a architecture and general rqmts v2.2 201206290810078

Upload: indranil-chakraborty

Post on 02-Jun-2018

220 views

Category:

Documents


0 download

TRANSCRIPT

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    1/124

    2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCo

    found at http://www.emvco.com/specifications.aspx.

    EMV*

    Contactless Specifications forPayment Systems

    Book A

    Architecture and GeneralRequirements

    Version 2.2June 2012

    * EMV is a registered trademark in the U.S. and other countries and an unregisteredtrademark elsewhere. The EMV trademark is owned by EMVCo.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    2/124

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    3/124

    2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCo

    found at http://www.emvco.com/specifications.aspx.

    EMVContactless Specifications forPayment Systems

    Book A

    Architecture and GeneralRequirements

    Version 2.2June 2012

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    4/124

    EMV Contactless Book A Ar ch it ectur e & Genl Rqmts v2.2

    2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all usesof these Specifications is subject to the terms and conditions of the EMVCoTerms of Use agreement available at www.emvco.com. These Specificationsare provided "AS IS" without warranties of any kind, and EMVCo neitherassumes nor accepts any liability for any errors or omissions contained inthese Specifications. EMVCO DISCLAIMS ALL REPRESENTATIONS ANDWARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUTLIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESSFOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT, ASTO THESE SPECIFICATIONS.

    EMVCo makes no representations or warranties with respect to intellectualproperty rights of any third parties in or in relation to the Specifications.EMVCo undertakes no responsibility to determine whether any

    implementation of these Specifications may violate, infringe, or otherwiseexercise the patent, copyright, trademark, trade secret, know-how, or otherintellectual property rights of third parties, and thus any person whoimplements any part of these Specifications should consult an intellectualproperty attorney before any such implementation.

    Without limiting the foregoing, the Specifications may provide for the use ofpublic key encryption and other technology, which may be the subject matterof patents in several countries. Any party seeking to implement theseSpecifications is solely responsible for determining whether its activitiesrequire a license to any such technology, including for patents on public key

    encryption technology. EMVCo shall not be liable under any theory for anyparty's infringement of any intellectual property rights in connection with theseSpecifications.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    5/124

    EMV Contactless Book A Ar ch it ectur e & Genl Rqmts v2.2

    June 2012 Page iii 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    Contents

    1 Scope .................................................................................................................. 1

    1.1 Audience ......... .......... ......... ......... ......... ......... ......... ......... ......... ......... ......... . 1

    1.2 Overview ..................................................................................................... 2

    2 References ......................................................................................................... 3

    2.1 Volumes of the Contactless Specifications .................................................. 3

    2.2 EMV Documents ......................................................................................... 4

    2.3 ISO Standards ............................................................................................. 4

    3 Conventi ons ....................................................................................................... 5

    3.1 Requirement Numbering ............................................................................. 5

    3.2 Data Element Formats ................................................................................ 5

    4 Terminol ogy ....................................................................................................... 7

    4.1 Card ............................................................................................................ 7

    4.2 Transaction ................................................................................................. 8

    4.3 POS System ............................................................................................... 9

    4.4 Entry Point ................................................................................................ 10

    4.5 Kernel ....................................................................................................... 10

    4.6 Outcome ................................................................................................... 10

    5 POS System Archi tecture ................................................................................ 11

    5.1 POS System Descriptive Model ................................................................ 11

    5.2 Terminal and Reader Responsibilities ......... ......... ......... ......... ......... ......... . 13

    5.3 Logical Architecture ................................................................................... 14

    5.4 Operating Modes ....................................................................................... 15

    5.5 POS System Functions ............................................................................. 16

    5.5.1 Non-interference with Contact Chip Interface ......... ......... ......... ...... 16

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    6/124

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    7/124

    EMV Contactless Book A Contents Ar ch it ectur e & Genl Rqmts v2.2

    June 2012 Page v 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    8 POS Syst em Requirement s ............................................................................. 55

    9 User Interface Recommendations .................................................................. 63

    9.1 User Interface Hardware ........................................................................... 63

    9.1.1 Visual Indication ............................................................................ 64

    9.1.2 Audio Indication ........ ......... ......... .......... ......... ......... ......... ......... ..... 65

    9.2 Contactless Transaction Status (User) ...................................................... 66

    9.3 User Interface Guidelines .......................................................................... 68

    9.3.1 Common User Interface Guidelines ......... ......... ......... ......... ......... .. 69

    9.3.2 Option 1 for Card Read Successfully/Processing Error ........ ......... . 71

    9.3.3 Option 2 for Card Read Successfully/Processing Error ........ ......... . 75 9.4 User Interface Standard Messages ........................................................... 79

