aws-samples / samples-for-payment-cryptography-service

AWS Payment Cryptography Samples

This repos contains samples for AWS Payment Cryptography for - key import, P2PE and Pin (set and verify) flows.

Before starting, ensure that the service is available in the region you want to run the samples in.

Flows

Key Import (Pre Requisite)

Before running the sample application, you will need to import the required keys into AWS Cryptography Service. The samples are setup to run based on keys that will get imported thru the key import app. Refer to key import instructions.

After importing the keys, refer to readme to run the samples.

Point-to-point encryption (P2PE)

This is simulated by Payment Terminal Client which connects to Payment Processor Service. Refer to the test data used by the terminal that contains DUKPT variant, track2 data and KSN.

Following diagram illustrates the flow -

PIN Flows

This is simulated by Pin Terminal Client. There are 2 flows setup on the client -

Set Pin

In this flow, the ATM uses Pin Encryption Key (PEK) to set the PIN with Issuer

Following diagram illustrates the flow -

Set PIN (PEK)

Verify Pin

In this flow, the PinTerminal verifies the PIN via Pin Translator which connect to Issuer for verification.

Following diagrams illustrate the flow -

Contributing

See CONTRIBUTING for more information.

License

This library is licensed under the MIT-0 License. See the LICENSE file.