EMV Contactless Specifications for Payment Systems
|
|
- Kathleen Cook
- 5 years ago
- Views:
Transcription
1 EMV Contactless Specifications for Payment Systems Book C-5 Kernel 5 Specification Version 2.6 February 2016
2 Kernel 5 Spec v2.6 Legal Notice Unless the user has an applicable separate agreement with EMVCo or with the applicable payment system, any and all uses of these Specifications is subject to the terms and conditions of the EMVCo Terms of Use agreement available at and the following supplemental terms and conditions. Except as otherwise may be expressly provided in a separate agreement with EMVCo, the license granted in the EMVCo Terms of Use specifically excludes (a) the right to disclose, distribute or publicly display these Specifications or otherwise make these Specifications available to any third party, and (b) the right to make, use, sell, offer for sale, or import any software or hardware that practices, in whole or in part, these Specifications. Further, EMVCo does not grant any right to use the Kernel Specifications to develop contactless payment applications designed for use on a Card (or components of such applications). As used in these supplemental terms and conditions, the term Card means a proximity integrated circuit card or other device containing an integrated circuit chip designed to facilitate contactless payment transactions. Additionally, a Card may include a contact interface and/or magnetic stripe used to facilitate payment transactions. To use the Specifications to develop contactless payment applications designed for use on a Card (or components of such applications), please contact the applicable payment system. To use the Specifications to develop or manufacture products, or in any other manner not provided in the EMVCo Terms of Use, please contact EMVCo. These Specifications are provided "AS IS" without warranties of any kind, and EMVCo neither assumes nor accepts any liability for any errors or omissions contained in these Specifications. EMVCO DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT, AS TO THESE SPECIFICATIONS. EMVCo makes no representations or warranties with respect to intellectual property rights of any third parties in or in relation to the Specifications. EMVCo undertakes no responsibility to determine whether any implementation of these Specifications may violate, infringe, or otherwise exercise the patent, copyright, trademark, trade secret, know-how, or other intellectual property rights of third parties, and thus any person who implements any part of these Specifications should consult an intellectual property attorney before any such implementation. Without limiting the foregoing, the Specifications may provide for the use of public key encryption and other technology, which may be the subject matter of patents in several countries. Any party seeking to implement these Specifications is solely responsible for determining whether its activities require a license to any such technology, including for patents on public key encryption technology. EMVCo shall not be liable under any theory for any party's infringement of any intellectual property rights in connection with these Specifications. February 2016 Page ii
3 Kernel 5 Spec v2.6 Contents 1 Introduction Scope Audience Volumes of the Contactless Specifications Reference Materials Overview Conventions Terminology Overview of the Kernel 5 Approach Three Transaction Modes EMV Mode Magstripe Mode Legacy Mode Transaction Processing High Level Transaction Flow Implementation Options and Acquirer Options Implementation Options Acquirer Options Kernel Activation Transaction Initialisation Initiate Application Processing Read Application Data Terminal Risk Management Contactless Limit Check CVM Required Limit Check Floor Limit Check Random Transaction Selection Exception File Check Processing Restrictions Application Usage Control Check Application Expiration Date Check Application Effective Date Check Terminal Action Analysis Completion EMV Mode GENERATE AC Command Offline Data Authentication CVM Processing February 2016 Page iii
4 Kernel 5 Spec v Transaction Outcome Completion Magstripe Mode GET MAGSTRIPE DATA Command CVM Processing Transaction Outcome Completion Legacy Mode GENERATE AC Command CVM Processing Online Request Outcome Issuer Update Processing Issuer Update Initialisation Critical Script Processing Second GENERATE AC Command Transaction Outcome Non-critical Script Processing Error Handling Processing Errors Communication Errors Transaction Cancellation Transaction Outcomes Approved Online Request Online Request ( Two Presentments ) Online Request ( Present and Hold ) Declined Try Another Interface End Application End Application (with restart communication error) End Application (with restart - On-Device CVM) Select Next Torn Transaction Recovery SELECT Response Analysis ECHO Command Transaction Initialisation Initiate Application Processing Read Application Data Transaction Recovery Completion Reset Recovery Context APDU command description ECHO First GENERATE APPLICATION CRYPTOGRAM February 2016 Page iv
5 Kernel 5 Spec v Second GENERATE APPLICATION CRYPTOGRAM GET MAGSTRIPE DATA GET PROCESSING OPTIONS READ RECORD SELECT Annex A Coding of Data Elements Used in Transaction Flow A.1 Application Interchange Profile (AIP) A.2 Cardholder Verification Status A.3 Combination Options A.4 Issuer Update Parameter A.5 Terminal Compatibility Indicator A.6 Terminal Interchange Profile (static/dynamic) Annex B Data Elements Dictionary Annex C Kernel 5 Transaction Record Annex D Default Terminal Action Code values Annex E Glossary February 2016 Page v
6 Kernel 5 Spec v2.6 Figures Figure 2-1: High-Level Sample Transaction Flow... 9 Figure 3-1 Overview of the Recovery Transaction Flow Tables Table 1-1: Conventions used for data format... 3 Table 1-2: Terminology... 3 Table 3-1: Static Configuration Parameters Table 3-2: Dynamic Transaction Parameters Table 4-1: List of APDU commands used by the Kernel Table 4-2: ECHO Command Message Table 4-3: EMV Mode - Data Objects Included in Response to First GENERATE AC for [TC returned] or [ARQC returned, CDA requested] Table 4-4: EMV Mode - Data Objects Included in Response to First GENERATE AC for [ARQC returned, CDA not requested] Table 4-5: EMV Mode - Data Objects Included in Response to First GENERATE AC for [AAC returned] Table 4-6: Data Objects Included in Response to Second GENERATE AC Table 4-7: GET MAGSTRIPE DATA Command Message Table 4-8: Data Objects Included in Response to GET MAGSTRIPE DATA Table 4-9: Data Objects Included in Response to GET PROCESSING OPTIONS.. 91 Table A-1: Application Interchange Profile Table A-2: Cardholder Verification Status Table A-3: Combination Options Table A-4: Issuer Update Parameter Table A-5: Terminal Compatibility Indicator Table A-6: Terminal Interchange Profile Table B-1: Data Elements Dictionary Table C-1: Minimum Data Elements returned as Transaction Record Table D-1: Default Terminal Action Code values February 2016 Page vi
7 Kernel 5 Spec v2.6 Requirements Requirement Static Configuration Parameters Requirement Dynamic Transaction Parameters Requirement Recovering from Torn EMV Transaction Requirement Transaction continuation Requirement SELECT response analysis Requirement Variable Initialisation Requirement Terminal Compatibility Indicator Requirement Terminal Interchange Profile Requirement Legacy Mode Detection Requirement PDOL Processing and GPO Command Requirement GPO Response Analysis Requirement Reading Records Requirement Presence of Mandatory Data Elements Requirement Contactless Limit Check Requirement CVM Required Limit Check Requirement Floor Limit Check Requirement Random Transaction Selection Requirement Exception File Check Requirement Application Usage Control Requirement Application Expiration Date Requirement Application Effective Date Requirements Terminal Action Analysis Requirement Terminal Action Analysis Completion Requirement CDOL1 Processing Requirement GENERATE AC Requirement GENERATE AC Response Analysis Requirement Card Removal Requirement CDA Signature Verification Requirement CVM Evaluation Requirement CVM Consistency Check Requirement Transaction Outcome Requirement MDOL Processing Requirement GET MAGSTRIPE DATA command Requirement GET MAGSTRIPE DATA Response Analysis Requirement CVM Evaluation Requirement CVM Consistency Check Requirement Transaction Outcome Requirement CDOL1 Processing Requirement GENERATE AC Requirement CVM Required Check February 2016 Page vii
8 Kernel 5 Spec v2.6 Requirement CVM Evaluation Requirement Online Request Outcome Requirement SELECT response analysis Requirement Critical Script Processing Requirement Critical Script Processing Completion Requirement CDOL2 Processing Requirement GENERATE AC Requirement GENERATE AC Response Analysis Requirement Transaction Outcome Requirement Non-critical Script Processing Requirement Non-critical Script Processing Completion Requirements Processing Errors - Default Requirement Communication Errors General Requirement Communication Errors First GENERATE AC Requirement Communication Errors Issuer Updates Requirement Transaction cancellation by Reader Requirement Approved Outcome Requirement Online Request Outcome Requirement Online Request Outcome ( Two Presentments ) Requirement Online Request Outcome ( Present and Hold ) Requirement Declined Outcome Requirement Try Another Interface Outcome Requirement End Application Requirement Communication Errors Requirement On-Device CVM to be Performed Requirement Select Next Requirement SELECT Response Analysis Requirement ECHO Command Requirement Transaction Initialisation Requirement Initiate Application Requirement Magstripe Mode Filtering Requirement Read Application Data Requirement Account Data Verification Requirement Transaction Recovery Completion Requirement Reset Recovery Context February 2016 Page viii