    10 Performance Requirements ............................................................................ 85

    10.1 Card in Field .............................................................................................. 85

    10.2 Allocation of Tariffs .......... ......... ......... ......... ......... ......... ......... ......... ......... .. 86

    10.3 Transaction Disposition ............................................................................. 88

    10.3.1 Offline ............................................................................................ 88 10.3.2 Online ............................................................................................ 88

    10.4 Reference Cards ....................................................................................... 89

    Annex A Data Element s ..................................................................................... 91

    Annex B Guidance on Outcome and Parameter Setting .................................. 95

    B.1 Approved ......... ......... ......... ......... ......... ......... ......... ......... ......... ......... ......... 96

    B.2 Approved (with balance) ........ ......... ......... ......... ......... ......... ......... ......... ..... 97

    B.3 Declined .................................................................................................... 98

    B.4 Try Another Interface ................................................................................. 99

    B.5 Online Request ....................................................................................... 100

    B.6 Online Request (for Two Presentments) .......... ......... ......... ......... ......... . 101

    B.7 Online Request (for Present and Hold) .......... ......... ......... ......... ......... ... 102

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    8/124

    Contents EMV Contactless Book A Ar ch it ectur e & Genl Rqmts v2.2

    Page vi June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    B.8 Try Again................................................................................................. 103

    B.9 Select Next .............................................................................................. 104

    B.10 End Application ........ ......... ......... ......... ......... ......... ......... ......... ......... ....... 105

    B.11 End Application (with restart)............... ......... ......... ......... ......... ......... ....... 106

    Annex C Glossary ............................................................................................. 107

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    9/124

    EMV Contactless Book A Figures Ar ch it ectur e & Genl Rqmts v2.2

    June 2012 Page vii 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    Figures

    Figure 5-1: POS System Descriptive Model ........ ......... ......... ......... ......... .......... ...... 12

    Figure 5-2: Logical Architecture ......... ......... ......... ......... ......... ......... ......... ......... ...... 14 Figure 9-1: Success Tone ........ ......... ......... ......... .......... ......... ......... ......... ......... ...... 65

    Figure 9-2: Alert Tone ......... .......... ......... ......... ......... ......... ......... ......... ......... ......... .. 65

    Figure 10-1: Tariff Allocation for Transaction Timing ......... .......... ......... ......... ......... . 86

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    10/124

    Tables EMV Contactless Book A Ar ch it ectur e & Genl Rqmts v2.2

    Page viii June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    Tables

    Table 5-1: Example Combination Table per Transaction Type ......... .......... ......... .... 23

    Table 5-2: Entry Point Configuration Data per Combination ......... ......... ......... ......... 24 Table 5-3: Entry Point Pre-Processing Indicators ......... ......... ......... ......... ......... ....... 25

    Table 5-4: Terminal Transaction Qualifiers ......... ......... ......... ......... ......... ......... ....... 26

    Table 5-5: Example Transaction-specific Data Elements ........ ......... ......... ......... ..... 27

    Table 5-6: Type of Transaction ......... ......... ......... ......... ......... ......... ......... .......... ...... 27

    Table 6-1: Outcomes .......... ......... ......... ......... ......... ......... ......... ......... ......... ......... ... 34

    Table 6-2: Outcome Parameters ........ ......... ......... ......... ......... ......... .......... ......... ..... 39

    Table 6-3: First Final Outcome............. ......... ......... ......... ......... ......... ......... ......... .... 44

    Table 6-4: Second Final Outcome (Following an Online Request) .......... ......... ....... 47 Table 7-1: User Interface Request Data ........ ......... ......... ......... ......... .......... ......... ... 50

    Table 9-1: Contactless Transaction Status............ ......... ......... ......... ......... ......... ..... 66

    Table 9-2: Common User Interface Actions ......... ......... ......... ......... ......... ......... ...... 69

    Table 9-3: User Interface Actions for Option 1 ......... ......... ......... ......... .......... ......... . 71

    Table 9-4: User Interface Actions for Option 2 ......... ......... ......... ......... ......... ......... .. 75

    Table 9-5: User Interface Standard Messages ......... ......... ......... ......... ......... ......... .. 79

    Table A.1: Data Elements ........ ......... ......... ......... .......... ......... ......... ......... ......... ...... 91

