Planning For File Authentication; Download And Installation - VeriFone P200 Reference Manual

F A
ILE UTHENTICATION

Planning for File Authentication

DEVELOPMENT
PROCESS
FULLY DEBUGGED
APPLICATION FILE
Planning for File
Authentication
Download and
Installation
40
P200/P400 R
EFERENCE
The development and/or deployment process is illustrated in the flowchart below.
VERISHIELD
FILE SIGNING
TOOL
SIGNATURE FILE SIGNER
(*.*.P7S) CERTIFICATE
Figure 8 The Development / Deployment Process
File authentication is an integral part of every PINpad. To safeguard the PINpad's
logical security, FA requires that any downloaded application file must be
successfully authenticated before the operating system installs on the unit.
The PINpad's Secure Installer plays a critical role on system and application
startup as well as authenticating and installing all components; application,
system and OS.
G
UIDE
PRE-DEPLOYMENT
PROCESS
SMART
CARD
PIN
SIGNER
CERTIFICATE
SPONSOR
CERTIFICATE
1)
DEVELOPMENT OS SEARCHES FOR A *.*.P7S FILE.
2)
IF A *.*.P7S FILE IS FOUND, OS THEN SEARCHES FOR
A MATCHING APPLICATION FILE.
3)
IF A MATCHING APPLICATION FILE IS FOUND, OS
COMPARES *.*.P7S FILE'S SIGNATURE AGAINST
VALUES IN THE APPLICATION FILE'S CALCULATED
SIGNATURE.
4)
IF THE VALUES MATCH, THE TWO FILES ARE
AUTHENTICATED, AND THE ATTR_NOT_AUTH BIT
IS SET TO 0.
SIGNER SMART CARD
SPONSOR SIGNER
CERTIFICATE PRIVATE KEY