9 Kernel 5 Spec v2.6 1 Introduction This chapter contains information that helps the reader understand and use this specification. 1.1 Scope This document, the EMV Contactless Specifications for Payment Systems, Kernel 5 Specification, describes one of several Kernels defined for use with Entry Point. 1.2 Audience This specification is intended for use by system designers in payment systems and financial institution staff responsible for implementing financial applications. 1.3 Volumes of the Contactless Specifications This specification is part of a multi-volume set: Book A: Architecture and General Requirements Book B: Entry Point Specification Book C-n: Kernel Specifications Book D: Contactless Communication Protocol 1.4 Reference Materials The following specifications and standards contain provisions that are referenced in this specification. The latest version shall apply unless a publication date is explicitly stated. If any provision or definition in this specification differs from those in the listed specifications and standards, the provision or definition herein shall take precedence. [EMV] EMV Integrated Circuit Card Specifications for Payment Systems, including: February 2016 Page 1
10 1 Introduction 1.5 Overview [EMV Book 1] [EMV Book 2] [EMV Book 3] [EMV Book 4] EMV Integrated Circuit Card Specifications for Payment Systems, Book 1, Application Independent ICC to Terminal Interface Requirements EMV Integrated Circuit Card Specifications for Payment Systems, Book 2, Security and Key Management EMV Integrated Circuit Card Specifications for Payment Systems, Book 3, Application Specification EMV Integrated Circuit Card Specifications for Payment Systems, Book 4, Cardholder, Attendant, and Acquirer Interface Requirements 1.5 Overview This volume includes the following chapters and annexes: Chapter 1 contains general information that helps the reader understand and use this specification. Chapter 2 provides an overview of the Kernel 5 approach, including implementation/acquirer options and a high level transaction flow description. Chapter 3 specifies transaction processing for Kernel 5. Chapter 4 lists and describes the APDU commands used by Kernel 5. Annex A defines data elements that are specific to Kernel 5 Annex B is a dictionary of data elements used by Kernel 5 during the transaction processing. Annex C lists data elements that are required in the transaction record for approved, declined, and online requested transactions. Annex D defines the default Terminal Action Codes used by Kernel 5. Annex E is a glossary of terms and abbreviations used in this specification. February 2016 Page 2
11 1 Introduction 1.6 Conventions 1.6 Conventions Table 1-1: Conventions used for data format Convention a an ans b cn n n y YYMMDD x x abc Var. Meaning Alphabetic Alphanumeric Alphanumeric Special Binary Compressed Numeric Numeric Numeric value of y digits (Example n 12 means 12 digits numeric value) Year, Month, Day Numeric value in decimal Numeric value in hexadecimal Data string Variable value For data elements which have multiple bytes in this specification, the first byte or byte 1 is the leftmost byte, while the last byte is the rightmost byte. 1.7 Terminology Table 1-2: Terminology Terminology Shall, must, is Denotes a mandatory requirement mandatory Should, may, can, is Denotes an optional requirement optional if test_condition then action_true else action_false and or = Logical comparison of two values N/A Not applicable Meaning Denotes a conditional test action, action_true is performed when test_condition result is true, action_false is performed when test_condition result is false Logical AND which connects two conditional tests Logical OR which connects two conditional tests February 2016 Page 3
12 Kernel 5 Spec v2.6 2 Overview of the Kernel 5 Approach This section is a high-level description of Kernel 5 features, capabilities, and processes. Further details about the Transaction Flow and its implementation can be found in Section 3. Vendors should check requirements of payment systems for each market deployed. Please contact icsupport@info.jcb.co.jp for detailed JCB terminal requirements. 2.1 Three Transaction Modes Kernel 5 is designed for acceptance of contactless cards in both Chip grade and Magstripe grade environments. For every implementation, Kernel 5 must always support Magstripe Mode, while support of EMV Mode and/or Legacy Mode is optional EMV Mode EMV Mode is designed for chip grade payment infrastructures. The support of EMV Mode is optional, both on the card side (Issuer) and on the Kernel side (Acquirer). The card will select to conduct the transaction in EMV Mode when both the card and the Kernel support it. The EMV Mode has many similarities with the transaction flow designed for contact EMV chips and defined in [EMV]. It is however simplified and adapted for contactless ergonomics. Here are the main features: Online/offline capability: EMV Mode transactions can be completed either online or offline. When completed online, the card is normally not informed about the final transaction outcome. Offline Data Authentication: The kernel shall support CDA when EMV Mode is supported and at least one of the conditions below is fulfilled: o o o the Kernel is offline-capable; the Kernel is installed in a transit reader (where Cardholder Verification is bypassed); the Kernel accepts On-Device CVM verification. Other data authentication methods (SDA, DDA) are not supported. February 2016 Page 4
13 2 Overview of the Kernel 5 Approach 2.1 Three Transaction Modes Online Data Authentication: An ARQC cryptogram is generated by the card and verified by the Issuer host system. Cardholder Verification: The card determines the CVM requirement based on issuer preference and acquirer requirement and the Kernel performs the selected CVM Magstripe Mode Magstripe Mode is designed for magstripe grade payment infrastructures. The support of Magstripe Mode is mandatory. Here are the main features: Online/offline capability: Other than exceptional cases where the transaction can be declined offline, Magstripe Mode transactions are always authorised online. The card is not informed about the Issuer s decision. Offline Data Authentication: N/A Online Data Authentication: Issuer verifies the Card Authentication Value (CAV) included in the Track 2 Equivalent Data provided by the card. Depending on the option chosen by the Issuer, this value may be static or dynamic. Cardholder Verification: The card determines the CVM requirement based on issuer preference and acquirer requirement and the Kernel performs the selected CVM.If the card does not indicate any CVM requirement, the reader may apply its own CVM policy Legacy Mode Legacy Mode is available for chip grade acquirers to satisfy specific market requirements. Please refer to payment system rules for further details. Here are the main features: Online/offline capability: Legacy Mode transactions are always authorised online. The card is not informed about the final transaction outcome. Offline Data Authentication: N/A Online Data Authentication: An ARQC cryptogram is generated by the card and verified by the Issuer host system Cardholder Verification: If the amount exceeds the CVM Required Limit, the Kernel analyses the CVM List from the card to determine the CVM requirement. February 2016 Page 5
14 2 Overview of the Kernel 5 Approach 2.2 Transaction Processing 2.2 Transaction Processing The transaction processing is summarised below. 1. Entry Point activates the Kernel to process the transaction. The reader provides transaction data and the relevant configuration parameters to the Kernel. a. Based on the card response to the SELECT (DF Name) command, the Kernel can determine whether it is a legacy card or not. 2. The Kernel sends the GET PROCESSING OPTIONS command to the card to initialise the card application. a. Card returns the Application Interchange Profile (AIP) and the Application File Locator (AFL). b. For non-legacy cards, the card response enables to detect whether the card has selected the EMV or the Magstripe Mode. 3. The Kernel reads the card data as indicated by the AFL. 4. The Kernel performs Terminal Risk Management, which consists of several verifications: a. Contactless Limit Check b. CVM Limit Check c. Floor Limit Check (EMV Mode only) d. Random Transaction Selection (EMV Mode only) e. Exception File Check (option only applying to EMV Mode) These verifications update the Terminal Verification Results (TVR). 5. The Kernel performs Processing Restrictions, which consists of several verifications: a. Application Usage Control (EMV Mode only) b. Application Expiration Date (EMV/Legacy Mode only) c. Application Effective Date (EMV/Legacy Mode only) These verifications update the Terminal Verification Results (TVR). 6. Based on the TVR value, as well as Terminal Action Codes (TAC) and Issuer Action Codes (IAC), the Kernel computes the first transaction outcome. a. If the outcome is a Decline, the transaction is declined offline and the Kernel provides a Declined Outcome to the Entry Point. February 2016 Page 6
15 2 Overview of the Kernel 5 Approach 2.2 Transaction Processing b. In the case of Legacy Mode and Magstripe Mode, unless the payment application declines the transaction, then the outcome is Online Authorisation. 7. The Kernel then completes the transaction in the following steps: a) If the transaction is in EMV Mode: The Kernel issues a GENERATE AC command including Combined Data Authentication (CDA) request when supported. If the card approves or sends the transaction for authorisation (TC/ARQC), the card response includes a CDA signature (if requested by the Kernel) as well as the decision of the card regarding the Cardholder Verification Method (CVM) to be applied. The Kernel verifies the CDA signature (if any) and if valid, executes the card decision (TC/ARQC) and CVM policy.the Kernel then provides an Approved or Online Request Outcome corresponding to the decision for this transaction to the Entry Point. b) If the transaction is in Magstripe Mode: The Kernel issues a GET MAGSTRIPE DATA command. The card returns the Track 2 Data (containing the card CVM policy in its discretionary data). The Kernel executes the card CVM policy and provides (when applicable) an Online Request to the Entry Point for this transaction for online authorisation. c) If the transaction is in Legacy Mode: The Kernel issues a GENERATE AC command requesting an online authorisation (ARQC) without CDA. The card returns the ARQC cryptogram. If the CVM Required Limit is exceeded, the Kernel analyses the CVM list from the card to find an appropriate method. The Kernel provides an Online Request Outcome to the Entry Point for this transaction for online authorisation. 8. Optionally, if the transaction is in EMV Mode and the Transaction Outcome is Online Request, the reader may reactivate the Kernel when the online response from the Issuer contains any information. At this point, the card may still be in the field (e.g. present-and-hold ) or requested to be presented again (e.g. two presentments ). February 2016 Page 7
