PCI Sireletsehile Software Standard
Bukana ea MosebelisiNets Denmark A/S:
PCI-Sireletsehile Software Standard
Software Vendor Kemplementation Guide
bakeng sa terminal ea Viking 1.02.0
Phetolelo ea 1.2
Selelekela le Bophara
1.1 Selelekela
Sepheo sa Tataiso ena ea Ts'ebetso ea Barekisi ba Software e Sireletsehileng ea PCI ke ho fa bankakarolo tataiso e hlakileng le e phethahetseng mabapi le ts'ebetsong e bolokehileng, tlhophiso le ts'ebetso ea software ea Viking. Tataiso e laela Bahoebi hore na ba ka kenya ts'ebeliso ea Nets' Viking joang tikolohong ea bona ka mokhoa o lumellanang le PCI Secure Software Standard. Leha ho le joalo, ha e reretsoe ho ba tataiso e felletseng ea ho instola. Ts'ebeliso ea Viking, haeba e kentsoe ho latela litataiso tse ngotsoeng mona, e lokela ho thusa, le ho ts'ehetsa ho latela melao ea PCI ea mohoebi.
1.2 Software Security Framework (SSF)
PCI Software Security Framework (SSF) ke pokello ea litekanyetso le mananeo a moralo o sireletsehileng le nts'etsopele ea software ea kopo ea tefo. SSF e nkela sebaka sa Payment Application Data Security Standard (PA-DSS) ka litlhokahalo tsa sejoale-joale tse tšehetsang mefuta e mengata ea lisoftware tsa ho lefa, mahlale le mekhoa ea ntlafatso. E fa barekisi litekanyetso tsa ts'ireletso joalo ka PCI Secure Software Standard bakeng sa ho nts'etsapele le ho boloka software ea ho lefa e le hore e sireletse litšebelisano tsa tefo le data, e fokotse bofokoli, 'me e sireletse khahlanong le litlhaselo.
1.3 Tataiso ea Phethahatso ea Barekisi ba Software – Kabo le Lintlafatso
Tataiso ena ea Ts'ebetso ea Morekisi e Sireletsehileng ea Software ea PCI e lokela ho romelloa ho basebelisi bohle ba amehang ba likopo ho kenyeletsoa le barekisi. E lokela ho ntlafatsoa bonyane selemo le selemo le ka mor'a liphetoho tsa software. Selemo le selemo review le ho nchafatsa ho lokela ho kenyelletsa liphetoho tse ncha tsa software hammoho le liphetoho ho Secure Software Standard.
Nete e phatlalatsa lintlha tse thathamisitsoeng website haeba ho na le lintlafatso ho tataiso ea ts'ebetsong.
Websebaka: https://support.nets.eu/
Bakeng sa Example: Nets PCI-Secure Software Standard Implementation Guided Guide tla abeloa bareki bohle, barekisi, le bahokahanyi. Bareki, Barekisi, le Bahokahanyi ba tla tsebisoa ho tsoa ho reviews le liapdeite. Lintlafatso tsa Tataiso ea Ts'ebetso ea Barekisi ba Software ea PCI-Secure Software Standard li ka fumanoa ka ho ikopanya le Nets ka kotloloho, hape.
Tataiso ena ea Ts'ebetso ea Morekisi e Sireletsehileng ea Software ea PCI e bua ka bobeli ho PCI-Secure Software Standard le litlhoko tsa PCI. Liphetolelo tse latelang li ile tsa boleloa tataisong ena.
- PCI-Secure-Software-Standard-v1_1
Secure Tefo Kopo
2.1 Tšebeliso ea S/W
Likopo tsa tefo ea Viking ha li sebelise software efe kapa efe ea kantle kapa lisebelisoa tseo e seng tsa ts'ebeliso e kentsoeng ea Viking. Likarolo tsohle tsa S/W tsa kopo ea tefo ea Viking li saennoe ka mokhoa oa dijithale le lisebelisoa tsa ho saena tsa Tetra tse fanoeng ke Ingenico.
- Theminal e hokahana le Moamoheli oa Nets ka TCP/IP, ebang ke ka Ethernet, GPRS, Wi-Fi, kapa ka PC-LAN e tsamaisang sesebelisoa sa POS. Hape, terminal e ka buisana le moamoheli ka mohala ka khokahanyo ea Wi-Fi kapa GPRS.
Li-terminals tsa Viking li laola puisano eohle li sebelisa karolo ea Ingenico link layer. Karolo ena ke sesebelisoa se kentsoeng ho terminal. The Link Layer e ka khona ho laola likhokahano tse 'maloa ka nako e le' ngoe e sebelisa li-peripherals tse fapaneng (modem le serial port bakeng sa ex.ample).
Hona joale e tšehetsa li-protocol tse latelang:
- 'Mele: RS232, modem ea ka hare, modem ea kantle (ka RS232), USB, Ethernet, Wi-Fi, Bluetooth, GSM, GPRS, 3G le 4G.
- Khokahanyo ea Lintlha: SDLC, PPP.
- Marang-rang: IP.
- Lipalangoang: TCP.
Terminal e lula e nka bohato ba ho theha puisano e lebisitsoeng ho Nets Host. Ha ho na seva sa TCP/IP S/W setsing sa ho qetela, 'me terminal S/W ha ho mohla e arabang mehala e kenang.
Ha e kopantsoe le ts'ebeliso ea POS ho PC, terminal e ka hlophisoa ho buisana ka PC-LAN e sebelisang sesebelisoa sa POS ka RS232, USB, kapa Bluetooth. Leha ho le joalo, ts'ebetso eohle ea ts'ebeliso ea tefo e ntse e sebetsa ho terminal S/W.
Protocol ea kopo (le encryption e sebelisitsoeng) e pepenene ebile e ikemetse ho mofuta oa puisano.
2.1.1 Payment Host puisano TCP/IP parameter setup
2.1.2 puisano ea ECR
- Setšoantšo sa RS232
- Khokahano ea USB
- TCP/IP parameter setup, e tsejoang hape e le ECR over IP
- Likhetho tsa puisano tsa Host / ECR ho Viking Payment Application
Mofuta oa Host COMM Mofuta oa Terminal Ethernet SeIf4000, Move3500, Desk3500, La n e3000 BT iOS Link2500, Link2500i BT Android Move3500, Link2500, Link2500i ka ECR SeIf4000, Move3500, Link2500, Link2500i, Desk3500,
Lane3000GPRS Tsamaea3500 'Lekanya Move3500, Link2500 Mofuta oa ECR COMM Mofuta oa Terminal IP Ethernet SeIf4000, Move3500, Desk3500, Lane3000 BT iOS Link2500, Link2500i BT Android Move3500, Link2500, Link2500i USB SeIf4000, Move3500, Link2500, Link2500i, Desk3500, Lane3000 RS232 SeIf4000, Desk3500, Lane3000 GPRS Tsamaea3500 IP Thato Move3500, Link2500 - Tlhophiso ea liparamente tsa Nets Cloud ECR (Connect Cloud).
Aterese ea IP ea ECR 212.226.157.243 Puisano TCP-IP PORT 6001
2.1.3 Puisano ho amohela baeti ka ECR
Aterese ea IP ea moamoheli | 91.102.24142 |
Puisano TCP-IP PORT (NORWAY) | 9670 |
Tlhokomeliso: Sheba "2.1.1- Payment Host communication TCP/IP parameter setup" bakeng sa likou tse khethehileng tsa naha tsa TCP/IP.
2.2 Lisebelisoa tsa theminale tse tšehelitsoeng
Sesebelisoa sa tefo ea Viking se tšehetsoa ho mefuta e fapaneng ea PTS (ts'ireletso ea transaction PIN) lisebelisoa tse netefalitsoeng tsa Ingenico.
Lethathamo la lisebelisoa tsa terminal hammoho le nomoro ea bona ea tumello ea PTS li fanoe ka tlase.
