Development of integrated and hybrid tsm model for the new generation cash registers

Nowadays governments have been developing various infrastructures and technologies in order to control the unregistered economical expenditures. In this context, they have been working on becoming a strong state by means of ensuring better tax adjustments. The New Generation Electronic Cash Register (NG ECR) is a single machine which is the combination of cash register and point of sale (POS) machines. Revenue Administration of Turkey (GIB) approves the usage of this machine of which they published the rules and technical details instead of using all different types of cash registers. In the traditional POS usage, POS machines only connect to the banks. However, the New Generation Electronic Cash Registers first connect to the Trusted Service Manager (TSM) center afterwards to the banks for banking transactions. TSM centers share the related information with Revenue Administration Information System (GIB-BS) servers while recording the transactions on behalf of GIB. Therefore, the infrastructure of online recording of sale transactions is ensured. With this being ensured, banks operate the POS communication arena on their own. However, management of cryptographic keys have characteristics that differ from basic structure to strong and complicated structure due to dependence on traditional technologies and previous banking systems. With the recent regulations at an international scale, it is highly recommended to make the transition to a stronger key management. It is a well-known fact that this recommendation will become mandatory in the near future. This study will examine the secure communication infrastructure of NG ECR and TSM; then, it will recommend a TSM model which has a stronger management key infrastructure for banking services. This model will, at the same time, correspond to both of the TSM working models, which were previously defined by GIB. In addition to the technical instructions published by GIB, the requirements of international standards were also examined in this study in addition to the technical guidelines published by GIB with the system proposed in this study. Entire communications infrastructure will be supported by the same strong key management structure by doing the key management within the TSM systems through the system examined in this study. In bank and POS communication systems, both encrypted communication packets and sensitive data that is separately encrypted in the packet are necessarily made within PIN security standards. Encryption of sensitive data carried between the terminal and the bank is provided with this recommended model. With the installed powerful key infrastructure, TSM centers which hold the operation records on behalf of GIB are also assured not to see the sensitive data carried. In this way, with the payments done with credit cards, sensitive data such as the primary account number (PAN), PIN, etc. is protected by end-to-end encryption and is protected from being obtained by the TSM in the meantime. In other words, packets encrypted by the NG ECR will be carried to the bank without being seen by the TSM, and relevant transactions will be carried out by decrpyting only on the bank's side.