银行数据安全的加密技术和设备

112323457121234125123DESDESLMKDESRSA71ISO8723ANSIX917ZPKZAKHSM1HSMHSMHOSTSECURITYMODULEHSM73……………………………LMK………………..………..TMKZMKPVKTAKTPKZAKZPK73LMKDES112LMKLMKZMKTMKPVKLMKLMKKEYENCRYPTINGKEYTMKZMKLMKTMKATMPOSTMKATMPOSTMKDATDKEYINGWORKINGKEYTPKTAKZMKZMKZMKZMKDATAKEYWORKINGKEYZPKZAKTPKTAKZPKZAKPVKCVKLMKTPKTMKATMPOSATMPOSZPKZMKTPKTAKZPKZAKDATAKEY11LOCALMASTREKEYLMK50LMKDES112LMKLMKLMKDESLMKLMKLMK33168399LMKEPROMLMKLMKLMKLMK1ZONEMASTERKRYZMKZMKZMKZMKLMK2ZONEPINKEYZPKZMKZPKPINPINZPKLMK3TERMINALMASTERKEYTMKTMKTMKSATMPOSTMKLMK4TERMINALPINKEYTPKTMKTPKLMKTPK5TERMINALAUTHENTICATIONKEYTAKTMKZMKTAKMESSAGEAUTHENTICATIONCODETAKLMK6PINVERIFICATIONKEYPVKPINPERSONIDENTIFICATIONNUMBERPINPINPVKTMKZMKLMK7CARDVERIFICATIONKEYCVKCVK731PCSMPCSM74LocalMasterKeyKeyEncryptingKey(KEK)KeyEncryptingKey(KEK)MasterKeyEncryptingKey(KKM)RSAPublicSecretKeyDataKey(KD)WorkingKeyEncryptingKey(KK)DataKey(KD)LMKPCSMPCSMLMK3IC339PCSMPCSM9LMKLMKKKMKKKEKKDLMKKKMLMKLMKKKKEKKDDC64DC64DataEncryptingKey(KD)KeyEncryptingKey(KK)DC64KDKEKKDKEKKDKDDC64KEKHDKTMKEKDC64DCF64KEKKDDC64KEKDC64DC64DC64KDPINBLOCKPIN412PINBLOCKPINDES161ISODP/9564/1FORMAT0ANSIX98PINP1PnnF12A1A120EXCLUSIVEOR16NP1PnFFExOr2DOCUTEL0000A1A12PINP1PnnXX16NP1PnXX3IBMPINP1PnF16P1PnFF4NCRNCRT1T505NATURALPINP1P5T1T2T3T4T5000000P1P2P3P4P5PLUSNETWORKISO9564FORMAT1PINPINPINBLOCKPINDESRSA1ATMEFTPOS2VISAMASTERCARD3ANSIISO4PIN5MAC6VISACASH7WATCHWORD89IC10RSA11320~2048RACALERACOMHSMRG7000RG7000VISAMASTERCARDHOSTSECURITYMODULEPCPCSECURITYMODULEDATACRYPTORDC64PCCARDSAFEDIALV34PINPINPINCVVPVVMACATMPOS76[TPK]TMK[ZPK]ZMK[TAK]TMK[ZAK]ZMKTMKTMK76PINHSMPINPVKDESANSIX392PINIBM3624PIN1PINNATURALPINPIN77PVK4~6PINDES1616ATMNaturalPINPINCUSTOMERPINNATURALPIN+OFFSET===CUSTOMERPIN2PINNATURALPINHSMPVKCUSTOMERPINOFFSETNATURALPIN=CUSTOMERPINCUSTOMERPINOFFSET732PINHSMPINATMPINPINPINPINPVKPINATMPIN1EncryptedPINPINBLOCKDESTPK/ZPKDESLMKCustomerPINEnteredPIN2IBM3624IBM3624PVKPIN…………PINBLOCK……DES1616NaturalPINCustomerPINoffsetEnteredPINDESTPK/ZPKPINPINPINZPK01PINPINZPK02PINPINATM/POSPINTPKZPKATM/POSPINCVVPVVVISAMASTERCARDDESCVVPVVHSMCVVPVVMACATM/POSHSMISO8730ISO87311ANSIX99DES32MAC64MACMAC1MACMAC710646464KEYDESKEYDES6432816MACMACKEYMACZAKTAKMACKeyKeyKeyCn=2MACMACMAC32