Planning For File Authentication - VeriFone VX 680 Reference Manual

F A
ILE UTHENTICATION
Introduction to File Authentication
DEVELOPMENT
PROCESS
FULLY DEBUGGED
APPLICATION FILE
SIGNATURE FILE
Planning for File
Authentication
62
VX 680 R
EFERENCE
Figure 7 illustrates the deployment process.
SMART
VERISHIELD
FILE SIGNING
TOOL
SIGNER
(*.*.P7S) CERTIFICATE
Figure 7 The Deployment Process
File authentication is an integral part of every VX 680 terminal. To safeguard the
terminal's logical security, the file authentication module requires that any
executable code file must be successfully authenticated before the operating
system allows it to execute on the terminal.
G
UIDE
PRE-DEPLOYMENT
PROCESS
CARD
PIN
SIGNER
CERTIFICATE
SPONSOR
CERTIFICATE
1)
DEVELOPMENT OS SEARCHES FOR A *.*.P7S FILE.
2)
IF A *.*.P7S FILE IS FOUND, OS THEN SEARCHES FOR
A MATCHING APPLICATION FILE.
3) IF A MATCHING APPLICATION FILE IS FOUND, OS
COMPARES *.*.P7S FILE'S SIGNATURE AGAINST
VALUES IN THE APPLICATION FILE'S CALCULATED
SIGNATURE.
4)
IF THE VALUES MATCH, THE TWO FILES ARE
AUTHENTICATED, AND THE ATTR_NOT_AUTH BIT
IS SET TO 0.
SIGNER SMART CARD
SPONSOR SIGNER
CERTIFICATE PRIVATE KEY