PCI SPoC v1.0：软件基PIN入口COTS安全规范详解

SPoC

手机POS

需积分: 10 149 浏览量更新于2024-07-16 收藏 1.02MB PDF 举报

身份认证购VIP最低享 7 折!

领优惠券(最高得80元）

《SPoC_Security__Requirements_v1.0.pdf》是Payment Card Industry（PCI）针对软件基础的PIN输入在移动支付终端（COTS）上的安全要求规范版本1.0，发布于2018年1月。这份文档由PCI Security Standards Council（PCISSC）制定并保留所有权利，旨在确保在移动支付场景下，尤其是在使用手机POS系统时，PIN验证过程的安全性得到强化。该文档的主要目标是为手机POS系统的开发者、运营商、集成商和安全专业人员提供明确的指导，确保在软件环境下处理敏感支付信息时遵循严格的保护措施。文档的受众包括但不限于金融机构、技术供应商和任何涉及移动支付安全的组织。文档内容涵盖了多个核心模块，如： 1. **保护敏感服务**：强调了对涉及PIN输入的服务进行保护的重要性，确保未经授权的访问不会导致卡片信息泄露或欺诈交易。 2. **随机数生成**：规定必须使用安全的随机数生成机制，以增强密码和密钥的复杂性和不可预测性。 3. **可接受的加密**：详细列出了加密算法的标准，要求使用强加密来保护数据传输和存储，防止中间人攻击和数据泄漏。 4. **关键管理**：涉及到密钥的生命周期管理，包括生成、存储、分发和撤销，以确保密钥的安全性。 5. **安全软件开发实践**：倡导采用安全编码标准和最佳实践，如代码审查、漏洞管理以及定期更新，以降低潜在的安全风险。背景部分介绍了随着移动支付的普及，软件基础PIN输入方式取代传统硬件设备，带来了新的安全挑战。因此，这份规范旨在平衡技术创新与安全性，确保消费者数据的隐私和支付交易的可信度。整个文档结构清晰，定义了范围和目标，为实现软件基础PIN输入的安全解决方案提供了详尽的指导。它不仅是PCI合规性的必要文档，也是任何希望进入或改进手机POS市场的企业在设计和实施安全策略时的重要参考。遵循这些要求，可以帮助企业在移动支付领域建立信任，满足法规要求，并抵御不断增长的网络威胁。

资源详情

资源推荐

PCI Software-based PIN Entry on COTS Security Requirements, v1.0 Page 12

Other Industry Security References

FIPS PUB 197 (or “FIPS 197”)

Federal Information Processing Standards Publication 197 ADVANCED ENCRYPTION STANDARD

(AES)

ISECOM

Institute for Security and Open Methodologies

ISSEA SSE-CMM

International Systems Security Engineering Association Systems Security Engineering Capability Maturity

Model

ISO 11568

Financial Services, Key Management

ISO 13491

Financial Services, Secure Cryptographic Devices

ISO 16609

Banking Requirements for message authentication using symmetric techniques

ISO 9564-2

Financial services -- Personal Identification Number (PIN) management and security -- Part 2: Approved

algorithms for PIN encipherment

ISO 9564-1

Financial services -- Personal Identification Number (PIN) management and security -- Part 1: Basic

principles and requirements for PINs in card-based systems

ISO/IEC 11770

Information technology -- Security techniques -- Key management

ISO/IEC 18031

Information technology -- Security techniques -- Random bit generation

ISO/IEC 18033-3

Information technology – Security techniques – Encryption algorithms – Part 3: Block ciphers

ISO/IEC 21827

Federal Information Processing Standard, Advanced Encryption Standard

MITRE’s Common Vulnerabilities

and Exposures list

MITRE Common Vulnerabilities and Exposures database

NIST SP 800-38B

National Institute of Standards and Technology, Special Report on Recommendation for Block Cipher

Modes of Operation: the CMAC Mode for Authentication

NIST SP 800-52

National Institute of Standards and Technology, Special Report on Guidelines for the Selection,

Configuration, and Use of Transport Layer Security (TLS) Implementations

NIST SP 800-57

National Institute of Standards and Technology, Special Report on Recommendation for Key

Management, Part 1: General (Revision 3)

NIST SP 800-22

National Institute of Standards and Technology, Special Report on A Statistical Test Suite for Random

and Pseudorandom Number Generators for Cryptographic Applications

PCI Software-based PIN Entry on COTS Security Requirements, v1.0 Page 14

Scope of Requirements

These security requirements apply to the individual components and processes that make up the production Software-based PIN CVM Solution,

referred to as "The Solution,” that allows a cardholder to enter their PIN into a COTS device for authorization of contact or contactless EMV card

payment transactions. For the purposes of these requirements, a COTS device is defined as a mobile device (e.g., smartphone or tablet).

Software-based PIN entry (online or offline PIN) is only permitted for contact and contactless EMV chip transactions processed online. Offline

payment transactions are prohibited, e.g., EMV offline transaction authorization or batch authorizations.

Overview

Background

In traditional merchant payment PIN entry scenarios, cardholder authentication data—e.g., a PIN—is entered into a device specifically designed

for the protection of PIN data—e.g., a PIN entry device (PED). The payment industry recognizes PEDs that have been independently tested and

comply with detailed security requirements developed by PCI to ensure the confidentiality, integrity and availability of the PIN data. Traditional

PEDs rely on hardware protections as the primary mechanisms to ensure the security of PIN data within the device. Merchants use traditional PEDs

to support cardholder PIN acceptance.