Mefuta ea Tetra Terminal
Theminale hardware | Phetolelo ea PTS | Nomoro ea tumello ea PTS | PTS Hardware Version | Phetolelo ea Firmware ea PTS |
Tsela ea 3000 | 5.x | 4-30310 | LAN30AN LAN30BA LAN30BN LAN30CA LAN30DA LAN30EA LAN30EN LAN30FA LAN30FN LAN30GA LAN30HA LAN30AA | 820547v01.xx
820561v01.xx |
Desk 3500 | 5.x | 4-20321 | DES32BB DES32BC DES32CB DES32DB DES32DC DES35AB DES35BB DES35BC DES35CB DES35DB DES35DC DES32AB | 820376v01.xx 820376v02.xx 820549v01.xx 820555v01.xx 820556v01.xx 820565v01.xx 820547v01.xx |
Tsamaisa 3500 | 5.x | 4-20320 | MOV35AC MOV35AQ MOV35BB MOV35BC MOV35BQ MOV35CB MOV35CC MOV35CQ MOV35DB MOV35DC MOV35DQ MOV35EB MOV35FB MOV35JB Tlhaloso: MOV35AB |
820376v01.xx 820376v02.xx 820547v01.xx 820549v01.xx 820555v01.xx 820556v01.xx 820565v01.xx 820547v01.xx 820565v01.xx |
Link2500 | 4.x | 4-30230 | LIN25BA LIN25BB LIN25CA LIN25DA LIN25DB LIN25EA LIN25FA | 820555v01.xx 820556v01.xx 820547v01.xx |
LIN25FB LIN25GA LIN25HA LIN25HB LIN25IA LIN25JA LIN25JB LIN25KA LIN25LA LIN25MA LIN25NA LIN25AA | ||||
Link2500 | 5.x | 4-30326 | LIN25BA LIN25BB LIN25CA LIN25DA LIN25DB LIN25EA LIN25FA LIN25FB LIN25GA LIN25HA LIN25HB LIN25IA LIN25JA LIN25JB LIN25KA LIN25LA LIN25MA LIN25NA LIN25NA 25BB | 820547v01.xx |
Self4000 | 5.x | 4-30393 | SEL40BA | 820547v01.xx |
2.3 Maano a Tšireletso
Kopo ea tefo ea Viking e latela melaoana eohle ea ts'ireletso e boletsoeng ke Ingenico. Bakeng sa tlhaiso-leseling e akaretsang, ana ke likhokahano tsa maano a ts'ireletso bakeng sa liteishene tse fapaneng tsa Tetra:
Mofuta oa Terminal | Tokomane ea Leano la Tšireletso |
Link2500 (v4) | Link/2500 PCI PTS Security Policy (pcisecuritystandards.org) |
Link2500 (v5) | Leano la Tšireletso la PCI PTS (pcisecuritystandards.org) |
Desk3500 | https://listings.pcisecuritystandards.org/ptsdocs/4-20321ICO-OPE-04972-EN- V12_PCI_PTS_Security_Policy_Desk_3200_Desk_3500-1650663092.33407.pdf |
Tsamaea3500 | https://listings.pcisecuritystandards.org/ptsdocs/4-20320ICO-OPE-04848-EN- V11_PCI_PTS_Security_Policy_Move_3500-1647635765.37606.pdf |
Lane3000 | https://listings.pcisecuritystandards.org/ptsdocs/4-30310SP_ICO-OPE-04818-EN- V16_PCI_PTS_Security_Policy_Lane_3000-1648830172.34526.pdf |
Self4000 | Self/4000 PCI PTS Security Policy (pcisecuritystandards.org) |
Sireletsehile Remote Software Update
3.1 Tšebeliso ea Mohoebi
Nets e fana ka lintlafatso tsa kopo ea tefo ea Viking ka mokhoa o sireletsehileng hole. Lintlafatso tsena li etsahala ka mokhoa o ts'oanang oa puisano le litšebelisano tse sireletsehileng tsa tefo, 'me mohoebi ha a hlokehe ho etsa liphetoho leha e le life tseleng ena ea puisano bakeng sa ho latela melao.
Bakeng sa tlhaiso-leseling e akaretsang, barekisi ba lokela ho theha leano le amohelehang la tšebeliso bakeng sa theknoloji ea bohlokoa e shebaneng le basebetsi, ho latela litataiso tse ka tlase bakeng sa VPN, kapa likhokahano tse ling tsa lebelo le holimo, lintlafatso li amoheloa ka firewall kapa firewall ea motho ka mong.
3.2 Leano le Amohelehang la Tšebeliso
Mohoebi o lokela ho theha maano a ts'ebeliso bakeng sa mahlale a bohlokoa a shebaneng le basebetsi, joalo ka modem le lisebelisoa tse se nang mohala. Melao ena ea tšebeliso e lokela ho kenyelletsa:
- Tumello e hlakileng ea taolo bakeng sa tšebeliso.
- Netefatso bakeng sa tshebediso.
- Lenane la lisebelisoa tsohle le basebetsi ba nang le phihlello.
- Ho ngolla lisebelisoa ka mong'a tsona.
- Lintlha tsa ho ikopanya le sepheo.
- Tšebeliso e amohelehang ea theknoloji.
- Libaka tse amohelehang tsa marang-rang bakeng sa theknoloji.
- Lethathamo la lihlahisoa tse lumelletsoeng ke khamphani.
- Ho lumella ho sebelisoa ha modem bakeng sa barekisi feela ha ho hlokahala le ho koala ka mor'a tšebeliso.
- Thibelo ea ho boloka data ea mong'a karete mecheng ea litaba ea lehae ha e hokahantsoe u le hole.
3.3 Sebapali sa Motho ka mong
Likhokahano leha e le life tsa "kamehla" tse tsoang khomphuteng ho ea ho VPN kapa khokahanyo e 'ngoe ea lebelo le phahameng li lokela ho sireletsoa ka ho sebelisa sehlahisoa sa hau sa firewall. Li-firewall li hlophisoa ke mokhatlo hore li finyelle litekanyetso tse khethehileng 'me li se ke tsa fetoloa ke mosebetsi.
3.4 Mekhoa ea ntlafatso ea Remote
Ho na le mekhoa e 'meli ea ho etsa hore terminal e ikopanye le setsi sa software sa Nets bakeng sa lintlafatso:
- Ekaba ka bowena ka khetho ea menu ho terminal ( swipe karete ea morekisi, khetha menu 8 "Software", 1 "Fetch software"), kapa Host e qalile.
- Ho sebelisa mokhoa o qalileng oa Host; terminal e fumana taelo ho tsoa ho Host ka mor'a hore e etse khoebo ea lichelete. Taelo e bolella terminal hore e ikopanye le setsi sa software sa Nets ho sheba lintlafatso.
Kamora ntlafatso e atlehileng ea software, terminal e nang le printa e hahelletsoeng ka hare e tla hatisa rasiti e nang le tlhaiso-leseling ea mofuta o mocha.
Bahokahanyi ba litheminale, balekane le/kapa sehlopha sa tšehetso sa tekheniki sa Nets se tla ba le boikarabello ba ho tsebisa barekisi ka ntlafatso, ho kenyeletsoa sehokelo sa tataiso e ntlafalitsoeng ea ts'ebetsong le lintlha tsa tokollo.
Ntle le ho fumana ka mor'a ntlafatso ea software, ts'ebeliso ea tefo ea Viking e ka netefatsoa hape ka Terminal Info ka ho tobetsa konopo ea 'F3' ho terminal.
Tlhako e Sireletsehileng ea Boitsebiso bo Bohloko le Tšireletso ea Boitsebiso bo Bolokiloeng ba Mong'a Karete
4.1 Tšebeliso ea Mohoebi
Ts'ebeliso ea tefo ea Viking ha e boloke data efe kapa efe ea matla a khoheli, boleng ba netefatso ea karete kapa likhoutu, li-PIN kapa data block block, cryptographic key material, kapa cryptograms ho tsoa liphetolelong tsa eona tse fetileng.
Ho latela PCI, mohoebi o tlameha ho ba le leano la ho boloka data le hlalosang hore na data ea mong'a karete e tla bolokoa nako e kae. Kopo ea tefo ea Viking e boloka data ea mong'a karete le / kapa datha ea netefatso e hlokolosi ea thekiso ea ho qetela mme haeba ho na le litšebelisano tsa tumello tse sa sebetseng kapa tse chechisitsoeng ha u ntse u latela melao ea PCI-Secure Software Standard ka nako e le 'ngoe, ka hona e ka lokoloha. leano la ho boloka lintlha tsa mohoebi oa karete.
4.2 Sireletsa Litaelo tsa ho Hlakola
The terminal ha e boloke data e hlokolosi ea netefatso; track2 e felletseng, CVC, CVV kapa PIN, eseng pele kapa kamora tumello; ntle le bakeng sa ditransekshene tse Deferred Authorization moo data ea netefatso e encrypted (full track2 data) e bolokwa ho fihlela tumello e phethilwe. Tumello ea poso data e hlakotsoe ka mokhoa o sireletsehileng.
Mohlala ofe kapa ofe oa data e thibetsoeng e teng setsing sa polokelo ea lintho e tla hlakoloa ka mokhoa o sireletsehileng ha sesebelisoa sa tefo sa Viking se ntlafatsoa. Ho hlakoloa ha data e thibetsoeng ea nalane le data eo e leng leano la ho bolokoa nakong e fetileng ho tla itlhahisa.
