NBS5xxx User Manual
Contents MANUFACTURER’S DECLARATION OF CONFORMITY................................................ 5 1 EQUIPMENT.................................................................................................. 6 1.1 GENERAL HARDWARE DESCRIPTION..................................................................... 7 1.1.1 NBS5500, CDMA terminal, main characteristics .................................................... 7 1.1.2 NBS5600, GPRS terminal, main characteristics ......................................
2 SOFTWARE................................................................................................. 30 2.1 SOFTWARE ARCHITECTURE................................................................................... 31 2.2 SOFTWARE SECURITY MANAGEMENT ................................................................. 33 2.3 OPERATING SYSTEM (OS)....................................................................................... 34 2.3.1 Bootstrap........................................................
Telium , ® technological excellence, high security performance.
MANUFACTURER’S DECLARATION OF CONFORMITY NBS5xxx Terminals: These terminals comply with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
1 EQUIPMENT NBS5xxx is the mobile terminal for electronic payment in the 21st century. It answers user comfort requirements, as well as the continually growing demands of payment card providers, whether in terms of performance, security or upgradeability. ® NBS5xxx is based on SAGEM Monetel's Telium technology. The NBS5xxx terminal is: • • • • • • ultra-powerful, highly secure, multi-application, very reliable, upgradeable, easy to operate.
1.1 GENERAL HARDWARE DESCRIPTION 1.1.1 NBS5500, CDMA terminal, main characteristics Main processor Crypto processor Internal memory – – – ARM9 32-bit RISC rated at 200 MIPS Crypto microcontroller: 50 MIPS FLASH: 16 Mb – SDRAM: 16 Mb Main smart card reader – – – – – – – – – Synchronous and asynchronous; clock frequency: 3.57 MHz, 7.14 MHz and 14.28 MHz Vcc = 5V, 3V and 1.8V asynchronous clock frequency 3.57 MHz, 7.14 MHz and 14.28 MHz Vcc = 5V, 3V and 1.
1.1.2 NBS5600, GPRS terminal, main characteristics Main processor Crypto processor Internal memory – – – ARM9 32-bit RISC rated at 200 MIPS Crypto microcontroller: 50 MIPS FLASH: 16 Mb – SDRAM: 16 Mb Main smart card reader – – – – – Synchronous and asynchronous; Clock frequency: 3.57 MHz, 7.14 MHz and 14.28 MHz Vcc = 5V, 3V and 1.8V – asynchronous Clock frequency: 3.57 MHz, 7.14 MHz and 14.28 MHz Vcc = 5V, 3V and 1.
1.1.3 NBS5700, BLUETOOTH terminal, main characteristics Main processor Crypto processor Internal memory – – – ARM9 32-bit RISC rated at 200 MIPS Crypto microcontroller: 50 MIPS FLASH: 16 Mb – SDRAM: 16 Mb Main smart card reader – – – – – – – – – Synchronous and asynchronous; Clock frequency: 3.57 MHz, 7.14 MHz and 14.28 MHz Vcc = 5V, 3V and 1.8V asynchronous Clock frequency: 3.57 MHz, 7.14 MHz and 14.28 MHz Vcc = 5V, 3V and 1.
1.1.
• Easy integration of the NBS5xxx in all types of business thanks to the thermal printer's silence, a compact footprint and excellent ergonomics. The NBS5xxx has been designed to make maintenance easy and improve reliability.
1.2 DETAILED HARDWARE CHARACTERISTICS ® 1.2.1 Processors - the power of Telium technology "A CIRCUIT BOARD BUILT INTO A CHIP".
