kal logo mobile

Search KAL
  • Startseite
  • Kontakt

Background: XFS4IoT ‒ the new version 4 API standard for ATMs

XFS4IoT is the new major version of the XFS global standard for ATMs. The specification created by the global CEN XFS committee is now available for preview on GitHub.

This new version takes a major leap forward when compared with XFS version 3. It is OS-agnostic, built on modern standards, cloud-native and has built-in security. It allows the ATM’s hardware devices to be exposed directly into a cloud application as a service – securely. XFS4IoT facilitates the next generation of software and hardware architectures for ATMs.

It enables banks to reduce costs, is quicker to deploy and easier to maintain, and is more secure.

 

Introducing KAL's XFS4IoT SP-Dev ‒ the new framework for creating XFS4IoT services

KAL's XFS4IoT SP-Dev is a new, free and open source development framework for creating XFS SP services for ATMs. It supports ATM hardware in both edge-based and cloud-based environments. This framework makes it quick and easy for hardware manufacturers to open up their hardware for use by new XFS4IoT applications.

 

Key benefits

The XFS4IoT SP-Dev framework offers banks and hardware vendors many benefits:

 

It’s open

The all-new XFS4IoT SP-Dev framework is open source and will be developed with contributions from a cross-industry group of companies meeting the needs of both hardware manufacturers and ATM deployers for both existing and future architectures. The SP-Dev framework will be available under the MIT open source license. It will allow ATM manufacturers and ATM component vendors to create XFS4IoT SPs quickly using the new open source framework.

open source
 

It works with any operating system

XFS4IoT SP-Dev is completely OS-agnostic and removes the current dependency of XFS on Windows. Services may now be implemented using any operating system including, of course, Windows, but also Linux, Android and others. The multi-platform .NET-Core based XFS4IoT SP-Dev framework can run on anything, from full PC systems to Arm-based SoC embedded hardware.

Linux and Windows icons
 

It works with hardware from any vendor

XFS4IoT is a multivendor framework. It allows XFS version 4 SPs to be developed and created by any company. The XFS4IoT SP-Dev framework makes it much easier to develop new SPs in a standard and fully compliant manner.

manufacturers icon
 

It works with hardware from multiple vendors at the same time

Each ATM device is managed by XFS4IoT as a separate web service. This means, for instance, that a card reader company can create its own XFS4IoT SP independent from an Encrypting PIN Pad company that can create its own SP. These independent SPs can then co-exist inside a single ATM or can operate without being physically integrated at the hardware level. This opens up the possibility of flexible new architectures where a core ATM may be fortified with components from multiple other hardware companies, integrated and held together by a software application running in the cloud.

migrate icon
 

It offers enhanced security

The XFS4IoT SP-Dev framework implements the new end-to-end support for device authentication that is built in to the XFS4IoT specification, providing a whole new level of security for XFS systems. The specification allows hardware secure elements to be embedded inside each ATM component, such as the cash dispenser. Encryption keys are distributed to a key vault inside the hardware secure element of each device using the TR34 open standard for key distribution. Secure cash dispensing in an XFS4IoT environment requires a security token protected by an HMAC to be presented to the hardware device. This will make black box attacks, for example, a thing of the past.

security icon

It deploys the latest technologies

XFS4IoT SP-Dev works with the latest modern technologies for servers and clients, such as .NET Core (a free OS-agnostic open source framework from Microsoft), WebSocket communications, TLS network security, TR34, HMAC device security, etc. The new specification and framework support cloud-computing, as well as edge-computing architectures.

technology
 

ATM manufacturers

Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein! if you would like to contribute to the open source project and want to use the SP-Dev framework to create XFS4IoT SPs for your ATM hardware.

Financial industry hardware component vendors

Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein! if you would like to contribute to the open source project and want to use the SP-Dev framework to create XFS4IoT SPs for your hardware components. It is even possible to expose XFS4IoT services directly from device firmware.

ATM software vendors

We invite you to Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein! to help shape the SP-Dev framework. You may consider developing SPs yourself for specific hardware, or you may also wish to use XFS4IoT SPs created by workgroup members to test your application software.

Systems Integrators

XFS4IoT is the future direction for creating the next generation of ATM and kiosk solutions. Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein! and help shape the SP-Dev framework.

Join the workgroup

KAL has created a new workgroup to steer the XFS4IoT SP-Dev project. If you are interested in joining, please Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein! and we’ll get in touch. We would like to hear from hardware vendors, software developers, test software developers, application developers and any other ATM-related organization.

The next workgroup video conference call will take place using Microsoft Teams on 7 December 2021, at 1300 UK, 0800 US EST, 2200 Tokyo time. The call will be 60 minutes long. No NDAs required.

We will send out Outlook invitations before the meeting. Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein! if you have not yet been added to the workgroup mailing list.

Get in touch

Please Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein! for more information.