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    11/124

    EMV Contactless Book A Requirements Ar ch it ectur e & Genl Rqmts v2.2

    June 2012 Page ix 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    RequirementsRequirements Configurations ................................................................................ 55

    Requirements Entry of Amount ............................................................................. 56 Requirements New Transaction Preparation and Start ......................................... 57

    Requirements Unpredictable Number ................................................................... 58

    Requirements RFU Bits and Bytes ......... ......... ......... ......... ......... ......... ......... ......... 58

    Requirements Multiple Interfaces .......................................................................... 59

    Requirements Processing Data Exchange Request ........ ......... ......... ......... .......... . 59

    Requirements User Interface Request .................................................................. 60

    Requirements Final Outcome Processing ............................................................. 61 Requirements Online Response Restart ............................................................ 62

    Requirements End Application Restart ......... ......... ......... ......... ......... ......... ......... 62

    Requirements Reader Tariff .................................................................................. 87

    Requirements Offline Transaction Disposition....................................................... 88

    Requirements Online Transaction Disposition....................................................... 88

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    12/124

    Requirements EMV Contactless Book A Ar ch it ectur e & Genl Rqmts v2.2

    Page x June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    13/124

    EMV Contactless Book A Ar ch it ectur e & Genl Rqmts v2.2

    June 2012 Page 1 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    1 Scope

    With the goal of realising universal acceptance of contactless cards in aninternational interchange environment, EMVCo has developed a design forcontactless payments that is compatible with existing payment system solutions,whilst offering the opportunity for the eventual development of a common EMVcontactless acceptance solution.

    The design defines a generalised POS System environment that includes:

    reader functionality,

    terminal functionality,

    Entry Point software that performs the initial analysis of a contactlesstransaction and invokes appropriate kernel software, and

    several kernels, each of which provides processing appropriate to certaincontactless transactions.

    This specification (Book A) describes the overall architecture, plus requirements forgeneral features not specific to Entry Point or individual kernels. The otherspecifications in the suite, listed in section 2.1, describe Entry Point, the kernels, andthe communication protocol.

    1.1 Audience

    This specification is intended for use by manufacturers of readers and terminals. Itmay also be of interest to manufacturers of contactless cards and to financialinstitution staff responsible for implementing financial applications in contactlesscards.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    14/124

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    15/124

    EMV Contactless Book A Ar ch it ectur e & Genl Rqmts v2.2

    June 2012 Page 3 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    2 References

    The following specifications and standards contain provisions that are referenced inthis specification. The latest version shall apply unless a publication date is explicitlystated.

    If any provision or definition in this specification differs from those in the standardslisted in section 2.3, the provision or definition herein shall take precedence.

    2.1 Volumes of the Contactless Specifications

    This specification is part of a seven-volume set:

    Book A: Architecture and General Requirements

    Book B: Entry Point Specification (supersedes Entry Point v1.0 )

    Book C-1: Kernel 1 Specification

    Book C-2: Kernel 2 Specification

    Book C-3: Kernel 3 Specification

    Book C-4: Kernel 4 Specification

    Book D: Contactless Communication Protocol (replaces CCP v2.0.1 )

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    16/124

    2 References EMV Contactless Book A2.2 EMV Documents Archi tecture & Genl Rqmts v2.2

    Page 4 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    2.2 EMV Documents

    EMV documents are available on the EMVCo website: http://www.emvco.com/

    EMV Integrated Circuit Card Specifications for PaymentSystems , Version 4.3, November 2011, including:

    [EMV 4.3 Book 1] EMV Integrated Circuit Card Specifications for PaymentSystems , Book 1, Application Independent ICC to TerminalInterface Requirements

    [EMV 4.3 Book 2] EMV Integrated Circuit Card Specifications for PaymentSystems , Book 2, Security and Key Management

    [EMV 4.3 Book 3] EMV Integrated Circuit Card Specifications for PaymentSystems , Book 3, Application Specification

    [EMV 4.3 Book 4] EMV Integrated Circuit Card Specifications for PaymentSystems , Book 4, Cardholder, Attendant, and Acquirer InterfaceRequirements

    2.3 ISO Standards

    ISO 639-1 Codes for the representation of names of languages Part 1: Alpha-2 Code.

    Note: This standard is updated continuously by ISO. Additions/changes to ISO 639-1:1988: Codes for theRepresentation of Names of Languages are available on:

    http://www.loc.gov/standards/iso639-2/php/code_changes.php

    ISO 4217 Codes for the representation of currencies and funds.