16 2 Overview of the Kernel 5 Approach 2.3 High Level Transaction Flow For present-and-hold : when returning the ARQC cryptogram, the card informs simultaneously the Kernel that it must be maintained in the contactless field during the online authorisation. After receiving the online response, Issuer Scripts and/or Issuer Authentication Data can be transmitted to the card. For two presentments : when returning the ARQC cryptogram, the card informs simultaneously the Kernel that it supports a second presentment. After receiving the online response, the cardholder is asked by Entry Point to present the card again, and Issuer Scripts and/or Issuer Authentication Data can be transmitted to the card. 2.3 High Level Transaction Flow Figure 2-1 below illustrates the high level transaction flow of Kernel 5. The purpose is to provide a summarised overview of the normal Kernel 5 processing and is not prescriptive. Note that specific processes like Transaction Recovery or Issuer Update are not represented in this figure which features only a nominal transaction flow. Details about each step of the transaction can be found in Section 3. February 2016 Page 8
17 2 Overview of the Kernel 5 Approach 2.3 High Level Transaction Flow Figure 2-1: High-Level Sample Transaction Flow Transaction Flow Discovery Process handled by Application Selection Engine SELECT (PPSE) SELECT (J/Smart-CL) Legacy Card? Yes Legacy mode supported? No Select Next Yes GET PROCESSING OPTIONS (Card exception) READ RECORD(s) (Card exception) Terminal Risk Management: - Contactless Limit Check - CVM Limit Check - Floor Limit Check - Random Selection - Exception File Check Processing Restrictions - Application Usage Control - Application Expiration Date - Application Effective Date Legacy Mode, Online Terminal Action Analysis EMV/Legacy Mode, Declined Declined Magstripe Mode EMV Mode, Approved/Online AAC GENERATE AC (ARQC) GET MAGSTRIPE DATA End Application (1st tap) GENERATE AC (CDA) NOK CARD REMOVAL Decline Online TC/ARQC CDA Verification CVM Process (Legacy Mode) CVM Process (Magstripe Mode) CVM Process (EMV Mode) TC Online Request ARQC Approved February 2016 Page 9
18 2 Overview of the Kernel 5 Approach 2.4 Implementation Options and Acquirer Options 2.4 Implementation Options and Acquirer Options Implementation Options The provider of Kernel 5 will choose whether to support or not the following options in the Kernel 5 implementation: EMV Mode: o o o Legacy Mode: o o o This implementation option enables support of Transaction Mode that processes chip data. Kernel 5 implementations aimed at being deployed in Chip grade markets must support it. Kernel 5 implementations dedicated to Magstripe grade markets need not support this implementation option. This implementation option enables support of Transaction Mode that processes chip data, namely Legacy Mode. Kernel 5 implementations dedicated to Magstripe grade markets may not support this implementation option. Legacy mode implementation may be required to satisfy specific market requirements. Offline Data Authentication o o This implementation option enables support of CDA to authenticate the card. It can be supported only if EMV Mode is supported. Kernel 5 implementations for offline-capable readers, transit readers, or readers accepting One-Device CVM must support this option. Exception File Check: o o o This implementation option enables Kernel 5 to check during the transaction whether the card appears in the Acquirer Exception File. Exception File Check option can be supported only if EMV Mode is supported. The exact implementation of this option is left at the discretion of the implementer. It may, for instance, take advantage of the Data Exchange mechanism described in Book A. February 2016 Page 10
19 2 Overview of the Kernel 5 Approach 2.4 Implementation Options and Acquirer Options Issuer Update o o o This implementation option enables to convey EMV data (Issuer Authentication Data and/or Issuer Scripts, optionally present in the Authorisation Response Message) to the contactless card, upon completion of the Authorisation process. An Issuer Update may be transmitted to the card in one of two forms: either as a single presentment of the card (i.e. card remains in the contactless field while the authorisation process is ongoing), or as a second presentment of the card after the authorisation. Readers supporting Issuer Update must support both ergonomics, as the choice is indicated by the card. Issuer Update option can be supported only if EMV Mode is supported Acquirer Options In addition to the Implementation Options which define the features for a specific Kernel 5 implementation, the Acquirer may also choose to support from these implemented features for deployment. The Acquirer Options are defined below: Acquirer Options are parameterised in the Combination Options parameter (see Annex A.3) or in the static Terminal Interchange Profile (see Annex A.7) for each supported Reader Combination. EMV Mode o o Legacy Mode o o This option enables the EMV Mode flow for the associated Reader Combination The option is available only if EMV Mode is supported as implementation option This option enables the Legacy Mode flow for the associated Reader Combination The option is available only if Legacy Mode is supported as implementation option Offline Data Authentication o This option activates CDA for EMV Mode. The option shall be activated if any of the conditions below is true: the reader is offline-capable the reader is a transit reader as configured in the Terminal Interchange Profile (see Section A.7) February 2016 Page 11
20 2 Overview of the Kernel 5 Approach 2.4 Implementation Options and Acquirer Options o the reader accepts On-Device CVM as a Cardholder Verification Method in the Terminal Interchange Profile (see Section A.7) The option is available only if Offline Data Authentication (implementation option) and EMV Mode (acquirer option) are supported. Exception File Check o o This option activates the Acquirer Exception File Check during the transaction The option is available only if Exception File Check (implementation option) and EMV Mode (acquirer option) are supported. Random Transaction Selection o o Issuer Update o o This option activates Random Transaction Selection during Terminal Risk Management The option is available only if EMV Mode is supported as implementation option This option enables to convey EMV data (Issuer Authentication Data and/or Issuer Scripts, optionally present in the Authorisation Response Message) to the contactless card, upon completion of the Authorisation process. The option is available only if Issuer Update (implementation option) and EMV Mode (acquirer option) are supported. February 2016 Page 12
21 Kernel 5 Spec v2.6 This chapter provides detailed transaction processing requirements for Kernel 5 including information related to EMV functions. 3.1 Kernel Activation When activated, Kernel 5 requires certain data elements to be available in order to process the transaction. A data element or flag may be: Static (Configuration parameter): The value of this data is persistent from one transaction to the next (See Table 3-1). Updates of the values are exceptional and always outside the scope of Kernel 5 processing. A static data element may be set: o o o per POS System (e.g. Terminal Country Code), or per RID (e.g. CAPK key), or per AID (e.g. static Terminal Interchange Profile) Dynamic (Transaction parameter): Per transaction, e.g. Amount, Authorised (Numeric) and Unpredictable Number (See Table 3-2). Requirement Static Configuration Parameters When the Kernel is activated, the reader shall provide to the Kernel the Configuration Data (see Table 3-1) associated with the selected Combination. Requirement Dynamic Transaction Parameters When the Kernel is activated, the reader shall provide to the Kernel: The Dynamic Transaction Parameters (see Table 3-2); FCI received from the card as per section 3.4 in [EMV CL Book B] (when applicable). February 2016 Page 13
22 3.1 Kernel Activation Table 3-1: Static Configuration Parameters Name Combination Options Contactless Floor Limit Contactless Transaction Limit Description Defines some acquirer options for the combination, e.g. modes supported Used in Kernel 5 Terminal Risk Management (EMV Mode only). Present if the Combination supports Floor Limit Check or Random Transaction Selection. Varies by Presence 1 Format Specified Tag AID M b Kernel 5 See A.3 Length (bytes) - 2 AID C n12 Kernel 5-6 Used in Kernel 5 Terminal Risk Management AID O n12 Kernel 5-6 CVM Required Limit Used in Kernel 5 Terminal Risk Management AID O n12 Kernel 5-6 Maximum Target Percentage to be Used for Biased Random Selection Removal Timeout Present if the Combination supports Random Transaction Selection (EMV Mode only) Present if the Combination supports Issuer Update as Acquirer Option (EMV Mode only). In case of Online Request with Present and Hold outcome, this parameter corresponds to the time after which cardholder is asked to remove the card. Value is given in units of 100ms. AID C n2 EMV - 1 AID C n4 Kernel M = mandatory ; C = conditional ; O = optional February 2016 Page 14 only pursuant to the EMVCo Terms of Use agreement found at as supplemented by the Legal applicable payment system. EMV is a registered trademark or trademark of EMVCo, LLC in the United States and
