Luggage, Bags & Cases Wallets & Holders Card Holders

HSM PKI PSAM ISAM Java Card Applet with DUKPT Software for Secure Transaction Management

Name: HSM PKI PSAM ISAM Java Card Applet with DUKPT Software for Secure Transaction Management
Brand: Wisecard Technology Co., Ltd.

Java Card-based DUKPT applet providing secure transaction key management with server and client applications. Features include IPEK generation, PIN/data encryption/decryption, MAC calculation, and remote offline transaction support. Certified by international security standards including EMV, PCI DSS, and major payment networks for global financial applications.

Place of Origin China

OS JAVA GP

Key Type DES, RSA, Certificate

Model Number Java Applet

Supply Ability unlimited

Certification EMV Compliant

swipe card door entry wood credit card holder mtg card print

Product Description

Java Card DUKPT Applet for Secure Transaction Management

Core Features

Java Card-based architecture for easy migration across card vendors

Cost-effective expansion capabilities for future requirements

Secure interface for BDK/IPEK/KEK/PEK personalization

Remote offline transaction support

All security operations performed within the card

DUKPT Server Application Capabilities

Function	Description
IPEK Generation	Generate Initial PIN Encryption Key (clear or encrypted under KEK)
PIN Encryption	Encrypt PIN data (clear or encrypted under PEK)
PIN Decryption	Decrypt PIN data using transaction keys
Data Encryption	Secure data encryption operations
Data Decryption	Secure data decryption operations
MAC Calculation	Message Authentication Code generation

DUKPT Encryption System Workflow

1. Personalize DUKPT-HSM Applet with BDK/IPEK/KEK/PEK (Host Side)

2. Generate IPEK(s) based on user-entered KSN (Host Side)

3. Inject IPEK(s) into terminal (Terminal Side)

4. Terminal calculates transaction key (Terminal Side)

5. Terminal encrypts PIN/Data using transaction key (Terminal Side)

6. Receive (cryptogram, KSN) pair (Host Side)

7. Locate appropriate BDK (Host Side)

8. Regenerate IPEK and transaction key using KSN (Host Side)

9. Decrypt cryptogram using transaction key (Host Side)

DUKPT Client Application Features

IPEK injection (clear or encrypted under KEK)

PIN encryption commands

Data encryption commands

Data decryption commands

MAC calculation commands

DUKPT Java Card Applet architecture diagram

DUKPT transaction security implementation

About Wisecard

Wisecard, a WiseGroup company, is a global solution provider delivering innovative payment and secure solutions to financial institutions, government entities, and telco operators worldwide.

Our comprehensive product suite includes EMV smart cards, biometric cards, personalization software, card issuance systems, POS terminals, hardware secure modules, and mobile payment platforms serving partners in over 60 countries.

All solutions adhere to the highest security standards and are certified by international testing laboratories including FBI, STQC, EMV, PCI DSS, PA DSS, VISA, MasterCard, China UnionPay, JCB, AmEx, Discover, and RuPay.