    ISO 14443-3 Identification cards Contactless integrated circuit(s) cards Proximity cards Part 3: Initialization and anticollision

    ISO/IEC 8859 Information Processing 8-bit Single-Byte Coded GraphicCharacter Sets.

    http://www.loc.gov/standards/iso639-2/php/code_changes.phphttp://www.loc.gov/standards/iso639-2/php/code_changes.php
  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    17/124

    EMV Contactless Book A Ar ch it ectur e & Genl Rqmts v2.2

    June 2012 Page 5 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    3 Conventions

    This specification uses the following conventions.

    '0' to '9' and 'A' to 'F' 16 hexadecimal characters

    nb, nn b, nnn b, ... Binary values

    xx Any value

    proprietary Not defined in this specification and/or

    outside the scope of this specification

    may Denotes an optional feature

    shall Denotes a mandatory requirement

    should Denotes a recommendation

    3.1 Requi rement Numbering

    Requirements in this specification are uniquely numbered with a four-part numericidentifier appearing next to each requirement.

    A requirement may have different numbers in different versions of the specification.Hence, all references to a requirement must include the version of the specificationas well as the requirements number.

    3.2 Data Element Formats

    The EMV Contactless Specifications for Payment Systems use the following dataelement formats.

    a Alphabetic data elements contain a single character per byte. Thepermitted characters are alphabetic only (a to z and A to Z, upper andlower case).

    an Alphanumeric data elements contain a single character per byte. Thepermitted characters are alphabetic (a to z and A to Z, upper and lowercase) and numeric (0 to 9).

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    18/124

    3 Conventions EMV Contactless Book A3.2 Data Element Formats Archi tecture & Genl Rqmts v2.2

    Page 6 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    ans Alphanumeric Special data elements contain a single character per byte.The permitted characters and their coding are shown in the CommonCharacter Set table in [EMV 4.3 Book 4] , Annex B.

    There is one exception: The permitted characters for ApplicationPreferred Name are the non-control characters defined in theISO/IEC 8859 part designated in the Issuer Code Table Index associatedwith the Application Preferred Name.

    b These data elements consist of either unsigned binary numbers orbit combinations that are defined elsewhere.

    Binary example: The Application Transaction Counter (ATC) is defined asb with a length of two bytes. An ATC value of 19 is stored asHex '00 13'.

    Bit combination example: Processing Options Data Object List (PDOL) isdefined as b with the format shown in [EMV 4.3 Book 3] , section 5.4.

    cn Compressed numeric data elements consist of two numeric digits (havingvalues in the range Hex '0''9') per byte. These data elements areleft-justified and padded with trailing hexadecimal 'F's.

    Example: The Application Primary Account Number (PAN) is defined ascn with a length of up to ten bytes. A value of 1234567890123 may bestored in the Application PAN as Hex '12 34 56 78 90 12 3F FF' with alength of 8.

    n Numeric data elements consist of two numeric digits (having values in therange Hex '0''9') per byte. These digits are right-justified and padded withleading hexadecimal zeroes. Other specifications sometimes refer to thisdata format as Binary Coded Decimal (BCD) or unsigned packed.

    Example: Amount, Authorised (Numeric) is defined as n 12 with alength of six bytes. A value of 12345 is stored in Amount, Authorised(Numeric) as Hex '00 00 00 01 23 45'.

    var. Variable data elements are variable length and may contain any bitcombination. Additional information on the formats of specific variabledata elements is available elsewhere.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    19/124

    EMV Contactless Book A Ar ch it ectur e & Genl Rqmts v2.2

    June 2012 Page 7 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    4 Terminology

    The EMV Contactless Specifications for Payment Systems define the processing of atransaction using a contactless card and processed on a POS System that includesEntry Point and one or more kernels, with information passed within the POS Systemby means of an Outcome. Each of the key terms in that sentence has a particularmeaning in the specifications, as described in the following sections.

