS_SRVE_PIN_HSM_CHANGED WFS_EXEE_PIN_ENTERDATA WFS_SRVE_PIN_DEVICEPOSITION WFS_SRVE_PIN_POWER_SAVE_CHANGE WFS_EXEE_PIN_LAYOUT C - Header File Appendix-A Remote Key Loading Using Signature s RSA Data Authentication and Digital Signatures RSA Secure Key Exchange using Digital Signatures Initializat ion Phase Signature Issuer and ATM PIN Initializat ion Phase Signature Issuer and Host Key Exchange Host and ATM PIN Key Exchange (with random number) Host and ATM PIN Enhanced RKL, Key Exchange (with random number) Host and ATM PIN

4 Default Keys and Security Item loaded during manufacture Remote Key Loading Using Certificate s Certificate Exchange and Authentication Remote Key Exchange Replace Certificate Primary and Secondary Certificates TR34 BIND To Host TR34 Key Transport TR34 REBIND To New Host TR34 Force REBIND To New Host TR34 UNBIND From Host TR34 Force UNBIND From Host German ZKA GeldKarte How to use the SECURE_MSG commands Protocol WFS_PIN_PROTISOAS Protocol WFS_PIN_PROTISOLZ Protocol WFS_PIN_PROTISOPS Protocol WFS_PIN_PROTCHIPZKA Protocol WFS_PIN_PROTRAWDATA Protocol WFS_PIN_PROTPBM Protocol WFS_PIN_PROTHSMLDI Protocol WFS_PIN_PROTGENAS Protocol WFS_PIN_PROTCHIPINCHG Protocol WFS_PIN_PROTPINCMP Protocol WFS_PIN_PROTISOPINCHG Command Sequence EMV Support Keys loading PIN Block Management SHA-1 Digest French Cartes Bancaires Data Structure for WFS_ CMD_PIN_ ENC_IO Command Sequence Secure Key Entry Keyboard Layout Command Usage WFS_PIN_USERESTRICTEDKEYENCKEY key usage Command Usage Appendix-B (Country Specific WFS_CMD_PIN_ENC_IO protocols) Luxemburg Protocol WFS_CMD_ ENC_IO_LUX_LOAD_APPKEY WFS_CMD_ENC_IO_LUX_GENERATE_MAC WFS_CMD_ENC_IO_LUX_CHECK_MAC WFS_CMD_ ENC_IO_LUX_BUILD_PINBLOCK WFS_CMD_ENC_IO_LUX_DECRYPT_TDES WFS_CMD_ENC_IO_LUX_ENCRYPT_TDES Luxemburg-specific Header File China Protocol WFS_CMD_ ENC_IO_CHN_ DIGEST WFS_CMD_ ENC_IO_CHN_SET_SM2_PARAM WFS_CMD_ ENC_IO_CHN_IMPORT_SM2_PUBLIC_KEY WFS_CMD_ ENC_IO_CHN_SIGN WFS_CMD_ ENC_IO_CHN_ VERIFY WFS_CMD_ ENC_IO_CHN_EXPORT_SM2_ISSUER_SIGNED_ITEM WFS_CMD_ ENC_IO_CHN_ GENERATE_ SM2_KEY_PAIR WFS_CMD_ ENC_IO_CHN_EXPORT_SM2_EPP_SIGNED_ITEM WFS_CMD_ ENC_IO_CHN_ IMPORT_ SM2_SIGNED_SM4_KEY

5 China-specific Header File Appendix C (Standardized lpszextra fields) WFS_INF_PIN_STATUS WFS_INF_PIN_CAPABILITIES Appendix D (TR-31 Key Use)

6 European foreword This CWA is revision 3.30 of the XFS interface specification. This CEN Workshop Agreement has been drafted and approved by a Workshop of representatives of interested parties on March 19 th 2015, the constitution of which was supported by CEN following the public call for participation made on The specification is continuously reviewed and commented in the CEN/ISSS Workshop on XFS. It is therefore expected that an update of the specification will be published in due time as a CWA, superseding this revision A list of the individuals and organizations which supported the technical consensus represented by the CEN Workshop Agreement is available from the CEN/XFS Secretariat. The CEN XFS Workshop gathered suppliers as well as banks and other financial service companies. The CWA is published as a multi-part document, consisting of: Part 1: Application Programming Interface (API) - Service Provider Interface (SPI) - Programmer's Reference Part 2: Service Classes Definition - Programmer's Reference Part 3: Printer and Scanning Device Class Interface - Programmer's Reference Part 4: Identification Card Device Class Interface - Programmer's Reference Part 5: Cash Dispenser Device Class Interface - Programmer's Reference Part 6: PIN Keypad Device Class Interface - Programmer's Reference Part 7: Check Reader/Scanner Device Class Interface - Programmer's Reference Part 8: Depository Device Class Interface - Programmer's Reference Part 9: Text Terminal Unit Device Class Interface - Programmer's Reference Part 10: Sensors and Indicators Unit Device Class Interface - Programmer's Reference Part 11: Vendor Dependent Mode Device Class Interface - Programmer's Reference Part 12: Camera Device Class Interface - Programmer's Reference Part 13: Alarm Device Class Interface - Programmer's Reference Part 14: Card Embossing Unit Device Class Interface - Programmer's Reference Part 15: Cash-In Module Device Class Interface - Programmer's Reference Part 16: Card Dispenser Device Class Interface - Programmer's Reference Part 17: Barcode Reader Device Class Interface - Programmer's Reference Part 18: Item Processing Module Device Class Interface- Programmer's Reference Parts 19-28: Reserved for future use. Parts 29 through 47 constitute an optional addendum to this CWA. They define the integration between the SNMP standard and the set of status and statistical information exported by the Service Providers. Part 29: XFS MIB Architecture and SNMP Extensions - Programmer s Reference Part 30: XFS MIB Device Specific Definitions - Printer Device Class Part 31: XFS MIB Device Specific Definitions - Identification Card Device Class Part 32: XFS MIB Device Specific Definitions - Cash Dispenser Device Class Part 33: XFS MIB Device Specific Definitions - PIN Keypad Device Class Part 34: XFS MIB Device Specific Definitions - Check Reader/Scanner Device Class Part 35: XFS MIB Device Specific Definitions - Depository Device Class Part 36: XFS MIB Device Specific Definitions - Text Terminal Unit Device Class Part 37: XFS MIB Device Specific Definitions - Sensors and Indicators Unit Device Class Part 38: XFS MIB Device Specific Definitions - Camera Device Class 6

This document is a preview generated by EVS

This document is a preview generated by EVS CEN WORKSHOP CWA 16926-5 August 2015 AGREEMENT ICS 35.200; 35.240.15; 35.240.40 English version Extensions for Financial Services (XFS) interface specification Release 3.30 - Part 5: Cash Dispenser Device