4.3 Libaka tsa Boitsebiso bo Bolotsoeng ba Mong'a Karete
Lintlha tsa mong'a karete li bolokiloe ho Flash DFS (Data File System) ea terminal. Lintlha ha li fumanehe ka kotloloho ke mohoebi.
Lebenkele la Boitsebiso (file, tafole, joalo-joalo) | Lintlha tsa Lintlha tsa Mong'a karete li bolokiloe (PAN, ho felloa ke nako, likarolo life kapa life tsa SAD) |
Kamoo polokelo ea data e sirelelitsoeng kateng (mohlalaample, encryption, taolo ea phihlello, khutsufatso, joalo-joalo) |
File: tlolo | PAN, Letsatsi la ho Felloa ke Nako, Khoutu ea Ts'ebeletso | PAN: Encrypted 3DES-DUKPT (112 bits) |
File: storefwd.rsd | PAN, Letsatsi la ho Felloa ke Nako, Khoutu ea Ts'ebeletso | PAN: Encrypted 3DES-DUKPT (112 bits) |
File: transoff.rsd | PAN, Letsatsi la ho Felloa ke Nako, Khoutu ea Ts'ebeletso | PAN: Encrypted 3DES-DUKPT (112 bits) |
File: transorr.rsd | PAN e felisitsoeng | E fokolitsoe (Ba 6 ba Pele, ba 4 ba ho Qetela) |
File: offlrep.dat | PAN e felisitsoeng | E fokolitsoe (Ba 6 ba Pele, ba 4 ba ho Qetela) |
File: defauth.rsd | PAN, Letsatsi la ho Felloa ke Nako, Khoutu ea Ts'ebeletso | PAN: Encrypted 3DES-DUKPT (112 bits) |
File: defauth.rsd | Lintlha tse felletseng tsa track2 | Lintlha tse felletseng tsa Track2: E kentsoeng pele ho 3DES-DUKPT (112 bits) |
4.4 Teko ea Tumello e Khaotsoeng
Tumello e chechiselitsoeng morao e etsahala ha mohoebi a sa khone ho qeta tumello ka nako ea khoebo le mong'a karete ka lebaka la khokahanyo, mathata a tsamaiso, kapa meeli e meng, ebe hamorao o tlatsa tumello ha a khona ho etsa joalo.
Seo se bolela hore tumello e chechisitsoeng e etsahala ha tumello ea inthanete e etsoa ka mor'a hore karete e se e fumanehe. Ha tumello ea marang-rang ea li-transaction tsa tumello e chechisetsoang morao e lieha, litšebelisano li tla bolokoa ho terminal ho fihlela thekiso e lumelloa ka katleho hamorao ha marang-rang a fumaneha. Litšebelisano li bolokoa ebe li romelloa hamorao ho moamoheli, joalo ka ha litšebelisano tsa Offline li bolokoa ho tloha kajeno ts'ebelisong ea tefo ea Viking.
Mohoebi a ka qala transaction e le 'Deferred Authorization' ho tsoa ho Electronic Cash Register (ECR) kapa ka menu ea terminal.
Lits'ebetso tsa Deferred Authorization li ka fetisetsoa ho moamoheli oa Nets ke mohoebi a sebelisa likhetho tse ka tlase:
- ECR - Taelo ea Tsamaiso - Romella kantle ho naha (0x3138)
- Terminal - Merchant -> 2 EOT -> 2 e rometsoe ho moamoheli
4.5 Mekhoa ea ho rarolla mathata
Ts'ehetso ea Net e ke ke ea kopa netefatso e hlokolosi kapa data ea mong'a karete molemong oa ho rarolla mathata. Ts'ebeliso ea tefo ea Viking ha e khone ho bokella kapa ho rarolla lintlha tsa bohlokoa maemong afe kapa afe.
4.6 Libaka tsa PAN - E bonts'itsoe kapa e hatisitsoe
PAN e Mabisitsoeng:
- Lirisiti tsa Transaction ea Chelete:
PAN e Masked e lula e hatisoa ho rasiti ea transaction bakeng sa mong'a karete le mohoebi. PAN e patiloeng maemong a mangata e na le * moo linomoro tsa pele tse 6 le linomoro tse 4 tsa ho qetela li ngotsoeng ka mokhoa o hlakileng. - Tlaleho ea lenane la transaction:
Tlaleho ea lenane la lipalangoang e bontša mesebetsi e entsoeng ka nako e itseng. Lintlha tsa transaction li kenyelletsa Masked PAN, lebitso la mofani oa karete le chelete ea thekiso. - Resiti ea ho qetela ea moreki:
Kopi ea rasiti ea ho qetela ea bareki e ka hlahisoa ho tsoa ho menu ea likopi tsa terminal. Receipt ea moreki e na le PAN e sirelelitsoeng e le rasiti ea mantlha ea bareki. Mosebetsi o fanoeng o sebelisoa haeba terminal e hloleha ho hlahisa moreki
rasiti nakong ya kgwebisano ka lebaka lefe kapa lefe.
PAN e Encrypted:
• Rasiti ea tšebetso ntle le inthanete:
Mofuta oa resiti ea morekisi oa transaction offline o kenyelletsa lintlha tse patiloeng tsa Triple DES 112-bit DUKPT (PAN, Letsatsi la ho felloa ke nako le Khoutu ea Ts'ebeletso).
BAX: 71448400-714484
12/08/2022 10:39
Visa
E sa kopane
************ 3439-0
107A47458AE773F3A84DF977
553E3D93FFFF9876543210E0
15F3
Thuso: A0000000031010
TVR: 0000000000
Lethathamo la lintlha: 123461
Ref.: 000004 000000 KC3
Tlhaloso: Y1
Nako: 782
THEKANG
NOK 12,00
KAMOHELO
MOEKETSI KOPI
Netefatso:
Ts'ebeliso ea tefo ea Viking e lula e pata data ea mong'a karete ka mokhoa o ikhethileng bakeng sa polokelo ea transaction ntle le marang-rang, phetiso e lebang ho moamoheli oa NETS le ho hatisa lintlha tsa karete tse patiloeng ho rasiti ea morekisi bakeng sa transaction e sa sebetseng.
Hape, ho hlahisa kapa ho hatisa karete ea PAN, ts'ebeliso ea tefo ea Viking e lula e pata linomoro tsa PAN ka asterisk '*' ka linomoro tsa Pele tse 6 + tsa ho qetela tse 4 ka mokhoa o hlakileng joalo ka kamehla. Foromo ea khatiso ea nomoro ea karete e laoloa ke sistimi ea taolo ea terminal moo mokhoa oa khatiso o ka fetoloang ka ho kopa mocha o nepahetseng le ka ho hlahisa tlhoko e molaong ea khoebo, leha ho le joalo bakeng sa kopo ea tefo ea Viking, ha ho na nyeoe e joalo.
Example bakeng sa PAN e ikopantseng:
PAN: 957852181428133823-2
Bonyane lintlha: **************3823-2
Lintlha tse ka holimo: 957852 ******** 3823-2
4.7 Potlakisa files
Kopo ea tefo ea Viking ha e fane ka molaetsa ofe kapa ofe o fapaneng files.
Likopo tsa kopo ea tefo ea Viking bakeng sa likenyelletso tsa beng ba karete ka litlatsetso tsa ponts'o tseo e leng karolo ea sistimi ea melaetsa ka har'a kopo e saennoeng ea tefo ea Viking.
Litlhahiso tsa ponts'o bakeng sa PIN, chelete, joalo-joalo li bonts'oa ho theminale, 'me ho emetsoe ho kenya li-card. Lintlha tse fumanoeng ho tsoa ho mong'a karete ha li bolokoe.
4.8 Tsamaiso ea mantlha
Bakeng sa mefuta ea Tetra ea mefuta ea litheminale, ts'ebetso eohle ea ts'ireletso e etsoa sebakeng se sireletsehileng sa sesebelisoa sa PTS se sirelelitsoeng ts'ebelisong ea tefo.
Encryption e etsoa ka har'a sebaka se sireletsehileng ha ho hlakoloa ha data e patiloeng ho ka etsoa feela ke lits'ebetso tsa Nets Host. Phapanyetsano eohle ea bohlokoa lipakeng tsa Nets host, Key/Inject tool (bakeng sa liteishene tsa Tetra) le PED li etsoa ka mokhoa o patiloeng.
Mekhoa ea Tsamaiso ea Bohlokoa e sebelisoa ke Linete ho latela morero oa DUKPT o sebelisang encryption ea 3DES.
