background image

PUBLIC

19

pm_ymn_security.fm

document release 2.1

last updated 8/11/13

YOMANI

PRODUCT MANUAL

3. Security

Security features are integrated at all levels of the YOMANI design, from the external 

housing to the “system-on-chip” at the heart of the terminal.

Terminal design

The most tangible security feature is the integrated PIN privacy shield, which prevents 

shoulder-surfing while a cardholder is entering a PIN.

To prevent fraudsters from placing overlays, the YOMANI terminal is designed with 

illuminated card slots and a lot of curved surfaces on both the housing and the keypad.

Integrated security ASIC

The ASIC contributes to the high security level of the YOMANI by integrating:

intrusion detection: a number of tamper sources detect any attempted intrusion 

62 Kbytes of integrated secure memory, instantaneously erased if any attempted 
intrusion is detected

strict control of the secure boot process of the terminal, via key management: only 
code that is certified and signed by a known certification authority will run on the 
security processor (MP1)

Key management

The software supports the Derived Unique Key Per Transaction (DUKPT) key 

management scheme, where the working key changes for each transaction. Other 

schemes such as master/session can be developed on request.

Networking

YOMANI supports both the VPN (Virtual Private Network) method and the SSL (Secure 

Socket Layer) protocol. SSL is used mainly to send and receive information securely 

over unsecured networks like the Internet.

Summary of Contents for YOMANI

Page 1: ...PRODUCT MANUAL an atos company YOMANI colourful innovation product picture 4 014 x 3 596...

Page 2: ...y licence or right to use any of Worldline s proprietary material While Worldline has made every attempt to ensure that the information contained in this document is correct Worldline does not provide...

Page 3: ...ivacy shield 9 Secured Application Modules SAMs 9 Communication interfaces YOMANI ML 10 USB device 11 Ethernet 11 RS 232 serial 12 Additional communication interfaces YOMANI XR 13 USB host YOMANI XR 1...

Page 4: ...ce board 30 USB cable USB device to powered USB 12V teal blue 31 Revolving stands third party products 31 Logistics information 33 Product labels 33 Terminal rating plate 33 Terminal MAC address hardw...

Page 5: ...11 13 YOMANI PRODUCT MANUAL Customisation contactless reader 46 Customisation printer and Merchant Unit 46 Maintaining YOMANI terminals 47 Cleaning the equipment 47 Cleaning the card interfaces 48 Ap...

Page 6: ...YOMANI PRODUCT MANUAL iv empty for double sided printing pManual_ymnTOC fm...

Page 7: ...d back view 17 Figure 17 Worldline System on Chip 18 Figure 18 YOMANI contactless reader 21 Figure 19 New left and old right YOMANI antenna design 22 Figure 20 Contactless reader dimensions 22 Figure...

Page 8: ...YOMANI PRODUCT MANUAL vi empty for double sided printing pManual_ymnLOF fm...

Page 9: ...are and hardware also help make the YOMANI a highly secure terminal This is guaranteed by PCI PTS 3 x certification new engine with a faster processor more memory and superior cryptographic functional...

Page 10: ...es and YOMANI accessories detailed terminal specifications security development environment and available accessories logistics information product identification and packaging Installing and maintain...

Page 11: ...es Dimensions and weight Figure 3 Terminal dimensions Without contactless reader or printer a YOMANI terminal measures 107 mm wide x 170 mm long x 103 mm high and weighs 590 g With contactless reader...

Page 12: ...d during alphanumeric entry Alternative keypad layouts may be possible depending on quantity User comfort and accessibility For optimal accessibility the keypad design has been enhanced with the follo...

Page 13: ...e new display offers plenty of scope for usable comfortable applications larger size and better resolution allow for more information on screen The standard font is Droid proportional Additional fonts...

Page 14: ...her As chip cards are becoming the most widely used type of payment card the chip card reader has been put in the most prominent place just behind the display The position of the slot encourages users...

