Acquirer Device Validation Toolkit (ADVT)

Size: px
Start display at page:

Download "Acquirer Device Validation Toolkit (ADVT)"

Transcription

1 Acquirer Device Validation Toolkit (ADVT) Frequently Asked Questions (FAQs) Version: 2.0 January 2007 This document provides users of Visa s Acquirer Device Validation Toolkit (ADVT) with answers to some of the most frequently asked questions that arise while using the toolkit. It also provides a useful reference to some of the general policy and operational questions that relate to the ADVT. 1.0 Policy Questions 1.1 What is the relationship between the Acquirer Device Validation Toolkit (ADVT), Asia Pacific s Visa Smart Debit/Smart Credit User Acceptance Test for Visa Chip Programmes, and Visa Europe s End-to-End Test Pack? The two regional test tools mentioned were the forerunners to the ADVT. These toolkits were supported and distributed only within those two regions. Both these tools are no longer supported by Visa and should not be used in testing programs. ADVT is Visa s global test product and is available in all regions. 1.2 Can the ADVT be used to test other transaction types besides Purchase and Cash, such as Reversals and Refunds? Reversal transactions can be executed and sent online to the Visa Certification Management Service (VCMS). However, an Authorization Response of 21 (no action taken) will be returned by VCMS, since there is no corresponding transaction in VCMS to be reversed (only an approved transaction can be reversed). Refunds however should not be performed as an online transaction (there is no such transaction type as an online Refund). In the past Acquirers have performed Refunds as online purchase transactions but Visa strongly recommends against this. Please note: the following transaction types cannot be tested within VCMS: Referrals Balance Enquiries PIN Change/PIN Unblock transaction Any other transaction involving an Issuer Script It may be possible to test some of these transaction types using one of the host simulators confirmed by Visa, but this is outside the scope of ADVT testing. 1.3 Can the ADVT cards be used to perform Cash-back transactions? No. None of the ADVT cards are currently personalized with the appropriate options (Application Usage Control) to allow Cash-back. 1

2 1.4 Can the ADVT cards be used to test Clearing (Base II) transactions into the VisaNet Certification Management Service (VCMS)? In theory, yes. However, Visa does not currently provide this service as part of the ADVT process. Clearing tests involving VCMS are performed during the Acquirer Host Certification process and require a manual audit of the clearing data. 1.5 Can the ADVT be used with VTS/3 configured as the Issuer host? This configuration is technically possible, and some Acquiring Members have used it in the past. Although Visa has no objections to this set-up, users should be aware that it is outside of the scope of the current ADVT process and therefore not supported. 1.6 All the EMV technical references within the ADVT document refer to EMV 4.1. The system being tested uses an EMV kernel that is only certified for EMV Is this a problem? No. All ADVT tests apply equally to chip card acceptance devices based on EMV 3.1.1, EMV 4.0 or EMV 4.1. As most of the tests in the ADVT relate to Visa-specific requirements that are supplemental to EMV requirements, the exact version of EMV supported on the device is of less significance. 1.7 Some of the tests are indicated as not being appropriate for the type of device being tested, should these tests still be performed? It is preferable that these tests be performed even if you do not provide us with test results. Although the detailed test results (TVR etc.) may be of limited value, it is always useful to confirm acceptance of all ADVT cards by the device. 1.8 We are purchasing an off-the-shelf Chip and PIN device with fully approved EMV level 2 software. Are the ADVT tests still relevant to us? Yes. One of the key objectives of the ADVT tests is to ensure overall system integration, not just the validation of the technical characteristics of the device. Even though an EMV Level 1 & Level 2 approved device may correctly interact with a card, all the following criteria still need to be met: a. Data from the card must be correctly transmitted to an Acquirer host b. Data received from the Acquirer Host must be correctly returned to the card c. In addition to EMV, the acceptance device must meet specific Visa requirements 1.9 Will we receive a Letter of Approval from Visa once we have completed our ADVT process and submitted our results to Visa? No. Visa will record the ADVT test results submitted but will not be issuing a Letter Of Approval to ADVT Users We wish to make changes to the payment part of our terminal application, but it will only affect mag stripe and not chip functionality. Do we have to retest? No. However, we recommend that you perform the fallback-related tests to ensure that the chip and mag stripe functionality remain correctly integrated with each other We only acquire ATM transactions. What are the precise implications of this for ADVT testing? You still need to perform ADVT testing and you must still perform all the tests, except for 2

3 those which are marked as not being appropriate for ATMs. These are Test Cases: 24, 27, 28, 30, 31, 32, 33, 40, 45, 48 and Can we test manual cash transactions with the ADVT? Yes, you can. Where a terminal supports both purchase and manual cash we will expect to see two sets of test results for this device Our ATMs sell mobile phone top-up vouchers as well as dispensing cash. Do we need to test them twice? Yes, you do. From Visa s point of view an ATM which also performs sale transactions is really two terminals in one an ATM and an unattended POS terminal. Therefore, we expect to see two sets of test results one for cash transactions and one for sale transactions Can we waive testing with the ADVT? Yes, you can. An acquirer or their agent (including processors or national/regional/global acquiring networks) can request waiving of the ADVT testing requirement if they can attest that the deployed application has already been tested on the same acquiring network. The deployed application would be recognized by concatenation of all identifiers: Kernel id - as submitted to EMV and listed on the EMVCo website Acquiring network - as identified by the acquiring network or regional or global body Application identifier - as identified by the application developer or system integrator If the device deployer wishes to see the ADVT test results recognized in multiple regions, they will need to request this. Granting the request is at the sole discretion of Visa, and may not be allowed under regional policies. If the request is accepted, the compliance report can then be forwarded to Visa Inc headquarters for retention and access by other regional personnel. 3