Linotlolo tsohle le likarolo tsa bohlokoa tse sebelisoang ke li-terminals tsa Nets li hlahisoa ka mekhoa e amohetsoeng e sa sebetseng kapa ea pseudorandom. Linotlolo le likarolo tsa bohlokoa tse sebelisoang ke li-terminals tsa Nets li hlahisoa ke sistimi ea tsamaiso ea linotlolo ea Nets, e sebelisang li-HSM tsa thebe ea Thales Pay ho hlahisa linotlolo tsa cryptographic.
Tsamaiso ea bohlokoa e ikemetse ka ts'ebetso ea tefo. Ho kenya ts'ebeliso e ncha ka hona ha ho hloke phetoho ho ts'ebetso ea senotlolo. Sebaka sa senotlolo sa terminal se tla ts'ehetsa litšebelisano tse ka bang 2,097,152.
Ha sebaka sa senotlolo se felile, terminal ea Viking e emisa ho sebetsa mme e bonts'a molaetsa oa phoso, ebe terminal e tlameha ho nkeloa sebaka.
4.9 '24 HR' Qala hape
Li-terminals tsohle tsa Viking ke PCI-PTS 4.x le ka holimo, ka hona ho latela tlhokahalo ea hore PCI-PTS 4.x e qale bocha bonyane hang ka mor'a lihora tse ling le tse ling tse 24 ho hlakola RAM le ho sireletsa terminal HW hore e se ke ea sebelisoa ho fumana tefo. data ea karete.
Molemo o mong oa potoloho ea '24hr' ke hore ho lutla ha memori ho tla fokotsoa 'me ho be le tšusumetso e fokolang ho morekisi (eseng hore re lokela ho amohela litaba tsa ho lutla mohopolong.
Morekisi a ka beha nako ea ho qala bocha ho tloha ho khetho ea Menu ho ea ho 'Reboot Time'. Nako ea ho qala bocha e behiloe ho latela oache ea '24hr' 'me e tla nka sebopeho sa HH:MM.
Mochini oa Reset o etselitsoe ho netefatsa hore terminal e seta botjha nako e le 'ngoe ka lihora tse 24 tse sebetsang. Ho phethahatsa tlhokahalo ena ho hlalositsoe nako, e bitsoang "reset interval" e emetsoeng ke Temin le Tmax. Nako ena e emela nako ea nako eo ho tsosolosa ho lumelloang. Ho ipapisitse le nyeoe ea khoebo, "nako ea ho seta bocha" e etsoa nakong ea mohato oa ho kenya terminal. Ka moralo, nako ena e ke ke ea e-ba khutšoanyane ho feta metsotso e 30. Nakong ena, reset e etsahala letsatsi le leng le le leng metsotso e 5 pejana (ho T3) joalo ka ha ho hlalositsoe ke setšoantšo se ka tlase:
4.10 Ho ngolisoa ka bokhooa
Whitelisting ke mokhoa oa ho etsa qeto ea hore li-PAN tse thathamisitsoeng e le lenane la bokhooa li lumelletsoe ho hlahisoa ka mongolo o hlakileng. Viking e sebelisa likarolo tse 3 bakeng sa ho khetholla li-PAN tse ngolisitsoeng ka bosoeu tse baloang ho tsoa ho litlhophiso tse jarollotsoeng ho sistimi ea taolo ea terminal.
Ha 'Flakha ea Boikoetliso' ho moamoheli oa Nets e setetsoe ho Y, tlhahisoleseling ho tsoa ho Nets Host kapa sistimi ea taolo ea Theminale e jarollwa ho theminale, ha theminale e qala. Folakha ena ea Melao e sebelisoa ho khetholla li-PAN tse ngolisitsoeng ka molao tse baloang pokellong ea data.
Folakha ea 'Track2ECR' e etsa qeto ea hore na data ea Track2 e lumelletsoe ho tšoaroa (e rometsoe/e amohetsoe) ke ECR bakeng sa mofani ea itseng. Ho ipapisitsoe le boleng ba folakha ena, ho khethoa hore na data ea track2 e lokela ho bontšoa ka mokhoa oa lehae ho ECR.
'Sebaka sa sebopeho sa khatiso' se etsa qeto ea hore na PAN e tla hlahisoa joang. Likarete tse maemong a PCI kaofela li tla ba le fomete ea khatiso e behiloeng ho bonts'a PAN ka mokhoa o khutsufalitsoeng / o koahetsoeng.
Netefatso le Litaolo tsa Phihlello
5.1 Taolo ea Phihlello
Kopo ea tefo ea Viking ha e na li-account tsa mosebelisi kapa li-password tse tsamaellanang, ka hona, ts'ebeliso ea tefo ea Viking ha e lokolohe tlhokahalong ena.
- Setupo se kopaneng sa ECR:
Ha ho khonehe ho fumana mefuta ea transaction joalo ka Puseletso, Deposit le Reversal ho tsoa ho li-terminal menu ho etsa hore lits'ebetso tsena li sireletsehe hore li se sebelisoe hampe. Ena ke mefuta ea transaction moo chelete e kenang ho tsoa akhaonteng ea morekisi ho ea akhaonteng ea mong'a karete. Ke boikarabello ba mohoebi ho netefatsa hore ECR e sebelisoa feela ke basebelisi ba lumelletsoeng. - Setulo se ikemetseng:
Taolo ea phihlello ea karete ea barekisi e lumelletsoe ho fihlella mefuta ea lipalangoang joalo ka Puseletso, Deposit le Phetoho ho tsoa ho li-terminal menu ho etsa hore lits'ebetso tsena li sireletsehe hore li se sebelisoe hampe.
Terminal ea Viking e hlophisitsoe ka mokhoa oa kamehla ho boloka likhetho tsa menyetla, ho thibela phihlello e sa lumelloeng. Mekhahlelo ea ho lokisa ts'ireletso ea menu e oela tlas'a Menu ea Merchant (e fumanehang ka karete ea Mohoebi) -> Parameters -> Tšireletso.
Sireletsa menu - Hlophisa ho 'E' ka ho sa feleng.
Konopo ea menu ho terminal e sirelelitsoe ho sebelisoa Protect menu configuration. Menu e ka fumanwa feela ke Mohoebi ka ho sebedisa karete ya morekisi.
Sireletsa phetoho - Hlophisa ho 'E' ka ho sa feleng.
Phetoho ea khoebo e ka etsoa feela ke morekisi ea sebelisang karete ea morekisi ho fihlella lenane la phetohelo.
Sireletsa poelano - Hlophisa ho 'E' ka ho sa feleng
Option for Reconciliation e ka finyelloa feela ke mohoebi ea nang le karete ea morekisi ha tšireletso ena e behiloe ho 'nete.
Sireletsa Shortcut – Hlophisa ho 'E' ka kamehla
Shortcut menu e nang le likhetho tsa viewing Info Terminal Info le khetho ea ho apdeita liparamente tsa Bluetooth li tla fumaneha ho morekisi ha feela karete ea morekisi e swietsoe.
5.2 Litaolo tsa Password
Ts'ebeliso ea tefo ea Viking ha e na li-account tsa mosebelisi kapa li-password tse lumellanang; ka hona, ts'ebeliso ea Viking e lokolotsoe tlhokahalong ena.
Ho rema lifate
6.1 Tšebeliso ea Mohoebi
Hajoale, bakeng sa ts'ebeliso ea tefo ea Nets Viking, ha ho na mosebelisi oa ho qetela, litlhophiso tsa log tse ka lokisoang tsa PCI.
6.2 Hlophisa Litlhophiso tsa Log
Ts'ebeliso ea tefo ea Viking ha e na liakhaonto tsa mosebelisi, ka hona, ho rema lifate tse lumellanang le PCI ha ho sebetse. Le ha ho rengoa ka mokhoa o hlakileng ka ho fetesisa, ts'ebeliso ea tefo ea Viking ha e kenye data efe kapa efe e hlakileng ea netefatso kapa data ea mong'a karete.
6.3 Ho rema lifate ka Bohareng
The terminal e na le mochine o tloaelehileng oa log. Mochini o boetse o kenyelletsa ho rengoa ha meaho le ho hlakoloa ha S/W e ka phethisoang.
Mesebetsi ea ho khoasolla ea S/W e kentsoe 'me e ka fetisetsoa ho Host ka mokhoa oa khetho ea menu ho terminal kapa ka kopo ea moamoheli ea tšoailoeng sephethephetheng se tloaelehileng sa transaction. Haeba ts'ebetso ea ho khoasolla ea S/W e hloleha ka lebaka la mesaeno e fosahetseng ea dijithale ho tse amohetsoeng files, ketsahalo eo e kenngoa 'me e fetisetsoa ho Host ka ho toba le hang-hang.
