Dear Readers,
EMV Certificate Authority
The Cryptomathic EMV CA is an essential service component for EMV card authentication. The main purpose of the EMV CA is to allow a central authority to issue and manage the certificates of Card Issuers within a given region.
EMV and PKI
EMV card authentication is based on PKI (Public Key Infrastructure) but unlike traditional PKI, which is based on a standard called X.509, EMV is a standard of its own. Even though EMV is a proprietary standard it is widely used across the globe, with billions of EMV smart cards issued since its initial roll-out.
A Complete EMV PKI Solution
EMV CA supports several CAs, which may each have a number of self-signed CA certificates. A CA issues Issuer Personal Key certificates using a specific CA key. A CA can be set up to be compliant with either MasterCard or VISA. The compliance determines which formats are used for data exchange with other systems. EMV CA manages all certificate related tasks:
- Lifecycle management of EMV Issuer CA (scheme issuers’) certificates
- Issue certificates
- Export certificates
- Revoke certificates
- Certification authority CRL (Certificate Revocation List)
- Issuer CRL (Certificate Revocation List)
Scalability
The Authenticator is scalable and is used by customers for managing anywhere from a few hundred users to several million.
The solution is the best 2FA solution for large roll-outs due to its performance and scalability features:
- Fail-over, e.g. back-up or disaster recovery
- Clustering
- Load balancing across servers and HSMs
Flexibility
EMV CA is designed in a flexible client-server structure enabling the payment scheme provider to tailor the system to the specific needs of its organization in-line with e.g. regional and national requirements.
The EMV CA is offered under two distinctive business models:
It can be run on premise at customer site or it can be provided as a managed service by Cryptomathic, where the EMV CA hosted in a secure (logical and physical) data center.
Resources
At the leading edge of security provision within its key markets, Cryptomathic closely supports its global customer base with many multinationals as longstanding clients.
About Ambimat Electronics:
With design experience of close to 4 decades of excellence, world-class talent, and innovative breakthroughs, Ambimat Electronics is a single-stop solution enabler to Leading PSUs, private sector companies, and start-ups to deliver design capabilities and develop manufacturing capabilities in various industries and markets. AmbiIoT design services have helped develop Smartwatches, Smart homes, Medicals, Robotics, Retail, Pubs and brewery, Security.
Ambimat Electronics has come a long way to become one of India’s leading IoT(Internet of things) product designers and manufacturers today. We present below some of our solutions that can be implemented and parameterized according to specific business needs. AmbiPay, AmbiPower, AmbiCon, AmbiSecure, AmbiSense, AmbiAutomation.
To know more about us or what Ambimat does, we invite you to follow us on LinkedIn or visit our website.
References:-
https://www.cryptomathic.com/hubfs/docs/cryptomathic_white_paper-emv_key_management.pdf