4 2.0 Operational Questions 2.1 Our online transactions are being declined by VCMS with an Authorization Response Code of 05 ( do not honour ). What does this mean? These declines may be caused by a failure of Offline Data Authentication (SDA or DDA), as reflected in the Terminal Verification Result (TVR). The valid reasons for a decline by VCMS are outlined in Section 8 of the ADVT manual ( VSDC Stand-In Processing Conditions ). If the transaction is not being declined for one of those reasons, the most likely cause of a 05 response is that the validation of the Application Request Cryptogram (ARQC) has failed. This can be confirmed by checking the value of Field 44.8 in the authorization response message. A value of 1 indicates a failure. Some of the reasons why ARQC validation may fail are as follows: One or more of the data elements used to calculate the ARQC does not match it s corresponding value in the 3 rd Bit Map field One or more of the values used by VCMS to derive the Unique Derivation Key (UDK) for the cryptogram validation may be missing or incorrect. You may need to work with your Visa Regional Representative to try to determine the cause of the failure. 2.2 Almost all the transactions conducted with the ADVT have the TVR bit set for transaction exceeds floor limit, even though we perform transactions with small amounts which are under our floor limit. Why is this? It is possible that your card acceptance device may be set up to prevent the use of split sales (use of the same card to perform more than one transaction in quick succession), a means of avoiding floor limit checks. In this situation the device will aggregate the transaction amounts in the split sale to determine if the floor limit has been exceeded, rather than using just the current amount. 2.3 Our online transactions are being authorized by VCMS but appear to fail Issuer Authentication. What is the likely cause? There are a couple of likely causes for this failure: 1. The Acquirer fails to correctly convert the Issuer Authentication Data to the appropriate format when it is returned from VisaNet (VCMS in this case). The format used for Issuer Authentication Data (Field 139) is as follows: 16 Hex digits + 2 bytes EBCDIC The 16 Hex digits correspond to the 8-byte ARPC cryptogram. The 2 bytes of EBCDIC correspond to the Authorization Response Code that is sent to the card. The ARC has to be in ASCII format to be recognized by the card. So, for example, if the two bytes are F0F0, they should be converted to Another possibility is that the Acquirer host may not be passing on the Issuer Authentication Data, which may not be easy to detect from the response message. For example, in the UK, the Issuer Authentication Data field being filled with Hex Fs in the APACS response messages indicates the absence of valid data. If this data is passed to the card it will result in Issuer Authentication failure. 4

5 2.4 Whenever we use Online PIN as the CVM, the transaction is declined by VCMS with the Response Code 81 ( PIN cryptographic error ). What is the likely reason for this? The most likely reason is that the Acquirer host is using the wrong Acquirer Working Key (AWK) to encrypt the PIN block when it is sent to VCMS. It is possible that the AWK may have been changed since Acquirer Host Certification was performed. Please contact the Host Certification Team in your Visa Regional office for further assistance. 2.5 In the course of testing, the PIN on one of the cards has been inadvertently blocked. Does Visa provide a service for unblocking the PIN? In general, Visa does not provide a service for unblocking the PIN. Unblocking of the PIN requires the use of an Issuer Script command with the appropriate MAC value. The values of cryptographic keys used for the MAC are documented in the ADVT User Guide (5.1 Baseline Card). There are various test tools available in the marketplace that can perform this function. Please contact your Visa Regional Representative for more information. 2.6 For some test cases (e.g. Test Case 23- Valid for domestic-only transactions), we know right from the beginning of the transaction that it will result in a decline. Can we just cancel the transaction? This terminal behavior would be out of compliance with EMV. An option for the terminal would be to skip some of the transaction processing steps before requesting the Application Authentication Cryptogram (AAC). EMV 4.1, Book 3, 10.7 states that The terminal action analysis function may be executed at several places during a transaction to eliminate the need for unnecessary processing. 5

6 3.0 Technical Clarifications Questions 3.1 In the test cases there are numerous references to how the system should behave in the event of no connectivity to VCMS and online is not available. What do these terms mean in the context of a complex Electronic Point Of Sale (EPOS) system where the EMV functionality resides on multiple pieces of hardware? In general, Online is not available means a failure to connect to the Acquirer host and ultimately to VisaNet (VCMS). The failure of a connection between, for example, an Electronic Cash Register (ECR) and an in-store server constitutes a system failure and is outside the scope of the ADVT testing requirements. 3.2 Our device sometimes displays additional messages explaining to cardholders why a transaction has been declined. An example is this card cannot be used to withdraw cash. Is this acceptable? If the device is able to determine the specific reason for the transaction decline then displaying the appropriate message is acceptable. Generally, such messages apply to offlinedeclined results. For online declines, it is often difficult for the terminal to determine exactly why the transaction was declined, except in the case where an incorrect online PIN was entered (Auth Response Code 55 ). 3.3 For a fallback to magnetic stripe condition, our device fails to display any Card Error messages, it just says Use Mag Stripe. Is this acceptable? The Standard Messages defined in EMV 4.1 Book 4: Section 11.2 includes the Card Error message. This indicates to the cardholder or attendant that a malfunction of the card has taken place or the answer-to-reset (ATR) from the card was unacceptable. Note that these messages (or their local language equivalents) are not specifically mandated. So, the implementation described in this case is acceptable. Visa s recommendation however would be to display the message: Chip Error, Use Mag Stripe (Chip Card Acceptance Device Reference Guide - Requirements and Best Practices, Version 7.0). 3.4 The Application Version Number (AVN) on most of your test cards is x8c. Which Terminal AVN should our device be configured with? For EMV 4.0 or EMV 4.1 approved devices, the correct AVN is x8c (decimal value = 140). This also indicates that the device is compliant with VIS For EMV approved devices, the correct AVN is x84 (decimal value = 132, corresponding to VIS 1.3.2). It should be noted that the precise value of the AVN on the terminal is not critical for the tests, as it does not affect card acceptance or the outcome of any ADVT tests. 3.5 Why does setting the merchant forced online bit in the TVR result in a decline? There is no clear definition of what this bit means, in EMV or anywhere else. However, it is generally assumed that it means merchant is suspicious so it is safest to decline. Therefore, just like many real issuers, VCMS STIP will decline transactions where this bit is set. If you want to ensure that a transaction goes online at an offline-capable terminal without prejudicing the outcome of the transaction you can set the TVR bit for floor limit exceeded or transaction randomly selected for online processing. 3.6 We originally purchased a version 2 ADVT test pack which has subsequently been upgraded. This means that many of our cards are the original version 2 cards with an Application Version Number of x84. Will this cause problems? No. The AVN has no effect on card behaviour and the Visa-mandated Terminal Action Codes (TACs) make no reference to the TVR bit ICC and terminal have different application 6

