Jumat, 07 Mei 2010

HSM Simulator based on JAVA

HSM Simulator

HarSM is a java webbased HSM simulator that performs the standard functions of ISO 8583 DES security.
During my work in the Financial IT Sector I've often encountered situation where during development phase the developers team doesn't have access to a HSM or for practicality and maybe budget reasons often resort to try to find a software based solution for all the standard HSM functions for the ISO 8583 communication.
Added with the standard learning curve associated for inexperienced developers in Thales HSM configuration and racal communication protocol often complicates a relatively straightforward problem.

HarSM is a compilation of all the standard most commonly used ISO 8583 DES based security actions, at least the ones I've encountered for banks and other major financial bill payment switching institutions in Asia. It provides a webmenu and HTTP get based interface so you can use it programatically from your application via simple HTTP GET method.

HarSM v 0.7 has the following features
- DES/TDES(Triple DES)/2TDES key generation
- DES/TDES/2TDES key generation from components (XOR Method) similar to the thales FK command
- Basic LMK(Local Master Key) support
- Key Check Value Calculation
- DES/TDES/2TDES Encryption/Decryption with ISO 8583 ANSI ECB standard
- Key Translation ( transalate a key wrapped in one key to another key)ZMK, TAK, ZPK
- MAC Generation (ANSI CBC Standard, most commonly used)
- PINBLOCK Generation (ISO Format 0, most commonly used)
- CVV and PVV Calculation for VISA, Mastercard and AMEX

You can download the software from the download link, you need at least JDK 1.5 to run, I reccomend 1.6. Unzip the file and to start just type java -jar HSMp.jar
With the default settings, the webmenu is started at port 8080, while the http interface is at 9090.

I hope you find this software usefull, detailed api documentation are in the documentation menu. Feel free to email me at hairi@m-sinergi.com

WAY SYSTEM

WAY System

WAY Systems provides the most secure, cost effective, and mobile point-of-sale (POS) solution to merchants anywhere.
Our terminals are the smallest, most compact models on the market. And our networking infrastructure, Secure Mobile Application Platform, provides a completely secure, end-to-end transaction processing service.
As a company that specializes only in the mobile segment of the POS market, we deliver the best solutions in terms of form factor, geographic coverage, and security. In addition, we sell only to our marketing partners, all the largest Independents Sales Organizations in the United States.
The end result for merchants, our ultimate customers, is the industry’s quickest, most smooth path from out-of-the-box to accepting payments anywhere, at anytime.
WAY, a privately-held company headquartered in Boston, Massachusetts, was founded in 2002. Our Board includes the founders of the two largest POS manufacturers, and one of the largest transaction networks in the world.