Java card applet for DUKPT, Card HSM, Smart Card, Terminal Management Key
Wisecard DUKPT is a cost-effective and user-friendly Java Applet tool for customers to do key management, which ensures each transaction has its own unique encryption key, with the benefit that any compromise of an encryption key cannot be used to attack either past or future transactions.

Features:

★ Based on Java card, easy to migrate among different card vendors;

★ Cost-efficient to expand to meet customers’ further requirements;

★ Provide interface to personalize BDKIPEKKEKPEK with secure method;

★ Remote offline transaction is also supported;

Workflow:

•1. Personalize DUKPT-Client Applet with IPEK/KEK/PEK. – Terminal Side;

•2. The (PIN/data, KSN) pair are received. –Terminal Side;

•3. Calculate the transaction key. –Terminal Side;

•4. The PIN is encrypted by transaction key, The PIN is encrypted by transaction key. -Terminal Side.

DUKPT encryption system workflow:

• 1. Personalize DUKPT-HSM Applet with BDK/IPEK/KEK/PEK. – Host Side

• 2. DUKPT-HSM Applet generate IPEK(s) depend on KSN entered by user. – Host Side

• 3. Inject IPEK(s) into terminal. – Terminal Side

• 4. Terminal calculate transaction key. – Terminal Side

• 5. Terminal encrypt PIN/Data by transaction key. – Terminal Side

• 6. The (cryptogram, KSN) pair are received. – Host Side

• 7. The appropriate BDK (if the system has more than one) is located. – Host Side

• 8. The receiving system first regenerates the IPEK, and then goes through a process similar to that used on the originating system to arrive at the same encrypting key that was used (the transaction key). The Key Serial Number (KSN) provides the information needed to do this. – Host Side

• 9. The cryptogram is decrypted by transaction key. – Host Side

Company Information:

Wisecard (a WiseGroup company) is a global solution provider that has been providing innovative payment and secure solutions to financial institutions, government entities and telco operators worldwide.

Wisecard have been providing EMV smart card, EMV biometric card, EMV perso software, card issuance, EMV embossers, Smart POS machine, Android POS, POS terminals, smart banking, smart teller machine, kiosk, vending machine, biometric POS, Hardware Secure Module, mobile payment platform, private label card solution, prepaid card solution, card management system to partners in more than 60 countries worldwide. Wisecard’s product suite empower large global financial institutions and government sectors as well as small to medium sized retail banks.

Wisecard solutions are adapting to the highest and latest secure standard, and the solutions have been fully tested and certified by international test labs, like FBI, STQC, EMV, PCI DSS, PA DSS, VISA, MasterCard, China UnionPay, JCB, AmEx, Discover, RuPay and etc.

Notes: FBI, STQC, EMV, PCIDSS, PADSS, Visa, MasterCard, China UnionPay, JCB, AmEx, Discover, RuPay is a registered trademark. All trademarks referenced here are the property of the respective owners.