    4.1 Card ....................................................................................... 7 4.2 Transaction ............................................................................. 8 4.3 POS System ........................................................................... 9

    4.4 Entry Point ............................................................................ 10 4.5 Kernel ................................................................................... 10 4.6 Outcome ............................................................................... 10

    4.1 Card

    Within these specifications, a card is considered to be any consumer tokensupporting contactless payment transactions, whether in the form of a payment chipcard, a key fob, a mobile phone, or another form factor. From the perspective of acontactless reader, the other form factors communicate and behave the same as acontactless card that is compliant with Book D. With respect to cardholder verification,mobile devices may take advantage of the user interface on the handset to allowcardholder verification of a contactless transaction by means of a confirmation codeentered on the handset.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    20/124

    4 Terminology EMV Contactless Book A4.2 Transaction Archi tecture & Genl Rqmts v2.2

    Page 8 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    4.2 Transaction

    Within these specifications, a transaction (unless otherwise specified) is consideredto be one conducted over the contactless interface with a contactless card.

    A transaction start is defined differently depending on how it is initiated. It can beinitiated by the merchant, typically by entering the transaction amount. Alternatively, itcan be initiated when a card enters the polling field and responds, indicating itspresence. (Configuration of transaction initiation is described in more detail insection 5.6.2. )

    A transaction continues until the final transaction disposition is indicated to thecardholder. This may be immediately after the kernel processing for an offline

    approval or decline or after reception of the authorisation response if the transactionis sent online. If further communication with the card is required, then this is a part ofthe transaction.

    If another interface is requested, then the contactless transaction is concluded and anew (non-contactless) transaction is considered to start with whichever alternateinterface is selected.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    21/124

    EMV Contactless Book A 4 Terminology Ar ch it ectur e & Gen l Rqmt s v2.2 4.3 POS Sys tem

    June 2012 Page 9 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    4.3 POS System

    Within these specifications, a POS System is the device that communicates withcontactless cards, processes contactless transactions, and may support otherpayment functionalities such as magnetic stripe or contact chip transactions.

    The physical architecture can be any of the following:

    Fully integrated terminal: All elements included in a single device.

    Intelligent card reader: The reader handles most of the contactlesstransaction processing, passing the results for completion by the terminal.

    Combination of terminal and transparent card reader: The reader providescommunication with the card, whilst kernels and other processes are in theterminal.

    The second and third architectures are representative of adding a contactless readerto an existing contact terminal that may already be deployed.

    The basic functions of the POS System include:

    communication with contactless cards

    application selection and kernel activation

    displaying messages to the cardholder

    displaying messages to the merchant accepting merchant data entry of the transaction amount

    cardholder verification (e.g. signature)

    provision of online connections

    provision of data capture for clearing and settlement

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    22/124

    4 Terminology EMV Contactless Book A4.4 Entry Point Archi tecture & Genl Rqmts v2.2

    Page 10 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    4.4 Entry Point

    Within these specifications, Entry Point is software in the POS System that isresponsible for the following:

    performing pre-processing

    discovery and selection of a contactless application that is supported by boththe card and the reader

    activation of the appropriate kernel

    handling of Outcomes returned by the kernel, including passing selectedOutcomes to the reader

    Under exception conditions, Entry Point may return an Outcome to the reader as aresult of its own processing.

    Detailed information about Entry Point is provided in Book B.

    4.5 Kernel

    Within these specifications, a kernel is software in the POS System that processescertain contactless transactions. Entry Point selects a kernel based on thecharacteristics of the transaction, the applications supported by both the card and thereader, and the priority that may be assigned to each application.

    Detailed information about the kernels is provided in Books C- n.

    4.6 Outcome

    An Outcome is the primary instruction from the kernel on how processing should becontinued. A set of parameters with the Outcome allow the kernel to indicate choices,such as messages to be displayed and whether the kernel wishes to be restarted, for

    example, after an online authorisation.When a kernel provides an Outcome, control is passed back to Entry Point whichhandles certain parameters immediately, then either processes the Outcome orforwards it to the reader as a Final Outcome.

    Note: Under exception conditions, Entry Point may not be able to select a kernel andwill directly provide a Final Outcome and pass control back to the reader.

    Detailed information about Outcomes is provided in Chapter 6.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    23/124

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    24/124

    5 POS System Architecture EMV Contactless Book A5.1 POS System Descriptive Model Archi tecture & Genl Rqmts v2.2

    Page 12 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    Figure 5-1: POS System Descript ive Model

    1 2 3

    4 5 6

    7 8 9

    C 0 E

    Display

    COMMS

    POS System

    Final Outcome

    Activate (with Data)

    Terminal

    Data

    Exchange

    Display

    Reader

    1 2 3

    4 5 6

    7 8 9

    C 0 E

    Display

    1 2 3

    4 5 6

    7 8 9

    C 0 E

    1 2 311 22 33

    4 5 644 55 66

    7 8 977 88 99

    C 0 ECC 00 EE

    DisplayDisplay

    COMMS

    POS System

    Final Outcome

    Activate (with Data)

    Terminal

    Data

    Exchange

    Display

    Reader

    DisplayDisplay

    Reader

    The right hand element represents a reader which communicates with the

    contactless card and processes the contactless application. It therefore includes thefunctionality of Entry Point and the contactless kernels. It would also normally containthe user interface of cardholder-facing display, visual status indicators (such as lightsor LEDs), and beeper.

