A Generic Remote Key Loading Method for Enhancing Payment Systems

Abstract

The dynamic nature of digital transactions creates a greater need for advanced security mechanisms and protocols for terminal points, especially in payment solutions. Traditional key transfer methods used at terminal points often present challenges in terms of efficiency, scalability, and adaptability for today's advanced content terminals. In this study, an innovative Remote Key Loading (RKL) method is presented as a superior alternative to traditional key injection methods for payment terminals. The proposed RKL system utilizes secure encryption mechanisms to distribute keys remotely, thus streamlining the process and allowing to significantly reduce service costs associated with manual key management. In this context, the key distribution process and cryptographic requirements are discussed in detail, in which the terminals authenticate with the AT-RKL (Authentic Transparent RKL) server - which is the critical component of the proposed system - and after verification, the server coordinates with the client HSM (Hardware Security Module) system to securely transfer the encrypted key information. We also investigate the implementation of RKL Master Keys and public key infrastructure in terminals, focusing on the terminal specific RKL Terminal Key (RTK) derived from each device's unique identifier. The proposed innovative RKL method has the potential to not only provide a secure method for key management but also offer a scalable and cost-effective solution for the payment industry. © 2024 Elsevier B.V., All rights reserved.