6.3.1 E nolofaletsa trace Ho rengoa ha marang-rang
Ho bulela trace regging:
- Swaepa karete ea Morekisi.
- Ebe ho menu khetha "9 System menu".
- Ebe u ea ho menu "2 System Log".
- Ngola khoutu ea setsebi, eo u ka e fumanang ka ho letsetsa tšehetso ea Net Merchant Service.
- Khetha "8 Parameters".
- Ebe o lumella "Logging" ho "E".
6.3.2 Romella trace Logs ho moamoheli
Ho romela trace logs:
- Tobetsa konopo ea Menu ho theminale ebe o Swipe Merchant card.
- Ebe ho menu e kholo khetha "7 Operator menu".
- Ebe u khetha "5 Send Trace Logs" ho romella marang-rang ho amohela.
6.3.3 Remote trace regging
Paramethara e behiloe ho Nets Host (PSP) e tla nolofalletsa/ho tima ts'ebetso ea ho rema lifate tsa Terminal u le hole. Nets Host e tla romela Trace e nolofalletsa / thibela parameter ea ho rema lifate ho Terminal in Data e behiloeng hammoho le nako e reriloeng ha Terminal e tla kenya li-log tsa Trace. Ha terminal e amohela paramethara ea Trace joalo ka ha e nolofalitsoe, e tla qala ho ts'oara lits'oants'o tsa Trace mme ka nako e reriloeng e tla kenya lits'oants'o tsohle tsa trace ebe e tima ts'ebetso ea ho rema lifate ka mor'a moo.
6.3.4 Ho rekota ka phoso ka remoutu
Li-log tsa liphoso li lula li le teng ho terminal. Joalo ka ho rema lifate, paramethara e behiloe ho Nets Host e tla nolofalletsa / tima ts'ebetso ea ho rema liphoso tsa Terminal u le hole. Nets Host e tla romela Trace thusa / tima parameter ea ho rema lifate ho Terminal in Data e behiloeng hammoho le nako e reriloeng ha Terminal e tla kenya li-log tsa liphoso. Ha terminal e amohela phoso ea ho rema lifate ka mokhoa o nolofalitsoeng, e ne e tla qala ho hapa li-log tsa liphoso 'me ka nako e reriloeng e tla kenya lits'oants'o tsohle tsa liphoso ebe e tima ts'ebetso ea ho rema lifate ka mor'a moo.
Li-Network tsa Wireless
7.1 Tšebeliso ea Mohoebi
Seteishene sa tefo sa Viking - MOVE 3500 le Link2500 li na le bokhoni ba ho hokahana le marang-rang a Wi-Fi. Ka hona, hore Wireless e kenngoe ts'ebetsong ka mokhoa o sireletsehileng, ho lokela ho nahanoa ka hloko ha o kenya le ho lokisa marang-rang a marang-rang joalokaha ho hlalositsoe ka tlase.
7.2 Litlhophiso tsa Wireless tse khothalelitsoeng
Ho na le lintlha le mehato e mengata eo u lokelang ho e nka ha u lokisa marang-rang a se nang mohala a hokahaneng le marang-rang a ka hare.
Bonyane, litlhophiso le litlhophiso tse latelang li tlameha ho ba teng:
- Marang-rang ohle a se nang mohala a tlameha ho aroloa ho sebelisoa firewall; haeba likhokahano lipakeng tsa marang-rang a se nang mohala le tikoloho ea data ea mong'a karete li hlokahala, phihlello e tlameha ho laoloa le ho sireletsoa ke firewall.
- Fetola SSID ea kamehla 'me u tima khaso ea SSID
- Fetola li-passwords tsa kamehla bakeng sa likhokahano tse se nang mohala le libaka tsa phihlello tse se nang mohala, sena se kenyelletsa phihlello ea khokahano le likhoele tsa sechaba sa SNMP.
- Fetola litlhophiso life kapa life tse ling tsa ts'ireletso tse fanoeng kapa tse behiloeng ke morekisi
- Netefatsa hore libaka tsa ho kena ka waelese li nchafalitsoe ho firmware ea morao-rao
- Sebelisa feela WPA kapa WPA2 ka linotlolo tse matla, WEP e thibetsoe 'me ha ea lokela ho sebelisoa
- Fetola linotlolo tsa WPA/WPA2 ha ho kengoa hammoho le khafetsa le neng kapa neng ha motho ea nang le tsebo ea linotlolo a tloha k'hamphaning.
Karohano ea Marang-rang
8.1 Tšebeliso ea Mohoebi
Ts'ebeliso ea tefo ea Viking ha se ts'ebeliso ea tefo e thehiloeng ho seva mme e lula setulong. Ka lebaka lena, kopo ea tefo ha e hloke phetoho leha e le efe ho finyella tlhokahalo ena.
Bakeng sa tsebo e akaretsang ea morekisi, lintlha tsa karete ea mokoloto li ke ke tsa bolokoa litsing tse hokahaneng le Marang-rang. Bakeng sa mohlalaample, web li-server le li-server tsa database ha lia lokela ho kengoa ho seva se le seng. Sebaka sa demilitarized zone (DMZ) se tlameha ho hlophisoa ho arola marang-rang e le hore ke mechini feela e fumanehang ho DMZ e fumanehang Marang-rang.
Remote Access
9.1 Tšebeliso ea Mohoebi
Sesebelisoa sa ho lefa Viking ha se fumanehe u le hole. Tšehetso ea remoutu e etsahala feela pakeng tsa mosebeletsi oa ts'ehetso ea Nets le mohoebi ka mohala kapa ka Nets ka kotloloho sebakeng sa mohoebi.
Phetiso ea data e Bohlokoa
10.1 Phetiso ea data e Bohlokoa
Ts'ebeliso ea tefo ea Viking e boloka data ea bohlokoa le / kapa data ea mong'a karete ka ho sebelisa encryption ea boemo ba molaetsa e sebelisa 3DES-DUKPT (112 bits) bakeng sa phetisetso eohle (ho kenyeletsoa le marang-rang a sechaba). Ts'ireletso ea Ts'ireletso bakeng sa likhokahano tsa IP ho tloha ts'ebelisong ea Viking ho Moamoheli ha e hlokehe kaha encryption ea boemo ba molaetsa e sebelisoa ho sebelisoa 3DES-DUKPT (112-bits) joalo ka ha ho hlalositsoe kaholimo. Sekema sena sa encryption se tiisa hore le haeba litšebelisano li amohetsoe, li ke ke tsa fetoloa kapa tsa senyeha ka tsela efe kapa efe haeba 3DES-DUKPT (112-bits) e ntse e nkuoa e le encryption e matla. Joalo ka leano la taolo ea senotlolo sa DUKPT, senotlolo sa 3DES se sebelisitsoeng se ikhethile ho ts'ebetso ka 'ngoe.
10.2 Ho arolelana data ea Sensitive ho software e 'ngoe
Ts'ebeliso ea tefo ea Viking ha e fane ka li-interface (s)/APIs tse hlakileng ho thusa ho arolelana data ea akhaonto e hlakileng ka kotloloho le software e ngoe. Ha ho data ea bohlokoa kapa data ea ak'haonte e hlakileng e arolelanoang le software e 'ngoe ka li-API tse pepesitsoeng.
10.3 Imeile le data e hlokolosi
Kopo ea tefo ea Viking ha e tšehetse ho romelloa ha lengolo-tsoibila.
10.4 Phihlello ea Tsamaiso e Seng ea Console
Viking ha e tšehetse phihlello ea tsamaiso eo e seng ea Console.
Leha ho le joalo, bakeng sa tsebo e akaretsang ea morekisi, phihlello ea tsamaiso eo e seng ea Console e tlameha ho sebelisa SSH, VPN, kapa TLS bakeng sa encryption ea phihlello ea tsamaiso e seng ea kholiso ho li-server tikolohong ea data ea mong'a karete. Telnet kapa mekhoa e meng e sa ngolisoang ka lekunutu ha ea tlameha ho sebelisoa.
