|
The ChipModule
certified java EMV kernel for ATM transactions
The initial situation
The integration of chip cards and the EPPs within the banking solutions leads to a higher level of security during banking transactions.
Nevertheless, the communication with the chip of the customer’s card is still complex, especially because of the physical restrictions of the chip card (available memory, available processor), which leads to a machine-level programming (shifting bits, etc.) even in modern software engineering. Contrary to the features of the chip cards and of the EPPs, the task of the application designer and the software developer is to implement the defined business processes functionally and as simply as possible for the application.
The idea
It is reasonable, to encapsulate the functionality provided by the chip cards and the EPPs in software modules, in order to give the application developer an appropriate appliance to implement business process models. This allows the application developer to access the financial technical features of the chip card without dealing with the details. After inserting the card into the card reader, the chip module contacts the chip card. From this time, the features of the customer’s chip are available to the application through the chip module’s interface. The application of the chip module results in the following advantages for the self-service applications:
- Simplier handling of the business processes, which require a chip card
- Standardized chip sequences according to national and international committees
- Simplified acceptance procedure through the use of standardized modules
- Separation of the chip card logic from the application logic
The implementation
Both companies APSS (now SIX Card Solutions Austria) and SBS decided to develop and distribute the chip module together because the implementation of the chip module requires extensive knowledge in both controlling of the self-service terminals and the chip operations.
The chip module itself is subdivided into a core and functional self-contained modules, the so-called plug-ins. The chip module’s core includes the control logic of the functions as well as the control of different devices. In addition, the core includes the so-called "local plug-in", which implements country-specific characteristics (for instance, the difference in generating the encrypted PIN Block in Austria and Germany).
Additional modules are available for different tasks depending on the desired scope of the service. The presently offered modules include the processing of the Austrian pay chip cards and the Austrian electronic purse as well as the processing of EMV transactions with the national adaptations for Austria and Germany.
The chip module itself was developed in Java, however, it can be used in different other systems (for instance .NET) and is available for the operating systems Windows NT 4.0, Windows 2000 and Windows XP.
The application modes
The chip module offers two application modes for controlling the card reader. In active mode, the chip module has the complete control over the card reader, and it implements the entire card handling (insertion, returning, retaining, and updating the magnetic stripe tracks). In passive mode, the self-service application is in charge of reading the magnetic stripe tracks as well as returning and retaining the card.
The chip module connects the customer chip through the chip card reader, and from this time the features of the customer’s chip are available to the application. There are also two application modes for the EPP. In active mode, the chip module is in charge of the keyboard entry as well as the PIN verification; in passive mode, however, the chip module serves as an additional security library.
References
At present, three Austrian bank associations as well as the ATM operating company Europay Austria decided to use of the chip module on their ATMs all over the country. In Germany FIDUCIA IT AG decided to use the chip module to implement their EMV chip card support.
|
|