Card Issuing Platform

Issuer side: program config, production, HSM, and the authorization engine

Card Issuing Platform Issuer side: program config, production, HSM, and the authorization engine Issuing platform Secure zone Issuer Core · program mgmt · Issuing platform Issuer Core program mgmt Program Config · BIN / limits · Issuing platform Program Config BIN / limits Card Production · bureau / virtual · Issuing platform › Secure zone Card Production bureau / virtual HSM · keys / PIN gen · Issuing platform › Secure zone HSM keys / PIN gen Activation · state machine · Issuing platform Activation state machine Auth Engine · controls · Issuing platform Auth Engine controls Card Scheme · network · Architecture component Card Scheme network Ledger · holds / postings · Issuing platform Ledger holds / postings define issue keys PIN active authz post Legend Backend Database External Security

Config & lifecycle

  • • Program version pinned at issuance
  • • Card state: produced to active to closed

Secure zone

  • • HSM holds master keys
  • • Clear PIN never leaves the boundary

Authorization

  • • Engine reads cached rules and ledger
  • • Approve places a hold, decline returns a reason

Architecture diagram • Built with Archify • Create yours ↗ • Hover to trace • R route • Click to focus • +/− zoom • M radar • [/] views • P play story • T theme • E export