Valid

GM/T 0106-2021Cryptograph application requirements for bank card terminal (English PDF)

银行卡终端产品密码应用技术要求

Preview PDF

This is a limited preview

Buy now to download the full PDF (26 pages)

Need quotation for your management?

Get a formal quotation for GM/T 0106-2021 in 30 minutes.

Issued by

State Administration of Cryptography

Level / Type

National · Recommended

Issue date

October 18, 2021

Implementation date

May 1, 2022

Scope

GM/T 0106-2021 is the English-translated version of 银行卡终端产品密码应用技术要求.

GM/T 0106-2021 — This document specifies the technical requirements for the cryptographic application on bank card terminal products, including basic terminal security requirements, terminal key management requirements, terminal data security requirements, and cryptographic algorithm correctness and performance requirements.

This document applies to the application of cryptographic technology on bank card terminal products.

The users are mainly the units that design, manufacture, and use bank card terminal products related to the application of cryptographic technology, as well as the relevant units that need to upgrade the cryptographic application technology of existing bank card terminal products.

Found what you need?

Document preview — GM/T 0106-2021

National Standard of the People's Republic of China

ICS: 35.030
Classification: L 80

Scope1
Normative references2
Terms and definitions3
General4
General requirements5
Requirements for POS terminals6
Requirements for ATM terminals7
Requirements for cryptographic modules8
Key system9
Terminal master key management10
Key encryption key management11
Working key management12
Certificate authority public key management13
Certificate authority public key maintenance key management14
Terminal security key management15
Self-checking16
Sensitive function use authorization17
Online transaction messages18
Offline data authentication19
Cash dispense cryptographic authentication20
Cryptographic algorithm correctness and performance21

1 Scope

This document specifies the technical requirements for the cryptographic application on bank card terminal products, including basic terminal security requirements, terminal key management requirements, terminal data security requirements, and cryptographic algorithm correctness and performance requirements.

This document applies to the application of cryptographic technology on bank card terminal products. The users are mainly the units that design, manufacture, and use bank card terminal products related to the application of cryptographic technology, as well as the relevant units that need to upgrade the cryptographic application technology of existing bank card terminal products.

2 Normative references

The following documents are referred to in the text in such a way that some or all of their content constitutes requirements of this document. For dated references, only the version corresponding to that date is applicable to this document; for undated references, the latest version (including all amendments) is applicable to this document.

GB/T 21078.1, Financial services - Personal Identification Number (PIN) management and security - Part 1: Basic principles and requirements for PINs in card-based systems GB/T 21078.2, Banking - Personal identification number management and security - Part 2: Requirements for offline PIN handling in ATM and POS systems GB/T 27909 (all parts), Banking - Key management (retail) GB/T 32905, Information security techniques - SM3 cryptographic hash algorithm GB/T 32907, Information security technology - SM4 block cipher algorithm GB/T 32915, Information security technology - Binary sequence randomness detection method GB/T 32918 (all parts), Information security technology - Public key cryptographic algorithm SM2 based on elliptic curves GB/T 32918.3-2016, Information security techniques - Elliptic Curve public-key cryptography - Part 3: Key exchange protocol GM/T 0008, Cryptography test criteria for security IC GM/T 0028-2014, Security requirements for cryptographic modules GM/Z 4001, Cryptology terminology JR/T 0025.6, China financial integrated circuit card specifications - Part 6:

Debit/credit application terminal specification JR/T 0025.7, China financial integrated circuit card specifications - Part 8: Contact less specification independent of application JR/T 0055 (all parts), Technical specifications on bankcard interoperability JR/T 0120.1, Security specification for bank card terminals - Part 1: Port of sale terminal JR/T 0120.3, Security specification for bank card terminals - Part 3: Self-service terminal JR/T 0120.5, Security specification for bank card terminals - Part 5: PIN entry device ANSI X9.24 (all parts), Retail financial services - Symmetric key management

3 Terms and definitions

For the purposes of this document, the following terms and definitions, as well as those given in GM/Z 4001 and GM/T 0028, apply.

cash handling module the cash dispense module or cash recycle module of an Automatic Teller Machine (ATM).

bank card terminal

terminal

Commercial device – such as ATM, POS, mPOS and other products – that accepts bank card transactions.

secure communication key Symmetric key used to encrypt communication between cryptographic modules within the terminal.

3.11

root public key

The public key of a certificate authority (CA), which is often used to verify the public key certificates or public key signatures issued by the certificate authority to itself, subordinate certificate authorities, or other clients.

3.12

root certificate

The unsigned or self-signed public key certificate issued by the certificate authority (CA) to itself, which is the starting point of the trust chain.

3.13

PIN entry device; PED A cryptographic module – such as encrypting pin pad (EPP), external encrypted pin pad, etc. – that supports personal identification number input.

3.14

encrypting pin pad; EPP A cryptographic module that accepts the user PIN entry and provides the cryptographic services required by the terminal.