MACMACMACHSMPINM1M2DESDESDESC2MACATMC1Mn1246357ATMEFTPOS1234567ATMNETPINHSM1HSMHSMHSM21JPR6BATTERYJUMPERJPR6HSMJPR6FAULT2JPR6SW28OFFHSM30071ON1920081ON3EPROMU24U25EPROMEPROMJPR8U24EPROM28U25EPROM32JPR8357U24U25EPROM28JPR81574DCEDTEJPR5HSMDCEDTEDCEDCEDTE1**1**2**2**3**3**4**4**5**5**6**6**7**7**8**8**9**9**10**10**11**11**12**12**13**13**14**14**15**15**16**16**17**17**18**18**19**19**20**20**DCEDTE5HSMCOLDSTARTCOLDSTARTJPR4JPR4RESETJPR4HSM3HSM115V230V230V025A115V05A4HSM230V025A115V05A5HSMHSMIECHSMHSMHSMHSM6HSMCONSOLED25RS232CASCIIWIN3XWIN95DOSPCPLUSPCPCHSMCONSOLESW22ONSW22OFF192003008711XON/XOFFXON/XOFF7HSMAUXILIARYD25RS232CAUXILIARY960081XON/XOFF8HSMHOSTDRS232CSNASDLCRS232SDLCRS449SNASDLCV35IBMHSMHSMHSMHSM1HSMCCQC2AUXILIARYCAQA3HSMCSHSMQSQUERYSECURITYPIN4OFFPINNOPIN1536SINGLEPINAADESBREPICCARDICGUARDATA4HSMCHEBCDICASCIIIMSCICSHSMQHQUERYHOSTHSM1ONLINEHSMHSMHOSTHSMHSMRESET2OFFLINEHSMLMKHSMHSMOFFLINE3HSMHSMLMKOFFLINECOOFFLINECOLMK********IC********ONLINEA********4LMKHSMLMKHSMHSMHSMHSMLMKHSMHSMARMEDLMK1ICICICICIC2ICHSMICLMK1234HSMLMK3IC3LMKHSMICHSMLMKHSMCOICICHSMLMK3ICLMKLMK2IC5ICHSMCOIC10HSM1223LMK3LMK160~9A~F80~9HSMLMKLMKHSMLMKCHECKVALUE3ICLMKLMKHSMLMK3LMK1LMKLMKHSMGKOFFLINEGKHSMYNHSMHSMHSMLMK123LMKCOMPONENTSET[1-9]1HSMENTERSECRETVALUEAaaaHSMENTERSECRETVALUEBbbbHSMENTERSECRETVALUEC**HSMLMKICINSERTBLANKANDENTERPIN*****HSMLMKICYNDevicewritecompletecheck****Makeanothercopy?[YN]RETURN3LMKLMKLMKLMK2LMKLMKHSMLKOFFLINELKHSMYNHSMHSMICICYNICICYNIC3ICLMK3ICLMK4TMKZMK1TMKTMKKTMKTMKTMKLMKTMKTMKTMKATMPOSTMKONLINEAUTHK1~92122ZMKHSMDZMKZMKZZMKFDLMKZMKTMKZMKZMKZMKLMKOFFLINEAUTHD1~9212163216HSMHSMHSMPINHSMHSM712POSATMHSMHSMHPIBMUNIXDECNCRAMDAHLTANDEMRACALHSMRG3010PINMANBASE24BANKSON/2PINQBASIC6121~255HSMHSM34HSM5HSM6HSMHSMRG700071VISAPVV71HSMHSMmsRG7100EthernetAttachHP9000,IBMR6000,UNIX+20RG7200IBMChannelAttachHDSIBM4381ES9000Unisys11RG7300TandemSDLC(RS449)Attach(244Kbps)TandemCycloneHimalayas+360414RG7400AsyncRS232CAttach(19.2Kbps)DEC,HDS,IBMAS/400,IBMPC,NCRTower,Stratus,UnisysASeries+AsyncorBisync63RG7500SNA/SDLCRS232CAttach(19.2Kbps)AMDAHL,M660,IBM4381,ES9000+SNA/SDLC374563RG7600SNA/SDLCV35Attach(64Kbps)AMDAHL,M660,IBM4381,ES9000+SNA/SDLC375426HSMHSM110PIN9.6KbpsHSM13HSMHSMHSM