May 13, 2015 Guillermo Lizasoain Blue Bamboo (HK) Limited 6 Floor, Huishan Technology Park,.3333 Changning Road, Shanghai 200336 P.R. China Re: EMVCo Letter of Approval - Contact Terminal Level 2 EMV Application Kernel: EMV2-LIB Version V2.0 Approval Number(s): 2-03103-1-1C-BCS-0515-4.3.d 2-03103-1-2C-BCS-0515-4.3.d 2-03103-1-1OS-BCS-0515-4.3.d The EMV Application Kernel has been tested on the following terminal Terminal: P200 PinPad: n/a Operating System: 1OS = BBOS Version V1.0 Renewal Date: 05-May-2018 Report ID Kernel Checksum: 42 AB 61 DC Session 1: TEMV1502115 - Beijing Unionpay Card Technology Co., Ltd. Shenzhen Branch Configurations Checksums: Config Vendor Config ID Terminal Checksum 1C EMV-BASE 22 9C D3 53 0F 2C EMV-CF1 22 8A 0B FB C9 V260514 / 2-03103 Page 1 of 6
Dear Guillermo Lizasoain: EMVCo, LLC ("EMVCo"), a Delaware limited liability company, has received your request for Level 2 terminal type approval for the EMV Application Kernel identified above (hereafter refered to as the "Application"). In connection with your request, we have reviewed all test file number(s) listed above. After assessing such file(s), EMVCo has found reasonable evidence that the submitted samples of the above referenced Application sufficiently conform to EMV Integrated Circuit Card Specifications for Payment Systems, Version 4.3 of vember 2011. EMVCo hereby grants your Application EMVCo Type Approval for Terminal Level 2, based on the requirements stated in the EMV 4.3 Specifications. Please note that EMVCo may publish this letter and publicly identify your Application as an approved Application, including in EMVCo's published list of approved Applications. EMVCo's grant to your Application is subject to and specifically incorporates (i) the General Terms and Conditions to the Letter of Approval enclosed as Exhibit A, and (ii) the Specific Terms and Conditions to the Letter of Approval attached hereto as Attachment 1. Because EMVCo's grant is subject to such limitations, including certain events of termination, you and any third parties should confirm that such approval is current and has not been terminated by referring to the list of approved Applications published on the EMVCo website (www.emvco.com). Please note that EMVCo makes certain logos available for use in connection with an Application that has received EMVCo approval. To obtain permission to use the "EMV Approved" certification mark, please contact EMVCo to request a license agreement. Blue Bamboo (HK) Limited This Letter of Approval is valid while the approval number is posted on the EMVCo website. EMVCo, LLC, a Delaware limited liability company By: Name: Title: Arnaud du Chéné EMVCo Terminal Type Approval te: The Random Number Generator functions are part of the EMVCo specification and in the present Contact Level 2 Kernel the random number is generated by a specific Hardware device in the tested terminal. To be fully EMVCo compliant, the present Contact Level 2 Kernel shall be used in conjunction with this specific Hardware. The Checksum of this Contact Level 2 Kernel covers all functions specified by EMVCo that are located in software. Functions, such as the random number generator, that are managed by this specific Hardware device in the tested terminal are not part of this Checksum. V260514 / 2-03103 Page 2 of 6
Terminal Capabilities 1C 2C Card Data Input Capability Terminal Type 22 22 Manual Key Entry Magnetic Stripe IC with Contacts CVM Capability Plaintext PIN Online Enciphered PIN Signature (Paper) Offline Enciphered PIN CVM Security Capability SDA DDA Card Capture CDA Transaction Type Capability Mode 1 Mode 1 Tran Type - Cash Tran Type - Goods Tran Type - Services Tran Type - Cash Back Tran Type - Inquiry Tran Type - Transfer Tran Type - Payment Tran Type - Admin Tran Type - Cash Deposit Terminal Data Input Capability Keypad Numeric Keys Alpha and Special Character Keys Command Keys Function Keys Terminal Data Output Capability Print, Attendant Print, Cardholder Display, Attendant Display, Cardholder Code Table 10 Code Table 9 Code Table 8 Code Table 7 Code Table 6 Code Table 5 Code Table 4 Code Table 3 Code Table 2 Code Table 1 V260514 / 2-03103 Page 3 of 6
(continued) 1C 2C Application Selection PSE Cardholder Confirmation Preferred display order Partial AID Selection Multi language EMV Language Selection method Common Character Set Data Authentication MAX CA Public key Exponents Revocation of Issuer PK Certificate Certificate Revocation List Format Default DDOL Manual act. when CA PK loading fails CA PK verified with check sum Cardholder Verification Method Bypass PIN Entry Subsequent Bypass PIN Entry Get Data for PIN Try Counter Fail CVM Amount known before CVM proces. Terminal Risk Management Floor Limit Checking Random Transaction Selection Velocity Checking Transaction Log Exception File TRM irrespective of AIP setting (expected behavior) Terminal Action Analysis Terminal Action Codes supported TAC can be changed TAC can be deleted or disabled How does offline only Terminal process Default Action Codes? How does online only terminal process TAC/IAC-Default when unable to go online? 248 3 and 2^16+1 3 and 2^16+1 RID+CAPK RID+CAPK INDEX+SN INDEX+SN After 1st GenAC rmal 248 After 1st GenAC rmal V260514 / 2-03103 Page 4 of 6
(continued) Completion Processing Forced Online Forced Acceptance Advices Issuer Referrals Batch Data Capture Online Data Capture Default TDOL Exception Handling POS Entry Mode Miscellaneous PIN Pad Amount and PIN on same keypad ICC/Magstripe Reader Combined If Combined, is Magstripe read first? Supports account type selection Supports on fly script processing Issuer Script device limit > 128 bytes If limit > 128, value supported? Internal Date Management 1C 92 2C 92 V260514 / 2-03103 Page 5 of 6
Attachment 1 Specific Terms and Conditions to the Letter of Approval Restriction: ne V260514 / 2-03103 Page 6 of 6