ATKS Functions

The HSM supports the following Australian Transaction Key Scheme host commands:

Terminal-to-acquirer requests

·         Transaction request without a PIN. Used to receive a cardholder request message from a terminal with no PIN.

·         Transaction request with PIN (T/AQ key). Used to receive a cardholder request message from a terminal with a PIN encrypted under the T/AQ key.

·         Transaction request with PIN (T/CI key). Used to receive a request from the terminal when the PIN key cannot be determined by the acquirer.

Acquirer-to-terminal responses

·         Transaction response originating at the acquirer. Used when authorization is generated by the acquirer.

·         Transaction response originating at the card issuer. Used when authorization is generated at the card issuer.

Acquirer PIN translation

·         Translate a PIN from encryption under the PEK to encryption under a ZPK.

Acquirer completion

·         Verify completion confirmation message from terminal. Used to verify the MAC on a confirmation message from the terminal.

·         Generate completion response.

Card issuer support

·         Verify a PIN from at the card issuer.

·         IBM.

·         Diebold.

·         Visa.

·         Comparison.

·         Generate authorization at the card issuer.

Binary message authentication

·         Generate a MAC on a binary message.

·         Verify a MAC on a binary message.

The commands RI, RK, RM, RO, RQ, RS and RU are only available when Australian Transaction Key Scheme is selected using the CS (Configure Security) console command.