23 3.1 Kernel Activation Name Target Percentage to be Used for Biased Random Selection Terminal Action Code - Default Terminal Action Code - Denial Terminal Action Code - Online Terminal Interchange Profile (static) Threshold Value for Biased Random Selection Acquirer Identifier Merchant Category Code Merchant Name and Location Terminal Country Code Description Present if the Combination supports Random Transaction Selection (EMV Mode only) Used in Kernel 5 Terminal Action Analysis (EMV Mode only) Varies by Presence 1 Format Specified Tag Length (bytes) AID C n2 EMV - 1 AID O b EMV - 5 Used in Kernel 5 Terminal Action Analysis AID O b EMV - 5 Used in Kernel 5 Terminal Action Analysis (EMV Mode only) Defines the Cardholder Verification Methods and other reader capabilities (online capability, contact EMV capability) for the Combination Present if the Combination supports Random Transaction Selection (EMV Mode only) Uniquely identifies the acquirer within each payment system Classifies the type of business being done by the merchant, represented according to ISO 8583:1993 for Card Acceptor Business Code AID O b EMV - 5 AID M b Kernel 5 See A.5-3 AID C n12 EMV - 6 POS M n 6-11 EMV 9F01 6 POS O n 4 EMV '9F15' 2 Indicates the name and location of the merchant POS M ans EMV '9F4E' var. Indicates the country of the terminal, represented according to ISO Requested in CDOL1. POS M n3 EMV '9F1A' 2 February 2016 Page 15 only pursuant to the EMVCo Terms of Use agreement found at as supplemented by the Legal applicable payment system. EMV is a registered trademark or trademark of EMVCo, LLC in the United States and
24 3.1 Kernel Activation Name Terminal Type Transaction Currency Code Transaction Currency Exponent Certification Authority Public Key Description Indicates the environment of the terminal, its communications capability, and its operational control Indicates the currency code of the transaction according to ISO Requested in CDOL1. Indicates the implied position of the decimal point from the right of the transaction amount represented according to ISO Required to determine if Status Check is requested. Present (up to 6 different instances) if Offline Data Authentication is supported for at least one of the Combinations with this RID (EMV Mode only). Each CA Public Key in the list is composed of the following mandatory fields: - CAPK Index (b, 1 byte) - CAPK Modulus (b, max. 248 bytes) - CAPK Exponent (b, 1 or 3 bytes) - CAPK SHA-1 Checksum (b, 20 bytes) Varies by Presence 1 Format Specified Tag Length (bytes) POS M n 2 EMV '9F35' 1 POS M n 3 EMV '5F2A' 2 POS M n 1 EMV 5F36 1 RID C b EMV - var. February 2016 Page 16 only pursuant to the EMVCo Terms of Use agreement found at as supplemented by the Legal applicable payment system. EMV is a registered trademark or trademark of EMVCo, LLC in the United States and
25 3.1 Kernel Activation Table 3-2: Dynamic Transaction Parameters Name Description Presence 2 Format Specified Tag Amount, Authorised (Numeric) Amount, Other (Numeric) Authorisation Response Code (ARC) Issuer Authentication Data Issuer Script Template 1 Issuer Script Template 2 Transaction Date Transaction Time Authorised amount of the transaction. Requested in CDOL1. Secondary amount associated with the transaction representing a cashback amount. Requested in CDOL1. Code that defines the disposition of a message. ARC must be present if the Kernel is restarted after an Online Request Outcome. Data sent to the card for online issuer authentication Contains proprietary issuer data for transmission to the card before the second GENERATE AC command. Several occurrences of this data element may be present. Contains proprietary issuer data for transmission to the dard after the second GENERATE AC command. Several occurrences of this data element may be present. Local date that the transaction was authorised. Requested in CDOL1. Local time that the transaction was authorised. Possibly requested in CDOL1. Length (bytes) M n12 EMV '9F02' 6 M n12 EMV '9F03' 6 C an2 EMV 8A 2 O b EMV O b EMV 71 O b EMV 72 Var. max. 128 Var. max. 128 M n6 EMV '9A' 3 M n6 EMV 9F M = mandatory ; C = conditional ; O = optional February 2016 Page 17 only pursuant to the EMVCo Terms of Use agreement found at as supplemented by the Legal applicable payment system. EMV is a registered trademark or trademark of EMVCo, LLC in the United States and
26 3.1 Kernel Activation Name Description Presence 2 Format Specified Tag Transaction Type Unpredictable Number Indicates the type of financial transaction, represented by the first two digits of the ISO 8583:1987 Processing Code. Requested in CDOL1. Possible values are: - '00' for a purchase transaction - 01 for a cash advance transaction - 09 for a purchase with cashback - 20 for a refund transaction Value to provide variability and uniqueness to the generation of a cryptogram. Requested in CDOL1. Length (bytes) M n2 EMV '9C' 1 M b EMV '9F37' 4 February 2016 Page 18 only pursuant to the EMVCo Terms of Use agreement found at as supplemented by the Legal applicable payment system. EMV is a registered trademark or trademark of EMVCo, LLC in the United States and
27 3.2 Transaction Initialisation 3.2 Transaction Initialisation During Transaction Initialisation, Kernel 5 initialises internal variables and performs verifications. Requirement Recovering from Torn EMV Transaction If the Kernel internal variable Recovering from Torn EMV Transaction has value TRUE, Then the Kernel shall proceed with Torn Transaction Recovery as described in section Otherwise the Kernel shall proceed with Requirement Requirement Transaction continuation If Authorisation Response Code (tag 8A ) is present in the Dynamic Transaction Parameters (see Table 3-2), Then the Kernel shall proceed with Requirement Otherwise the Kernel shall proceed with Requirement If any of the following is present in the Dynamic Transaction Parameters (see Table 3-2), - Issuer Authentication Data ( 91 ) - At least one occurrence of Issuer Script Template 1 ( 71 ) - At least one occurrence of Issuer Script Template 2 ( 72 ) Then the Kernel shall restore transaction data from Online Transaction Context and proceed with Issuer Update Processing, as described in section Otherwise the Kernel shall provide an End Application outcome as described in section February 2016 Page 19
28 3.2 Transaction Initialisation Requirement SELECT response analysis If the FCI is absent, Or if the FCI is not parsed correctly (see table 45 in [EMV Book 1]), Or if the PDOL data element is absent, or present but empty Then the Kernel shall terminate the transaction and provide a Select Next Outcome as described in Section Requirement Variable Initialisation The Kernel shall reset the following data elements: Terminal Verification Results (Tag 95 ) to Terminal Compatibility Indicator (Tag 9F52 ) to 01, indicating that Magstripe Mode is supported The Kernel shall reset the following internal variables: Online Transaction Context Transaction Mode to Undefined Mode Requirement Terminal Compatibility Indicator If the Kernel supports EMV Mode (Implementation Option) And the Combination Options Byte 1 Bit 2 is set to 1b ( EMV Mode Supported ) for the selected Combination, Then bit 2 ( EMV Mode Supported ) shall be set to 1 in Terminal Compatibility Indicator (Tag 9F52 ). February 2016 Page 20
29 3.2 Transaction Initialisation Requirement Terminal Interchange Profile The Kernel shall initialise a dynamic Terminal Interchange Profile (Tag 9F53 ) from the value of the static Terminal Interchange Profile (static configuration parameter no tag) and perform the following: Clear Byte 1 Bit 8 ("CVM required by reader"). If Issuer Update is not supported as an implementation option, Then clear Byte 2 Bit 8 ( Issuer Update supported ). Note: The dynamic Terminal Interchange Profile (Tag 9F53 ) is updated by the Kernel during subsequent processing. At that stage, the Kernel will detect whether the presented card is a legacy card, and if so, enure that it has the capability to process such cards. Requirement Legacy Mode Detection If the PDOL contains Terminal Compatibility Indicator (Tag 9F52 ), Then the Kernel shall proceed with section 3.3: Initiate Application Processing. Otherwise the card is a legacy card and the Kernel shall proceed with Requirement If Kernel 5 supports Legacy Mode (Implementation Option) And the Combination Options indicates Legacy Mode Supported for this AID, Then the Kernel shall set Transaction Mode to Legacy Mode and proceed with section 3.3: Initiate Application Processing. Otherwise the Kernel shall terminate the transaction and provide a Select Next Outcome as described in Section February 2016 Page 21
30 3.3 Initiate Application Processing 3.3 Initiate Application Processing The PDOL provided by the card in response to the SELECT command contains a list of tags that the card requests from the reader. The reader provides the card with the PDOL-related data elements when issuing the GPO command to the card. Requirement PDOL Processing and GPO Command The Kernel shall process the PDOL and send the command data for the GET PROCESSING OPTIONS as described in [EMV Book 3] If the PDOL requires a data element that is not recognised by the Kernel (not referenced in Annex B), Then the Kernel shall fill in the corresponding PDOL related data with zeroes. The Application Interchange Profile (AIP) and Application File Locator (AFL) returned by the card in response to the GPO command contain information on the card configuration and data records to be read. The card response may use either Format 1 or Format 2, as described in [EMV Book 3]. If the card chooses Magstripe Mode for the transaction, then AFL (Tag 94 ) may be absent; however, for an EMV Mode or Legacy Mode transaction, the card is expected to return the AFL (Tag 94 ) in the GPO response. The Kernel detects the mode selected by the card (EMV / magstripe) and in the case of EMV Mode, the Kernel also ensures that the card supports CDA. Other AIP bits are not analysed by the Kernel. Requirement GPO Response Analysis If the AIP (Tag 82 ) is absent from the GET PROCESSING OPTIONS response, Then the Kernel shall terminate the transaction and provide a Select Next Outcome as described in Section February 2016 Page 22
