Online Transaction IC Card Terminal

Background
The People's Bank of China and China UnionPay are currently transitioning from common bank cards (i.e., magnetic stripe card) to smart cards. Ideally, by the end of 2015 all issued cards will be financial IC cards. This inevitable change and the rapid growth of e-commerce have increased the likelihood of online shopping for the average consumer, many of whom are now exhibiting concern for the security of online transactions and e-purse top-up operations. Our company seeks to properly address these common questions for consumers everywhere.

Our online transaction IC card solution is designed as a counter for the aforementioned problems. It establishes a safe communication mode between the card and payment platform via USB or audio channel. Hardware-based encryption technology ensures safe input while providing encryption for sensitive data such as card numbers and personal identification numbers (PIN). During the encryption and decryption process, validity tests and integrity tests are rigorously applied. The terminal stores the key securely to prohibit direct access. This highly effective mechanism prevents unauthorized use or replacement of the key.

Solutions for Online Transaction IC Card Terminals
1. IC Card Internet Platform
The IC card internet platform consists of three major components including the online payment system, the smart phone/personal computer, and the transaction IC card terminal (hereinafter referred to as the terminal).

The terminal should be connected to a smart phone or a personal computer to finish online transactions through the internet.  On the browser interface, the terminal holder is allowed to execute different operations to complete communications with the online transaction system.  This system may be connected to banks, vendors, third party payment platforms, public fare collection systems, etc.  The terminal also provides support for mediums such as financial IC cards, transportation cards, and prepaid IC cards issued by third party payment organization.

2. SHHIC IC Card Terminal

Our IC card terminal adopts an audio interface in addition to the traditional USB interface to efficiently communicate with the smart phone.  This technology provides convenient payment services for a large group of mobile phone subscribers.  The terminal accepts input from peripherals such as the keyboard, LCD, USB, and audio interfaces.  Support is provided for contact IC cards, contactless IC cards, and magnetic stripe cards.  The internal security module consists of specialized hardware.  The business logic layer is suitable for the application processes of either PBOC standards or transportation cards.

Features of the SHHIC Terminal
1. USB, audio and other interfaces
2. Contact/contactless dual interface card reader
3. Double track ASIC decoding magnetic card reader
4. 3DES/2048-bit RSA/commercial cryptographic algorithms
5. OLED 128×64, 16-key keyboard, GBK (Chinese Internal Code Specification)
6. Scalable second-generation e-banking
7. One-time password (OTP) generation algorithm.   Time-synchronization or a mathematical algorithm is utilized to generate a new password.  This password is based on the previous password.

Applications
1. E-cash business based on PBOC2.0 standard credit-debit specifications: Offline balance enquiry and online topping up for e-purse
2. Debit and credit business based on PBOC2.0 specification: Online main account enquiry, online payment, personal identification number (PIN) input, transaction data confirmation
3. Online magnetic card business: Online account enquiry, online payment, personal identification number (PIN) input, transaction data confirmation
4. Business based on second-generation e-banking: Online account enquiry / payment / money transfer, transaction data confirmation
5. One-time password business: Based on time-synchronization and previous password
6. One-card in public transit system: Online topping up, balance enquiry, card-card transfer, online transaction for transportation card
7. Third party payment