With the introduction
of A98-Rthe Remote
Re-Key Module,
A98platform
automates both the generation and distribution of
cryptographic keys for ATMs. A98-R
is compatible
with ATMs that use
RSA-enabled encrypting
pin-pads (EPPs).
The A98-R delivers random master keys in full
compliance with ANSI (X9.24 Part 2) standards and with VISA,
MasterCard and all known network
mandates for Triple-DES and
unique keys per
ATM.
The A98-R
implements both
Diebold'sCertificate Based Protocol (CBP)and
NCR'sSignature Based Protocol (SBP). Wincor and other
remote key protocols are under development will be
provided in future releases as they become
publicly available and commercially viable.
The Diebold approach
uses X.509 certificates and PKCS message formats
to transport key data (Certificate
Based Protocol - CBP). NCR's method relies
on digital signatures to ensure data integrity
(Signature Based
Protocol - SBP).
Both processes
require the ATM's EPP to be loaded at the factory
with signed Public Keys or Certificates. In
addition, an A98 public key must be signed by a
Certificate Authority (i.e. Diebold or NCR) and
imported back into the
A98 during system
initialization.
The A98-R implements
Remote Re-Key (public key) technology using the
same non-intrusive philosophy as was used for
conventional (A98-A) single and triple DES symmetric key
technology.
When a new key is needed for a Remote
Re-Key enabled ATM, the host system passes the
re-key request to the A98 and all of the
cryptography is handled within the A98 system.
This approach confines modifications in host
platforms to the ATM device driver and eliminates
any need to change the host security module or
terminal driving application software to
accommodate this new means of automated key
loading.
By integrating the
remote re-key module into the conventional A98
platform, Trusted Security Solutions continues to
lead the industry by providing the most efficient,
compliant, and cost-effective key establishment
solution for all ATMs.
The A98-R system not only
fully automates key distribution for public
key-enabled ATMs, but also simultaneously supports
single and triple-DES key loading for legacy ATMs.
Benefits
Compliant
with VISA and Europay / MasterCard regulations.
Fully compliant
with ANSI
standards and
financial networks
operating rules.
Future proof.
Compliant with the ANS X9.24 standard.
Scalable, configurable and upgradeable.
Interfaces with most of
known and a number of proprietary ATM
Host systems.
Multi ATM Host support.
Multi
institution support.
Easy
installation, operation and maintenance.
Short Return Of Investment .
Features
Automatically creates and distributes ATM master keys
Eliminates
manual on-site key loading
Avoids traditional key
management issues.
Full logging for concise
audit trail.
Secure, fault tolerant
implementation.
Browser-based user
interface.
Incorporated into the existing
A98 platform provides the most efficient and
complete solution for both legacy and remote key ready
ATMs