    The left hand element maps more closely to an EMV contact terminal and includesthe merchant input and display, the online communications interface, plus anycontact or mag-stripe interfaces. Functions such as signature CVM or online PINCVM are expected to be acquired the same way as for an EMV contact terminal.

    Most of the EMV Contactless Specifications for Payment Systems address the

    reader element; this includes the Communication Protocol to a contactless card(Book D), Entry Point (Book B), and the contactless kernels (Books C- n).

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    25/124

    EMV Contactless Book A 5 POS System Architecture Ar ch it ectur e & Genl Rqmts v2.2 5.2 Termin al and Read er Res pons ib il it ies

    June 2012 Page 13 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    5.2 Terminal and Reader Responsibil ities

    Within the descriptive model the reader is responsible for: communication with contactless cards

    application selection and kernel activation

    running the contactless kernel applications

    CVM selection

    creation of a Final Outcome and parameter set

    management of a no card response timeout

    management of the contactless fieldWhilst the terminal is responsible for:

    provision of data entry (amount) by the merchant

    processing of Final Outcomes, including the handling of authorisationrequests and responses

    cardholder verification (unless delegated to a cardholder device, such as amobile phone)

    communication for authorisation messages and clearing records, using

    mag-stripe or chip-based data transactions on other interfaces (contact and mag-stripe)

    other aspects of transaction processing, including timeouts and cancellations

    Depending on the design, the terminal and reader are between them alsoresponsible for:

    initiation of new transactions, including card removal and the contactless fieldstate between transactions

    displaying messages to the merchant

    displaying messages and status to the cardholder

    provision of Unpredictable Numbers

    provision of data included in online responses, including AuthorisationResponse Code, Issuer Authentication Data, and Issuer Scripts

    indication of unable to go online

    With respect to performance, the reader will be mostly responsible for the card infield timing and the terminal for the transaction disposition timing. For details seesection 10.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    26/124

    5 POS System Architecture EMV Contactless Book A5.3 Logic al Archit ecture Archi tecture & Genl Rqmts v2.2

    Page 14 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    5.3 Logical Archi tecture

    Figure 5-2: Logical Architecture

    The reader contains Entry Point and a set of kernels, as illustrated in Figure 5-2.

    Terminal and reader requirements in Chapter 8 are based on this model but can bedistributed differently between the elements denoted as the terminal and the reader.Nevertheless, for the overall architecture described here to work successfully with allmerchant/acquirer acceptance environments, the functional requirements ofChapter 8 must be met.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    27/124

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    28/124

    5 POS System Architecture EMV Contactless Book A5.5 POS System Functio ns Archi tecture & Genl Rqmts v2.2

    Page 16 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    5.5 POS System Functions

    This section discusses the following POS System functions:5.5.1 Non-interference with Contact Chip Interface ........... ......... ... 16 5.5.2 No Overlapping Transactions ............................................... 17 5.5.3 Cancellation .......................................................................... 17 5.5.4 Field Management ................................................................ 18 5.5.5 Displaying Amount ................................................................ 18 5.5.6 Transaction Disposition ........................................................ 18 5.5.7 Receipts ............................................................................... 18 5.5.8 Cardholder Verification ......................................................... 19

    5.5.1 Non-interference with Contact Chip Interface

    For a POS System capable of accepting transactions over multiple interfaces, allpermitted interfaces should be made available to the merchant/cardholder to performa transaction. If the cardholder chooses the contact interface, to prevent interferencebetween the contact chip and contactless interfaces, the POS System mustpower down the contactless interface prior to initiating a contact chip transaction andkeep it powered down for the duration of the transaction.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    29/124

    EMV Contactless Book A 5 POS System Architecture Ar ch it ectur e & Genl Rqmts v2.2 5.5 POS System Fu nc tion s

    June 2012 Page 17 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    5.5.2 No Overlapping Transactions

    The POS System is responsible for ensuring that a new transaction is not starteduntil the completion of the previous transaction. The completion of a transaction is a

    combination of the terminal having a transaction disposition and the physical removalof the card from the field. In some environments it may be necessary to employ aremoval procedure to ensure that the card has left the field, whereas in others thephysical configuration and the way the transaction completes may be sufficient.