7 versions. 7

8 4.0 Specific Test Case/Test Card Questions (NB these are in order of Test Case number) 4.1 Card 17 does not require an unpredictable number from the device (CDOL1 only contains the tag for TVR). Do we still need to send an unpredictable number online to VCMS? Yes, the Unpredictable Number should still be sent to VisaNet (VCMS) in F132, even though it was not used in the cryptogram (ARQC) calculation by the card. 4.2 I don t understand the significance of all the additional personalization data defined for Card 18. How will our terminals see this card? The purpose of this card is to test the Visa Low-Value Payment (VLP) feature. This is an optional feature of the Visa Integrated Circuit Card Specifications (VIS), which an Issuer can choose to enable for a VSDC card. A detailed definition can be found in the VIS Card Spec., Appendix G. The purpose of this feature is to enable low-value transactions to be dealt with in an offline environment. To support this feature, a terminal is required to perform a small amount of additional functionality. Specifically, the terminal must support a VLP Terminal Support Indicator which is requested by the card in its PDOL data. If this data element is not present or is not set to 1, the card will perform a normal VSDC transaction i.e. the data identified in the first part of Section 5.19 in the ADVT manual will be used. Only terminals that support VLP will receive the data defined under the heading The following data elements need to be added to support VLP: 4.3 All our transactions seem to be successfully authorized by VCMS when they go online, except for Card 25. What does this mean? Card 25 is the only card that requires Issuer Authentication to be performed in order for the transaction to be authorized the other cards do support Issuer Authentication but the transactions can be authorized without it being performed. A common error made by some Acquirers is to set the POS Entry Mode to 9010 for chip read transactions. This will cause chip data to be ignored and Card # 25 will fail. POS Entry Mode (F22) should be set to 0510 for chip read transactions. 4.4 When the Card 21 (19-digit PAN) transaction is sent online it is declined with a Response Code of 27. What does this mean? Track 2 Data with an odd number of digits should be sent to VisaNet (VCMS or a confirmed host simulator in this case) with a leading zero as padding. If this leading zero is not present you will receive this Response Code. 4.5 With Cards 32 and 33 (where the PIN Try Limit is exceeded) our terminal displays a PIN blocked message to help the cardholder and merchant understand what is happening. Is this acceptable? This is specifically prohibited by EMV. EMV 4.1, Book 4, states that "If the value of the PIN Try Counter is zero, indicating no remaining PIN tries, the terminal should not allow offline PIN entry. The terminal: Shall set the PIN Try Limit exceeded bit in the TVR to 1 Shall not display any specific message regarding PINs, Shall not set the CVM Results, and Shall continue cardholder verification processing in accordance with the card s CVM List." 8

9 9

Fundamentals of EMV. Guy Berg Senior Managing Consultant MasterCard Advisors guy_berg@mastercard.com 914.325.8111

Fundamentals of EMV. Guy Berg Senior Managing Consultant MasterCard Advisors guy_berg@mastercard.com 914.325.8111 Fundamentals of EMV Guy Berg Senior Managing Consultant MasterCard Advisors guy_berg@mastercard.com 914.325.8111 EMV Fundamentals Transaction Processing Comparison Magnetic Stripe vs. EMV Transaction Security

More information

JCB Terminal Requirements

JCB Terminal Requirements Version 1.0 April, 2008 2008 JCB International Co., Ltd. All rights reserved. All rights regarding this documentation are reserved by JCB Co., Ltd. ( JCB ). This documentation contains confidential and

More information

Quick Chip for EMV Specification

Quick Chip for EMV Specification Quick Chip for EMV Specification Version 1.2 August 2016 Visa Public EMV is a registered trademark or trademark of EMVCo LLC in the United States and other countries. Important Information on Confidentiality

More information

M/Chip Functional Architecture for Debit and Credit

M/Chip Functional Architecture for Debit and Credit M/Chip Functional Architecture for Debit and Credit Christian Delporte, Vice President, Chip Centre of Excellence, New Products Engineering Suggested routing: Authorization, Chargeback, Chip Technology,

More information

A Guide to EMV. Version 1.0 May 2011. Copyright 2011 EMVCo, LLC. All rights reserved.

A Guide to EMV. Version 1.0 May 2011. Copyright 2011 EMVCo, LLC. All rights reserved. A Guide to EMV Version 1.0 May 2011 Objective Provide an overview of the EMV specifications and processes What is EMV? Why EMV? Position EMV in the context of the wider payments industry Define the role

More information

implementing American Express EMV acceptance on a Terminal

implementing American Express EMV acceptance on a Terminal implementing American Express EMV acceptance on a Terminal EMV tools A MERICAN E XPRESS I ntegrated Circuit Card P ayment S pecification The policies, procedures, and rules in this manual are subject to

More information

Visa Recommended Practices for EMV Chip Implementation in the U.S.

Visa Recommended Practices for EMV Chip Implementation in the U.S. CHIP ADVISORY #20, UPDATED JULY 11, 2012 Visa Recommended Practices for EMV Chip Implementation in the U.S. Summary As issuers, acquirers, merchants, processors and vendors plan and begin programs to adopt

More information

The EMV Readiness. Collis America. Guy Berg President, Collis America berg@collisamerica.com +1 651 925 5411

The EMV Readiness. Collis America. Guy Berg President, Collis America berg@collisamerica.com +1 651 925 5411 The EMV Readiness Collis America Guy Berg President, Collis America berg@collisamerica.com +1 651 925 5411 1 Collis Solutions & Markets Finance Consultancy Card Payments SEPA Financial Risk Mgmt Test Tools

More information

Requirements for an EMVCo Common Contactless Application (CCA)

Requirements for an EMVCo Common Contactless Application (CCA) Requirements for an EMVCo 20.01.2009 CIR Technical Working Group Table of Contents 1 Introduction...1 2 Common Contactless Application Business Requirements...2 3 Card Requirements...3 4 Terminal Requirements...4

More information

Chip Terms Explained A Guide to Smart Card Terminology

Chip Terms Explained A Guide to Smart Card Terminology Chip Terms Explained A Guide to Smart Card Terminology Contents 1 AAC Application Authentication Cryptogram AID Application Identifier Applet ARQC Authorization Request Cryptogram ARPC Authorization Response

More information

PayPass M/Chip Acquirer Implementation Requirements. Version July 2008

PayPass M/Chip Acquirer Implementation Requirements. Version July 2008 PayPass M/Chip Acquirer Implementation Requirements Version 1.0 - July 2008 Proprietary Rights Trademarks Media The information contained in this document is proprietary and confidential to MasterCard

More information

EMV 96 Integrated Circuit Card Terminal Specification for Payment Systems

EMV 96 Integrated Circuit Card Terminal Specification for Payment Systems EMV 96 Integrated Circuit Card Terminal Specification for Payment Systems Version 3.0 June 30, 1996 1996 Europay International S.A., MasterCard International Incorporated, and Visa International Service

More information

PayPass M/Chip Requirements. 10 April 2014

PayPass M/Chip Requirements. 10 April 2014 PayPass M/Chip Requirements 10 April 2014 Notices Following are policies pertaining to proprietary rights, trademarks, translations, and details about the availability of additional information online.

