Remote Key Injection
(RKI)
SUNMI Key Injection Solution
Remote Key Injection
(RKI)
SUNMI RKI
SUNMI RKI is a cloud-terminal integrated system designed for
secure, efficient and convenient key injection.
Keys are used to protect transaction data during the
payment process, and key management is often a
complex task. SUNMI RKI simplifies this matter more
efficient while ensuring safety.
Through SUNMI RKI, you can remotely, batch, and
securely manage key injection, saving time and
money.
The device does not need to be shipped back and
forth through logistics, and can even be integrated
with payment applications to form an integrated
solution, allowing you to deploy the device more
flexibly and conveniently on time.
Multiple Types of Clients We Serve Now
SUNMI RKI has served many types of customers worldwide.
We will be committed to providing, secure, and convenient
remote key injection services. Help our customers save
costs and improve efficiency
Bank Payment company Software vendor Service Provider Integrator
Different Scenario
——Bus
Country: Guatemala
Customer Type: Acquire/Payment Gateway
Scenario: POS on Buses
Background: All POS have been deployed to the bus.
According to the local VisaNet requirements, all devices
need to inject keys
Problem: It’s impossible to take all POS back to inject
keys by manual, and put it back to bus
What we do: Through SUNMI RKI, customer can inject
keys remotely. In addition, with the automatic key
download function, the bus driver no need to click any
button to download the key.
Different Scenario
——Taxi
Country: The United Arab Emirates
Customer Type: Payment Software
Scenario: POS on Taxi
Background: Customer need to change Payment Gateway,
the keys also need to be changed.
Problem: It’s impossible to take all POS back to inject
keys by manual, and put it back to Taxi
What we do: Through SUNMI RKI, customer can inject
keys remotely. In addition, with the automatic key
download function, the Taxi driver no need to click any
button to download the key.
Different Scenario
——Catering
Country: The United Kindom
Customer Type: Payment Software
Scenario: Retail & Restaurant
Background: Customer urgent to inject key to delpoy
without unpacking by merchant.
Problem: Customer has no KIF to do key injection neither
by manual nor remote, It’s also impossible to build a KIF to
do so.
What we do: Through SUNMI RKI, customers can use the
PCI compliant SUNMI KIF to inject keys for merchants.
Usage methods
——API intergration
Country: Philippines
Customer Type: Payment Software
Scenario: Retail & Restaurant
Background: Customer has need to intergrate key
injection in to their payment APP.
Problem: Customer has no KIF to do key injection neither
by manual nor remote, It’s also impossible to build a KIF to
do so.
What we do: SUNMI RKI provide APIs and SDK to
intergrate, customer can implement key injection and
payment in one APP, no need to operate twice on different
APP.
Usage methods
——Automatically Download Function
Country: UAE
Customer Type: Telecom
Scenario: Retail & Restaurant
Background & Problem: Customer will deploy multiple
devices via partnered ISVs and PSPs into a large
geography. Since they are not a Bank/Acquirer existing KIF
was not available so they opted for RKI. For operations
team to stage the device pre-installation and manually
download using RKI was also an operational inefficiency for
which we developed Auto-download feature on the RKI
portal.
What we do: SUNMI RKI provide Automatically download
Function to the customer, so that the merchant can use
the POS without any operation.
Operational Process
SUNMI RKI architecture(Local Cloud)
SUNMI RKI architecture(Private Cloud)
SUNMI RKI architecture(Global Cloud)
SUNMI RKI Main Features
Inject Key to all Types of SUNMI Payment Devices
Safely, Easily, Conveniently
Secure
PCI PIN and P2PE certified KIF. PCI PIN and P2PE certified self-built CA.
PCI PIN and P2PE certified RKI solution. FIPS 140-2 level 3 and PCI PTS HSM certified HSMs.
Convenient
Quick and efficient: online operations, simple procedures, and visible progresses.
Automatic
Inject keys without disturbing merchants through simple configuration.
Reliable
Backup HSMs and servers in case of power outage and equipment crash.
