EMV Compliance
BCSS works with the Thales HSM to create ARQC and ARPC cryptograms that comply with the EMV2000 standard. BCSS includes a built-in interface to external key distribution facilities. BCSS supports RSA public/private keys that are used to support EMV2000 for chip cards and mag-stripe cards.
Key Management
A key benefit of BCSS is that it provides complete key management and storage of all the keys required for secure issuing and authorization processes. BCSS and the Thales HSM 8000 work together to facilitate key generation, key exchange, key loading, key storage and key usage. The heart of these key management activities is the storage and use of randomly-generated, encrypted keys by the Thales HSM, and multi-user key creation, in which two or three people each enter separate components that are then combined and encrypted using the Thales HSM.
The issuing application does not need to deal with any of the actual keys since they are securely stored in the BCSS application.
back to overview
|