1.2.2 Data security 1.2.2.1 Equipment design The terminal was designed with the goal of resisting tampering, in order to keep the confidential character of sensitive data (keys or confidential code), and to delete this data as soon as a tamper attempt is detected. Tamper resistance • All the data are inside the crypto processor and are thus physically protected by the chip. This prevents the reading of secret bank keys and confidential codes.
c) Once the software is loaded, the crypto processor checks the loaded software's certificate and signature. This operation constitutes the authentication. If the loaded software is authentic, it is accepted. If this condition is satisfied, the downloading of software into an NBS5XXX using an LLT or a TMS operates the same way as for other products in SAGEM Monetel's EFT range. NOTE: "LLT" and "TMS" are described in the section "Loading software". 1.2.2.
1.2.3 The isolation mechanism by electronic locking system Isolation Read/write isolation is obtained by USER confinement in the application software memory space. Inter-software isolation is controlled by an MMU (Memory Management Unit). MMU features • Material protection • Total inter-software protection (read/write) • Code protection Inviolable memory protection The controller checks each access to the memory.
1.2.4 Memory capacity FLASH: 16 Mb SDRAM: 16 Mb 1.2.5 Data storage time The NBS5XXX has a lithium battery Characteristics 3 volts 500 mAh welded Forecast battery duration: 7 years (with the following assumptions: 1 year storage maximum as from the manufacturing date, at 25°C, and 45 days/year not powered at 25°C) 1.2.6 Multimedia Card (MMC) or Secure Digital card (SD Card) The terminal has one connector capable of receiving an MMC or SD Card.
1.2.7 Smart card readers The NBS5XXX can be equipped with: • 1 main smart card reader named CAM1, • 1 secondary smart card reader named CAM2, • 4 positions for SAM readers. CAM readers • Main reader CAM1: Situated on the front, this allows easy introduction and removal, leaving the card visible to the user. • Secondary reader CAM2: It is situated under the terminal. The card fits in easily. The card is hidden by a flap that completely blocks access.
Examples of usable cards: • asynchronous T=0 • asynchronous T=1 • synchronous GEM Plus: GPM 416/896 5V and compatible GPM 271 GPM 2k (S10) GPM 8k (S9) GFM 2k (S8) GFM 4k (S8) SIEMENS: SLE 4404 SLE 4418 (S9) SLE 4428 (S9) SLE 4432 (S10) SLE 4436 SLE 4442 (S10) SLE 5536 etc. (the material and logical base of NBS5XXX is open, and enables the development of other synchronous drivers). SAM readers (Security Access Module) 4 SAM readers can accept cards in "microsim ID000" (minicard) format.
1.2.8 Magnetic stripe card reader Swipe reader Large acceptance range: Slow swipes at 10 cm/sec, Fast swipes at 100 cm/sec. Reader type Manual Tracks read Track 2 and 1 Card formats accepted ISO 7810, 7811-1, 2, 3, 4 & 7813 Card swipe speed 10 cm/s to 100 cm/s Reading error rate < 0.
1.2.
1.2.10 Display screen Graphic display: 128 x 64 pixels Active zone: 57 x 36 mm Backlit FSTN technology DISPLAY 128 x 64 Type LCD Display area 55 x 30 mm Number of pixels 128 x 64 Character size (example) 21 char/line* 6 x 8 pts 16 char/line* 8 x 10 pts 12 char/line* 10 x 12 pts 2.46 x 3.6 mm 3.28 x 4.5 mm 4.10 x 5.
1.2.11 Printer Easy and fast paper loading BAR TYPE THERMAL PRINTER SILENT < 55 dB at 1 m FAST: 24 characters/line More than 15 lines/second in alphanumeric print mode Fast paper-advance function: More than 40 mm/s GRAPHICS Character size > 3 x 2 mm (H x w) Character font Software defined Number of characters/line 24 in standard mode Printing attributes Printing colour Modes: condensed (48 characters/line), bold, double height, double width, etc.
1.2.12 Modem Modem V22, V22b, V32, V32b, (respectively 1200, 2400, 9600, 14400 bauds) Full duplex synchronous or asynchronous Full software setting AT compatible Built into the terminal, communicates with the STN.
