ProtectToolkit EFT

ProtectToolkit EFT is an API that enables the easy integration of SafeNet Inc. Mark II EFT payment processing and Card Issuance hardware-based command sets into a host application. In addition, it facilitates direct communication between SafeNet's line of payment system HSMs and the host system.

ProtectToolKit EFT enables users to:

Easily integrate the cryptographic functionality offered by the Mark II EFT Transaction Processing and Card Issuance HSM command set into your host application to accelerate development and integration achieving quicker time-to-market.
Integrate cryptographic functionality for Payment Processing via a straightforward ‘C’ API interface.
Utilize a single API to facilitate transparent host communications to multiple HSMs, either external modules and/or internal PCI adapter or a mix thereof, making your application independent of the HSM type and form factor.
Conveniently integrate standards compliant cryptographic and key management support that meets the payment system security standards of all major card schemes. This includes American Express, JCB, MasterCard and Visa, plus covers the latest technologies such as EMV and Chip Authentication Program (CAP) two-factor authentication.
Leverage ProtectToolkit EFT’s broad platform coverage to activate your HSM-enabled payment solution on multiple strategic operating environments.

Card acquirers, switches and issuers typically employ ProtectToolKit EFT to facilitate the interaction of comprehensive, standards-compliant cryptographic and key management functionality between one or more host systems and one or multiple HSMs.

The functionality delivered with ProtectToolKit EFT assists compliance with the payment system security standards of all major card schemes including American Express, JCB, MasterCard and Visa.

In addition, ProtectToolkit EFT enables load sharing between multiple HSMs, fail over support, plus the ability to easily up-scale payment processing systems.

Comprehensive Command Set

The comprehensive and continually growing functionality delivered with ProtectToolKit EFT enables a broad level of out-of-the-box payment processing and card issuance security.

The functionality provided includes PIN management, message authentication, data encryption and key management for card-based transactions initiated at an ATM or POS terminal or via an Internet channel. Latest security technologies, such as 3DES, EMV, Remote ATM initialisation, DUKPT key management. CEPS transaction processing, as well 3D Secure Internet Payment and CAP authentication.

To view payment processing functionality in more detail, please see SafeNet Mark II command set.
To view card issuance functionalities, please see Card Issuance command set.

Seamless out-of-the-box integration

SafeNet constantly monitors, tests and upgrades its payment systems APIs and Command Sets to ensure compliance with latest Payment Systems standards and their interoperability with the leading global and regional software vendors. This facilitates faster time to market and lower integration costs.

Accelerated development of customized applications

The Software Development Kit (SDK) delivered with ProtectToolKit EFT affords vendors of payment processing and card issuance applications with the quickest path and shortest time to activate their solutions with SafeNet's HSM products.

The SDK provides the dynamic/shared and static software libraries, header files and reference documentation required to compile and link Payment Systems functionality within an application. In addition, sample programs with source code and build instructions assist and accelerate application development.

Two API layers can be chosen from:

The high-level EFT API providing direct ‘C’ function equivalents to the Mark II (International EFT Application), AMB (Australian [APCA] EFT application) and Card Issuance HSM commands
A low-level “Message API” providing a generic, command independent, ‘C’ language interface to the HSM’s native request/response command format. Constructing the specific byte stream for each individual command is the responsibility of the developer.

In addition, the SDK features a convenient test script execution tool, available in both GUI and command-line form, to allow extensive test scripts, written in a simple script language, to be executed at the HSM. Thousands of pre-built test scripts, testing each individual command for both successful operation and forced errors, are included in the package.

Relevant Command Set Integrations

Mark II - that meets global payment processing and EMV standards;
Card Issuance – that supports the personalization of consumer transaction cards (both EMV and magnetic stripe)

Relevant HSMs

ProtectHost White
ProtectServer Gold utilizing ProtectToolkit EFT with Mark II
ProtectServer Orange utilizing ProtectToolkit EFT with Mark II

Technical Specifications

For Cryptographic and Key Management processes please refer to SafeNet's Mark II command set technical specifications.

For Card Issuing cryptographic and key management processes, please refer to SafeNet's Card Issuance command set technical specifications.

Platforms

Windows WIN32, NT 4.0, 2000, XP, Server 2003
Solaris (SPARC), 2.7, 2.8, 2.9
Linux kernel 2.2, 2,4, 2.6 (Intel), Red Hat, Fedora and SuSE
SCO UnixWare 7
AIX 5.2, 5.3