Cost efficient
Compared with LKI, you will see a cost reduction in labor, logistics and time when using RKI, without compromising the
overall efficiency.
Flexible
API support cloud to cloud integrate and SDK support end-to-end integrate.
Passed PCI certificate
No more complex process
Automatically Download Function
Devices will download
Keys automatically by
creating a task.
Several Backup
Other Feature
Optional Tool
SUNMI KLD（P2）has PCI-
PTS certificate,
It can encrypt sensitive Key
and exchange Key with
SUNMI RKI
Our Supplier
RKI system overview
Certificates Structure
Support all types of SUNMI Payment Devices
Key Injection in the Factory
Summarization
SUNMI key injection solution, self built CA/RA, and self built KIF have all
passed PCI authentication.
Currently, the solution has served over a hundred financial clients
worldwide.
Among them, SUNMI Factory injection key scheme has helped customers
deploy nearly 200,000 devices, saving them a huge amount of
transportation, construction, labor costs, and deployment time.
Preparation——Way to send Key
• Key must be seperate to 2 or 3 component.
• each component must be package in the envelope and send by post
• each component must be send to different SUNMI Key Custodian
• The address information of SUNMI Key Custodians is as follow:
• KC1: To: Astro Yang/ +8618575507574 E-mail: [Link]@[Link] Postal code:
518055 Address:1302 Tianlong Building, 33 Xiandong Road, Nanshan District,
Shenzhen City, Guangdong Province, China
• KC2: To: Liang Cao/ +86-13006631607 E-mail: caoliang@[Link] Postal code:
518055 Address:1302 Tianlong Building, 33 Xiandong Road, Nanshan District,
Shenzhen City, Guangdong Province, China
• KC3: To: Ethan Peng/ +8613428683377 E-mail: penghuikang@[Link] Postal
code: 518055 Address:1302 Tianlong Building, 33 Xiandong Road, Nanshan District,
Shenzhen City, Guangdong Province, China
Preparation——Key information
Key information must include as follow:
• Key Value: for each component
• KCV: for each component and complete key KCV
• Key Type: BDK/IPEK/TMK/KEK... (DUKPT & MK/SK)
• Algorithm: 3DES/AES
• Key length: 16/24/32 (Different based on Algorithm and Key Type)
• Key index: which index need to be inject
• Test case: tell SUNMI how we can validate the key is finally can be
used in your APP, maybe it’s a demo, or a payment app with test
account, also provide the test guide to help us to validate.
Factory Process
In the Factory, we have a completely process to make sure the key will be injected correctly, the
mainly process is follow:
• KLD management:
• We provide a separate KLD for each customer, and there will never be multiple customers
sharing the same KLD, which also eliminates the possibility of key injection errors.(We will
provide several KLDs for you only if the Hardware amount is very big)
• We have strict KLD management regulations to ensure that every KLD device can be
safely stored, taken out, used, and returned
• Injection management:
• The factory is an assembly line operation, ensuring that injection keys are not missed
• During the injection process, the KLD will still be locked in the safety suitcase to ensure
that the KLD device will not be modified by the operator
• Check Process:
• In the final process of production, the factory will have an check process to confirm that
the key has been correctly injected
Customer Case
Country: South Africa
Customer Type: Payment Gateway
Background: Customer want to deliver the POS to
merchant directly without any preparation, include Key
injection.
Problem: Customer has no KIF to do key injection.
What we do: SUNMI Inject IPEK during device production
in the factory.
Customer Case
Country: South Africa
Customer Type: Payment Gateway
Background: Customer has their own RKI system, they
request SUNMI to inject KBPK into the device, and send
back to them, in order to achieve their RKI solution.
Problem: Customer need a KBPK to achieve their own RKI
solution.
What we do: SUNMI Inject random KBPK during device
production in the factory, then send to the customer.
Locak Key Injection
(LKI)
Key Loading Device(KLD)
Need to charge
SUNMI KLD（P2）has PCI-
PTS certificate,
It can help you to inject key
in your secure Room.
THANK YOU