What is ISO 13492- Encryption of financial data about?
ISO 13492 describes a data element related to key management which can be transmitted either in transaction messages to convey information about cryptographic keys used to secure the current transaction, or in cryptographic service messages to convey information about cryptographic keys to be used to secure future transactions.
ISO 13492 addresses the requirements for the use of the data element related to key management within ISO 8583-1, using the following two ISO 8583-1 data elements for DEA and TDEA:
- Security related control information (data element 53);
- Key management data (data element 96).
Who is ISO 13492 -Encryption of financial data for?
ISO 13492 on Financial services is useful for:
- Cryptographic currency agencies
- Financial service provider companies
- Bank
Why should you use ISO 13492- Encryption of financial data?
ISO 13492 helps to provide the structure and contents of a data element related to key management that can be conveyed in electronically transmitted messages within the financial services environment to support the secure management of cryptographic keys, where the financial services environment involves the communications between a card-accepting device and an acquirer, and between an acquirer and a card issuer.
ISO 13492 provides key management information to you, including that related to the use and application of ISO 8583-1, i.e. the interchange messages used in processing card transactions, which are referenced in ISO 8583-1.
ISO 13492 accommodates data encryption algorithm (DEA), triple data encryption algorithm (TDEA) and AES as encryption technologies.
ISO 13492 compatibility with the existing ISO standard on bank card originated messages.
What’s changed since the last update?
BS ISO 13492:2019 supersedes BS ISO 13492:2007. BS ISO 13492:2019 includes some technical changes with respect to BS ISO 13492:2007. These include:
- Introduction of the support of the AES encryption algorithm, resulting in a complete restructuring and editing of the previous edition