VeriFone V200c, Reference Manual

Page: 37 / 66

F
ILE
A
UTHENTICATION
Introduction to File Authentication
V200
C
R
EFERENCE
G
UIDE
37
Development Process
The Development Process is the same as the Deployment Process except
different cards are ordered and used. Proceed to the Deployment section.
Deployment Process
In this process:
1
The sponsor provides the application file (from the development process) and
the smart card and smart card PIN (from the certificate request process) as
inputs to VeriShield.
2
VeriShield unlocks the smart card with the provided PIN, sends the file to be
signed to the smart cart that will compute the signature with the resident
private key. VeriShield extracts the signature, signer certificate, and sponsor
certificate from the smart card.
3
VeriShield uses the extracted data, along with the application file, to create a
signature file (*.p7s).
4
VeriShield creates files suitable for downloading from the smart card data.
5
The signature file, the application file, and the extracted signer and sponsor
certificates are downloaded into a deployment terminal, where the following
actions occur:
a
When an attempt is made to install an application executable or data file, a
matching signature and certificate must be present.
b
The operating system compares the application file's signature against the
values stored in the application file's calculated signature.
6
Each successfully authenticated application file is installed on the terminal
(otherwise, the application file is deleted on failed authentication and an error
message is displayed.)