Page 15: ...has a stylish privacy shield integrated in the design The PIN privacy shield complies with the latest international security regulations such as PCI PTS Figure 8 PIN privacy shield Secured Application...

Page 16: ...ing SAMs see Installing SAM card s optional in the YOMANI Owners Manual Communication interfaces YOMANI ML The YOMANI ML model comes with three communications interfaces as standard USB device USB B E...

Page 17: ...e 11 Keyloading via USB device connection The YOMANI ML does not support USB host functionalities you cannot connect USB powered peripherals such as a biometric device a bar code reader or a ticket pr...

Page 18: ...ls such as a bar code reader or a ticket printer The serial interface can only be used for data communication not for powering the terminal The YOMANI serial interface has the following main specifica...

Page 19: ...XR on page 28 for more information USB host YOMANI XR The USB host functionalities available on the YOMANI XR let you connect USB powered peripherals such as a biometrics device a bar code reader or...

Page 20: ...power plug and an output of 5 VDC 700 mA via USB A host socket You can either purchase adaptors locally or have them supplied by Worldline cable Type AWG20 28 USB cable This type of cable is essentia...

Page 21: ...e board or both if anything is plugged in to the USB host socket Exceptionally when you are using a YOMANI XR terminal without a printer or a communications interface board and without anything plugge...

Page 22: ...plications installed Figure 15 Terminal Reset button Stand by function To save energy YOMANI can automatically switch to stand by mode after for example finalizing the transaction This function is sof...

Page 23: ...ing a white outer case and an anthracite grey inner case colours based on Natural Colour System codes 1000 N and 8500 N Other housing colours may be possible depending on quantity The housing uses an...

Page 24: ...l essential features including dual ARM 926EJS processor cores security communication core MP1 application communication core MP2 processor speed up to 350 MHz 64 MB RAM memory 128 MB NAND Flash memor...

Page 25: ...y level of the YOMANI by integrating intrusion detection a number of tamper sources detect any attempted intrusion 62 Kbytes of integrated secure memory instantaneously erased if any attempted intrusi...

Page 26: ...urity fm Security standard compliance The security related functions comply with the following standards ISO 9564 PIN management and security ISO 11568 key management retail ANSI X9 24 financial servi...

Page 27: ...oard XR only revolving stand third party product Contactless reader The YOMANI contactless reader is an elegant ergonomically designed easily accessible module that supports fast fully secure payments...

Page 28: ...and old right YOMANI antenna design The YOMANI terminal and the contactless reader are connected by a flat cable at the bottom of the antenna Contactless reader specifications The contactless reader m...

Page 29: ...ks to the powerful antenna in the terminal the contactless device only has to be held near the landing zone Contactless reader software The YOMANI contactless reader is a non intelligent device To act...

Page 30: ...s not a secure device and should not be used by the cardholder Merchant Unit specifications The Merchant Unit measures 91 mm wide x 228 mm long x 68 mm high Without paper it weighs 309 g The USB host...

Page 31: ...es of text depending on the size of the characters used Figure 22 Merchant Unit display Merchant Unit printer A fast thermal graphic printer is built into the Merchant Unit Features include printing w...

Page 32: ...te grey case the colours are based on Natural Colour System codes 1000 N and 8500 N Other housing colours may be possible depending on quantity Merchant Unit firmware software The Merchant Unit is loa...

Page 33: ...on to the fixation plate Figure 24 Fixation plate dimensions The fixation plate measures 99 mm wide x 155 mm long x 22 mm high and weighs 56 g Swivel To use the YOMANI terminal with or without the op...

Page 34: ...ctions for paper out and overheating Use only Worldline approved paper as using other paper may damage the printing system We can supply high sensitivity thermal paper Jujo AF50KS E3 Mitsubishi thermo...

Page 35: ...d network YOMANI XR must be set up with the same security as installed on the access point for example WEP WPA or WPA2 WiFi is highly flexible and gives wide coverage When several access points are av...

