资源描述:
《银行卡个人化流程.doc》由会员上传分享,免费在线阅读,更多相关内容在教育资源-天天文库。
1、PersonalizationWorkflowinEastcomPeace1.1SystemOverview1.2Detailworkflowofpersonalization-TheissuerpreparesthedataforEastcom,thepossibleconnectionisVPNviaasecuretunnel.TheIssuerpushesthedataintotheExternalDataReceivingServerinacertaintimeofaday.-Theencrypteddataisonl
2、ystoredtemporarilyinsidetheExternalDataReceivingServer,itwillbepulledbytheInternaldatahostingserver.-TheencrypteddataretrievedviainternalFTPtoPMPorderimportadminClientbyPullmode(Inthefuture,theencrypteddatafilewillbedecipheredattheInternalDatahostingserverbyit’sHSM,
3、andmakethetransformationintoXOF,thenre-encodedthenecessarydatasectionoftheXOFagainbyEastcomPeaceinternaltransportkeys)-Inthisstage,thetransportKeysoftheencrypteddatafromissuerTKissuerwillbedistributedintotheEracomPL50HSMthatattachedtothePMPservers-Also,theinternalKe
4、ysofEastcomPeaceDKepforthedataattributeswillbegeneratedintheEracomPL50HSMthatattachedtothePMPservers.-TheencrypteddatafilereceivedbythePMPOrderClient,itwillbedecipheredbytheTKissuerinsidetheEracomPL50HSMthatattachedtothePMPserversandimmediatelytransformedtotheXOFfil
5、eformat,alldataattributeswillthenbeparsedandre-encodedbytheinternalkeysDKepandwillbeputinsideoftheXOFfileformat.-ThePMPproductAdministratorwillcreatetheproductforeachspecifictask,theproductcanbeconsideredastheOrderProfile,includingthereferenceofalltheDKepforthedataa
6、ttributes.-Beforeaproductisactuallycreated,alltheVisarelatedKeysandCertificateswillbereadyintheCardInkServersideforeachissuer.-Atthesametime,therelatedapplications,applicationprofilesshouldbeconfiguredattheCardInkServerside.-Also,theKTK,PTK,MTKshouldhavebeengenerate
7、dbytheCardInkServerandbedistributedintothePL50HSMthatassociatedtotheProductviainternalway.-ThePMPOrderAdministratorwillassociatetheProduct(OrderProfile)withtheprocessedXOFfile,thentheXOFfilewillbeimportedintothePMPDatabase,andresidesencoded.Aftertheimportisfinished,
8、itisarequirementtoremoveallthetemporaryfileinthePMPorderimportclient.-TheactualDataPreparationProcesscannowstartatanytime.-ThePMPOrderMana