Viking Versioning Methodology
Mokhoa oa ho fetolela oa Nets o na le likarolo tse tharo tsa nomoro ea mofuta oa S/W: a.bb.c
moo 'a' e tla eketsoa ha liphetoho tse nang le tšusumetso e phahameng li etsoa ho latela PCI-Secure Software Standard.
a - mofuta o moholo (nomoro e le 1)
'bb' e tla eketsoa ha liphetoho tse reriloeng tse fokolang li etsoa ho latela PCI-Secure Software Standard.
bb - mofuta o monyane (lintlha tse 2)
'c' e tla eketsoa ha liphetoho tse nang le tšusumetso e tlase li etsoa ho latela PCI-Secure Software Standard.
c - mofuta o monyane (nomoro e le 1)
Nomoro ea mofuta oa S/W ea ts'ebeliso ea tefo ea Viking e bonts'oa joalo skrineng sa terminal ha terminal e tsamaisoa: 'abbc'
- Ntlafatso e tsoang ho mohlala, 1.00.0 ho isa ho 2.00.0 ke ntlafatso ea bohlokoa ea ts'ebetso. E ka kenyelletsa liphetoho tse amang ts'ireletso kapa litlhoko tsa PCI Secure Software Standard.
- Ntlafatso e tsoang ho mohlala, 1.00.0 ho isa ho 1.01.0 ke ts'ebetso e sa reng letho. E kanna ea se kenyeletse liphetoho tse amang ts'ireletso kapa litlhoko tsa PCI Secure Software Standard.
- Ntlafatso e tsoang ho mohlala, 1.00.0 ho isa ho 1.00.1 ke ts'ebetso e sa reng letho. E kanna ea se kenyeletse liphetoho tse amang ts'ireletso kapa litlhoko tsa PCI Secure Software Standard.
Liphetoho tsohle li emeloa ka tatellano ea linomoro.
Litaelo mabapi le ho kenya Lipache le Lintlafatso tse Sireletsehileng.
Linete li fana ka lintlafatso tsa lits'ebetso tsa ho lefa ka mokhoa o sireletsehileng. Lintlafatso tsena li etsahala ka mokhoa o ts'oanang oa puisano le litšebelisano tse sireletsehileng tsa tefo, 'me mohoebi ha a hlokehe ho etsa liphetoho leha e le life tseleng ena ea puisano bakeng sa ho latela melao.
Ha ho na le patch, Nets e tla ntlafatsa mofuta oa patch ho Nets Host. Morekisi o ne a tla fumana li-patches ka kopo ea ho jarolla S/W e ikemetseng, kapa mohoebi a ka boela a qala ho jarolla software ho tsoa ho menu ea terminal.
Bakeng sa tlhaiso-leseling e akaretsang, barekisi ba lokela ho theha leano le amohelehang la tšebeliso bakeng sa mahlale a bohlokoa a shebaneng le basebetsi, ho latela litataiso tse ka tlase bakeng sa VPN kapa likhokahano tse ling tsa lebelo le holimo, lintlafatso li amoheloa ka firewall kapa firewall ea basebetsi.
The Nets host e fumaneha ka marang-rang ka ho sebelisa mokhoa o sireletsehileng kapa ka marang-rang a koetsoeng. Ka marang-rang a koetsoeng, mofani oa marang-rang o na le khokahanyo e tobileng ho tikoloho ea rona e amohelehang e fanoang ke mofani oa bona oa marang-rang. Li-terminals li tsamaisoa ka litšebeletso tsa tsamaiso ea Net terminal. Ts'ebeletso ea taolo ea terminal e hlalosa mohlalaample sebaka seo theminale e leng ho sona le mohoeletsi ea ntseng a sebelisoa. Tsamaiso ea terminal e boetse e ikarabella bakeng sa ho ntlafatsa software ea terminal hole le marang-rang. Linete li netefatsa hore software e kentsoeng setsing sa marang-rang e phethetse litifikeiti tse hlokahalang.
Nets e khothaletsa lintlha tsa tlhahlobo ho bareki bohle ba eona ho netefatsa litefo tse bolokehileng joalo ka ha li thathamisitsoe ka tlase:
- Boloka lethathamo la liteishene tsohle tsa tefo ea ts'ebetso 'me u nke linepe ho tsoa maemong ohle e le hore u tsebe hore na li tlameha ho shebahala joang.
- Sheba matšoao a hlakileng a tamptse kang litiiso tse robehileng holim'a lipoleiti kapa li-screw, odd kapa li-cabling tse fapaneng kapa sesebelisoa se secha sa hardware seo u sa se tsebeng.
- Sireletsa li-terminals tsa hau hore li se fihle ho bareki ha li sa sebelisoe. Lekola liteminale tsa hau tsa ho patala letsatsi le letsatsi le lisebelisoa tse ling tse ka balang likarete tsa ho patala.
- U tlameha ho sheba boitsebahatso ba basebetsi ba tokiso haeba u lebelletse tokiso efe kapa efe ea litefo.
- Letsetsa li-Nets kapa banka ea hau hang-hang haeba u belaela hore ho na le ketsahalo e sa bonahaleng.
- Haeba u lumela hore sesebelisoa sa hau sa POS se kotsing ea bosholu, ho na le li-cradles tsa lits'ebeletso le lithapo tse sireletsehileng le lisebelisoa tse ka rekoang khoebong. Ho ka ba molemo ho nahana ka tšebeliso ea bona.
Lintlafatso tsa Phallo ea Viking
Software ea Viking e lokolloa ka mekhahlelo e latelang ea tokollo (ho latela liphetoho):
- Litokomane tse 2 tse kholo ka selemo
- Litokomane tse 2 tse nyane ka selemo
- Lisebelisoa tsa software, ha li hlokahala, (mohlala, ka lebaka la bothata bofe kapa bofe bo tebileng ba bothata). Haeba tokollo e sebetsa tšimong 'me ho tlalehoa mathata a mang, joale software e nang le tokiso e lebelletsoe ho lokolloa nakong ea khoeli e le 'ngoe.
Bahoebi ba ne ba tla tsebisoa ka litokollo (tse kholo / tse nyane / patch) ka li-imeile tse tla romelloa ka kotloloho ho liaterese tsa bona tsa lengolo-tsoibila. E-mail e tla boela e be le lintlha tse kholo tsa lintlha tsa tokollo le tokollo.
Bahoebi le bona ba ka fumana lintlha tsa tokollo tse tla beoa ho: Lintlha tsa tokollo ea software (nets.eu)
Litokollo tsa Viking Software li tekenoa ho sebelisoa sesebelisoa sa ho bina sa Ingenico bakeng sa liteishene tsa Tetra. Ke software e saenneng feela e ka kengoang ho terminal.
Litlhoko tse sa sebetseng
Karolo ena e na le lethathamo la litlhoko ho PCI-Sireletsehile Software Standard e hlahlobiloeng e le 'Nonaapplicable' ho kopo ea tefo ea Viking le mabaka a sena.
