T/SCCIA 003-2019 Barcode payment acceptance terminal password application technical specification

Scope

Main technical content: This standard describes the password function and security requirements of barcode payment terminals from the perspective of barcode payment acceptance terminals, including the hardware requirements of terminals, barcode payment business functions, product system architecture, cryptographic algorithms, key management, etc. In terms of password and key management, this standard requires that barcode payment terminals must adopt cryptographic algorithms approved by the National Cryptographic Administration and key management mechanisms specified by the standard; in terms of terminal hardware requirements, it requires that terminals must use security chips that have obtained national encryption certification. This standard stipulates that terminals must include a hardware cryptographic module, or be a hardware cryptographic module itself, thereby ensuring the effectiveness of security mechanisms such as password functions and key security. At the same time, this standard also stipulates a six-layer architecture of barcode payment acceptance terminals - application layer, control layer, cryptographic layer, system layer, driver layer, and hardware layer. In addition, this standard also provides selection recommendations for barcode payment acceptance terminals used in different scenarios and with different risk levels.

Development Information

Related Standards