31 3.3 Initiate Application Processing Requirement GPO Response Analysis If the Transaction Mode is equal to Undefined Mode, Then If the AIP (Tag 82 ) returned by the card has Byte 2 Bit 8 set to 1 ( EMV Mode Selected ), Then the Kernel shall set Transaction Mode to EMV Mode. Else the Kernel shall set the Transaction Mode to Magstripe Mode If the AFL (Tag 94 ) is absent from the data returned to the GET PROCESSING OPTIONS response And the Transaction Mode is EMV Mode or Legacy Mode, Then the Kernel shall terminate the transaction and provide a Select Next Outcome as described in Section If the AFL (Tag 94 ) is present in the GET PROCESSING OPTIONS RESPONSE And its value is incorrectly formatted (e.g. not multiple of 4 bytes, invalid SFI value...), Then the Kernel shall terminate the transaction and provide a Select Next Outcome as described in Section If any of the conditions below is true: the Transaction Mode is equal to Magstripe Mode the Transaction Mode is equal to Legacy Mode the Transaction Mode is equal to EMV Mode and Offline Data Authentication (implementation or acquirer option) is not supported the Transaction Mode is equal to EMV Mode and the AIP (Tag 82 ) indicates that CDA is not supported (Byte 1bit 1 is 0 ) Then the Kernel shall set TVR Byte 1 bit 8 ( Offline Data Authentication was not performed ) to 1. February 2016 Page 23
32 3.4 Read Application Data 3.4 Read Application Data The Kernel uses the AFL to determine which records to request from the card. The Kernel does not need to process any data at this point, except to determine if all the mandatory data elements are present. Requirement Reading Records If the AFL has been provided by the card, the Kernel shall read the records indicated in the AFL using the READ RECORD command and process the response as defined in [EMV Book 3]. At that point, the Kernel needs to determine if all mandatory data elements are present. Requirement Presence of Mandatory Data Elements If the Transaction Mode is EMV Mode or Legacy Mode And any of the following mandatory Data Elements is absent from the card: CDOL1 (Tag 8C ) Track2 Equivalent Data (Tag 57 ) Application Expiration Date (Tag 5F24 ) Then the Kernel shall terminate the transaction and provide a Select Next Outcome as described in Section As CDA is the mandatory Data Authentication Method supported by the Kernel in EMV Mode, the Kernel shall ensure that all the appropriate data elements are present. February 2016 Page 24
33 3.4 Read Application Data If the Transaction Mode is EMV Mode And Offline Data Authentication is supported (implementation and acquirer option) And the AIP (Tag 82 ) indicates that CDA is supported (Byte 1bit 1 is 1 ) And any of the following Data Elements is absent from the card: Certification Authority Public Key Index (Tag 8F ) Issuer Public Key Certificate (Tag 90 ) Issuer Public Key Exponent (Tag 9F32 ) ICC Public Key Certificate (Tag 9F46 ) ICC Public Key Exponent (Tag 9F47 ) Issuer Public Key Remainder (Tag 92 ), when required (based on the sizes of tags 90 and 9F46, when both are present) Then the Kernel shall set TVR Byte 1 bit 6 ( ICC Data Missing ) and Byte 1 bit 3 ( CDA Failed ) to If the Transaction Mode is EMV Mode And Offline Data Authentication is supported (implementation and acquirer option) And the Certification Authority Public Key corresponding to the CAPK index (Tag 8F ) provided by the card is not present in the Kernel configuration data, Then the Kernel shall set TVR Byte 1 bit 3 ( CDA Failed ) to 1. (Note: the kernel recovers the ICC public key later during the transaction to optimise the performance). February 2016 Page 25
34 3.5 Terminal Risk Management 3.5 Terminal Risk Management Terminal Risk Management consists of verifications that compare the transaction amount with reader-based limits, and take appropriate action if the limit is exceeded. The Acquirer s Exception List may also be checked. Terminal Risk Management is mandatory and always performed Contactless Limit Check Requirement Contactless Limit Check If the Contactless Transaction Limit is present And the value of Amount, Authorised (Numeric) (Tag 9F02 ) is greater than or equal to this limit, Then the Kernel shall terminate the transaction and provide a Select Next Outcome as described in Section CVM Required Limit Check Requirement CVM Required Limit Check If the CVM Required Limit is present And the Transaction Type corresponds to a Purchase or Cash- Advance transaction (i.e. value is 00, 01 or 09 ) And the value of Amount, Authorised (Numeric) (Tag 9F02 ) is greater than or equal to this limit, Then the Kernel shall indicate CVM Required by Reader (Byte 1, bit 8) in the dynamic Terminal Interchange Profile (Tag 9F53 ). February 2016 Page 26
35 3.5 Terminal Risk Management Floor Limit Check Requirement Floor Limit Check If any of the conditions below is true: The Transaction Mode is Magstripe Mode The Transaction Mode is Legacy Mode The Terminal Type (Tag 9F35 ) indicates that the reader is online-only (value = x1 or x4 ) The Amount, Authorised is a single unit of currency 3 and the Combination Options Byte 1 Bit 7 is set to 1b ( Status Check Supported ) Then the Kernel shall set TVR Byte 4 bit 8 ( Transaction exceeds Floor Limit ) to If the Transaction Mode is EMV Mode And the Contactless Floor Limit is present And the value of Amount, Authorised (Numeric) (Tag 9F02 ) is greater than or equal to this limit, Then the Kernel shall set TVR Byte 4 bit 8 ( Transaction exceeds Floor Limit ) to Random Transaction Selection Requirement Random Transaction Selection If the Transaction Mode is EMV Mode And the Combination Options indicate that Random Transaction Selection supported And the TVR Byte 4 bit 8 has value 0 (Floor Limit not exceeded), Then the Kernel shall perform Random Transaction Selection as described in [EMV Book 3]. 3 The Amount corresponding to a single unit of currency is obtained as 10Transaction Currency Exponent. E.g. for USD, where Transaction Currency Exponent = 2, a single unit of currency (1.00 USD) is coded as The Transaction Currency Exponent is a Kernel configuration parameter. February 2016 Page 27
36 3.5 Terminal Risk Management Requirement Random Transaction Selection If the transaction is randomly selected for online authorisation, Then the Kernel shall set TVR Byte 4 bit 5 ( Transaction selected randomly for online processing ) to Exception File Check Exception file check is both an Implementation Option as well as an Acquirer Option. When applicable, the exact implementation of this check is left at the discretion of the implementer. It may, for instance, take advantage of the Data Exchange mechanism described in Book A. Requirement Exception File Check If all the conditions below are true: the Transaction Mode is EMV Mode Exception File Check is supported (Implementation Option) the Combination Options (Acquirer Options) indicate that Exception File Check required Then the Kernel shall perform Exception File Check as described in [EMV Book 4] If the card number (PAN) has been found in the Exception File, Then the Kernel shall set TVR Byte 1 bit 5 ( Card appears on terminal exception file ) to 1. February 2016 Page 28
EMV Contactless Specifications for Payment Systems
EMV Contactless Specifications for Payment Systems Book C-6 Kernel 6 Specification Version 2.6 February 2016 pursuant to the EMVCo Terms of Use agreement found at www.emvco.com, as supplemented by the
EMV Contactless Specifications for Payment Systems
EMV Contactless Specifications for Payment Systems Book C-7 Kernel 7 Specification Version 2.6 February 2016 February 2016 Page i Legal Notice Unless the user has an applicable separate agreement with
EMV Contactless Specifications for Payment Systems
EMV Contactless Specifications for Payment Systems Book B Entry Point Specification Version 2.6 July 2016 pursuant to the applicable agreement between the user and EMVCo found at www.emvco.com. EMV is
EMV ContactlessSpecifications for Payment Systems
EMV ContactlessSpecifications for Payment Systems Book C-3 Kernel 3 Specification Version 2.6 February 2016 Legal Notice Unless the user has an applicable separate agreement with EMVCo or with the applicable
EMV 96 Integrated Circuit Card Application Specification for Payment Systems
EMV 96 Integrated Circuit Card Application Specification for Payment Systems Version 3.0 June 30, 1996 1996 Europay International S.A., MasterCard International Incorporated, and Visa International Service
PayPass M-TIP Test Case User Guide. July 2014
PayPass M-TIP Test Case User Guide July 2014 Copyright The information contained in this manual is proprietary and confidential to MasterCard International Incorporated (MasterCard) and its members. This
Common Payment Application Contactless Extension CPACE. Functional Specification. Terminal Kernel
Common Payment Application Contactless Extension CPACE Functional Specification Terminal Kernel 12.07.2018 2016-2017-2018 Bancomat, Bancontact Company, BankAxept, Borica, Euro 6000, girocard/src, Groupement
QR Code Specification for Payment Systems (EMV QRCPS)
EMV QR Code Specification for Payment Systems (EMV QRCPS) Merchant-Presented Mode Version 1.0 July 2017 Legal Notice The EMV Specifications are provided AS IS without warranties of any kind, and EMVCo
PayPass M/Chip 4. Card Technical Specification
PayPass M/Chip 4 Card Technical Specification Version 1.3.1 - September 2008 Proprietary Rights The information contained in this document is proprietary and confidential to MasterCard International Incorporated,
EMV2000 Integrated Circuit Card Specifications for Payment Systems
EMV2000 Integrated Circuit Card Specifications for Payment Systems Book 4 Cardholder, Attendant, and Acquirer Interface Requirements Version 4.0 December, 2000 2000 EMVCo, LLC ( EMVCo ). All rights reserved.