PCI Secure Software Standard CO | Ketsahalo | Mabaka a ho ba 'Ha a sebetse' |
5.3 | Mekhoa ea netefatso (ho kenyeletsoa le lintlha tsa nako) e matla ka ho lekaneng ho sireletsa mangolo a netefatso hore a se ke a qhekelloa, a qhekelloa, a lutluoe, a hakanyetsoe kapa a khelosoa. | Kopo ea tefo ea Viking e sebetsa ho sesebelisoa sa PTS POI se amohelehang sa PCI. Kopo ea tefo ea Viking ha e fane ka phihlello ea lehae, e seng ea khomphutha kapa e hole, kapa boemo ba litokelo, ka hona ha ho na lintlha tsa netefatso sesebelisoa sa PTS POI. Ts'ebeliso ea tefo ea Viking ha e fane ka litlhophiso tsa ho laola kapa ho hlahisa li-ID tsa mosebelisi ebile ha e fane ka phihlello efe kapa efe ea lehae, e seng ea console kapa e hole ea thepa ea bohlokoa (esita le molemong oa ho lokisa liphoso). |
5.4 | Ka ho sa feleng, phihlello eohle ea thepa ea bohlokoa e fumaneha feela ho li-account le lits'ebeletso tse hlokang phihlello e joalo. | Kopo ea tefo ea Viking e sebetsa ho sesebelisoa sa PTS POI se amohelehang sa PCI. Ts'ebeliso ea tefo ea Viking ha e fane ka litlhophiso tsa ho laola kapa ho hlahisa li-account kapa lits'ebeletso. |
7.3 | Linomoro tsohle tse sa reroang tse sebelisoang ke software li hlahisoa ho sebelisoa feela li-algorithms kapa lilaeborari tse lumelletsoeng tsa tlhahiso ea linomoro (RNG). Li-algorithms kapa lilaebrari tse amohetsoeng tsa RNG ke tse fihlelang maemo a indasteri bakeng sa ho se tsebe hantle (mohlala, Phatlalatso e Khethehileng ea NIST 800-22). |
Ts'ebeliso ea tefo ea Viking ha e sebelise RNG efe kapa efe (jenereithara ea linomoro tse sa reroang) bakeng sa mesebetsi ea eona ea encryption. Ts'ebeliso ea tefo ea Viking ha e hlahise kapa hona ho sebelisa linomoro tse sa reroang bakeng sa mesebetsi ea cryptographic. |
7.4 | Litekanyetso tse sa reroang li na le entropy e fihlelang litlhoko tse tlase tse sebetsang tsa li-cryptographic primitives le linotlolo tse itšetlehileng ka tsona. | Ts'ebeliso ea tefo ea Viking ha e sebelise RNG efe kapa efe (jenereithara ea linomoro tse sa reroang) bakeng sa mesebetsi ea eona ea encryption. Ts'ebeliso ea tefo ea Viking ha e hlahise kapa hona ho sebelisa linomoro tse sa reroang bakeng sa mesebetsi ea cryptographic. |
8.1 | Maiteko ohle a phihlello le ts'ebeliso ea matlotlo a bohlokoa a lateloa 'me a ka fumanoa ho motho ea ikhethileng. | Kopo ea tefo ea Viking e sebetsa ho lisebelisoa tsa PCI tse amohetsoeng tsa PTS POI, moo ts'ebetso eohle ea bohlokoa ea thepa e etsahalang, 'me firmware ea PTS POI e netefatsa lekunutu le botšepehi ba data e hlokolosi ha e ntse e bolokiloe ka har'a sesebelisoa sa PTS POI. Lekunutu la ts'ebetso ea ts'ebetso ea Viking, botšepehi le botsitso li sirelelitsoe mme li fanoa ke firmware ea PTS POI. Firmware ea PTS POI e thibela phihlello efe kapa efe ea thepa ea bohlokoa kantle ho terminal mme e itšetleha ka anti-t.amplikarolo tsa ering. Kopo ea tefo ea Viking ha e fane ka phihlello ea lehae, e seng console kapa e hole, kapa maemo a litokelo, ka hona ha ho na motho kapa lits'ebetso tse ling tse nang le phihlello ea thepa ea bohlokoa, ke kopo ea tefo ea Viking feela e khonang ho sebetsana le thepa ea bohlokoa. |
8.2 | Mesebetsi eohle e nkuoa ka lintlha tse lekaneng le tse hlokahalang ho hlalosa ka nepo hore na ke mesebetsi efe e khethehileng e entsoeng, e entsoe ke mang, nako eo e e entseng, le hore na ke matlotlo afe a bohlokoa a ileng a ameha. | Kopo ea tefo ea Viking e sebetsa ho lisebelisoa tsa PCI tse lumelletsoeng tsa PTS POI. Kopo ea tefo ea Viking ha e fane ka phihlello ea lehae, e seng ea console kapa e hole, kapa maemo a litokelo, ka hona ha ho na motho kapa litsamaiso tse ling tse nang le phihlello ea thepa ea bohlokoa, ke kopo ea tefo ea Viking feela e khonang ho sebetsana le thepa ea bohlokoa. • Kopo ea tefo ea Viking ha e fane ka mekhoa ea ts'ebetso ea litokelo. • Ha ho na ditshebetso ho tima encryption ya data hlokolosi • Ha ho na mesebetsi bakeng sa decryption ya data hlokolosi • Ha ho na mesebetsi ea ho romela data ea bohlokoa ho litsamaiso tse ling kapa lits'ebetso • Ha ho na dikarolo tsa netefatso tse tshehetswang Ditaolo tsa tshireletso le tshebetso ya tshireletso e ke ke ya tima kapa ya hlakolwa. |
8.3 | Software e tšehetsa ho bolokoa ho sireletsehileng ha lintlha tse qaqileng mosebetsi litlaleho. |
Kopo ea tefo ea Viking e sebetsa ho lisebelisoa tsa PCI tse lumelletsoeng tsa PTS POI. Kopo ea tefo ea Viking ha e fane ka phihlello ea lehae, e seng ea console kapa e hole, kapa maemo a litokelo, ka hona ha ho na motho kapa litsamaiso tse ling tse nang le phihlello ea thepa ea bohlokoa, ke kopo ea tefo ea Viking feela e khonang ho sebetsana le thepa ea bohlokoa. • Kopo ea tefo ea Viking ha e fane ka mekhoa ea ts'ebetso ea litokelo. • Ha ho na ditshebetso ho tima encryption ya data hlokolosi • Ha ho na mesebetsi bakeng sa decryption ya data hlokolosi • Ha ho na mesebetsi ea ho romela data ea bohlokoa ho litsamaiso tse ling kapa lits'ebetso • Ha ho na dikarolo tsa netefatso tse tshehetswang Ditaolo tsa tshireletso le tshebetso ya tshireletso e ke ke ya tima kapa ya hlakolwa. |
8.4 | Software e sebetsana le mefokolo mekhoeng ea ho latela ts'ebetso joalo ka hore botšepehi ba lirekoto tse teng tsa ts'ebetso bo bolokehe. | Kopo ea tefo ea Viking e sebetsa ho lisebelisoa tsa PCI tse lumelletsoeng tsa PTS POI. Kopo ea tefo ea Viking ha e fane ka phihlello ea lehae, e seng console kapa e hole, kapa boemo ba litokelo, ka hona ha ho na motho kapa litsamaiso tse ling tse nang le phihlello ea thepa ea bohlokoa, ke ts'ebeliso ea Viking feela e khonang ho sebetsana le thepa ea bohlokoa. • Kopo ea tefo ea Viking ha e fane ka mekhoa ea ts'ebetso ea litokelo. • Ha ho na ditshebetso ho tima encryption ya data hlokolosi • Ha ho na mesebetsi bakeng sa decryption ya data hlokolosi | • Ha ho na mesebetsi ea ho romela data ea bohlokoa ho litsamaiso tse ling kapa lits'ebetso • Ha ho na likarolo tsa netefatso tse tšehetsoeng • Litaolo tsa ts'ireletso le ts'ebetso ea ts'ireletso li ke ke tsa koaloa kapa tsa hlakoloa. |
B.1.3 | Morekisi oa software o boloka litokomane e hlalosang likhetho tsohle tse ka lokisoang tse ka ama tshireletso ya data hlokolosi. |
Kopo ea tefo ea Viking e sebetsa ho lisebelisoa tsa PCI tse lumelletsoeng tsa PTS POI. Kopo ea tefo ea Viking ha e fane ka tse ling tsa tse latelang ho basebelisi ba ho qetela: • configurable kgetho ho fihlella ho ya data hlokolosi • configurable kgetho ho fetola mekhoa ho sireletsa ya data hlokolosi • phihlello ya remoutu ho tshebediso • diapdeite tsa remoutu tsa tshebediso • kgetho e ka hlophiswang ho fetola di-setting tsa kamehla tsa tshebediso |
B.2.4 | Software e sebelisa feela nomoro e sa reroang mesebetsi ea tlhahiso e kenyellelitsoeng tefong tlhahlobo ea sesebelisoa sa PTS sa terminal bakeng sa li-cryptographic kaofela ts'ebetso e kenyelletsang data ea bohlokoa kapa lits'ebetso tse hlokolosi moo ho hlokahalang litekanyetso tse sa reroang 'me e sa sebelise tsa eona mesebetsi e sa reroang ea ho hlahisa linomoro. |
