Magtek MICRSafe, Техническое справочное руководство

Страница: 51 / 79

43
SECTION 6. ENCRYPTION
The UART/RS-232 MagneSafe IntelliHead
TM
Reader is a compact magnetic stripe card reader
that conforms to ISO standards. In addition to reading multiple tracks of data from a card, this
reader also includes MagnePrint technology. The MagnePrint data will be included with the
track data on each transaction. In order to maximize card security, this reader can incorporate
data encryption to protect the card contents and the MagnePrint information. The serial output
will be encrypted before it leaves the encapsulated head.
A separate LED (Light Emitting Diode) indicator provides the operator with continuous status of
the operation of each Reader (MICR and MSR) module incorporated into the MICRSafe device.
When a card is swiped through the Reader, the track data and MagnePrint information may,
depending on how the MICRSafe is configured, be TDEA (Triple Data Encryption Algorithm,
aka, Triple DES) encrypted using DUKPT (Derived Unique Key Per Transaction) key
management. This method of key management uses a base derivation key to encrypt a key serial
number that produces an initial encryption key which is injected into the Reader prior to
deployment. After each transaction, the encryption key is modified per the DUKPT algorithm so
that each transaction uses a unique key. Thus, the data will be encrypted with a different
encryption key for each transaction. The MICRSafe can be similarly configured to encrypt
MICR data from scanned checks. More detailed information about the encryption methods used
by this device can be found in the MagneSafe MSR Technical Manual, P/N 99875433. If the
encryption feature is not set, then the MICRSafe will output data in SureSwipe format. See P/N
99875206 for more information about this non-encrypted output format.