More information

MasterCard PayPass. M/Chip, Acquirer Implementation Requirements. v.1-a4 6/06

MasterCard PayPass. M/Chip, Acquirer Implementation Requirements. v.1-a4 6/06 MasterCard PayPass M/Chip, Acquirer Implementation Requirements v.1-a4 6/06 TABLE OF CONTENTS 1 USING THESE REQUIREMENTS...4 1.1 Purpose...4 1.2 Scope...4 1.3 Audience...5 1.4 Overview...5 1.5 Language

More information

PayPass - M/Chip Requirements. 5 December 2011

PayPass - M/Chip Requirements. 5 December 2011 PayPass - M/Chip Requirements 5 December 2011 Notices Proprietary Rights The information contained in this document is proprietary and confidential to MasterCard International Incorporated, one or more

More information

EMVCo Letter of Approval - Contact Terminal Level 2

EMVCo Letter of Approval - Contact Terminal Level 2 February 14, 2014 Marat Serpokrylov Closed joint stock company - CENTER OF FINANCIAL TECHNOLOGIES 35, Koltsovo Koltsovo, vosibirsk Region 630559 Russia Re: EMV Application Kernel: Approval Number(s): EMVCo

More information

EMVCo Letter of Approval - Terminal Level 2

EMVCo Letter of Approval - Terminal Level 2 April 06, 2011 Lorraine LEPINE France Telecom Direction Publiphonie (FT/OPF/MHGP/DMP/PUB) Orange Village, 1 avenue Nelson Mandela 94745 ARCUEIL France Re: EMV Application Kernel: Approval Number(s): EMVCo

More information

EMV Frequently Asked Questions for Merchants May, 2014

EMV Frequently Asked Questions for Merchants May, 2014 EMV Frequently Asked Questions for Merchants May, 2014 Copyright 2014 Vantiv All rights reserved. Disclaimer The information in this document is offered on an as is basis, without warranty of any kind,

More information

EMV : Frequently Asked Questions for Merchants

EMV : Frequently Asked Questions for Merchants EMV : Frequently Asked Questions for Merchants The information in this document is offered on an as is basis, without warranty of any kind, either expressed, implied or statutory, including but not limited

More information

EMVCo Letter of Approval - Contact Terminal Level 2

EMVCo Letter of Approval - Contact Terminal Level 2 May 18, 2015 Richard Pohl Triton Systems of Delaware, LLC 21405 B Street Long Beach MS 39560 USA Re: EMV Application Kernel: Approval Number(s): EMVCo Letter of Approval - Contact Terminal Level 2 Triton

More information

The Canadian Migration to EMV. Prepared By:

The Canadian Migration to EMV. Prepared By: The Canadian Migration to EMV Prepared By: December 1993 Everyone But The USA Is Migrating The international schemes decided Smart Cards are the way forward Europay, MasterCard & Visa International Produced

More information

PayPass. Level 2 Terminal Testing Test Descriptions for TIP and NIV cards

PayPass. Level 2 Terminal Testing Test Descriptions for TIP and NIV cards PayPass Level 2 Terminal Testing Test Descriptions for TIP and NIV cards Copyright The information contained in this manual is proprietary and confidential to MasterCard International Incorporated (MasterCard)

More information

Beyond Cards and Terminals: Considerations for Testing Host-to-Host EMV Processing

Beyond Cards and Terminals: Considerations for Testing Host-to-Host EMV Processing Beyond Cards and Terminals: Considerations for Testing Host-to-Host EMV Processing Most EMV TM 1 testing focuses on cards and terminals. Card and terminal functionality is critical, but verifying your

More information

EMV Acquiring at the ATM: Early Planning for Credit Unions

EMV Acquiring at the ATM: Early Planning for Credit Unions EMV Acquiring at the ATM: Early Planning for Credit Unions EMV Adoption Recent data breaches and planned Network Liability shifts have increased the interest in EMV at the ATM and have affected the planned

More information

August 07, Chuck Hayes Triton Systems of Delaware, LLC B Street Long Beach MS USA. Re: EMVCo Letter of Approval - Terminal Level 2

August 07, Chuck Hayes Triton Systems of Delaware, LLC B Street Long Beach MS USA. Re: EMVCo Letter of Approval - Terminal Level 2 August 07, 2012 Chuck Hayes Triton Systems of Delaware, LLC 21405 B Street Long Beach MS 39560 USA Re: EMVCo Letter of Approval - Terminal Level 2 EMV Application Kernel: Approval Number(s): EMV.LIB v3.0.

More information

EMVCo Letter of Approval - Contact Terminal Level 2 - Restricted Renewal with restriction

EMVCo Letter of Approval - Contact Terminal Level 2 - Restricted Renewal with restriction September 09, 2014 Luc Porchon PARKEON Le Barjac 1 Boulevard Victor 75015 Paris France Re: EMVCo Letter of Approval - Contact Terminal Level 2 - Restricted Renewal with restriction EMV Application Kernel:

More information

Mitigating Fraud Risk Through Card Data Verification

Mitigating Fraud Risk Through Card Data Verification Risk Management Best Practices 11 September 2014 Mitigating Fraud Risk Through Card Data Verification AP, Canada, CEMEA, LAC, U.S. Issuers, Processors With a number of cardholder payment options (e.g.,

More information

2015-11-02. Electronic Payments Part 1

2015-11-02. Electronic Payments Part 1 Electronic Payments Part Card transactions Card-Present Smart Cards Card-Not-Present SET 3D Secure Untraceable E-Cash Micropayments Payword Electronic Lottery Tickets Peppercoin Bitcoin EITN4 - Advanced

More information

Smart Cards for Payment Systems

Smart Cards for Payment Systems White Paper Smart Cards for Payment Systems An Introductory Paper describing how Thales e-security can help banks migrate to Smart Card Technology Background In this paper: Background 1 The Solution 2