    Examples:

    In some environments, such as a vending machine where the user has tophysically collect goods from the bottom of the machine, it is unlikely that the cardwill be left on the reader or that the next customer will try to make a purchasebefore the first customer has moved away. Such a POS System could have

    simple logic to manage card removal and initiation of the next transaction.In other environments, such as access through a gate or turnstile, it may beimportant that the POS System checks that a card has been physically removedand that the next transaction is not initiated until the first customer has madesufficient progress through the gate. Note that a removal procedure for the cardas defined in Book D, section 9.5, could be started when the kernel indicates theCard Read Successfully status, 1

    Kernels may require a mobile device to be re-presented after entry of a

    confirmation code and this may be addressed by means of a restart. Somekernels may require the POS System to check that the mobile device wasactually removed from the field after the first presentment, possibly by use of theremoval procedure between the Final Outcome and the restart.

    as this is the earliest point in a transaction afterwhich cards can be removed.

    5.5.3 Cancellation

    Once a transaction has been started, there must be a means to cancel thetransaction in case the user is unable to present a contactless card within areasonable amount of time. This may be by means of a timeout or merchants may

    have a cancel option. To handle these scenarios, depending on the implementation,the POS System may attempt to complete the transaction using another interface, ormay terminate the transaction.

    1 Status values are discussed in section 9.2.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    30/124

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    31/124

    EMV Contactless Book A 5 POS System Architecture Ar ch it ectur e & Genl Rqmts v2.2 5.5 POS System Fu nc tion s

    June 2012 Page 19 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    5.5.8 Cardholder Verif ication

    Under certain circumstances when performing a contactless transaction, the POSSystem may be required to request Cardholder Verification to ensure that the person

    presenting the card is the person to whom the application in the card was issued.The kernel should be aware of the CVM capabilities of the POS System (e.g. thecapability to print a Signature, or for Online PIN CVM the presence of a PIN entrydevice and acquirer online message capabilities).

    As described in section 5.9, once the kernel has finished processing the contactlesstransaction, an Outcome is indicated by the kernel. For some Outcomes theOutcome parameters set by the kernel may indicate a request for CardholderVerification or indicate that Cardholder Verification has already taken place.

    The identified CVMs and corresponding requirements are described below:

    Online PIN

    The kernel requests that an online transaction includes a PIN.

    The cardholder is prompted for PIN entry.

    The PIN is encrypted and included in the online authorisation request.

    If the timeout function supporting the Removal Timeout has beenrequested in the Outcome parameters, then it should be deferred until thecompletion of PIN entry.

    Confirmation Code Verified

    The kernel indicates that the consumer has positively completed a CVM on theirconsumer device (e.g. mobile phone). This may be as a result of a singlepresentment with the Confirmation Code pre-entered by the cardholder, or it maybe the result of two presentments with a restart and the Confirmation Code beingentered by the cardholder when prompted by the kernel.

    Obtain Signature

    The kernel requests that a signature be obtained from the cardholder.

    If the terminal supports signature capture on a transaction receipt, thenthe terminal prints a receipt with a signature entry line.

    If the terminal supports signature capture via screen entry, then theterminal displays the signature screen panel.

    The cardholder is prompted for a signature.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    32/124

    5 POS System Architecture EMV Contactless Book A5.5 POS System Functio ns Archi tecture & Genl Rqmts v2.2

    Page 20 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    No CVM

    The kernel indicates that no cardholder verification is required for this transactionand no CVM should be requested.

    N/A

    The kernel indicates no CVM preference.

    The POS System may have acceptance rules relating to CVM, specific tolocation, environment, and possibly payment system. In such cases, an N/Aindicates that the kernel has no preference and that these rules should be appliedas applicable.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    33/124

    EMV Contactless Book A 5 POS System Architecture Ar ch it ectur e & Genl Rqmts v2.2 5.6 POS Sys tem Configu rat ion

    June 2012 Page 21 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    5.6 POS System Configuration

    The POS System must have configuration data that defines: country and currency codes

    how a transaction is initiated (by terminal action or automatically aftera previous transaction is completed)

    the supported operating modes

    the types of transaction supported

    for each combination of transaction type, application, and kernel, both KernelConfiguration Data and Entry Point Configuration Data

    Details about the various types of configuration data are provided in the followingsections.