CDA Modified Terminal Behaviour
Specification Update Bulletin No. 44 First Edition February 2007 CDA Modified Terminal Behaviour This bulletin modifies terminal behaviour for CDA in order to allow improved CDA transaction performance.
EMVS Kernel Capabilities
Version: 1.00 (20-Aug-2008) Copyright 2008 SETIS Automação e Sistemas The copyright to the document herein is the property of SETIS Automação e Sistemas, Brazil. The content may be used and/or copied only
EMVCo Letter of Approval - Terminal Level 2
June 14, 2011 Roland Svahn Acquis AB Segelbåtsvägen 7 11164 Stockholm Sweden Re: EMV Application Kernel: Approval Number(s): EMVCo Letter of Approval - Terminal Level 2 APEMV 2.5 2-02100-1-1S-RFI-0611-4.2.c
EMVCo Letter of Approval - Contact Terminal Level 2
May 17, 2018 Richard Pohl Triton Systems of Delaware, LLC 21405 B Street Long Beach MS 39560 UNITED STATES OF AMERICA Re: EMV Application Kernel: Approval Number(s): EMVCo Letter of Approval - Contact
S-TUU a OS-TUU a
July 01, 2009 Chuck Hayes Triton Systems of Delaware, Inc 522 E. Railroad Street Long Beach MS 39560 USA Re: EMVCo Letter of Approval -- Terminal Level 2 Approval Number(s): 2-01693-1-1S-TUU-0709-4.2.a
EMVCo Letter of Approval - Contact Terminal Level 2
July 01, 2015 Kyoungtae Kang AIONBANK, Inc. Unit 502, Small and Medium Business DMC Tower, 189 Seongam-ro, Mapo-gu Seoul 121-904 S.KOREA Re: EMV Application Kernel: Approval Number(s): EMVCo Letter of
EMVCo Letter of Approval - Terminal Level 2
January 23, 2014 S.G. Jung BITEL CO., LTD 11F Yohyun BD 242-29, nhyun-dong Gangnam-ku, Seoul 135-830 South Korea Re: EMV Application Kernel: Approval Number(s): EMVCo Letter of Approval - Terminal Level
JR/T Translated English of Chinese Standard: JR/T
Translated English of Chinese Standard: JR/T0025.6-2013 www.chinesestandard.net Sales@ChineseStandard.net JR FINANCIAL INDUSTRY STANDARD OF THE PEOPLE S REPUBLIC OF CHINA ICS 35.240.40 A 11 Registration
EMVCo Letter of Approval - Contact Terminal Level 2 - Renewal
August 02, 2017 Guenter Reich DPS Engineering GmbH Eiffestrasse 78 Hamburg D-20537 GERMANY Re: EMVCo Letter of Approval - Contact Terminal Level 2 - Renewal EMV Application Kernel: Approval Number(s):
PayPass Testing Environment
PayPass Testing Environment Version 3 Level 2 Reader Testing 16 May 2012 Proprietary Rights The information contained in this document is proprietary and confidential to MasterCard International Incorporated,
Acquirer JCB Dual Interface EMV Test Card Set
Acquirer JCB Dual Interface EMV Test Card Set.00 July, 2018 Powered by Disclaimer Information provided in this document describes capabilities available at the time of developing and delivering this document
EMVCo Letter of Approval - Contact Terminal Level 2
February 25, 2016 CHARLY SEVAJOL ALX TECHNOLOGIES 302 rue de THOR PARC EUREKA MONTPELLIER 34000 FRANCE Re: EMV Application Kernel: Approval Number(s): EMVCo Letter of Approval - Contact Terminal Level
First Data Dual Interface EMV Test Card Set. Version 1.20
First Data Dual Interface EMV Test Card Set August, 2016 Disclaimer Information provided in this document describes capabilities available at the time of developing this document and information available
Common Payment Application Contactless Extension CPACE. Functional Specification. CPACE for Dual Interface Cards
Common Payment Application Contactless Extension CPACE Functional Specification CPACE for Dual Interface Cards 18.10.2017 Groupement des Cartes Bancaires CB, ServiRed, SIBS MB, Sistema 4B. All rights reserved.
Interac USA Interoperability EMV Test Card Set
Interac USA Interoperability EMV Test Card Set.00 April, 2018 Powered by Disclaimer Information provided in this document describes capabilities available at the time of developing this document and information
Re: EMVCo Letter of Approval - Contact Terminal Level 2
December 03, 2015 Antonio Fernandez Donaire Dynasty Technology Group S.A.U. Av. Manoteras, 6 Madrid 28050 Spain Re: EMVCo Letter of Approval - Contact Terminal Level 2 EMV Application Kernel: DYNASTY JAVA
First Data EMV Test Card Set. Version 2.00
First Data EMV Test Card Set.00 February, 2018 Disclaimer Information provided in this document describes capabilities available at the time of developing this document and information available from industry
First Data EMV Test Card Set. Version 1.30
First Data EMV Test Card Set.30 January, 2018 Disclaimer Information provided in this document describes capabilities available at the time of developing this document and information available from industry
Acquirer JCB EMV Test Card Set
Acquirer JCB EMV Test Card Set July, 2017 Powered by Disclaimer Information provided in this document describes capabilities available at the time of developing this document and information available
First Data DCC Test Card Set. Version 1.30
First Data DCC Test Card Set.30 April, 2018 Disclaimer Information provided in this document describes capabilities available at the time of developing this document and information available from industry
First Data U.S. Debit Test Card Set. Version 1.20
First Data U.S. Debit Test Card Set August, 2016 Disclaimer Information provided in this document describes capabilities available at the time of developing this document and information available from
USA Debit EMV Test Plan. Version 1.30
USA Debit EMV Test Plan.30 June 2018 Disclaimer Information provided in this document describes capabilities available at the time of developing and delivering this document and the associated test cards
M/Chip Advance V1.1 Personalization Guide
M/Chip Advance V1.1 Personalization Guide v01.71 (November, 2017) All copyrights are reserved by KONA I Co., Ltd. This manual can be revised without any notification. Unauthorized copying is strictly prohibited
PayPass M/Chip Application Note #17
This application note provides the errata for: PayPass M/Chip Acquirer Implementation Requirements, Version 1.0 dated July 2008 This application note is dated and replaces completely PayPass M/Chip Application
AUTHORISATION AND SETTLEMENT TECHNICAL SPECIFICATIONS
AUTHORISATION AND SETTLEMENT TECHNICAL SPECIFICATIONS VERSION 1.4 OCTOBER 2017 The Authorisation And Settlement Technical Specifications contains information proprietary to Global Payments. No part of
ISO Data Element Definitions
SECTION 4 ISO 8583 1987 DATA ELEMENT DEFINITIONS Overview...4-1 Bit Maps...4-2 Annotation Conventions For Data Element s...4-3 General Representation...4-3 Length s...4-4 Field Content s...4-5 Conventions
EMV Integrated Circuit Card Specifications for Payment Systems
EMV Integrated Circuit Card Specifications for Payment Systems Book 4 Version 4.3 November 2011 EMV * Integrated Circuit Card Specifications for Payment Systems Book 4 Version 4.3 November 2011 * EMV
Visa paywave Implementation Overview and European Pilot Operating Principles Member Letter: VE 08/08 Type: General 16 April 2008
Principal and Group Members Centre Manager Senior Visa Officer Marketing Staff Visa paywave Implementation Overview and European Pilot Operating Principles Member Letter: VE 08/08 Type: General 16 April
EMV Integrated Circuit Card Specifications for Payment Systems
EMV Integrated Circuit Card Specifications for Payment Systems Book 4 Version 4.1 May 2004 EMV Integrated Circuit Card Specifications for Payment Systems Book 4 Version 4.1 May 2004 1994-2004 EMVCo, LLC
OSCAR POS INTEGRATION SPECIFICATION FOR SEPA COMPLIANT TERMINALS
OSCAR POS INTEGRATION SPECIFICATION FOR SEPA COMPLIANT TERMINALS 10/07/2014 version 3.2 1/154 Revision History Version Date Author Object 1.0 22.08.2011 CB/SRC Integration of comments and SEPA-FAST Part
7. Best Practice. 7.1 Introduction. 7.2 Documentation. 7.3 Terminal Categories
Version 2.5 Technical Reference Guide Open Terminal Requirement Specification 2006 07 01 7. Best Practice 7.1 Introduction The purpose of this chapter is to list a number of useful hints and guidelines
Mobile MasterCard. PayPass User Interface Application Design Guide. User Experience, Use Cases, Screen Layouts and Design. Version 1.
