FAQ杂记: Difference between revisions

Revision as of 05:36, 24 March 2025

This content is restricted to authorized users only. Please log in to access additional information.

@@ Line 42: / Line 42: @@
 ** 在每次open和close之间，如果PIN key第二次使用，强制认为开始一个新回话。
 ** 在每次open和close之间，如果MAC key或者MAC key response第二次使用，强制认为开始一个新回话。20230705补充说明：就是说mac key和response mac key可以在不增加ksn的情况下各自使用一次。如果计算一次mac再计算一次response mac，则他们用同一个ksn。同时增加一个方法calculateResponseMac返回计算的mac数组，让调用者自己比较是否正确。
-** Data key也符合上述规则（如果以后遇到，data加密大量数据，无法一次调用完成，可以使用一个open/close才算一个会话。)
+** Data key也符合上述规则
+[上述规则的英文描述，可以直接拷贝给客户。Regarding the DUKPT Implementation and the Definition of a Session (One-Key-Per-Transaction):
+DUKPT (Derived Unique Key Per Transaction) means that each transaction uses a unique key — no two transactions share the same key.
+The definition of a session is as follows:
+Between each open and close operation on a PINPad:
+If any key is used during this period, then the next open is considered the start of a new session, and the KSN (Key Serial Number) must be incremented.
+If no keys are used during the open/close period, then this does not count as a session, and the KSN remains unchanged.
+At the start of a new session, all session keys use a new KSN value.
+If the PIN key is used a second time between one open and close, it is forced to start a new session.
+If the MAC key or MAC response key is used a second time between one open and close, it is also forced to start a new session.
+This means that the MAC key and response MAC key can each be used once per session without increasing the KSN.
+If a MAC is calculated once and a response MAC is calculated once, both use the same KSN. A new method calculateResponseMac is added to return the MAC array so the caller can compare it themselves.
+The Data key follows the same rules above.]
 *低电量警告：当电量低于15%或者剩余使用时间少于3小时都会报
 }}