encryptedpin.java

POS is a Java&#174 platform-based, mission-critical, ISO-8583 based financial transaction library/fr

/*
 * jPOS Project [http://jpos.org]
 * Copyright (C) 2000-2008 Alejandro P. Revilla
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
 * published by the Free Software Foundation, either version 3 of the
 * License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

package  org.jpos.security;

import java.io.PrintStream;
import java.io.Serializable;

import org.jpos.iso.ISOUtil;
import org.jpos.util.Loggeable;


/**
 * <p>
 * The PIN (Personal Identification Number), is used to authenticate card
 * holders. A user enters his/her PIN on the pin-pad (also called pin entry device)
 * of a terminal (whether ATM or POS). The terminal forms the PIN Block, which
 * is a mix of the PIN and the account number.<br>
 * In a typical environment, the PIN Block (not the PIN) gets encrypted and sent
 * to the acquirer. This Encrypted PIN Block is the typical content of the
 * PIN Data ISO Field (Field 52).
 * This class represents an encrypted PIN, no matter by whom it is encrypted.
 * Typically a PIN is encrypted under one of these three:<br>
 * 1- Under a terminal PIN key (like TPK or DUKPT)<br>
 * 2- Under an Interchange PIN key (like ZPK)<br>
 * 3- Under the the security module itself (i.e. under LMK)<br>
 * This class knows nothing about, who encrypted it.
 * </p>
 * <p>
 * This class represents an encrypted PIN using:<br>
 * 1- The PIN Block (encrypted)<br>
 * 2- The account number (the 12 right-most digits of the account number excluding the check digit)<br>
 * 3- The PIN Block Format<br>
 * </p>
 * <p>
 * The PIN Block Format specifies how the clear pin (as entered by the card holder)
 * and the account number get mixed to form the PIN Block.<br>
 * </p>
 * @author Hani Samuel Kirollos
 * @version $Revision: 2594 $ $Date: 2008-01-22 14:41:31 -0200 (Tue, 22 Jan 2008) $
 * @see SMAdapter
 */
public class EncryptedPIN
        implements Serializable, Loggeable {

    private static final long serialVersionUID = -9117335317030664867L;
    /**
     * Account Number (the 12 right-most digits of the account number excluding the check digit)
     */
    String accountNumber;
    /**
     * This is the ByteArray holding the PIN Block
     * The PIN Block can be either clear or encrypted
     * It is typically DES or 3DES encrypted, with length 8 bytes.
     */
    byte[] pinBlock;
    /**
     * The PIN Block Format
     * value -1 means no block format defined
     */
    byte pinBlockFormat;

    public EncryptedPIN () {
    }

    /**
     *
     * @param pinBlock
     * @param pinBlockFormat
     * @param accountNumber (also functions correctly, if the complete account number with the check digit is passed)
     */
    public EncryptedPIN (byte[] pinBlock, byte pinBlockFormat, String accountNumber) {
        setPINBlock(pinBlock);
        setPINBlockFormat(pinBlockFormat);
        setAccountNumber(accountNumber);
    }

    /**
     *
     * @param pinBlockHexString the PIN Block represented as a HexString instead of a byte[]
     * @param pinBlockFormat
     * @param accountNumber (also functions correctly, if the complete account number with the check digit is passed)
     */
    public EncryptedPIN (String pinBlockHexString, byte pinBlockFormat, String accountNumber) {
        this(ISOUtil.hex2byte(pinBlockHexString), pinBlockFormat, accountNumber);
    }


    /**
     * dumps PIN basic information
     * @param p a PrintStream usually supplied by Logger
     * @param indent indention string, usually suppiled by Logger
     * @see org.jpos.util.Loggeable
     */
    public void dump (PrintStream p, String indent) {
        String inner = indent + "  ";
        p.print(indent + "<encrypted-pin");
        p.print(" format=\"0" + getPINBlockFormat() + "\"");
        p.println(">");
        p.println(inner + "<pin-block>" + ISOUtil.hexString(getPINBlock()) + "</pin-block>");
        p.println(inner + "<account-number>" + getAccountNumber() + "</account-number>");
        p.println(indent + "</encrypted-pin>");
    }

    /**
     *
     * @param pinBlock
     */
    public void setPINBlock (byte[] pinBlock) {
        this.pinBlock = pinBlock;
    }

    /**
     *
     * @return pinBlock
     */
    public byte[] getPINBlock () {
        return  pinBlock;
    }

    /**
     *
     * @param pinBlockFormat
     */
    public void setPINBlockFormat (byte pinBlockFormat) {
        this.pinBlockFormat = pinBlockFormat;
    }

    /**
     *
     * @return PIN Block Format
     */
    public byte getPINBlockFormat () {
        return  this.pinBlockFormat;
    }

    /**
     * Sets the 12 right-most digits of the account number excluding the check digit
     * @param accountNumber (also functions correctly, if the complete account number with the check digit is passed)
     */
    public void setAccountNumber (String accountNumber) {
        this.accountNumber = extractAccountNumberPart(accountNumber);
    }

    /**
     * @return accountNumber (the 12 right-most digits of the account number excluding the check digit)
     */
    public String getAccountNumber () {
        return  accountNumber;
    }

    /**
     * This method extracts the 12 right-most digits of the account number,
     * execluding the check digit.
     * @param accountNumber (PAN) consists of the BIN (Bank Identification Number), accountNumber
     * and a check digit.
     * @return the 12 right-most digits of the account number, execluding the check digit.
     */
    public static String extractAccountNumberPart (String accountNumber) {
        String accountNumberPart = null;
        if (accountNumber.length() > 12)
            accountNumberPart = accountNumber.substring(accountNumber.length() -
                    13, accountNumber.length() - 1);
        else
            accountNumberPart = accountNumber;
        return  accountNumberPart;
    }


}