More information

Mobile Near-Field Communications (NFC) Payments

Mobile Near-Field Communications (NFC) Payments Mobile Near-Field Communications (NFC) Payments OCTOBER 2013 GENERAL INFORMATION American Express continues to develop its infrastructure and capabilities to support growing market interest in mobile payments

More information

Re: EMVCo Letter of Approval - Contact Terminal Level 2

Re: EMVCo Letter of Approval - Contact Terminal Level 2 April 07, 2014 Michael Li Wizarpos International Co., Ltd. Suite B904, Hi-Tech King World, 666 East Beijing Road Shanghai 200001 People's Republic of China Re: EMVCo Letter of Approval - Contact Terminal

More information

ATM Webinar Questions and Answers May, 2104

ATM Webinar Questions and Answers May, 2104 May, 2104 Debit Network Alliance LLC (DNA) is a Delaware Limited Liability Company currently comprised of 10 U.S. Debit Networks and open to all U.S. Debit Networks. The goal of this collaborative effort

More information

Visa U.S. EMV Chip Terminal Testing Requirements

Visa U.S. EMV Chip Terminal Testing Requirements Visa U.S. EMV Chip Terminal Testing Requirements Visa developed the Acquirer Device Validation Toolkit (ADVT) and Contactless Device Evaluation Toolkit (CDET) to provide separate sets of test cards and

More information

EMV flaws and fixes: vulnerabilities in smart card payment systems

EMV flaws and fixes: vulnerabilities in smart card payment systems EMV flaws and fixes: vulnerabilities in smart card payment systems Steven J. Murdoch www.cl.cam.ac.uk/users/sjm217 OpenNet Initiative Computer Laboratory www.opennet.net COSIC seminar, 11 June 2007, ESAT,

More information

SMARTCARD FRAUD DETECTION USING SECURE ONETIME RANDOM MOBILE PASSWORD

SMARTCARD FRAUD DETECTION USING SECURE ONETIME RANDOM MOBILE PASSWORD SMARTCARD FRAUD DETECTION USING SECURE ONETIME RANDOM MOBILE PASSWORD Ramesh Javvaji 1, Roopa Goje 2, Praveen Pappula 3 Assistant professor, Computer Science & Engineering, SR Engineering College, Warangal,

More information

EMV: A to Z (Terms and Definitions)

EMV: A to Z (Terms and Definitions) EMV: A to Z (Terms and Definitions) First Data participates in many industry forums, including the EMV Migration Forum (EMF). The EMF is a cross-industry body focused on supporting an alignment of the

More information

EMV (Chip-and-PIN) Protocol

EMV (Chip-and-PIN) Protocol EMV (Chip-and-PIN) Protocol Märt Bakhoff December 15, 2014 Abstract The objective of this report is to observe and describe a real world online transaction made between a debit card issued by an Estonian

More information

Credit Card Processing Overview

Credit Card Processing Overview CardControl 3.0 Credit Card Processing Overview Overview Credit card processing is a very complex and important system for anyone that sells goods. This guide will hopefully help educate and inform new

More information

EMV Questions and Answers

EMV Questions and Answers The following is a listing of the most popular questions and their answers that SHAZAM has received to date on EMV (chip-and-pin technology). We will update this document as additional questions are received.

More information

May 13, Shirley Chen Castles Technology Co., Ltd. 2 F, No. 205, Sec. 3, Beixin Rd. Xindian District, New Taipei City Taiwan (R.O.

May 13, Shirley Chen Castles Technology Co., Ltd. 2 F, No. 205, Sec. 3, Beixin Rd. Xindian District, New Taipei City Taiwan (R.O. May 13, 2013 Shirley Chen Castles Technology Co., Ltd. 2 F,. 205, Sec. 3, Beixin Rd. Xindian District, New Taipei City 23143 Taiwan (R.O.C) Re: EMVCo Letter of Approval - Terminal Level 2 EMV Application

More information

Introductions 1 min 4

Introductions 1 min 4 1 2 1 Minute 3 Introductions 1 min 4 5 2 Minutes Briefly Introduce the topics for discussion. We will have time for Q and A following the webinar. 6 Randy - EMV History / Chip Cards /Terminals 5 Minutes

More information

U.S. EMV Debit Implementation Guidelines for POS Acquirers

U.S. EMV Debit Implementation Guidelines for POS Acquirers U.S. EMV Debit Implementation Version 1.0 August 15, 2014 About Debit Network Alliance Debit Network Alliance LLC (DNA) is a Delaware limited liability company owned by ten U.S. Debit Networks, and open

More information

Master Thesis Towards an Improved EMV Credit Card Certification

Master Thesis Towards an Improved EMV Credit Card Certification Master Thesis Towards an Improved EMV Credit Card Certification Version of June 26, 2007 Etienne Gerts Master Thesis Towards an Improved EMV Credit Card Certification THESIS submitted in partial fulfillment

More information

POS User Guide Geidea

POS User Guide Geidea POS User Guide Geidea Table of Contents 1. NUMBER KEYPAD 2 2. OPERATOR s TRANSACTIONS 3 2.1 PURCHASE 3 2.2 PURCHASE WITH CASH BACK 3 2.3 PURCHASE WITH CONTACTLESS 5 2.4 REVERSAL 9 2.5 ADVICE 11 2.6 CASH

More information

CardControl. Credit Card Processing 101. Overview. Contents

CardControl. Credit Card Processing 101. Overview. Contents CardControl Credit Card Processing 101 Overview Credit card processing is a very complex and important system for anyone that sells goods. This guide will hopefully help educate and inform new and old

More information

A Guide to EMV Version 1.0 May 2011

A Guide to EMV Version 1.0 May 2011 Table of Contents TABLE OF CONTENTS... 2 LIST OF FIGURES... 4 1 INTRODUCTION... 5 1.1 Purpose... 5 1.2 References... 5 2 BACKGROUND... 6 2.1 What is EMV... 6 2.2 Why EMV... 7 3 THE HISTORY OF EMV... 8

More information

CONTACTLESS PAYMENTS. Joeri de Ruiter. University of Birmingham. (some slides borrowed from Tom Chothia)

CONTACTLESS PAYMENTS. Joeri de Ruiter. University of Birmingham. (some slides borrowed from Tom Chothia) CONTACTLESS PAYMENTS Joeri de Ruiter University of Birmingham (some slides borrowed from Tom Chothia) Overview EMV Protocol Attacks EMV-Contactless Protocols Attacks Demo Stopping relay attacks What is