Viking ha e sebelise RNG leha e le efe (jenereithara ea linomoro tse sa reroang) bakeng sa mesebetsi ea eona ea ho ngolisa. Sesebelisoa sa Viking ha se hlahise kapa hona ho sebelisa linomoro tse sa reroang bakeng sa mesebetsi ea cryptographic. |
B.2.9 | Botšepehi ba molaetsa oa software files e sirelelitsoe ho latela Sepheo sa Taolo B.2.8. | Lipontšo tsohle tse potlakang ho terminal ea Viking li kentsoe ka har'a sesebelisoa mme ha ho hang files ba teng ka ntle ho kopo. Ha ho hang-hang files kantle ho kopo ea tefo ea Viking e teng, tlhahisoleseling eohle e hlokahalang e hlahisoa ke kopo. |
B.5.1.5 | Tataiso ea ts'ebetsong e kenyelletsa litaelo bakeng sa ba amehang ho saena ka mokhoa o hlakileng molaetsa oohle files. | Litlhahiso tsohle tse hlahang setsing sa Viking li kentsoe ka har'a ts'ebeliso mme ha li potlake files ba teng ka ntle ho kopo. Ha ho hang-hang files kantle ho kopo ea tefo ea Viking e teng, tlhahisoleseling eohle e hlokahalang e hlahisoa ke kopo |
Reference PCI Sireletsehile Software Standard Litlhokahalo
Likhaolo tsa tokomane ena | PCI Sireletsehile Software Standard Litlhokahalo | Litlhoko tsa PCI DSS |
2. Kopo e sireletsehileng ea Tefo | B.2.1 6.1 12.1 12.1.b |
2.2.3 |
3. Lintlafatso tsa Software tsa Remote tse Sireletsehileng | 11.1 11.2 12.1 |
1&12.3.9 2, 8, le 10 |
4. Ho Hlakola ka Sireletsehile ha Boitsebiso bo Bohloko le Tšireletso ea Boitsebiso bo bolokiloeng ba Mong'a Karete | 3.2 3.4 3.5 A.2.1 A.2.3 B.1.2a |
3.2 3.2 3.1 3.3 3.4 3.5 3.6 |
Netefatso le Litaolo tsa Phihlello | 5.1 5.2 5.3 5.4 |
8.1 le 8.2 8.1 le 8.2 |
Ho rema lifate | 3.6 8.1 8.3 |
10.1 10.5.3 |
Wireless Network | 4.1 | 1.2.3 le 2.1.1 4.1.1 1.2.3, 2.1.1,4.1.1 |
Karohano ea Marang-rang | 4.1c | 1.3.7 |
Remote Access | B.1.3 | 8.3 |
Phetiso ea Lintlha tsa Mong'a Karete | A.2.1 A.2.3 |
4.1 4.2 2.3 8.3 |
Viking Versioning Methodology | 11.2 12.1.b |
|
Litaelo bakeng sa bareki mabapi le ts'ebetso e sireletsehileng ea li-patches le liapdeite. | 11.1 11.2 12.1 |
Bukana ea Tlhaloso ea Mantsoe
TERM | TLHALOSO |
Lintlha tsa mong'a karete | Mothalo o felletseng oa makenete kapa PAN hammoho le efe kapa efe ea tse latelang: · Lebitso la Mong'a Karete · Letsatsi la pheletso · Khoutu ya Tshebeletso |
DUKU | Derived Unique Key Per Transaction (DUKPT) ke mokhoa oa bohlokoa oa tsamaiso oo ho oona bakeng sa ts'ebetso e 'ngoe le e' ngoe, ho sebelisoa senotlolo se ikhethang se nkiloeng ho senotlolo se tsitsitseng. Ka hona, haeba senotlolo se nkiloeng se sekiselitsoe, data ea nakong e tlang le ea nakong e fetileng e ntse e sirelelitsoe kaha linotlolo tse latelang kapa tsa pele li ke ke tsa khethoa habonolo. |
3DES | Ho cryptography, Triple DES (3DES kapa TDES), ka molao, Triple Data Encryption Algorithm (TDEA kapa Triple DEA), ke symmetric-key block cipher, e sebelisang algorithm ea DES cipher makhetlo a mararo sebakeng se seng le se seng sa data. |
Mohoebi | Mosebelisi oa ho qetela le moreki oa sehlahisoa sa Viking. |
SSF | PCI Software Security Framework (SSF) ke pokello ea litekanyetso le mananeo a moralo o sireletsehileng le nts'etsopele ea software ea ho lefa. Ts'ireletso ea software ea litefo ke karolo ea bohlokoa ea phallo ea litefello mme e bohlokoa ho tsamaisa litefo tse tšepahalang le tse nepahetseng. |
PA-QSA | Kopo ea Tefo Bahlahlobi ba Tšireletso ba Tšoanelehang. Khamphani ea QSA e fanang ka lits'ebeletso ho barekisi ba likopo tsa tefo ho netefatsa likopo tsa ho lefa tsa barekisi. |
MAHLOMOLA
(Sensitive Authentication Data) |
Tlhahisoleseding e amanang le tshireletso (Mekhoutu/Melao ya Bolaodi ba Karete, dintlha tse felletseng tsa pina, PIN, le PIN Blocks) tse sebediswang ho netefatsa beng ba dikarete, tse hlahang ka mongolo o sa hlakang kapa ka mokgwa o mong o sa sireletsehang. Ho senoloa, ho fetoloa, kapa ho senngoa ha tlhahisoleseling ena ho ka beha ts'ireletseho ea sesebelisoa sa lekunutu, sistimi ea tlhahisoleseling, kapa tlhahisoleseling ea mong'a karete kapa e ka sebelisoa khoebong ea bomenemene. Sensitive Authentication Data ha ea tlameha ho bolokoa ha khoebo e felile. |
Viking | Sethala sa software se sebelisoang ke Nets bakeng sa nts'etsopele ea kopo bakeng sa mmaraka oa Europe. |
HSM | Mojule oa ts'ireletso ea Hardware |
Taolo ea Litokomane
Mongoli oa Litokomane, Reviewbarupeluoa le Baamoheli
Tlhaloso | Mosebetsi | Lebitso |
PA-QSA | Reviewer | Claudio Adamic / Flavio Bonfiglio Shorans |
Tsoelo-pele | Mongoli | Aruna O tšohile |
Motsamaisi oa Ts'ebetsong | Reviewer & Moamoheli | Arno Edstrom |
Moqapi oa Sisteme | Reviewer & Moamoheli | Shamsher Singh |
QA | Reviewer & Moamoheli | Varun Shukla |
Mong'a Sehlahisoa | Reviewer & Moamoheli | Cecilia Jensen Tyldum / Arti Kangas |
Motsamaisi oa Sehlahisoa | Reviewer & Moamoheli | May-Britt Dens le oa Sanderson |
Motsamaisi oa Boenjiniere | Motsamaisi | Tamely Vallone |
Kakaretso ea Liphetoho
Phetolelo Nomoro | Phetolelo Letsatsi | Sebopeho sa Phetoho | Fetola Mongoli | Reviewer | Khatiso Tag | Letsatsi le Amoheletsoeng |
1.0 | 03-08-2022 | Phetolelo ea Pele ea PCI-Sireletsehile Software Standard |
Aruna O tšohile | Shamsher Singh | 18-08-22 | |
1.0 | 15-09-2022 | E ntlafalitsoe karolo ea 14 ka sepheo sa taolo e sa sebetseng ka tsona tokafatso |
Aruna O tšohile | Shamsher Singh | 29-09-22 | |
1.1 | 20-12-2022 | Likarolo tse ntlafalitsoeng 2.1.2 le 2.2 le Self4000. E tlositsoe Link2500 (PTS mofuta oa 4.x) lethathamong la litheminale tse tšehetsoeng |
Aruna O tšohile | Shamsher Singh |
23-12-22 |
|
1.1 | 05-01-2023 | Karolo e ntlafalitsoeng ea 2.2 ka Link2500 (pts v4) bakeng sa ho ntšetsa pele tšehetso bakeng sa sena.
mofuta oa terminal. |
Aruna O tšohile | Shamsher Singh | 05-01-23 | |
1.2 | 20-03-2023 | Karolo e ntlafalitsoeng ea 2.1.1 ka Selatvia le Selithuania terminal profiles. Le 2.1.2 ka tšehetso ea mofuta oa puisano ea BT-iOS |
Aruna O tšohile | Shamsher Singh |
Lenane la Phano
Lebitso | Mosebetsi |
Lefapha la Terminal | Nts'etsopele, Teko, Tsamaiso ea Morero, Tumellano |
Tsamaiso ea Lihlahisoa | Sehlopha sa Tsamaiso ea Sehlahisoa sa Terminal, Mookameli oa Tumellano - Sehlahisoa |
Litumello tsa Litokomane
Lebitso | Mosebetsi |
Cecilia Jensen Tyldum | Mong'a Sehlahisoa |
Art Kangas | Mong'a Sehlahisoa |
Tokomane Review Merero
Tokomane ena e tla reviewe hlophisitsoeng le ho ntlafatsoa, ha ho hlokahala, joalo ka ha ho hlalositsoe ka tlase:
- Joalo ka ha ho hlokahala ho lokisa kapa ho ntlafatsa litaba tsa litaba
- Ho latela liphetoho kapa tokiso ea mokhatlo
- Ka mor'a ts'ebetso ea selemo le selemoview
- Ho latela ts'ebeliso ea ts'oaetso
- Ho latela lintlha tse ncha / litlhoko mabapi le bofokoli bo amehang
Litokomane / Lisebelisoa
![]() |
Nets PCI Sireletsehile Software Standard [pdf] Bukana ea Mosebelisi PCI Sireletsehile Software Standard, Sireletsehile Software Standard, Software Standard, Standard |
![]() |
Nets PCI Sireletsehile Software Standard [pdf] Bukana ea Mosebelisi PCI Sireletsehile Software Standard, Sireletsehile Software Standard, Software Standard, Standard |