Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Agnos Framework

  2. Agnos Certification Environment

  3. Agnos Virtual Terminal

Why Agnos choose Agnos?

Portability

A wide variety of platforms with diverse OSs have been integrated, certified and deployed with the Agnos EMV Level 2 stack worldwide, from common embedded platforms to pure exotic hardware.. The Agnos EMV stack runs on top of a HAL - The Generic Platform Interface (GPI) - which allows Agnos software to be deployed with any EMV Level1 ready hardware. The GPI platform instance covers services required to support EMV card processing and acquirer/processor security requirements. The GPI is the cornerstone of Agnos, and enables the development of generic, platform & OS abstract payment applications.

Duality contact/contactless

A normative approach was adopted across the EMV standard and Payment Network legacy specifications to define a common set of services and parameters. A single library implements common EMV Level2 mechanisms from application selection to cryptogram generation. It shares a common data model with supporting acquirer/processor EMV parameters for any merchant context.

Flexibility

Agnos logical architecture supports different physical deployments such as standalone acceptance systems, ATMs, light mobile payment solutions, or even more complex client/server architectures. No assumptions have been made regarding the ICS and payment system regionalization during the architecture and design stages so Agnos may be adapted to any merchant context, for a smooth and sustainable EMV migration.

Security

Agnos offers various levels of security that are integrated during the certification target stages. EMV security relies on PK infrastructure cryptography that is implemented using software or hardware services (depending on platform capabilities). Acquirer/processor security requirements are separated in order to integrate any local or specific needs. They typically rely on Symmetric Key cryptography and key management schemes. Several services have been abstracted to comply with the wide variety of global and local requirements. PCI related services include SRED primitives, and many algorithms such as DUKPT, Master/Session, AES, ECC.

Maintainability

Software maintenance is crucial in the context of a RegTech environment like EMV Level2 certification.  Agnos integrates test procedures to detect potential regressions and a combination of automated and integration tests are used.

Certificability

Agnos is a fully functional and qualified EMV stack, ready to be submitted to Laboratories for the TA certification process. It includes all global Kernels and most local ones (American Express, Union Pay, Discover, EFTPOS, EMVCo, Gemalto, JCB, Interac, MasterCard, Visa, …). The precondition to passing a TA is GPI integration (all hardware services must be connected to the HAL before entering the TA stage). The Agnos Framework and its kernel libraries are constantly qualified and reflect  the most up-to-date test plans and accredited test tool libraries.

References

...