3.15

external encrypted pin pad A PIN entry device that is used in the financial payment field, which can be a POS or an encrypting pin pad commonly used to connect to a POS to accept bank card transactions.

3.16

safety box

A device, inside the ATM, in which the cash handling module is placed, which is used to physically protect the cash handling module and cash.

cryptographic modules in terms of hardware, physical security, logical security and business functions, and is the basis for implementing the application of cryptographic technology.

5.2.1 General

Bank card terminal products are terminal devices for accepting bank card business, including point of sale (POS) products (POS, mPOS, smart POS, etc.) and automatic teller machine (ATM) products (ATM, financial self-service equipment, etc.). Bank card terminals shall include cryptographic modules, such as including encrypting pin pad, external encrypted pin pad, etc., or being cryptographic modules themselves.

5.2.2 General requirements

The provisions in JR/T 0025.6-2018 and JR/T 0025.7-2018 shall be met.

The provisions in GM/T 0028-2014 shall be met and the cryptographic boundaries shall be divided.

The cryptographic algorithms given in GB/T 32905, GB/T 32907, and GB/T 32918 (all parts) shall be supported and executed by the cryptographic module of the terminal.

5.2.3 Requirements for POS terminals

The requirements of JR/T 0120.1 shall be met.

5.2.4 Requirements for ATM terminals

The requirements of JR/T 0120.3 shall be met.

5.3 Requirements for cryptographic modules

The cryptographic module on the bank card terminal product shall comply with the security requirements specified in GM/T 0028 and reach security level 1 or higher. It shall be provided with the function of generating random numbers and support the cryptographic algorithms specified in GB/T 32905, GB/T 32907 and GB/T 32918.

These cryptographic algorithms shall be provided by the security chip. The cryptographic module shall use the security chip approved by the national cryptographic management department, and the security level of the security chip shall reach the security level 2 specified in GM/T 0008.

Bank card terminals may contain multiple cryptographic modules. If data exchange is required between cryptographic modules, the confidentiality and integrity of sensitive data shall be guaranteed, such as using secure communication key encryption and communication with a message authentication code (MAC).

All keys of the terminal shall be stored in the cryptographic module, and the keys shall only be used in the cryptographic module.

6.3.1 Key system

The key system used by bank card terminals for online transactions shall be no less than two levels.

POS terminals often use a two-level key system: terminal master key (TMK) and working key (WK).

ATM terminals often use a two-level key system: key encryption key (KEK) and working key (WK).

The key system shall support cryptographic algorithms that comply with GB/T 32907.

6.3.2 Terminal master key management

The terminal master key (TMK) is used to encrypt and protect the working key (WK) on POS terminals. Each POS terminal shall be provided with a unique TMK.

TMK shall be imported into POS terminals using cryptographic technology, such as encrypted import through other cryptographic devices (POS key machines, IC cards, etc.), or imported using remote key loading based on the SM2 cryptographic algorithm.

The integrity and confidentiality of the key shall be ensured during import.

6.3.3 Key encryption key management

The key encryption key (KEK) is used to encrypt and protect the working key (WK) on the ATM terminal. It is the one-level key in the key system of the ATM terminal. Each ATM terminal shall be provided with a unique KEK.

KEK shall be imported using a dual control method, that is, at least two key administrators are authenticated by passwords. After authentication, the key administrators input the key components they hold, and the key components are combined in the cryptographic module to form the KEK and saved.

KEK can be imported using remote key loading (RKL). The remote import methods are shown in Appendix B or shall be as specified in GB/T 32918.3-2016.

6.3.4 Working key management

The terminal shall contain three working keys: PIK for encrypting the personal identification number (PIN), MAK for calculating the message authentication code (MAC), and TDK for encrypting and decrypting the track data.

The working key shall be encrypted with TMK or KEK and then transmitted and imported in ciphertext. Each working key can only be used for one purpose.

6.3.5 Certificate authority public key management

See JR/T 0025.7.

6.3.6 Certificate authority public key maintenance key management

See JR/T 0025.7.

6.4 Terminal security key management

Terminal security key management shall comply with the following life cycle management methods:

-- Key generation: Symmetric keys shall be generated by the cryptographic module using random numbers; asymmetric keys shall be generated using the key generation algorithm specified in GB/T 32918;

-- Key import: When importing the RKL certificate authority public key, the integrity of the public key shall be verified. Other terminal security keys are stored in the cryptographic module after generation and do not need to be imported;

-- Key storage: The keys shall be stored in the cryptographic module and shall not appear outside the cryptographic module in plain text, except for the cryptographic module public key;

-- Key use: shall be used in the cryptographic module; each key shall have only one purpose;

-- Key export: Except for the cryptographic module public key, other keys shall not be exportable;

-- Key replacement: The key replacement shall be carried out by deleting the old key and then regenerating a new one;

-- Key deletion: The deletion shall be controlled by the cryptographic module firmware;

-- Key destruction: The cryptographic module shall be destroyed when an intrusion is detected.

