FISCAL BOX

FISCAL BOX TECHNOLOGY

• Processor Freescale IMX6 ultralite @ 512 MHz
• Operating System Linux @ kernel 3.14.38
• Web Server NGINX
• Database MySQL 5.5.41 Maria DB
• PHP FastCGI implementation FPM PHP 5.5.21
• Motherboard separate from the connector panel (I/O area) to increase the security level of the fiscal section
• 2 Ethernet ports with IEEE 1588 (one for an internal LAN not accessible outside the store and the other for an external WAN connection to AE) for Firewall use
• 1 RS232 serial port (for future implementations)
• 1 USB Master port for a Pen Drive (Export of "detailed memory or DGFE and export of "summarised memory" or tax memory, in CSV format in accordance with regulatory requirements)
• 1 USB slave port (for future implementations)
• Internal Wi-Fi and BT modules (optional for future implementations)
• 3/4G GPRS module (optional for future implementation)

DATA STORAGE DEVICES

• Internal MicroSD reader under seal (in accordance with regulatory requirements) for "detailed memory" or DGFE use up to 32 GB SLC
• External SD reader (Export of "detailed memory or DGFE and export of "summarised memory" or tax memory in CSV format, in accordance with regulatory requirements)
• Tax memory under epoxy resin with secure retention of the "device certificate" issued by AE for signing transmissions

SECURITY DEVICES

• SAM module for data encryption
• Anti-tampering and anti-intrusion system on the main board
• Approved with an electronic tax seal (no lead and tamper-proof label)
• Secure boot
• Management and validation of the signed software being run using standard RSA-2048.

METADATA EXCHANGE PROTOCOL WITH THE CHECKOUT BARRIER

The secure protocol ensures the protection of the data transmitted from a cash register to the FISCAL BOX, reciprocally authenticating and protecting the transmitted data in accordance with the confidentiality, inalterability and authenticity required by the regulations.

• HTTP/1.1 protocol on a secure TLS channel with the following characteristics:
• TLS version 1.2
• Negotiation of TLS encryption parameters with security not weaker than AES-128 (for confidentiality) and SHA-256 (for integrity and authenticity)
• TLS authentication of the FISCAL BOX using a public key with an RSA-2048 security level
• Automatic authentication of the Cash Register through the HTTP Authentication mechanism (RFC-7235), with the Basic scheme (RFC-7617)