More information

Bank of America Merchant Services MultiLink Message Specification Authorization Formats for Debit, Credit, EBT, Check Acceptance and POS Check

Bank of America Merchant Services MultiLink Message Specification Authorization Formats for Debit, Credit, EBT, Check Acceptance and POS Check Bank of America Merchant Services MultiLink Message Specification Authorization Formats for Debit, Credit, EBT, Check Acceptance and POS Check Version 4.02 Document creation date: March 28, 2002 Last modification

More information

Steps for staying PCI DSS compliant Visa Account Information Security Guide October 2009

Steps for staying PCI DSS compliant Visa Account Information Security Guide October 2009 Steps for staying PCI DSS compliant Visa Account Information Security Guide October 2009 The guide describes how you can make sure your business does not store sensitive cardholder data Contents 1 Contents

More information

Extending EMV payment smart cards with biometric on-card verification

Extending EMV payment smart cards with biometric on-card verification Extending EMV payment smart cards with biometric on-card verification Olaf Henniger 1 and Dimitar Nikolov 2 1 Fraunhofer Institute for Computer Graphics Research IGD Fraunhoferstr. 5, D-64283 Darmstadt,

More information

Clicks ClubCard Gold Credit Card FAQ s

Clicks ClubCard Gold Credit Card FAQ s Clicks ClubCard Gold Credit Card FAQ s What is chip & PIN? chip & PIN is a smart card or can also be known as the 21 st century version of credit cards. These cards are plastic cards containing a silicon

More information

Euronet s EMV Chip Solutions Superior Protection with Enhanced Security against Fraud

Euronet s EMV Chip Solutions Superior Protection with Enhanced Security against Fraud Serving millions of people worldwide with electronic payment convenience. Euronet s EMV Chip Solutions Superior Protection with Enhanced Security against Fraud Copyright 2011 Euronet Worldwide, Inc. All

More information

Dutch EMV-cards and Internet Banking

Dutch EMV-cards and Internet Banking Radboud University Nijmegen Computing Science Digital Security Faculty Master of Science Thesis Dutch EMV-cards and Internet Banking by Michael Schouwenaar Supervisors: Erik Poll & Wojciech Mostowski Nijmegen,

More information

DPS POS Integration Certification Request and Test Scripts

DPS POS Integration Certification Request and Test Scripts DPS POS Integration Certification Request and Test Scripts 1 DOCUMENT HISTORY Version Author Date 3.0.0 David Merry 01/2012 3.0.1 Grant Shannon 01/2012 3.0.2 David Merry 01/2012 3.0.3 James Rees 06/2013

More information

Chip Card Acceptance Device

Chip Card Acceptance Device Chip Card Acceptance Device Testing and Approval Requirements Version 4.3 Effective: June 2016 Classification: Visa Public June 2016 2016 Visa Inc. All Rights Reserved. Visa Public. Page 1 of 48 DISCLAIMER

More information

EMV FAQs. Contact us at: CS@VancoPayments.com. Visit us online: VancoPayments.com

EMV FAQs. Contact us at: CS@VancoPayments.com. Visit us online: VancoPayments.com EMV FAQs Contact us at: CS@VancoPayments.com Visit us online: VancoPayments.com What are the benefits of EMV cards to merchants and consumers? What is EMV? The acronym EMV stands for an organization formed

More information

Payment systems. Tuomas Aura T-110.4206 Information security technology

Payment systems. Tuomas Aura T-110.4206 Information security technology Payment systems Tuomas Aura T-110.4206 Information security technology Outline 1. Money transfer 2. Card payments 3. Anonymous payments 2 MONEY TRANSFER 3 Common payment systems Cash Electronic credit

More information

Chip & PIN notes on a dysfunctional security system

Chip & PIN notes on a dysfunctional security system Chip & PIN notes on a dysfunctional security system Saar Drimer http://www.cl.cam.ac.uk/~sd410/ Computer Laboratory in collaboration with Steven J. Murdoch, Ross Anderson, Mike Bond The Institution of

More information

Visa U.S. EMV Chip Terminal Testing Requirements

Visa U.S. EMV Chip Terminal Testing Requirements Visa U.S. EMV Chip Terminal Testing Requirements Visa developed the Acquirer Device Validation Toolkit (ADVT) and Contactless Device Evaluation Toolkit (CDET) to provide separate sets of test cards and

More information

MOBILE CHIP ELECTRONIC COMMERCE: ENABLING CREDIT CARD PAYMENT FOR MOBILE DEVICES

MOBILE CHIP ELECTRONIC COMMERCE: ENABLING CREDIT CARD PAYMENT FOR MOBILE DEVICES MOBILE CHIP ELECTRONIC COMMERCE: ENABLING CREDIT CARD PAYMENT FOR MOBILE DEVICES Marko Schuba and Konrad Wrona Ericsson Research, Germany ABSTRACT This paper describes the Mobile Chip Electronic Commerce

More information

Getting Ready for EMV

Getting Ready for EMV Getting Ready for EMV Allison Edwards Director Product July 21, 2014 Session Overview In this session: Fiserv answers your top questions on EMV Why EMV? What is the market status? What should I be doing?

More information

How does the International Visa Prepaid Card work?

How does the International Visa Prepaid Card work? How does the International Visa Prepaid Card work? The International Visa Prepaid Card is a reloadable prepaid Visa debit card, which means you can spend up to the value placed on the card anywhere Visa

More information

E M V I M P L E M E N TAT I O N TO O L S F O R S U C C E S S. April 2012

E M V I M P L E M E N TAT I O N TO O L S F O R S U C C E S S. April 2012 E M V I M P L E M E N TAT I O N TO O L S F O R S U C C E S S April 2012 A G E N D A EMV Overview EMV Industry Announcements EMV Transaction Differences, What to Expect Solution Decisions VFI EMV Solutions

More information

Using EMV Cards to Protect E-commerce Transactions

Using EMV Cards to Protect E-commerce Transactions Using EMV Cards to Protect E-commerce Transactions Vorapranee Khu-Smith and Chris J. Mitchell Information Security Group, Royal Holloway, University of London, Egham, Surrey, TW20 0EX, United Kingdom {V.Khu-Smith,

More information

Transaction Acceptance Device Guide (TADG)

Transaction Acceptance Device Guide (TADG) Transaction Acceptance Device Guide (TADG) Version 3.0 15 May 2015 Important Information 2003-2015 Visa. All Rights Reserved. This document is provided as a supplemental guide and tool to be used in conjunction

More information

E M V I M P L E M E N TAT I O N T O O L S F O R S U C C E S S, P C I & S E C U R I T Y. February 2014

E M V I M P L E M E N TAT I O N T O O L S F O R S U C C E S S, P C I & S E C U R I T Y. February 2014 E M V I M P L E M E N TAT I O N T O O L S F O R S U C C E S S, P C I & S E C U R I T Y February 2014 A G E N D A EMV Overview EMV Industry Announcements EMV Transaction Differences, What to Expect Solution

More information

Registry of Service Providers

Registry of Service Providers Registry of Service Providers Program Guide Contents 1 2 1.1 What is the Registry of Service Providers? 2 1.2 Who can register? 3 1.3 Why register with Visa? 3 1.4 Implications for Visa Clients 4 2 5 2.1

More information

Heartland Secure. By: Michael English. A Heartland Payment Systems White Paper 2014. Executive Director, Product Development

Heartland Secure. By: Michael English. A Heartland Payment Systems White Paper 2014. Executive Director, Product Development A Heartland Payment Systems White Paper 2014 Heartland Secure. By: Michael English Executive Director, Product Development 2014 Heartland Payment Systems. All trademarks, service marks and trade names

More information

Re: EMVCo Letter of Approval - Contact Terminal Level 2

Re: EMVCo Letter of Approval - Contact Terminal Level 2 January 12, 2015 Rémy de Fenoyl Monext Tour Ariane 5 Place de la Pyramide PARIS CEDEX LA DEFENSE 92088 France Re: EMVCo Letter of Approval - Contact Terminal Level 2 EMV Application Kernel: Ing_EMV_Kernel

More information

Technical Specifications on Bankcard. Interoperability. (Version 2.1) Part I Transaction Processing

Technical Specifications on Bankcard. Interoperability. (Version 2.1) Part I Transaction Processing Technical Specifications on Bankcard Interoperability (Version 2.1) Part I Transaction Processing October 2011 THIS PAGE INTENTIONALLY LEFT BLANK. Table of Contents Using this Document... 1 1 Application

More information

Formal analysis of EMV

Formal analysis of EMV Formal analysis of EMV Erik Poll Joeri de Ruiter Digital Security group, Radboud University Nijmegen Overview The EMV standard Known issues with EMV Formalisation of the EMV standard in F# Formal analysis

More information

Converge. Chip and PIN (EMV) Transaction Processing Addendum. Revision Date: February 2016

Converge. Chip and PIN (EMV) Transaction Processing Addendum. Revision Date: February 2016 Converge Chip and PIN (EMV) Transaction Processing Addendum Revision Date: February 2016 Two Concourse Parkway, Suite 800, Atlanta, GA 30328 Elavon Incorporated 2016. All Rights Reserved Copyright Copyright

More information

Chip and PIN Programme. Guideline G18. Configuring Integrated Systems

Chip and PIN Programme. Guideline G18. Configuring Integrated Systems Chip and PIN Programme Guideline G18 Configuring Integrated Systems The information contained within this document has been prepared by the Chip and PIN PMO, for use by participants in the Programme only.

More information

How Secure are Contactless Payment Systems?

How Secure are Contactless Payment Systems? SESSION ID: HT-W01 How Secure are Contactless Payment Systems? Matthew Ngu Engineering Manager RSA, The Security Division of EMC Chris Scott Senior Software Engineer RSA, The Security Division of EMC 2

More information

EPC020-08 12.12.2013 SEPA CARDS STANDARDISATION (SCS) "VOLUME" BOOK 2

EPC020-08 12.12.2013 SEPA CARDS STANDARDISATION (SCS) VOLUME BOOK 2 EPC020-08 12.12.2013 (Vol Ref. 7.2.1.00) SEPA CARDS STANDARDISATION (SCS) "VOLUE" BOOK 2 FUNCTIONAL REQUIREENTS PART OF THE APPROVED VERSION OF SCS VOLUE V7.0 Payments and Withdrawals with Cards in SEPA

More information

Chip & PIN is definitely broken. Credit Card skimming and PIN harvesting in an EMV world

Chip & PIN is definitely broken. Credit Card skimming and PIN harvesting in an EMV world Chip & PIN is definitely broken Credit Card skimming and PIN harvesting in an EMV world Andrea Barisani Daniele Bianco Adam Laurie Zac Franken

More information

Card Payments Roadmap in the United States: How Will EMV Impact the Future Payments Infrastructure?

Card Payments Roadmap in the United States: How Will EMV Impact the Future Payments Infrastructure? Card Payments Roadmap in the United States: How Will EMV Impact the Future Payments Infrastructure? A Smart Card Alliance Payments Council White Paper Publication Date: September 2012 Publication Number:

More information

American Express Contactless Payments

American Express Contactless Payments PRODUCT CAPABILITY GUIDE American Express Contactless Payments American Express Contactless Payments Help Enable Increased Convenience For Card Members At The Point Of Sale American Express contactless

More information

A Retailer Guide to Bank Accreditation

A Retailer Guide to Bank Accreditation A Retailer Guide to Bank Accreditation An Overview of the Bank Accreditation / Acquirer Acceptance Testing Process for Chip and PIN Produced by the Chip and PIN Programme Management Organisation Version

More information

Strengthening Card Authentication: a migration to DDA

Strengthening Card Authentication: a migration to DDA Strengthening Card Authentication: a migration to DDA An SPA White Paper First issued in October 2009 Updated July 2015 July 2015 Table of Contents 1. Introduction... 3 1.1. EMV CAM Methods... 3 1.2. Benefits

More information

PayPass M/Chip. Reader Card Application Interface Specification

PayPass M/Chip. Reader Card Application Interface Specification PayPass /Chip Reader Card Application Interface Specification Version 2.0 September 2008 Proprietary Rights The information contained in this document is proprietary and confidential to astercard International

More information

Visa U.S. Merchant EMV Chip Acceptance Readiness Guide. 10 Steps to Planning Chip Implementation for Contact and Contactless Transactions

Visa U.S. Merchant EMV Chip Acceptance Readiness Guide. 10 Steps to Planning Chip Implementation for Contact and Contactless Transactions Visa U.S. Merchant EMV Chip Acceptance Readiness Guide 10 Steps to Planning Chip Implementation for Contact and Contactless Transactions Visa U.S. Merchant EMV Chip Acceptance Readiness Guide 10 Steps

More information

How does the EMV Travel Prepaid Card work?

