Glossary

ATM And Terminal Operations

ATM

Automated teller machine. In Pinrail terms, this is the physical terminal in the field that talks to a host or switch for transactions, configuration, and status.

Terminal

A deployed ATM or related endpoint identified in Pinrail by terminal-specific metadata such as terminal ID, connector assignment, routing policy, and provisioning state.

Terminal ID

The identifier the terminal presents to the host or switch. It is one of the core lookup keys used for routing, terminal inventory, configuration, and key assignment.

TMS

Terminal Management System. The operator-facing system used to view terminal inventory, connector ownership, routing settings, provisioning outputs, and operational history.

Provisioning

The process of generating or applying terminal configuration artifacts such as host IP, port, protocol, connector ownership, and related deployment settings.

Connector

An integration path between Pinrail and an external terminal-management or monitoring system. A connector can represent a vendor platform, sync job owner, or external source of terminal state.

Route Owner

The party or system responsible for the network or processing path used by a terminal or fleet. In operator workflows, route ownership matters for visibility, responsibility, and revenue or operational attribution.

Vaulting

The cash-management process around loading, storing, balancing, and servicing physical ATM cash. In operator systems, vaulting often intersects with cash forecasting, cash orders, and operational reporting.

Payments, Banking, And Settlement

ACH

Automated Clearing House. A US bank-transfer network used for batched credits and debits. In Pinrail, ACH shows up mainly in settlement and payout workflows rather than in real-time ATM authorization messaging.

Sponsor Bank

The regulated bank partner that provides banking sponsorship, network access, settlement relationships, or compliance coverage for a fintech or processor program.

ISO

This term can mean two different things depending on context:

• ISO in the ATM industry often means independent sales organization, an operator or distributor that places and manages terminals.
• ISO in messaging contexts usually refers to ISO 8583, the card-transaction messaging standard.

When the docs mean the messaging standard, they should say ISO 8583 explicitly.

Processor

The system that sits in the transaction flow between terminals, networks, banks, and operator systems. In Pinrail, this includes the switch layer in the CDE and the app-tier systems that manage terminal operations around it.

Settlement

The process of reconciling and moving funds after transaction activity has been authorized. This is distinct from the real-time authorization path.

Authorization

The real-time decision to approve or decline a transaction request. Authorization happens before settlement and does not by itself move funds.

Stand-In

A processor or network behavior where transaction decisions are made locally when an upstream dependency is unavailable or too slow. Stand-in rules are used to keep critical transaction flows moving during outages or degraded conditions.

BIN

Bank Identification Number. The leading digits of a payment card that identify the issuing institution or routing domain. BIN data is often used in routing, network selection, and issuer identification.

Chargeback

A dispute-driven reversal process, usually initiated through card-network or issuer workflows after a transaction is challenged. Chargebacks are different from normal settlement adjustments and usually carry separate rules and evidence requirements.

Surcharge

The fee charged to an end user for using an ATM outside their preferred or fee-free access model. Surcharge handling affects pricing, settlement splits, operator reporting, and compliance review.

Messaging And Network Protocols

ISO 8583

A common financial messaging standard used for card-based transaction requests and responses. It defines message types, bitmaps, and data elements that processors, networks, and hosts use to exchange transaction data.

NDC

NCR Direct Connect. A terminal messaging style and frame format used by some ATM and self-service device flows. In practical debugging, this usually means terminal traffic that is not plain JSON or REST and must be interpreted at the framed protocol level.

CPS

In the current garage-lab work, CPS refers to the terminal-side configuration and state exchange flow that happens before or around regular transaction processing. It is part of the low-level ATM host conversation, not a public customer API.

Switch

The transaction-routing layer that accepts terminal traffic and decides how to process, acknowledge, inspect, or forward it.

Webhook

An outbound HTTP event delivery from Pinrail to another system. Webhooks let external systems react to terminal, connector, provisioning, or settlement changes without polling.

Security And PCI Scope

CDE

Cardholder Data Environment. The PCI-scoped system boundary that handles sensitive payment traffic or security-relevant processing components. In this workspace, pinrail-cde is the primary in-scope repo.

HSM

Hardware Security Module. A dedicated cryptographic boundary used for sensitive key and PIN operations. Pinrail uses the term both for real production-facing HSM integrations and for bootstrap service layers that orchestrate those operations.

KCV

Key Check Value. A short value derived from a cryptographic key and used to confirm that the expected key is in use without exposing the key itself.

PIN

Personal Identification Number. The cardholder secret used to authenticate ATM and debit transactions. PIN values and related cryptographic material are highly sensitive and belong inside tightly controlled security boundaries.

PAN

Primary Account Number. The card number. This is sensitive payment data and should never be placed in public docs, fixtures, or casual logs.

PCI DSS

Payment Card Industry Data Security Standard. The baseline security standard for systems that store, process, or transmit cardholder data.

PCI PIN

The PCI security standard family focused on PIN processing, cryptographic devices, and key-management controls. This is especially relevant for ATM and debit environments that handle PIN entry or PIN translation flows.