Page 36: ...ad mode from YOMANI to host full roaming service SMS capability send receive up to 160 alphanumeric characters To use your YOMANI XR with a 2G connection you need to order the terminal version with bu...

Page 37: ...retail environments fitting payment terminals on revolving stands often makes them easier to use For examples see the payment mount from SpacePole described in Banksys Payment brochure 1 2 available f...

Page 38: ...YOMANI PRODUCT MANUAL 32 empty for double sided printing pm_ymn_accessories fm...

Page 39: ...umber code128a barcode and human readable text identifies the specific terminal model XR ML and customisations such as housing colour or keypad layout It is used for certification purposes It is not t...

Page 40: ...ue number per terminal used for key loading and terminal parameterisation This number cannot be consulted via software hardware version reference in the example TT001 The hardware version reference co...

Page 41: ...onfiguration It is customer specific production date in the example 1235 The four digit code after the serial number is the production date in the format yyww in the example week 35 of 2012 software l...

Page 42: ...rial number MAC address hardware version reference and safety labels are identical to the information on the terminal labels Contactless reader rating plate Figure 30 Contactless reader rating plate a...

Page 43: ...28a barcode and human readable text is unique for each printer production date in the example 1235 The four digit code after the serial number is the production date in the format yyww in the example...

Page 44: ...9 The four digit code after the serial number is the production date in the format yyww in the example week 49 of 2011 Merchant Unit package The Merchant Unit package box label contains the following...

Page 45: ...r orders and invoices The production date serial number hardware version reference and safety labels are identical to the information on the Merchant Unit rating plate Storage and transport The follow...

Page 46: ...LIC last updated 8 11 13 document release 2 1 pm_ymn_logistics fm Table 1 Product packaging single items equipment w l h mm weight g ML XR without printer 158 x 240 x 140 815 NFC 861 XR with printer 1...

Page 47: ...y Please refer to the order list for ordering quantities Table 2 Palleting individually packed equipment equipment qty per pallet weight kg notes ML XR without printer 300 12 x 25 270 NFC 284 option 2...

Page 48: ...ulk packages may contain individually packed items but these items cannot be ordered individually See order list for details All YOMANI spare parts are supplied in bulk packaging They cannot be ordere...

Page 49: ...al between 90 and 120 cm there is enough space typically 10 cm on all sides around the YOMANI terminal so that it is easy to insert a chip card in the chip card interface swipe a magnetic card with th...

Page 50: ...ays avoid exposing your YOMANI to shocks and vibrations excessive heat and dust explosive environments oil moisture water or condensation direct sunlight or objects that radiate heat environments wher...

Page 51: ...verify Building the YOMANI into a desk or panel is not allowed Other models are available if you need a terminal for unattended semi unattended use except for accessories supplied by Worldline nothing...

Page 52: ...ting on the contactless reader as long as the landing zone icon and LEDs must always be clearly visible payment scheme logos are added below the white line on the area highlighted with stripes in the...

Page 53: ...NI ML disconnect the USB cable this is the power cable from the ePOS equipment PC or USB adaptor if you are using a YOMANI XR and a USB cable disconnect the USB cable if you are using a YOMANI XR with...

Page 54: ...d several times always with the same side of the card magnetic stripe card reader pull the white cleaning card several times through the reader always with the same side of the card Figure 37 Cleaning...

Page 55: ...ially dangerous chemicals and improving communication at every stage in the supply chain European directive 2002 96 EC on Waste Electrical and Electronic Equipment WEEE encouraging collection treatmen...

Page 56: ...ty according to IEC EN 60950 1 2006 and R TTE directive 1999 5 CE EMC specification EN 55022 CISPR 22 EN 55024 EN 50082 1 EN 61000 3 2 and 3 EN 301489 1 and 3 EN 61000 6 1 and 3 EN 302291 1 and 2 Merc...

Reviews: