ACQUIRING EMV CARDS
Accepting magstripe cards is straight forward where you swipe the card, enter amount and press enter. The terminal goes online sends the request and receives the response and prints the receipt. Sometimes you may have to enter PIN for debit or ATM cards. Therefore, there are not too many complicated things.
EMV cards on the other hand are much more compex compared to simple magnetic cards. EMV chip cards are full computers in a micro size and sends additional complex cryptographic signatures like ARQC to which you must reapond with ARPC with an HSM from your host authorization system. There are around 30-40 steps in an EMV card transaction and some of these are interactive and dynamic like checking data integrity using RSA algorithm with SDA or DDA.
Your system should be handle all of this one way or another and more with HSMs using the secret keys and certificates which will be used at POS terminals and in your authorization systems. The capacity and speed of your HSMs are very critical. Your POS and ATM transaction speed will depend on this because new POS terminals and ATMs will usually come with Ethernet or GPRS connections and even slowest Internet or Wireless speed will be plenty fast but the bottleneck will be in HSMs which will need to verify ARQC cryptograms and respond with ARPC as well as encrypting data packets for securing communications.
In order to minimize fraud card holders can be verified by PIN codes instead of signatures with EMV cards. This can be made Offline on the chip or Online like you are currently doing with PIN based magstripe debit cards. When you suupport PIN based cards your system should be able to allow PIN changes when the customer wants to change his PIN time to time. This is made possible with EMV scripting which can also change other data on cards dynamically. You can update almost everything on the card except the secret keys.
Hence, you will be needing a beefed up acquiring system with EMV POS and EMV ATM switches. How deep you want to go depends on you for example you can put an EMV PROXY in front of your existing system and pass through legacy financial authorization and keep using your existing system or you can make the big dive and start changing everything with a modern EMV card management system.
Verisoft can provide you all necessary software and expert consultancy you may need for building EMV transaction processing systems.
Contact: [email protected] for more information about acquiring EMV cards.
www.verisoft.com
Accepting magstripe cards is straight forward where you swipe the card, enter amount and press enter. The terminal goes online sends the request and receives the response and prints the receipt. Sometimes you may have to enter PIN for debit or ATM cards. Therefore, there are not too many complicated things.
EMV cards on the other hand are much more compex compared to simple magnetic cards. EMV chip cards are full computers in a micro size and sends additional complex cryptographic signatures like ARQC to which you must reapond with ARPC with an HSM from your host authorization system. There are around 30-40 steps in an EMV card transaction and some of these are interactive and dynamic like checking data integrity using RSA algorithm with SDA or DDA.
Your system should be handle all of this one way or another and more with HSMs using the secret keys and certificates which will be used at POS terminals and in your authorization systems. The capacity and speed of your HSMs are very critical. Your POS and ATM transaction speed will depend on this because new POS terminals and ATMs will usually come with Ethernet or GPRS connections and even slowest Internet or Wireless speed will be plenty fast but the bottleneck will be in HSMs which will need to verify ARQC cryptograms and respond with ARPC as well as encrypting data packets for securing communications.
In order to minimize fraud card holders can be verified by PIN codes instead of signatures with EMV cards. This can be made Offline on the chip or Online like you are currently doing with PIN based magstripe debit cards. When you suupport PIN based cards your system should be able to allow PIN changes when the customer wants to change his PIN time to time. This is made possible with EMV scripting which can also change other data on cards dynamically. You can update almost everything on the card except the secret keys.
Hence, you will be needing a beefed up acquiring system with EMV POS and EMV ATM switches. How deep you want to go depends on you for example you can put an EMV PROXY in front of your existing system and pass through legacy financial authorization and keep using your existing system or you can make the big dive and start changing everything with a modern EMV card management system.
Verisoft can provide you all necessary software and expert consultancy you may need for building EMV transaction processing systems.
Contact: [email protected] for more information about acquiring EMV cards.
www.verisoft.com