RFE-317

Add support for Aple Tap to Pay (TR31 specification)

The TR31 is a new capability from StrongKey, towards supporting payment processing transactions for Apple Tap to Pay (TTP) on iPhone for Payment Platforms (“TTPoP”) for merchants and payment service providers (“PSP”). This feature has been added as a separate module which will not be included in default SAKA but will be provided as an add on. SAKA TTP modules provides a SOAP and a REST API to perform various operations that enables a merchant to add support for Apple TTP to their applications. The following end points have been added: ( More details can be found here)

• generateKeypair: Generate an elliptic curve (“EC”) digital signature algorithm (“DSA”) 256-bit signing key-pair, using the secp256r1 named curve, to enable signing payment card reader (“PCR”) JavaScript Object Notation (“JSON”) web tokens (“JWT”) to enable TTPoP transactions. The self-signed digital certificate (or public key) of the key-pair is submitted to  apple, who returns it with a unique key identifier (“keyid”) stored within the TR31 database of the appliance;
• updateKeypair:  Updates the signing key pair's key identifier (“keyid”) provided by apple.
• storeDigitalCertificate: Store the key-encrypting key (“KEK”) transport or KEK Transport Authentication certificate chain provided by Apple.
• generateKek: Generate advanced encryption standard (“AES”) 128-bit symmetric key-encrypting keys (“KEK”) for  decrypting ANSI X9.143-2022 TR-31 keyblocks, sent by Apple TTPoP as a precursor to decrypting Card Holder Data CHD and/or PINs.
• updateKek: Update the generated KEK with a unique KEK identifier (“KEKID”) assigned by Apple.
• getPCRToken: Generate a PCR Token – a JWT, valid for a maximum of 48 hours – that can then be submitted by  merchant/PSP applications to their iOS app within Apple’s Proximity Reader framework.
• decryptData: Decrypts the CHD sent by apple

Apart from these there are other web services that have been added to support the management of TR31-related objects within the StrongKey Tellaro appliance. Click here for more information.