Online personalization of terminals

Under Online Personalization of terminals ( OPT ) is a procedure for the safe introduction of critical or sensitive data (eg. B. keys ) to ATMs , POS terminals , bank statement printers and self-service terminals . It was standardized by the Central Credit Committee (ZKA; today Die Deutsche Kreditwirtschaft ) as part of the GeldKarte .

Critical data can be:

• cryptographic keys (for storage and use in the Encrypting PIN Pad )
• Account details for debit card operations
• Software updates

and are referred to as personalization elements in the ZKA's OPT standard .

The OPT transactions between these terminals and the personalization point consist of messages in accordance with the ISO-8583 standard, expanded to include the national interests of the ZKA. The messages are cryptographically secured, i. H. Keys are only transmitted in 3DES encrypted form and the message integrity is secured using a Message Authentication Code .

The personalization agency must use a cryptographic hardware security module.