Derived Unique Key Per Transaction (DUKPT) System

The Derived Unique Key per Transaction system accesses the following commands via the Host port:

·           Generate a Base Derivation Key (*BDK) and encrypt it under LMK pair 28-29 for Host storage.

·           Translate a PIN from *BDK to interchange key encryption.

·           Verify a PIN using the IBM method.

·           Verify a PIN using the Visa PVV method.

·           Verify a PIN using the Diebold method.

·           Verify a PIN using the encrypted PIN method.

·           Translate an encrypted *BDK from *ZMK to LMK.

·           Translate an encrypted *BDK from LMK to *ZMK.

·           Translate a PIN from *BDK to interchange key encryption. (Triple-DES DUKPT)

·           Verify a PIN using the IBM method (Triple-DES DUKPT)

·           Verify a PIN using the Visa PVV method (Triple-DES DUKPT)

·           Verify a PIN using the Diebold method (Triple-DES DUKPT)

·           Verify a PIN using the encrypted PIN method (Triple-DES DUKPT)

·           Generate/Verify a MAC using using a Triple-DES DUKPT PIN Key Derivation