File Authentication; Overview - VeriFone MX 900 Series Reference Manual

3
This chapter discusses the following topics:
■
■
■
■
In the Performing Downloads chapter, the topic of file authentication is also
discussed in the context of specific file download procedures.

Overview

The MX 900 Series terminal has a security architecture, called VeriShield, which
has both physical and logical components. The logical security component of the
VeriShield architecture, which is part of the terminal's operating system
software, is called file authentication (FA).
File Authentication is a secured process for authenticating files using digital
signatures, cryptographic keys, and digital certificates. This process enables the
sponsor of an MX 900 Series terminal to logically secure access to the terminal
by controlling who is authorized to download application files to that terminal.
It proves and verifies the following information:
■
■
■
September 14, 2012
F A
ILE UTHENTICATION
Introduces File Authentication (FA).
Explains how the file authentication process may affect the tasks
normally performed by application programmers, terminal deployers,
site administrators, or by entities authorized to download files to an
MX 900 Series terminal.
Describes how to use the file signing utility to generate the signature files
required to perform downloads and authenticate files on the MX 900
Series of terminals.
Presents Steps to Sign Files.
File's origin
Sender's identity
Integrity of the file's information.