scope:

A FINREAD card reader is specified as interoperable and vendor independent. This is one of the main targets of the FINREAD project. To reach this target, the FINREAD specification defines a Virtual Machine to enable a hardware independent platform for FINREAD card reader applications (FCRAs / FCRIAs). Nevertheless, there is still the need to distribute and download these applications in a standardised way. In addition, in part 2 of this CWA - Functional requirements and in part 3 of this CWA - security requirements the download of new core software versions is specified. To guarantee the authenticity of a download, each software download is controlled by certificates. To verify the certificates, a FINREAD card reader is delivered with a set of public key certificates. These keys, together with the certificates, can be changed and new keys can be downloaded to an FCR.