Hapter; File Authentication; Introduction To File Authentication; The Verifone Certificate Authority - VeriFone VX 680 Reference Manual

C 4

HAPTER

File Authentication

This chapter discusses the following VeriShield Retain file authentication security
architecture, VeriShield Retain file authentication module, and the organizational
infrastructure that supports it (see Introduction to File Authentication).
This chapter also explains how the file authentication process may affect the tasks
normally performed by application programmers, terminal deployers, site
administrators, or entities authorized to download files to a VX 680 terminal (see
File Authentication and the File System).
Lastly, this chapter explains how to generate the signature files required to
perform downloads and authenticate files on the VX 680 terminal using the file
signing utility (see VeriShield File Signing Tool).
In Performing Downloads, the topic of file authentication is also discussed in the
context of specific file download procedures.
Introduction to The VX 680 terminal uses the VeriShield Retain security architecture, which has
File
both physical and logical components. The logical security component of the
Authentication VeriShield Retain architecture, which is part of the terminal's operating system
software, is called the file authentication module.
File authentication is a secured process for authenticating files using digital
signatures, cryptographic keys, and digital certificates. This process makes it
possible for the sponsor of a VX 680 terminal to logically secure access to the
terminal by controlling who is authorized to download application files to that
terminal. It verifies the file's origin, sender's identity, and integrity of the file's
information.
The Verifone To manage the tools and processes related to the file authentication module of the
Certificate Authority
VeriShield Retain security architecture, Verifone has established a centralized
Verifone Certificate Authority, or Verifone CA. This agency is responsible for
managing keys and certificates. The Verifone CA uses an integrated set of
software tools to generate and distribute digital certificates and private
cryptographic keys to customers who purchase VX 680 terminals.
55
VX 680 R G
EFERENCE UIDE