Please enable JavaScript.

Coggle requires JavaScript to display documents.

Card Payment System, PIN Verification Keys To verify PIN, Card…

- - - - A is the version
      - B is Message Class
      - C is Request
      - D is transaction originator
        Also, if it is repeat or not...
    - - Primary
        
        1-64 data elements
        Whether they are present on not...
      - Secondary
        
        65-128 data elements
        Whether they are present on not...
    - - Fixed Length
      - Variable Length
        
        It starts with "LL" which
        means how many digits to read
      - VISA defines the order, sequence
        of fields AND which are Fixed Length
        and Variable Length
      - Primitive
        NO child elements
      - Constructed
        FIXED number of child elements
        TLV can be used to determine which all
        Child Elements are present
      - Composite
        VARIABLE number of child elements
        TLV can be used to determine which all
        Child Elements are present
    - - Level 1
        Associated with only payments
      - Level 2
        Level 1 + Other Data
      - Level 3
        Level 2 + Other Data
- - - - Local Master Keys
        
        Acquirer Master Key
        
        Network Master Key
        
        Scheme Private Key
        
        Scheme Public Key
        
        Issuer Master Key
        
        Issuer MKac
        
        Issuer MKmac
        
        Issuer MKenc
        
        Issuer Public Key
        
        Issuer Private Key
        
        Terminal Master Key
        
        Terminal PIN Key
        To encrypt PIN
        
        Terminal Authentication Key
        To Authenticate that terminal
        
        Card Master Keys
        (aka ICC Master Key)
        
        ICC MKac
        AC (Application Cryptogram)
        used to ensure Integrity and Authenticity
        for Transaction
        
        ICC MKmac
        Message Application Cryptogram
        used to ensure Integrity and Authenticity
        for Scripting
        
        ICC MKenc
        Key for Encryption
        used to ensure the confidentiality
        for Script Data
        
        Card Private Key
        
        Card Public Key
      - Zone Master Key
        Of Acquirer
        
        Zone Working Key Of Acquirer
      - Zone Master Key
        Of Issuer
        
        Zone Working Key Of Issuer
      - Zone Master Key
        Of Network
        
        Zone Working Key Of Acquirer
        
        Zone Working Key Of Issuer
- - - - Magstripe Mode
        (MSD Mode)
        This is a fallback option
        
        iCVV will be used to
        verify the Card
        DE 55 is not used
      - EMV Mode
        (using Chip Data)
        
        Key mechanism is used
        to verify the card. DE 55 is used
        
        DECLINE AAC
        Application Authentication Cryptogram
        
        APPROVES TC
        Transaction Certificate
        Offline Mode EMV
        
        ASK ISSUER ARQC
        Authorization Request Cryptogram
        Online mode EMV
        
        IF Link to issuer is down
        POST Communication Limit
  - - - SDA
        Static Data Authentication
        Done in clear text PIN
        Depending on the card's capability
        AND ALSO Terminal's capability
        
        ON CARD
        Certification of Iss Pub Key using Scheme Public Key
        Certified Issuer Public Key is present
        Certification of Static Data + Hash using Iss Priv Key
        Certified Static Data + Hash is present
        
        ON TERMINAL
        Scheme Pub Key is present
        
        ON TERMINAL
        Issuer Pub Key is received
        Issuer Pub Key is validated using Scheme Pub Key
        Certified Static Data + Hash is received
        Recover Data + Hash using Iss Pub Key
        Compute Hash
        Compare Hash
      - DDA
        Dynamic Data Authentication
        Done in clear text OR enciphered PIN
        Depending on the card's capability
        AND ALSO Terminal's capability
        
        ON CARD
      - CDA
        Combined Dynamic Data Authentication
        Done in clear text OR enciphered PIN
        Depending on the card's capability
        AND ALSO Terminal's capability
      - fDDA
        For Contactless Cards
  - - - Cold Reset
      - Warm Reset
    - - Does it support offline?
      - Does it support online?
      - Does it support SDA? DDA? CDA?
    - - SDA or
        DDA or
        CDA is performed
    - - Within Floor Limit?
        PRECOM Limit
        
        Random Transaction
        
        Biased Random Transaction
        
        Velocity Checking
        Number based (Offline Application Transaction Counter)
        Amount Based
    - - APPROVE
        TC
      - DECLINE
        AAC
      - ASK ISSUER
        ARQC
        
        ARPC is received from Issuer
        (Approval Or Decline)
        IF approval THEN Generate 2nd AC
        Card can still decline even if issuer
        Approves because Card will authenticate
        Issuer as well
        
        IF Link to issuer is down
        POST Communication Limit
- - - - AT CARD
        ICC MKac + ATC = Session Key (SKac)
        is generated on card
      - AT CARD
        Unpredictable Number is added in ARQC
        SKac +CDOL2 = Signed ARQC (CDOL2) + Hash +Data
      - AT ISSUER
        Issuer MKac + Card PAN + Sequence Number
        = ICC MKac
      - AT ISSUER
        ICC MKac + ATC = Session Key (SKac)
      - AT ISSUER
        SKac + CDOL2 = Data is derived
        Hash is calculated
      - AT ISSUER
        Calculated Hash = Received Hash?
        IF YES, ARQC has been validated
    - - AT ISSUER
        SK ac + ARPC Data + UPred Number =
        Signed ARPC + Hash + Data
      - AT CARD
        SKac + ARPC Data + Same UpredNumber
        = Recover Data and Hash
      - AT CARD
        Compute Hash
      - AT CARD
        Calculated Hash = Recovered Hash?
        IF YES, ARPC has been validated