PIN keys

Personal authentication is the process of validating personal identities in a financial transaction system. The personal identification number (PIN) is the basis for verifying the identity of a customer across the financial industry networks. A PIN is a number that the bank customer enters into an automatic teller machine (ATM) to identify and validate a request for an ATM service.

You can use ICSF to generate PINs and PIN offsets. A PIN offset is a value that is the difference between two PINs. For example, a PIN offset may be the difference between a PIN that is chosen by the customer and one that is assigned by an institution. You can use ICSF to verify the PIN that was generated by ICSF. You can also use ICSF to protect PIN blocks that are sent between systems and to translate PIN blocks from one format to another. A PIN block contains a PIN and non-PIN data. You use PIN keys to generate and verify PINs and PIN offsets, and to protect and translate PIN blocks.

Table 1. DES PIN keys
DES keys	Callable services
PIN class: These keys are used generate and verify PINs and PIN offsets. The keys are double-length keys.
PINGEN	Clear PIN Generate, Clear PIN Generate Alternate, Encrypted PIN Generate, Recover PIN from Offset
PINVER	Encrypted PIN Verify
These keys are used wrap and unwrap PIN blocks:
IPINENC	Authentication Parameter Generate, Clear PIN Generate Alternate, Encrypted PIN Translate, Encrypted PIN Verify, PIN Change/Unblock, Secure Messaging for PINs
OPINENC	Clear PIN Encrypt, Clear PIN Generate Alternate, Encrypted PIN Generate, Encrypted PIN Translate, PIN Change/Unblock, Recover PIN from Offset

Table 2. AES PIN keys
AES keys	Callable services
PIN class: These keys are used generate PINs. The keys can be 128, 192, or 256 bits in length.
PINCALC	DK Deterministic PIN Generate
These keys are used wrap and unwrap PIN blocks.
PINPROT	DK Deterministic PIN Generate, DK PAN Translate, DK PIN Change, DK PRW Card Number Update, DK Random PIN Generate, DK Regenerate PRW
These keys are used generate and verify PIN reference words (PRW).
PINPRW	DK Deterministic PIN Generate, DK PAN Modify in Transaction, DK PAN Translate, DK PIN Change, DK PIN Verify, DK PRW Card Number Update, DK Random PIN Generate, DK Regenerate PRW

Availability notes: AES PIN class keys require z114 or z196 systems with CEX3C with the November 2013 or later licensed internal code or zEC12, zBC12, and later systems with a CEX3C, CEX4C, or later coprocessor with September 2013 or later licensed internal code.