ОN-line solution for mobile banking

PinGeneration, CvvGeneration, ChipCardAssistant

With many years of experience in the field of payment card technologies, CARTSYS LLC specializes in the development of systems and components designed to work securely with sensitive data such as PIN codes and card verification values (CVV2/CVC2). These components are intended for integration into the bank information structure of payment card service.

The company offers a number of solutions in the form of server components and complete applications. Among them, the following solutions have recently been in demand:

PinGeneration, CvvGeneration, ChipCardAssistant

PinGeneration

The component is intended for the solution of such problems:

• On-line PIN generation on request
• PIN input through remote bank channels, PVV/PIN-offset verification values generation for placement in a processing center DB

The solution allows simultaneous support of a few PIN-code generation algorithms (permitted by payment systems), automatic selection of processing parameters that depends on the input data, generation, import and export of RSA-certificates, and other key-related information. All operations performed by the system are being logged. The component is monitored to inform external bank systems about components performance.

CvvGeneration

CVV2/CVC2 Provision in on-line mode

This functionality is used to display information in the bank's mobile application.

The solution allows CVV2/CVC2 generation with the posed card parameters in real time on client request.

All operations performed by the system are being logged. The component is monitored to inform external bank systems about components performance.

Example usage – show CVV for a card in the mobile application:

1. Client can view his bank accounts and cards
2. Client uses special button
3. Button on the card image – “Show CVV2”. Client presses this button and the CVV2/CVC2 code is displayed on the card in online mode

ChipCardAssistant

This solution that is used by a few local banks and allows to perform the full set of operations for generation and preparation for EMV card issuing (contact, contactless, mixed and just magnetic cards). The solution supports various PIN-generation algorithms (permitted by payment systems), automatic selection of processing parameters that depends on the input data, generation, import and export of RSA-certificates, and other key-related information. All operations performed by the system are being logged.

The solution is autonomous and runs on a separate PC, as a rule, in a special security room.

HSM hardware is used for the solutions

Hardware models and brands:

ProtectServer PCIe HSM (PL25) or ProtectServer External HSM 2 (PL25) (manufacturer – Gemalto-SafeNet company)

Custom development

New ideas sometimes require a non-standard approach. Automation means are necessary for highly specialized or unique business processes, or to meet the specific technological requirements. In such cases, custom development is needed.

We provide services of custom development and implementation of program solutions or separate components according to customer’s requirements in the field of technologies connected to card issuing, access systems, and electronic payments.