1.2.13 Power supply unit Wall-mount unit (possible accessory: BA-USB travel adapter) Standard, rectified regulated Meeting French and international safety standards The power supply unit is adapted to the constraints and standards in force in the country of use.
1.2.14 External ports available on the base 1.2.14.1 NBS5010B (Charging base only - no external ports) • Power supply jack input The connectors visible on the NBS5010B base are not functional, except the power supply jack. 1.2.14.2 NBS5020B (Com port and dial-up modem) The external appearance of the NBS5020B base is the same as the NBS5010B.
1.2.14.
1.2.14.4 NBS5040B (Bluetooth base – Dial-up) • • • • Phone line input Phone line tapping Serial port (fast serial port for many possible connections: till, cheque editor, PC, external modem, etc.
1.2.15 External ports available on the terminal Slave mini-USB (function), Master mini-USB (host), Conform to USB1.1 standard Slave mini-USB Electronic interface Number of wires Master mini-USB Power supply Slave USB 1 = 5V 2 = D– 3 = D+ 5 = GND Travel battery charger Master USB 1 = 5V regulated 100 mA 2 = D– 3 = D+ 5 = GND Mechanical Interface Type B mini-USB socket Type A mini-USB socket Logical Interface 12 Mbps max Low speed: 1.5 Mbps High speed: 12 Mbps USB 1.1 USB 1.
1.3 PERIPHERALS • ELC10 equipment range: Cheque editor/reader (see instructions, reference 87 714 586 on ELC10).
2 SOFTWARE ® The terminal, equipped with Telium technology, has a structure that supports several software applications coexisting without mutual interference. The OS is multitask, real-time and pre-emptive. The inputs/outputs are managed under interruptions. This means the peripherals can be processed simultaneously, and thus improves the terminal's performance. It can be downloaded to FLASH memory.
2.
The software architecture is divided into three levels: • System • Multi-application manager • Independent applications The system manages access to all the terminal's peripherals. Access is completed via standard C primitives for all the input/output peripherals (keypad, printer, etc.) and via specific primitives for other peripherals (smart cards and magnetic stripe cards). Further, the system takes charge of memory management.
2.2 SOFTWARE SECURITY MANAGEMENT The terminal is designed to execute only authentic software and to do this in a ranked context. The terminal performs the following checks a) When loading software, the terminal checks: • Its authenticity, which is verified by checking its signature using the RSA algorithm with a 1024-bit key. b) Before running software, the terminal checks: • Its presence, which is verified by looking for the software's identity. • Its integrity, which is verified by checksums and CRCs.
2.3 OPERATING SYSTEM (OS) 2.3.1 Bootstrap The bootstrap is resident. The bootstrap very briefly takes control of the terminal following each powering up to perform the initialization and the self-test. Then it automatically runs the OS which in turn starts the applications manager. Thus the Bootstrap provides the following functionalities: • • • Memory and checksum self-test Local loading of the OS if absent OS authenticity check and start-up.
2.3.2 Operating system (OS) characteristics The OS is (down)loaded into the memory. It is upgradeable. After a few fractions of a second following powering up, it takes control. It checks the presence, integrity and authenticity of the system components and application software present in the terminal.
® 2.4 TELIUM MANAGER ® The main functions offered by Telium manager are the following: – Application software management – Terminal initialization – Terminal maintenance – Card recognition and routing to the application software It selects the application software: – EMV application software (complies with EMV2000 level 2 (EMV4.0) – non-EMV application software In France, it is compatible with the following environments – Health – French banking – "Private applications" 2.4.1 Terminal initialization 2.4.
2.4.2 Terminal maintenance The terminal has maintenance functions for... • • • Properties Local loading Diagnostics 2.4.2.1 Properties The properties function is used to print the following tickets: • • • List of applications software loaded into the terminal: version number, checksum, etc. The applications manager prints this information for itself and for the operating system. Applications software call time: remote collect, loading, etc.