In recent years, there has been a substantial increase in mobile payments. Mobile payment acceptance enables the processing of payment

transactions, e.g., using a smartphone or tablet, that performs the functions of an electronic point-of-sale terminal. Software-based PIN entry

solutions allow for the processing of mobile payment-acceptance transactions with a cardholder’s PIN.

Software-based cardholder authentication provides an alternative for chip and PIN markets by providing a software application interface on a

merchant’s COTS device to capture and process a cardholder’s PIN. These solutions rely on a combination of mechanisms and security controls

including but not limited to device hardware, application software and independent management and oversight of the entire process to ensure the

security of the transaction and PIN data.

The following figure highlights the security model differences (and reliance on controls) between a traditional PED implementation (hardware PIN)

and a software-based PIN entry solution (software PIN) for the protection of PIN data.

PCI Software-based PIN Entry on COTS Security Requirements, v1.0 Page 15

Security Model – Traditional Hardware PIN Entry vs. Software-based PIN Entry

In a hardware PIN entry security model, the protection of the PIN is

primarily the responsibility of the specialized PED hardware and software

(including the firmware). Some hardware-based solutions may utilize back-

end systems to supplement their security posture; however, traditional

hardware PIN entry devices have all protections within the device itself.

Detection mechanisms that identify when security controls are not in an

approved state operate within the PED, and the response for the hardware

security model is to disable the PED from processing PIN-based

transactions and to clear all sensitive data from the device. All PIN security

protections are performed within the PED itself.

In a software-based PIN entry security model, the device where the PIN

is entered and initially protected remains an important component. In

addition, mechanisms that support attestation (to ensure the security

mechanisms are intact and operational), detection (to notify

when anomalies are present) and response (controls to alert and take

action), play an equally significant role in the overall software-based PIN

entry solution security model. Furthermore, having the device connected

online provides opportunities to extend these capabilities to back-end

monitoring systems.

There are, however, individual components of a software solution where

there is limited control—for example, the underlying mobile device

hardware platform and operating system. Given that these are COTS

devices, there is an assumption that these components (e.g., COTS

operating system, configuration of hardware components of a phone, etc.)

are unknown or untrusted.

It must be assumed that an attacker has full access to the software that

executes on any unknown or untrusted platform (where that “software”

may be a binary executable, interpreted bytecode, etc., as it is loaded onto

the platform). Therefore, it is considered important for the software to

provide inherent protections that complicate reverse engineering and

tampering of the code execution flow. This may include, but is not limited

to, protections using “obfuscation” of the code, internal integrity checks for

code and processing flows and encryption of code segments, etc.

Figure 1: Hardware- and Software-based PIN Entry

PCI Software-based PIN Entry on COTS Security Requirements, v1.0 Page 16

Software-based PIN entry architecture relies upon the following components that combine to provide for protection, attestation, detection and

response controls:

1. An SCRP device that supports The Solution. The SCRP is SRED-enabled and connected to the COTS device. The SCRP provides:

a. Protection of cardholder data sourced from the payment instrument

b. Decryption of encrypted PIN data received from the PIN CVM Application

c. Translation of PIN data into required PIN-block format (This would only apply to online PIN verification processing.)

d. Re-encryption of PIN data

2. A PIN CVM Application that resides on the COTS device and:

a. Provides a secure user interface for PIN entry

b. Performs initial encryption of the PIN

c. Passes attestation health-check data about the SCRP, COTS platform and PIN CVM Application to the monitoring environment

d. Contains software protection mechanisms to maintain its own integrity against attack

e. Delivers the encrypted PIN to the SCRP to be decrypted/re-encrypted in order for it to be passed to the back-end monitoring and

attestation systems

3. A commercial off-the-shelf (COTS) device that is operated by the merchant to run the PIN CVM Application as well as the SCRP. The COTS

may have a Trusted Execution Environment (TEE) built in but it is not a requirement.

4. A set of back-end systems that perform functions for the PIN CVM Solution such as:

• Attestation

Processes attestation health-check data from the PIN CVM Application and enforces pre-established security policies

• Monitoring

Monitors and provisions security controls to detect, alert and mitigate suspected or actual threats and attacks against the SCRP,

PIN CVM Application and the COTS device

• Processing

Processing environment that receives encrypted cardholder and PIN data (for online PIN) from the SCRP

剩余101页未读，继续阅读

百里灬登风

粉丝: 0
资源: 6

PCI SPoC v1.0：软件基PIN入口COTS安全规范详解

WEB安全编程技术规范(V1.0).pdf

安全需求检查要素1.0.xlsx

cc语言安全编程规范v1.0.doc

\theoremstyle

spoc 《计算机网络》结课考试

HIT计算机网络spoc

混态教学模式和SPOC课有什么区别

spoc绘制朝鲜国旗

基于spoc的高职扩招计算机课程教学 研究报告撰写

非常领先的分布式数据库Oceanbase OBCP 3.0培训教材

GCN海面目标检测.zip

算法模板，最科学的刷题方式，最快速的刷题路径，你值得拥有~.zip

全球与中国绿色螯合剂市场现状及未来发展趋势（2024版）.docx

中秋主题动态网页，学习css动画与js动画技术

Avatar_Utils-1.2.2-py3-none-any.whl.zip

2024-2030全球与中国企业计费解决方案市场现状及未来发展趋势 Sample-lv.pdf

Avatar_Utils-1.3.5-py3-none-any.whl.zip

Avatar_Utils-1.8.5-py3-none-any.whl.zip

AwesomeTkinter-2021.4.1-py3-none-any.whl.zip

新增立项名单！国家自然科学基金申报资料大全2.0(全新整理)

最新资源

基于spoc的高职扩招计算机课程教学研究报告撰写