How can the IPEK be updated in the DUKPT algorithm?

[Caroline-521]

1. update IPEK key by TMK (symetrical)

By default, QPOS is injected TMK in factory. default tmk: 0123456789ABCDEFFEDCBA9876543210.

Server side should use the same TMK as inside terminal to encrypt IPEK keys to get encrypted IPEK and calculate its Key Check Value. Then call the API pos.updateIPEKOperation() to inject it into the terminal.

String demoTrackKsn ="09120200630001E0004C"
String demoTrackIpek="5AF93691729D99703E3F2E386B619DFC"
String demoIpekKcv = TDES.tdesECBEncrypt(demoTrackIpek, "0000000000000000"));
//encDemoTrackIpek = FF811AB9745399D6A5096AC1E6EE0AA7
//demoIpekKcv = 377EE0
String encDemoTrackIpek = TDES.tdesECBEncrypt(tmk, demoTrackIpek)); 
String demoEmvKsn ="09220200630001E0004C"
String demoEmvIpek="FA21E5290EE89881AF360574087496EA"
String demoEmvIpekKcv = TDES.tdesECBEncrypt(demoEmvIpek, "0000000000000000"));
//encDemoEmvIpek = 39A694D57E565D2BDB85447BF856F074
//demoIpekKcv = AE8F91
String encDemoEmvIpek = TDES.tdesECBEncrypt(tmk, demoEmvIpek)); 
String demoPinKsn ="09320200630001E0004C"
String demoPinIpek="0F3E0B885C29062A5C32263A06FB7533"
String demoPinIpekKcv = TDES.tdesECBEncrypt(demoPinIpek, "0000000000000000"));
//encDemoIpek = E1AAE4AB1550A8776CF693BE6EA9C9FB
//demoIpekKcv = 7DD75C
String encDemoPinIpek = TDES.tdesECBEncrypt(tmk, demoPinIpek)); 
//call api to inejct ipek, let keyIndex =0
/* pos.doUpdateIPEKOperation(0,   
        09120200630001E0004C,FF811AB9745399D6A5096AC1E6EE0AA7,377EE0,   
        09220200630001E0004C,39A694D57E565D2BDB85447BF856F074,AE8F91,   
        09320200630001E0004C,E1AAE4AB1550A8776CF693BE6EA9C9FB,7DD75C);*/
pos.doUpdateIPEKOperation(keyIndex,   
        demoTrackKsn,encDemoTrackIpek,demoIpekKcv,   
        demoEmvKsn,encDemoEmvIpek,demoEmvIpekKcv,   
        demoPinKsn,encDemoPinIpek,demoPinIpekKcv);

2. Update IPEK key by RSA (Asymetrical)

Firstly,we need call API pos.generateTransportKey() to exchange the random key by RSA then using random key encrypt IPEK.Server side should use random key to encrypt IPEK keys to get encryptedIPEK and calculate its Key Check Value then call API pos.updateIPEKByTransportKey() to inject into terminal

pos.generateTransportKey(timeout);
// this parameter timeout which unit is second

public void onRequestGenerateTransportKey(Hashtable result) {
        try {
            InputStream priopen = getAssets().open("rsa_private_pkcs8_1024.pem");
            RSA rsa = new RSA();
            rsa.loadPrivateKey(priopen);
            byte[] bytes = rsa.decrypt(QPOSUtil.HexStringToByteArray((String) result.get("transportKey")));
        }catch (Exception e) {
            e.printStackTrace();
        }
 }
//get decryped random key

pos.updateIPEKByTransportKey(keyIndex,   
        demoTrackKsn,encDemoTrackIpek,demoIpekKcv,   
        demoEmvKsn,encDemoEmvIpek,demoEmvIpekKcv,   
        demoPinKsn,encDemoPinIpek,demoPinIpekKcv);

3. Update IPEK key by TR-31

For above parameters,KeyIndex represent key group;
keyType include NEW_KEY_ALL,NEW_KEY_TMK,NEW_KEY_PIN,NEW_KEY_DATA;
keyBlock is TR31 data block(support A and D version) which generated by HSM.

pos.updateKeyByTR_31(int keyIndex,TR31keyType keyType,String keyBlock,int timeout);