web/boltcard
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions
boltcard/docs/SPEC.md
Peter Rounce 037788d6de initial commit
2022-08-01 10:36:32 +00:00

1.3 KiB
Raw Blame History

Bolt card specification

The bolt card system is built on the open standards listed below.

Bolt card interaction

  • the point-of-sale (POS) will read an NDEF message from the card, for example
lnurlw://card.yourdomain.com?p=A2EF40F6D46F1BB36E6EBF0114D4A464&c=F509EEA788E37E32
  • the POS will call your server here
https://card.yourdomain.com?p=A2EF40F6D46F1BB36E6EBF0114D4A464&c=F509EEA788E37E32
  • your server should verify the payment request and issue an LNURLw response

Server side verification

  • for the p value and the SDM Meta Read Access Key value, decrypt the UID and counter
  • for the c value and the SDM File Read Access Key value, check with AES-CMAC

decrypt and cmac steps

  • the authenticated UID and counter values can be used on your server to verify the request
  • your server should only accept an increasing counter value
  • additional validation rules can be added at your server, for example
    • an enable flag
    • payment limits
    • a list of allowed merchants
    • a verification of your location from your phone
  • your server can then make payment from your lightning node