A TDN can be secured with a
If a
The easiest way to protect a TDN with a
Setting up a PKI is more difficult because a private/public key pair has to be generated which requires advanced computer skills. The private key is set for the TDN and the private key has to be kept secret. When a TDN is secured with a PKI a transaction has to be initiated by an application supporting SSL/TLS in order to be able to handle the transaction API call. Every time a transaction is initiated for a TDN protected with a PKI the initiator of the transaxction must satisfy PKI challenge issue by TDNSYS.
When a TDN is issued by the Central Bank to Retail Bank the TDN PKI is set to the public key of that bank digital certificate issued by the central Bank. When a Retail Bank redeems a TDN it must always supply the public key associated with the bank digital certificate and be able to satisfy the PKI challenge issue by TDNSYS.
The API documentation describes the