Mobile MasterCard PayPass User Interface Application Design Guide Version 1.0 September 2011 User Experience, Use Cases, Screen Layouts and Design How to use this document 3 Core 4 Extended This document
OSCAR POS INTEGRATION SPECIFICATION FOR SEPA COMPLIANT TERMINALS
OSCAR POS INTEGRATION SPECIFICATION FOR SEPA COMPLIANT TERMINALS 26/03/2012 1/200 Revision History Version Date Author Object 0.9 16.06.2011 CB/SRC Integration of TMS Messages, Diagnosis added in Retailer
MasterCard NFC Mobile Device Approval Guide v July 2015
MasterCard NFC Mobile Device Approval Guide v2.0 30 July 2015 Notices Following are policies pertaining to proprietary rights, trademarks, translations, and details about the availability of additional
ISO INTERNATIONAL STANDARD
INTERNATIONAL STANDARD ISO 8583-1 First edition 2003-06-15 Financial transaction card originated messages Interchange message specifications Part 1: Messages, data elements and code values Messages initiés
CEPTEST Application Note
CEPTEST Application Note Version 1.0 Running Stress Tests Museumstr. 76 CH-8400 Winterthur Tel. 052 212 63 03 Fax 052 212 66 78 www.celsi.ch Version 1.0, 6th of March, 2006 1 1 Introduction.................................3
Terminal Architecture for PSAM Applications (TAPA) Application Architecture Specification. Version 2.1. February 2001
Terminal Architecture for PSAM Applications (TAPA) Application Architecture Specification Version 2.1 February 2001 i TABLE OF CONTENTS 1. REVISION LOG...1 2. DOCUMENT OVERVIEW...3 2.1 PURPOSE...3 2.2
EMV Integrated Circuit Card Specifications for Payment Systems
EMV Integrated Circuit Card Specifications for Payment Systems Book 1 Terminal Interface Requirements Version 4.1 May 2004 EMV Integrated Circuit Card Specifications for Payment Systems Book 1 Terminal
Nigeria Central Switch Interface Specifications ISO 8583 (1987)
Nigeria Central Switch Interface Specifications ISO 8583 (1987) Prepared by: Nigeria Inter Bank Settlement System (NIBSS) Version: 1.1 September 12, 2014 Page 1 of 64 Document Control File Name: NIBSS
User Acceptance Test (UAT) ATM EMV Test Card Set Summary
User Acceptance Test (UAT) ATM EMV Test Card Set Summary October, 2016 Powered by Disclaimer Information provided in this document describes capabilities available at the time of developing this document
Chip Card Acceptance Device
Chip Card Acceptance Device Testing and Approval Requirements Version 4.3 October 2016 Visa Public DISCLAIMER Visa s testing services and policies are subject to change at any time in Visa s sole discretion,
CIPURSE V2 Certification Program
www.osptalliance.org Legal This document is copyright 2017 by the OSPT Alliance. 1. You may, without charge, copy (for internal purposes only) and share this document with your members, employees, and
Practical EMV PIN interception and fraud detection
Practical EMV PIN interception and fraud detection Andrea Barisani Daniele Bianco 27 Unusual Car Navigation Tricks Injecting RDS-TMC Traffic Information
Technical Specifications
Technical Specifications Version 1.8 May 2015 Global Payments is a trading name of GPUK LLP. GPUK LLP. All rights reserved. No part of this document may be reproduced, stored in a retrieval system, or
APDU-Test Card Functional Requirements
Autor Andreas Schwier Version V1.1 Datum 03. January 2012 Copyright 2012 CardContact Software & System Consulting The authors of this documentation make no representation or warranty regarding whether
UnionPay QuickPass Terminal Product Certification Rules
Document No.: UPCA--02V.0 PU UnionPay QuickPass Terminal Product Certification Rules Issued on July, 205 Implemented from July, 205 Issued by China UnionPay Co., Ltd. UnionPay QuickPass Terminal Product
WIC EBT Technical Implementation Guide 2012 Version
WIC EBT Technical Implementation Guide 2012 Version This guidance is to provide the implementation framework for Online and Smart Card WIC EBT. FNS expects all stakeholders supporting WIC EBT to incorporate
EFTPOS 1. User guide.
EFTPOS 1. User guide. Contact Details. Westpac Merchant Helpdesk 1800 066 244 Service, Sales and Support Terminal Difficulties Stationery Orders Contents. 1 Introduction...5 1.1 Merchant Responsibility
CERTIFIED MAIL LABELS TERMS OF USE and PRIVACY POLICY Agreement
CERTIFIED MAIL LABELS TERMS OF USE and PRIVACY POLICY Agreement Welcome to Certified Mail Envelopes and Certified Mail Labels web sites (the Site ) a website, trademark and business name owned and operated
Visa Chip Security Program Security Testing Process
Visa Chip Security Program Security Testing Process Visa Supplemental Requirements Version 2.1 January 2018 Visa Public Important Information on Confidentiality and Copyright Note: This document is a supplement
Card Specification Amendment A March 2004
Card Specification 2.1.1 March 2004 Use of this information is governed by the GlobalPlatform license agreement and any use inconsistent with that agreement is strictly prohibited. 2 GlobalPlatform Card
EMPLOYER CONTRIBUTION AGREEMENT
EMPLOYER CONTRIBUTION AGREEMENT This Employer Contribution Agreement ( Agreement ) is entered into by and between, your successors and assigns ( You ) and Oracle America, Inc. ( Oracle ) as of the date
AACS RED LASER ADDENDUM FOR CPRM-COMPATIBLE OPTICAL DISC MEDIA TO THE AACS FINAL ADOPTER AGREEMENT
AACS RED LASER ADDENDUM FOR CPRM-COMPATIBLE OPTICAL DISC MEDIA TO THE AACS FINAL ADOPTER AGREEMENT WHEREAS, Adopter desires to use AACS to record content securely onto red laser recording media, WHEREAS,
User Guide. mpos Readers RP350x & RP457c Mobile Payment Acceptance User Guide for Android
mpos Readers RP350x & RP457c Mobile Payment Acceptance User Guide for Android Disclosure Statements Confidential Notice The information contained herein is the property of Total System Services, Inc. (TSYS
CIPURSE Certification Program
Conformance Type Approval Process v1.0 www.osptalliance.org Legal This document is copyright 2012 by the OSPT Alliance. 1. You may, without charge, copy (for internal purposes only) and share this document
MICROSOFT WINDOWS SERVER 2016 FOR EMBEDDED SYSTEMS STANDARD AND DATACENTER. the server manufacturer that distributes the software with the server; or
MICROSOFT SOFTWARE LICENSE TERMS MICROSOFT WINDOWS SERVER 2016 FOR EMBEDDED SYSTEMS STANDARD AND DATACENTER These license terms are an agreement between you and: the server manufacturer that distributes
ACS MobileMate (for Android)
ACS MobileMate (for Android) User Manual V1.01 Subject to change without prior notice Table of Contents 1.0. Introduction... 4 2.0. Specifications... 5 2.1. Supported Mobile Operating Systems... 5 2.2.
