{"id":3592,"date":"2023-09-07T08:39:00","date_gmt":"2023-09-07T06:39:00","guid":{"rendered":"http:\/\/10.0.1.197\/?p=3592"},"modified":"2024-08-02T06:53:20","modified_gmt":"2024-08-02T04:53:20","slug":"atsec-2023-pci-ssc-meeting","status":"publish","type":"post","link":"http:\/\/192.168.0.78\/atsec-2023-pci-ssc-meeting\/","title":{"rendered":"atsec\u51fa\u5e2d2023\u5e74PCI\u793e\u533a\u4f1a\u8bae\u53d1\u8868\u4e3b\u9898\u8bb2\u6f14"},"content":{"rendered":"\n
atsec\u5c06\u53c2\u52a02023\u5e7411\u670815\u65e5\u81f316\u65e5\u5728\u9a6c\u6765\u897f\u4e9a\u4e3e\u529e\u7684PCI\u4e9a\u592a\u5730\u533a\u793e\u533a\u4f1a\u8bae\uff08PCI Community Meeting\uff09\uff0c\u5e76\u53d1\u8868\u6280\u672f\u8bb2\u6f14\u548c\u5206\u4eab\u3002<\/p>\n\n\n\n
atsec\u7684\u8d44\u6df1\u987e\u95ee\u53d1\u8868\u8bb2\u6f14\u7684\u4e3b\u9898\u5982\u4e0b\uff1a \u672c\u6b21\u4e9a\u592a\u793e\u533a\u4f1a\u8bae\u4e0a\uff0catsec\u5c06\u8bbe\u6709\u5c55\u4f4d\uff0c\u671f\u5f85\u7740\u548c\u4ea7\u4e1a\u7684\u4e13\u5bb6\u5728\u672c\u6b21\u4f1a\u8bae\u4e0a\u4ea4\u6d41\u3002<\/p>\n\n\n\n
Our \u201cKey\u201d Experience in PIN Security \/ P2PE \/ FIPS 140-3<\/strong>
Presented by: Di Li<\/a>, Principal Consultant, atsec (Beijing) information security Co., Ltd This paper is focusing on the key management activities involved in PCI PIN Security P2PE and FIPS 140-3 standards. Regarding key generation and destruction, the paper discusses the general requirements and methods defined in each of the three standards and compares the differences. The section on key loading, key distribution and key establishment explores the different methods of securely transferring a key from one party to another, and provides a rationale for why each standard requires a different approach. The paper also defines each of these methods and provides common scenarios where they apply.<\/p>\n\n\n\n<\/figure>\n\n\n\n