The terminal shall have a PIN anti-exhaustion function and the frequency of using the PIN encryption key shall be limited to no more than 120 times per hour.

PIN Block encryption shall support SM4 block cipher algorithm. The corresponding PIN Block filling method and encryption method shall comply with the provisions of Appendix A.

7.6 Self-checking

The terminal or cryptographic module shall have a self-checking function. It shall perform self-checking before each operation. In the continuous operation state, it shall perform self-checking at least once every 24 hours. The self-checking content shall include but not be limited to the following:

a) software/firmware integrity;

b) key data integrity;

c) randomizer validity;

d) cryptographic algorithm correctness.

If the self-checking fails, the terminal or cryptographic module shall immediately stop the service of providing cryptogram.

The integrity verification technology used in the self-checking shall adopt the SM2 digital signature algorithm or the MAC algorithm with SM4 key.

For key management requirements used for self-checking, see 6.4.

7.7 Sensitive function use authorization

Before using sensitive functions of the bank card terminal (such as key management, firmware update, PIN input and encryption, etc.), use authorization and certification shall be carried out. The cryptographic algorithm used for authentication and certification shall be an algorithm approved by the national cryptographic management authority, such as the SM2 cryptographic algorithm or the SM4 block cipher algorithm.

The authorization and certification process shall not affect the security of sensitive data, and the authorization and certification shall have a limit on the number of errors and a timeout control.

7.8 Online transaction messages

Online transaction message processing shall comply with the specifications of JR/T 0055, ensure the authenticity and integrity of transaction messages, and support the message authentication code (MAC) calculated by the SM4 block cipher algorithm. For the message interface modification method supporting the SM4 block cipher algorithm and the message authentication code calculation method, refer to Q/CUP 006.

7.9 Offline data authentication

See JR/T 0025.7.

7.10 Cash dispense cryptographic authentication

ATM terminal products are generally provided with cash handling functions. A secure communication mechanism should be established between the main control unit and the cash handling module to ensure the security of cash in the ATM. For example, use authentication and certification or ciphertext communication shall be performed before the main control unit communicates with the cash handling module. Cash handling modules that do not have authentication or encryption functions should be equipped with a cash dispense cryptographic authentication module on the communication link with the main control unit.

If the terminal supports the authentication function between the cash handling module and the main control unit, it shall:

a) The cash handling module shall at least have the function of one-way authentication of the main control unit. Only after the authentication is passed, can the cash handling module execute the cash handling commands such as withdrawal and deposit sent by the main control unit;

b) The cash dispense cryptographic authentication module should be installed in a safety box, or comply with the requirements of level 2 security specified in 7.7 of GM/T 0028-2014.

c) The cryptographic algorithm approved by the national cryptographic management authority shall be used to implement the cash dispense security function; it shall also have the ability to prevent attacks such as exhaustive and replay attacks. This document does not specify the specific method used to achieve this.

8 Cryptographic algorithm correctness and performance

requirements

The terminal shall ensure that the cryptographic algorithm is completed by the cryptographic module hardware.

The correctness of all cryptographic algorithms used shall be ensured. If multiple operating modes of a cryptographic algorithm are used (such as ECB and CBC of block Appendix B (Informative) ATM remote key loading (RKL) process B.1 Overview Remote Key Loading (RKL) refers to the process of using cryptographic technology to securely import keys (usually the top-level keys of the key system) from the remote host (HOST) to the ATM terminal through two-way authentication between the remote host and the ATM terminal.

B.2 Certificate authority the certificate authority (CA) has high-level security encryption equipment and issues public key certificates or public key signatures for the public keys of remote hosts and ATM terminals, and also issues certificates or signatures for its own public keys.

B.3 Purpose

The remote host remotely downloads or updates the key in the ATM terminal in a secure manner.

B.4 Prerequisites

Before remote key downloading, the ATM terminal and remote host shall complete the following prerequisite configurations, as shown in Figures B.1 and B.2:

a) The remote host has obtained the CA's public key (PKCA).

b) The remote host submits a public key (PKHOST) to the CA. The CA uses its own private key (SKCA) to sign the public key submitted by the remote host. The host then obtains the public key signature Sign (SKCA)[PKHOST].

c) (Optional) The remote host has a list of EPP serial numbers of legitimate ATM terminals. CA uses its own private key (SKCA) to sign the EPP serial number to obtain Sign (SKCA) [UIEPP] and load it into the ATM terminal.

d) CA loads its own public key (PKCA) into the ATM terminal, and uses its own private key (SKCA) to sign the ATM terminal's public key (PKATM), to obtain Sign (SKCA) [PKATM] and load it into the ATM terminal.

e) The ATM terminal has its own built-in public and private key pair (PKATM and SKATM).

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 26 pages — is available in the English PDF.

Referenced standards

Normative references

GB/T 27909 · GB/T 32918

How to Download GM/T 0106-2021

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.