Skip to content

Search

"HSM"

14 articles found

Diagram of HSM use case areas in security and payment systems

HSM & Security

What Is an HSM? What Is It Used For?

HSM, short for Hardware Security Module, is specialized security hardware built to store sensitive cryptographic keys in a physical environment and to perform cryptographic operations in the most secure way.

Diagram illustrating the Local Master Key (LMK) concept in an HSM

HSM & Security

LMK (Local Master Key)

LMK stands for Local Master Key. The Local Master Key (LMK) is the HSM's master key, and all other keys used by the institution are secured under this key. As transaction volume increases, banks often use multiple HSMs to reduce the load on each device.

Diagram showing how a Zone Master Key (ZMK) is used to transport encryption keys between HSMs

HSM & Security

What is a ZMK (Zone Master Key)?

ZMK is short for Zone Master Key. It is the key used to transport a key from one environment to another. In short, we can say ZMK is the main transport vehicle. The key that two parties use to encrypt and exchange new ZPKs is the ZMK.

Diagram illustrating the Remote Key Loading (RKL) process

ATM

What Is RKL (Remote Key Loading)?

RKL is the process of distributing a TMK (Terminal Master Key) to each terminal from a central point. It is used to remotely load keys onto POS and ATM devices, loading TMKs onto an ATM's keypad or activating them on a POS.

ISO 8583 field 52 PIN data encrypted PIN block

ISO 8583

ISO 8583 Field Descriptions (F52)

DE 52 — Personal Identification Number (PIN) Data: the field that holds the PIN data. PIN verification is carried out based on this field.

Payment card illustrating magnetic stripe data used for PIN verification

Credit Card

What is PVV (PIN Verification Value)?

PVV is the number encoded on a card's magnetic stripe that allows the cardholder's PIN to be verified by ATMs and POS terminals. It is a 4-digit cryptogram calculated through a cryptographic operation using the PIN and card data. The real result is longer than 4 digits.

Illustration of a Zone PIN Key (ZPK) protecting PIN data in a payment network

HSM & Security

What is ZPK (Zone PIN Key)?

ZPK, also known as the PIN Protection Key, is a data encryption key that is distributed automatically and used to encrypt PINs. It is also referred to as the 'Working Key'. This key allows PIN information to be carried securely across the network.

Illustration representing the PIN Verification Key (PVK) concept in HSM security

Credit Card

What is PVK (Pin Verification Key)?

PVK (Pin Verification Key) is a key held on the HSM, used in PIN generation and verification, and therefore to confirm that a PIN is correct. On a shared network it is encrypted under TMK or ZMK; on a local network it is encrypted under one of the LMK pairs.

Illustration representing the steps involved in launching a new payment card product

Credit Card

What Should Be Considered When Launching a New Product?

The following steps should be followed when launching a new product: decide on the brand, request a new BIN from the scheme (Mastercard, Visa, Troy), define the BIN in the bank's system, generate keys in the HSM, and roll it out after certification.

Zone Working Key PIN encryption between banks

HSM & Security

What Is ZWK (Zone Working Key)?

ZWK stands for Zone Working Key. It encrypts the PIN so that it can travel securely between different financial institutions, such as the acquiring bank and the issuing bank.

Diagram illustrating the relationship between KEK and DEK encryption keys

HSM & Security

What is KEK (Key Encryption Key)?

KEK (Key Encryption Key) is an encryption key used to encrypt the DEK (Data Encryption Key) and decrypt the encrypted DEK. The relationship between KEK and DEK: in encryption systems, keys are managed in a layered structure.

Diagram illustrating the Card Verification Key (CVK) concept

Credit Card

What is CVK (Card Verification Key)?

CVK (Card Verification Key) is the key information used to generate and verify CVV/CVC values, confirming their validity. It is kept as a pair of keys, CVK A and CVK B, encrypted under TMK, ZMK or LMK.