SFMS Bank Application Interface Specifications Document ... - IDRBT

More documents

Recommendations

Info

SFMS Bank Application Interface specifications Version 3.0 Appendix A – Digital Sign and Verification For straight through processing of a message, BankAPI requires Block 5A with UMAC information. This section provides information on message signing and algorithms required. SIGNATURE TCS uses PKCS#7 specifications for Digital signatures. This standard describes a general syntax for data that may have cryptography applied to it, such as digital signatures and digital envelopes. Even though PKCS#7 specification specifies syntax for Signed data, enveloped data, signed and enveloped data, encrypted data etc, only PKCS#7 Signed Data is used in SFMS. The PKCS#7 data structure is shown below. PKCS#7 (CONTENT INFO) Content Type Content Indicates the type of content. It is an object identifier, which means it is a unique string of integers assigned by the authority that defines the content type. The value set by TCS is 1.2.840.113549.1.7.2 Content. It consists of Signed – data Content Type PKCS#7(SIGNED DATA ) Version The syntax version number. It shall be 1 DigestAlgorithms Collection of message-digest algorithm identifiers. ContentInfo The content that is signed. The Content Type value set by TCS is 1.2.840.113549.1.7.1 and the Content is “NULL” (detached Signature) Set Of Certificates TCS sets the Signer Digital Certificate Set of CRLs This optional field is not used by TCS Stack of Signer Info algorithm ID Algorithm identifier Parameters Algorithm used to sign certificate. TCS use either SHA1 or MD5 Should not be used. Signer Info Version The syntax version number. It shall be 1 IssuerAndSerialNumber Specifies the signer's certificate algorithm ID Identifies the message-digest algorithm (and Any associated parameters) under which the content and Authenticated attributes (if present) are digested. TCS uses SHA1 or MD5 algorithm AuthenticatedAttributes Set of attributes that are signed (i.e., authenticated) by the signer. TCS sets the following attributes 1) A PKCS #9 content-type attribute having as its value the content type of the Content Info value being signed 2) A PKCS #9 message-digest attribute, having as its value the message digest of the content 3) The signing-time at which the signer performed the signing process. Confidential Uncontrolled when Printed Page 21 of 24
SFMS Bank Application Interface specifications Version 3.0 digestEncryptionAlgorithm EncryptedDigest unauthenticatedAttributes Identifies the digest-encryption algorithm (and any associated parameters) under which the message digest and associated information are encrypted with the signer's private key. TCS uses “RSA Encryption” (1.2.840.113549.1.1.1) The result of encrypting the message digests and associated information with the signer's private key. Set of attributes that are not signed by the Signer. This optional field is not used by TCS Confidential Uncontrolled when Printed Page 22 of 24
Page 1 and 2: Document Number: Copy Number: INSTI
Page 3 and 4: SFMS Bank Application Interface spe
Page 23: SFMS Bank Application Interface spe
Page 27: SFMS Bank Application Interface spe

SFMS Bank Application Interface Specifications Document ... - IDRBT

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?