UM PR533 - PCSC Tool. User manual COMPANY PUBLIC. Rev November Document information
PR533 - PCSC Tool Document information Info Content Keywords PR533, CCID, PCSC, APDU Abstract This document describes the PCSC Tool software which demonstrates the capabilities of PR533 device. Revision
GCR410 / GCR410-P. Application Note. Version 1.0
GCR410 / GCR410-P Application Note Version 1.0 October 1999 SPECIFIC WARNING NOTICE All information herein is either public information or is the property of and owned solely by GEMPLUS who shall have
PayPass Mag Stripe. Security Architecture
PayPass Mag Stripe Security Architecture Version 1.3 November 2007 Copyright The information contained in this manual is proprietary and confidential to MasterCard International Incorporated or one of
PAYMENT SYSTEM RESPONSE CODES
PAYMENT SYSTEM RESPONSE CODES Bank s Text Text APPROVED 00 Approved 08 Honour with ID 11 Approved VIP (not used) 16 Approved, Update Track 3 (not used) 77 Approved (ANZ only) DECLINED 01 Refer to Card
Terms and Conditions 01 January 2016
Terms and Conditions 01 January 2016 thehealthsource: Terms and Conditions Page 1 of 7 This Agreement (the Agreement ) is entered into by and between thehealthsource (Pty) Ltd and the entity agreeing to
User Manual. Spectrum Pro
80140502-001 User Manual Spectrum Pro PCI PTS 4.X Hybrid Insert Reader RS232 Interface 80140502-001 Rev 51 3/10/2015 International Technologies & Systems Corporation 10721 Walker Street, Cypress, CA 90630-4720;
JR/T Translated English of Chinese Standard: JR/T
Translated English of Chinese Standard: JR/T0055.2-2009 www.chinesestandard.net Buy True-PDF Auto-delivery. Sales@ChineseStandard.net JR FINANCIAL INDUSTRY STANDARD OF THE PEOPLE S REPUBLIC OF CHINA ICS
CALSTRS ONLINE AGREEMENT TERMS AND CONDITIONS
CALSTRS ONLINE AGREEMENT TERMS AND CONDITIONS INTRODUCTION: Before the California State Teachers Retirement System (hereinafter "CalSTRS," "We," or "Us") will provide services found at mycalstrs.com (the
Terms and Conditions for Remote Data Transmission
Terms and Conditions for Remote Data Transmission (As amended on 15 November 2013) 1. Scope of services (1) The Bank is available to its Customer (account holder) for remote transmission of data by electronic
TERMS OF USE FOR NAT TRAVERSAL FUNCTION TRIAL VERSION
TERMS OF USE FOR NAT TRAVERSAL FUNCTION TRIAL VERSION THESE TERMS OF USE INCLUDE IMPORTANT LEGAL INFORMATION REGARD- ING YOUR ACCESS AND USE OF THIS FUNCTION. PLEASE READ THEM CARE- FULLY BEFORE PROCEEDING.
AMERICAN EXPRESS GLOBAL CREDIT AUTHORIZATION GUIDE ISO 8583:1993 (VERSION 1) OCT. 2010
AMERICAN EXPRESS GLOBAL CREDIT AUTHORIZATION GUIDE ISO 8583:1993 (VERSION 1) OCT. 2010 GLOBAL MERCHANT SERVICES Copyright 2004-2010 American Express Travel Related Services Company, Inc. All rights reserved.
TERMS & CONDITIONS. Complied with GDPR rules and regulation CONDITIONS OF USE PROPRIETARY RIGHTS AND ACCEPTABLE USE OF CONTENT
TERMS & CONDITIONS www.karnevalkings.com (the "Site") is a website and online service owned and operated by the ViisTek Media group of companies (collectively known as "Karnevalkings.com", "we," "group",
VX 675 Series APACS 40 User Guide
VX 675 Series APACS 40 User Guide 2010 VeriFone. All rights reserved. VeriFone, the VeriFone logo, VX are either trademarks or registered trademarks of VeriFone. No part of the contents of this document
3GPP TS V9.1.0 ( )
TS 31.101 V9.1.0 (2010-06) Technical Specification 3rd Generation Partnership Project; Technical Specification Group Core Network and Terminals; UICC-terminal interface; Physical and logical characteristics
Oracle Agile Product Lifecycle Management for Process Reporting User Guide Release E
Oracle Agile Product Lifecycle Management for Process Reporting User Guide Release 6.1.1.5 E57828-01 November 2014 Oracle Agile Product Lifecycle Management for Process Reporting User Guide, Release 6.1.1.5
Lightweight Machine to Machine Architecture
Lightweight Machine to Machine Architecture Approved Version 1.0 08 Feb 2017 Open Mobile Alliance OMA-AD-LightweightM2M-V1_0-20170208-A OMA-AD-LightweightM2M-V1_0-20170208-A Page 2 (12) Use of this document
Oracle Fail Safe. Release for Microsoft Windows E
Oracle Fail Safe Tutorial Release 3.4.2 for Microsoft Windows E14009-01 October 2009 Oracle Fail Safe Tutorial, Release 3.4.2 for Microsoft Windows E14009-01 Copyright 1999, 2009, Oracle and/or its affiliates.
Mile Terms of Use. Effective Date: February, Version 1.1 Feb 2018 [ Mile ] Mileico.com
Mile Terms of Use Effective Date: February, 2018 Version 1.1 Feb 2018 [ Mile ] Overview The following are the terms of an agreement between you and MILE. By accessing, or using this Web site, you acknowledge
Intel Cluster Ready Allowed Hardware Variances
Intel Cluster Ready Allowed Hardware Variances Solution designs are certified as Intel Cluster Ready with an exact bill of materials for the hardware and the software stack. When instances of the certified
Annex 2 to the Agreement on Cooperation in the Area of Trade Finance & Cash Management Terms and Conditions for Remote Data Transmission
Annex 2 to the Agreement on Cooperation in the Area of Trade Finance & Cash Management Terms and Conditions for Remote Data Transmission 1. Scope of services (1) The Bank is available to its Customer (account
Microsoft Dynamics GP. Extender User s Guide
Microsoft Dynamics GP Extender User s Guide Copyright Copyright 2009 Microsoft Corporation. All rights reserved. Complying with all applicable copyright laws is the responsibility of the user. Without
VX 820 Duet Series APACS 40 User Guide
VX 820 Duet Series APACS 40 User Guide The information contained in this document is subject to change without notice. Although VeriFone has attempted to ensure the accuracy of the contents of this document,
Schedule EHR Access Services
This document (this Schedule") is the Schedule for Services ( EHR Access Services ) related to access to the electronic health records ( EHR ) maintained by ehealth Ontario and the use of information in
INCLUDING MEDICAL ADVICE DISCLAIMER
Jordan s Guardian Angels Terms and Conditions of Use INCLUDING MEDICAL ADVICE DISCLAIMER Your use of this website and its content constitutes your agreement to be bound by these terms and conditions of
D220 - User Manual mypos Europe Ltd. mypos Mini Ice En
D220 - User Manual mypos Europe Ltd. mypos Mini Ice En CONTENTS Introduction... 2 Scope... 2 Related documentation... 2 Internet connectivity... 2 Using D220 with a mobile phone (via Bluetooth or personal
Service Description: Cisco Technical Services Advantage (Releases 1.0 through 2.3)
Page 1 of 8 Service Description: Cisco Technical Services Advantage (Releases 1.0 through 2.3) This document describes Cisco Technical Services Advantage support services. Related Documents: This document
mypos Go User Manual mypos.com mypos Go - User Manual
mypos Go User Manual mypos.com mypos Go - User Manual Table of Contents Introduction...2 Related documentation 2 Activation...3 Activation code 4 Getting started...5 Learn about your device 5 Home screen
IBM Algo Risk Content on Cloud
Service Description IBM Algo Risk Content on Cloud This Service Description describes the Cloud Service IBM provides to Client. Client means the contracting party and its authorized users and recipients
What are Bitmaps[edit]
What are Bitmaps[edit] Within ISO 8583, a bitmap is a field or subfield within a message which indicates which other data elements or data element subfields may be present elsewhere in a message. A message
PLAINSCAPITAL BANK SAMSUNG PAY TERMS AND CONDITIONS - PERSONAL
PLAINSCAPITAL BANK SAMSUNG PAY TERMS AND CONDITIONS - PERSONAL Last Modified: 3/12/2018 These terms and conditions ( Terms and Conditions ) are a legal agreement between you and PlainsCapital Bank that
Oracle Banking Digital Experience
Oracle Banking Digital Experience Merchant Payments User Manual Release 18.1.0.0.0 Part No. E92727-01 January 2018 Merchant Payments User Manual January 2018 Oracle Financial Services Software Limited
mypos Mini - User Manual mypos Europe Ltd. mypos Mini En
mypos Mini - User Manual mypos Europe Ltd. mypos Mini En CONTENTS Introduction... 2 Scope... 2 Related documentation... 2 Internet connectivity... 2 Using mypos Mini with a mobile phone (via Bluetooth
Oracle FLEXCUBE Core Banking
Oracle FLEXCUBE Core Banking BROP User Manual Release 11.6.0.0.0 Part No. E65544-01 August 2016 BROP User Manual August 2016 Oracle Financial Services Software Limited Oracle Park Off Western Express Highway