在Apple Pay中使用什么密钥生成ARQC? [英] What key is used to generate an ARQC in Apple Pay?

问题描述

在EMV协议中，IMK(ac)用于生成会话密钥，该会话密钥用于生成ARQC. IMK(ac)是芯片和发卡行主机专用的

In the EMV protocol the IMK(ac) is used to generate the session key, which is used to generate an ARQC. The IMK(ac) is exclusive to the chip and the card issuer host

据我所知，发卡机构不会与卡品牌共享这些密钥(即Visa无法验证您的ARQC，只有发行卡的皮奥里亚银行"可以).

As far as I understand, the card issuers do not share those keys with the card brand (i.e. Visa cannot validate your ARQC, only "The Bank of Peoria" who issued the card can).

当发生EMV Apple Pay交易且手机生成ARQC时，它使用的是哪个IMK(ac)密钥?大概不能是原始卡上的IMK(ac) ，因此发卡机构无法验证ARQC.

When an EMV Apple Pay transaction occurs in which the phone generates the ARQC, which IMK(ac) key is it using? Presumably it can't be the IMK(ac) from the original card, and thus the card issuer cannot validate the ARQC.

如果使用的是Apple IMK(ac)，那么这是否表示Apple正在验证ARQC ?

If it's an Apple IMK(ac) being used, then does this mean that it is Apple validating that ARQC?

如果是这种情况，那么什么交易流程为Apple提供了验证ARQC的机会?

If this is the case, what's the transaction flow that gives Apple the opportunity to validate the ARQC?

[为清楚起见而编辑]

推荐答案

加密将始终使用从IMKac派生的会话密钥进行密码生成.但是，IMK不必与您的物理卡使用的相同(您可以使用其他CVN作为主机来管理它). 付款方式(Visa，MasterCard等)将提供相同的密钥，这些密钥将在交易过程中验证密码并将验证结果发送给您.

Encryption will always use Session keys derived from an IMKac for Cryptogram generation. However the IMK need not be the same as what your physical card uses( you can manage this using a different CVN as host). The same key will be available with the payment schemes(Visa, MasterCard etc.) who will validate the cryptogram during the transaction and send you the results of verification.

钱包CVN不同.如果您作为发卡机构的主机要验证密码，那么您应该拥有CVN的IMKac，而您的HSM应该支持CVN.理想情况下，您可以依靠验证结果代码(对于Visa来说是44，对于MC来说是48 SE71)来决定是否可以批准.

Wallet CVNs are different. If you as a card issuer host wants to verify the cryptogram, then you should have the IMKac for the CVN and your HSM should support the CVN. Ideally you can rely on the verification results code (in 44 for Visa and 48 SE71 for MC) to decide whether it can be approved or no.

如果您可以从Apple获得更多文档，可以共享，我很乐意浏览这些文档:-).

In case if you have more documentations from Apple you can share, I would love to go through those :-) .

这篇关于在Apple Pay中使用什么密钥生成ARQC?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！