How does the EMV Travel Prepaid Card work? How does the EMV Travel Prepaid Card work? The EMV Travel Prepaid Card is a reloadable prepaid Visa Reloadable EMV Travel Prepaid Card, which means you can spend up to the value placed on the card anywhere

More information

Visa U.S. Merchant EMV Chip Acceptance Readiness Guide. 10 Steps to Planning Chip Implementation for Contact and Contactless Transactions

Visa U.S. Merchant EMV Chip Acceptance Readiness Guide. 10 Steps to Planning Chip Implementation for Contact and Contactless Transactions Visa U.S. Merchant EMV Chip Acceptance Readiness Guide 10 Steps to Planning Chip Implementation for Contact and Contactless Transactions Visa U.S. Merchant EMV Chip Acceptance Readiness Guide 10 Steps

More information

EMV DEBIT ROUTING VERIFONE.COM

EMV DEBIT ROUTING VERIFONE.COM EMV Debit Routing Overview Complying with the EMVCo requirements, card network requirements and meeting the Durbin Amendment debit routing regulation (Regulation II), while managing debit card processing

More information

What Issuers Need to Know Top 25 Questions on EMV Chip Cards and Personalization

What Issuers Need to Know Top 25 Questions on EMV Chip Cards and Personalization Frequently Asked Questions What Issuers Need to Know Top 25 Questions on EMV Chip Cards and Personalization Issuers across the United States are beginning to embark in the planning and execution phase

More information

Visa U.S. Merchant EMV Chip Acceptance Readiness Guide. 10 Steps to Planning Chip Implementation for Contact and Contactless Transactions

Visa U.S. Merchant EMV Chip Acceptance Readiness Guide. 10 Steps to Planning Chip Implementation for Contact and Contactless Transactions Visa U.S. Merchant EMV Chip Acceptance Readiness Guide 10 Steps to Planning Chip Implementation for Contact and Contactless Transactions Visa U.S. Merchant EMV Chip Acceptance Readiness Guide 10 Steps

More information

EMV Chip Card Payment Standard: Perspective

EMV Chip Card Payment Standard: Perspective Ellen Walsh Technology Overview 11 June 2002 EMV Chip Card Payment Standard: Perspective Summary EMV is an interoperability and compatibility standard for chip cards that allows cards to operate from any

More information

EMV in Hotels Observations and Considerations

EMV in Hotels Observations and Considerations EMV in Hotels Observations and Considerations Just in: EMV in the Mail Customer Education: Credit Card companies have already started customer training for the new smart cards. 1 Questions to be Answered

More information

Payment systems. Tuomas Aura T-110.4206 Information security technology. Aalto University, autumn 2012

Payment systems. Tuomas Aura T-110.4206 Information security technology. Aalto University, autumn 2012 Payment systems Tuomas Aura T-110.4206 Information security technology Aalto University, autumn 2012 Outline 1. Money transfer 2. Card payments 3. Anonymous payments 2 MONEY TRANSFER 3 Common payment systems

More information

EMV: Integrated Circuit Card Specifications for Payment Systems

EMV: Integrated Circuit Card Specifications for Payment Systems : Integrated Circuit Card Specifications for Payment Systems Jan Krhovják Faculty of Informatics, Masaryk University Jan Krhovják (FI MU) EMV (Europay, MasterCard, Visa) 20. 3. 2006 1 / 13 Outline EMV

More information

Integrated EFTPOS User Guide

Integrated EFTPOS User Guide business Integrated EFTPOS User Guide www.bendigobank.com.au Table of contents Keypad layout....3 Debit card purchase...4 Credit and charge card purchase...5 Processing a tip (restaurants only)...6 Pre-authorisation

More information

Recurring Transactions Enquiry Service. Merchant Implementation Guide

Recurring Transactions Enquiry Service. Merchant Implementation Guide Recurring Transactions Enquiry Service Merchant Implementation Guide April 2013 Contents Section Page Introduction 1 Benefits Of Using The Recurring Transactions Enquiry Service 1 Requirements Of Using

More information

First Data s Program on EMV

First Data s Program on EMV First Data s Program on EMV Independent Software Vendors November 2014 Copyright 2013 First Data Corporation 1 Agenda EMV Overview & Background Processing Certification EMV Complementary Products Rapid

More information

FAQ on EMV Chip Debit Card and Online Usage

FAQ on EMV Chip Debit Card and Online Usage FAQ on EMV Chip Debit Card and Online Usage Security enhancement on HSBC India Debit Card A Secure Debit Card HSBC India Debit Cards are more secure and enabled with the Chip and PIN technology? You can

More information

EMV mobile Point of Sale (mpos) Initial Considerations

EMV mobile Point of Sale (mpos) Initial Considerations EMV mobile Point of Sale EMV mobile Point of Sale (mpos) Initial Considerations Version 1.1 June 2014 2014 EMVCo, LLC ( EMVCo ). All rights reserved. Any and all uses of the EMV Specifications ( Materials

More information

Payments Transformation - EMV comes to the US

Payments Transformation - EMV comes to the US Accenture Payment Services Payments Transformation - EMV comes to the US In 1993 Visa, MasterCard and Europay (EMV) came together and formed EMVCo 1 to tackle the global challenge of combatting fraudulent

More information

Visa Reloadable Frequently Asked Questions. EMV Travel Card

Visa Reloadable Frequently Asked Questions. EMV Travel Card Visa Reloadable Frequently Asked Questions EMV Travel Card How does the International Prepaid Card work? The International Prepaid Card is a reloadable prepaid Visa debit card, which means you can spend

More information

EMV-TT. Now available on Android. White Paper by

EMV-TT. Now available on Android. White Paper by EMV-TT A virtualised payment system with the following benefits: MNO and TSM independence Full EMV terminal and backend compliance Scheme agnostic (MasterCard and VISA supported) Supports transactions

More information

Finance Office. Card Handling Policy

Finance Office. Card Handling Policy Finance Office Card Handling Policy Prepared by: Lyndsay Brown Issued: November 2012 1 Contents Page 1 Introduction 3 2 Responsibility 3 3 The PCI Data Security Standard 3 4 PCI DSS Requirements 4 5 Receiving/

More information