2.5 SOFTWARE LOADING 2.5.1 Local loading and downloading Software can be loaded: • Locally via the serial port (COM or USB): local loading. • Remotely via the switched telephone network (STN) or by X25: downloading. The techniques used: • TCP/IP • data compression, • authenticity checking, • memory allocation management, etc. best optimize the (down)loading operations.
2.5.3 Loading and managing memory allocation in the terminal • Before (down)loading, the system checks that the memory space is available. • Software loading (possibly compressed) is done into flash. If software is deleted, the system frees the space. If software is upgraded, the system loads the new software, checks it and then deletes the old. The whole memory zone remains used and usable. No zone is reserved for upgrades.
2.5.5 Starting the download The download request can be made from: • The applications manager at the business's request. This is especially the case of a program update or the addition of new software into the terminal's memory. In this case the procedure is simplified to the maximum. Thus, the user starts the call from the applications manager by choosing the upgrade function from the dialogue menus and keys. Dial-up and connection to the server are automatic.
2.6 DEVELOPMENT WORKSTATION Introduction Using this development workstation, applications software can be produced for the NBS5XXX range of terminals. The software is written in high level C language in a multi-applications environment. SAGEM Monetel makes available all the software and equipment required for development. This includes the documentation. Also, training sessions are offered.
2.
2.8 APPLICATIONS SOFTWARE CATALOGUE, FRANCE Developed in C language, according to the new techniques of the object-oriented design method, software operating on terminals of the EFT10, EFT20 and EFT30 ranges completes the functionalities of terminals ® based on Telium technology. The multi-application function is managed by the applications software manager. 2.8.1 Standard bank software B0' CB V5.2 local payment Functionalities • • • • • • • Initialization by swiping the retailer card only.
2.8.2 Bank software EMV CB V5.2 local payment Functionalities • • • • • • • • • • Initialization by swiping the retailer card only.
2.8.3 Other software A series of software programs enhances the terminal's basic functions. Applications software isolation ensures the inviolability of the software present in the terminal. For example, there are: • Programs derived from the credit card Standard software: - Bank-specific programs with their own options in addition to the "standard" options - Service extensions 5.
3 TERMINAL MANAGEMENT SYSTEM NBS Payment Solutions 46/55 User Manual
3.1 TERMINAL MANAGEMENT SERVER (TMS) TMS = (Terminal Management Server) TMS functions The TMS provides management functions for terminal equipment, i.e. • software downloading • parameter downloading • equipment monitoring (equipment status, alarms, software present, etc.) Thanks to its modular architecture and the use of market standards, the TMS application can be adapted to the amount of equipment to be managed.
3.2 REMOTE DIAGNOSTICS AND MAINTENANCE REMOTE DIAGNOSTICS AND MAINTENANCE REMOTE DIAGNOSTICS AND MAINTENANCE CURATIVE PREVENTIVE The terminal's OS can save information on In normal operation, periodic collection of the the terminal's use and upload it to the server. This is information contained in a terminal can enable the given in the form of incident counters organized by detection of deterioration in the terminal's typology, and others in the form of events.
NBS Payment Solutions 49/55 User Manual
4 SERVICES NBS Payment Solutions 50/55 User Manual
4.
5 ANNEXES NBS Payment Solutions 52/55 User Manual
5.1 STANDARDS NBS5XXX complies with: The new "Radio and Telecommunications Terminal Equipment" directive (known as R&TTE 99/05/EC) French and European standards on personal safety (EN 60950), French and European standards on the disturbance produced by equipment and immunity characteristics, the specifications of the GIE Cartes Bancaires (French credit cards).
5.
The descriptions, illustrations and characteristics in this document are only given for information and not contractually binding. NBS Payment Solutions – the Division of NBS Technologies Inc. reserves the right to make any alterations without prior notice. All rights of reproduction, adaptation, execution, and translation reserved in all countries. The NBS Payment Solutions trademarks and logos are the property of NBS Payment Solutions – the division of NBS Technologies Inc.