    5.6.1 POS System Count ry and Currency Codes

    The POS System must be configured with a Terminal Country Code (Tag '9F1A') andwith one or more Transaction Currency Codes (Tag '5F2A'), depending on whethermultiple currencies are supported.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    34/124

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    35/124

    EMV Contactless Book A 5 POS System Architecture Ar ch it ectur e & Genl Rqmts v2.2 5.6 POS Sys tem Configu rat ion

    June 2012 Page 23 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    5.6.4 POS System Configuration for Type of Transaction

    The POS System needs to know the types of transaction it supports, from thefollowing list:

    Purchase

    Purchase with cashback

    Cash Advance (cash withdrawal)

    Refund

    In order for a kernel to function correctly, it needs to know about the environment inwhich it is installed and what can be expected of Entry Point and the terminal. Thefunctionality can differ for the type of transaction and between AIDs supported by agiven kernel. In order for Entry Point processing to match kernel expectations, the

    reader must be configurable with respect to the kernels and AIDs it supports. Foreach type of transaction supported, this list of Combinations {AID Kernel ID} can berepresented by a table, as indicated by the example in Table 5-1.

    Table 5-1: Example Combination Table per Transact ion Type

    AID 1 AID2 AID n-1 AIDn

    Kernel 1

    Kernel 2

    Kernel 3

    Kernel 4

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    36/124

    5 POS System Architecture EMV Contactless Book A5.6 POS System Configu ration Archi tecture & Genl Rqmts v2.2

    Page 24 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    5.6.5 Kernel and Entry Point Configuration Data

    For each supported Combination {AID Kernel ID}, the reader has:

    1. Kernel Configuration Data For each supported type of transaction, a set ofstatic data for configuration of each kernel.

    The value of this data is persistent from one transaction to the next andrepresents configuration information such as the mode (EMV / mag-stripe),CVM support, online/offline capabilities, and the RID-specific CA public keydataset. Updates of the values are exceptional and always occur outside oftransaction processing. Details of the data that must be configured for eachkernel can be found in the corresponding Book C.

    Note: Tag values can have different meanings for different kernels.The appropriate data set will be available to the kernel selected by Entry Point.

    2. Entry Point Configuration Data For each supported type of transaction, a set ofstatic data for Entry Point processing.

    Again, the value of this data is persistent and represents transactionalconfiguration information, such as contactless limits and CVM limits. Exceptionalupdates happen outside of transaction processing.

    Table 5-2 defines the available data set for each Combination. All configured data

    sets will be available for Entry Point processing. All elements defined in Table 5-2are optional and may be omitted from a specific instance of a combination.

    Table 5-2: Entry Point Configuration Data per Combination

    Status Check Support flag, if present

    Zero Amount Allowed flag, if present

    Reader Contactless Transaction Limit, if present

    Reader Contactless Floor Limit, if presentTerminal Floor Limit (Tag '9F1B'), if present

    Reader CVM Required Limit, if present

    Terminal Transaction Qualifiers, if present

    Extended Selection Support flag, if present

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    37/124

    EMV Contactless Book A 5 POS System Architecture Ar ch it ectur e & Genl Rqmts v2.2 5.7 Tran sac tion Data

    June 2012 Page 25 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    5.7 Transaction Data

    Entry Point uses the data sets described in section 5.6.5 during Pre-Processing tocompute the Entry Point Pre-Processing Indicators for each combination, as definedin Table 5-3.

    The indicators are made available to the kernel selected by Entry Point.

    Entry Point temporarily stores the computed indicators to support selection of anothercombination for the same transaction or reactivation of a kernel after an OnlineRequest Outcome.

    In addition to the configuration data discussed above, each kernel will need data thatis specific to the transaction. Typical transaction-specific data elements are listed in

    Table 5-5.

    Table 5-3: Entry Point Pre-Processing Indic ators

    Status Check Requested

    Contactless Application Not Allowed

    Zero Amount

    Reader CVM Required Limit Exceeded

    Reader Contactless Floor Limit Exceeded

    Copy of TTQ (if present as part of configuration data);for definition, see Table 5-4

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    38/124

    5 POS System Architecture EMV Contactless Book A5.7 Transaction Data Archi tecture & Genl Rqmts v2.2

    Page 26 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    Table 5-4: Terminal Transaction Qualif iers

    Byte Bit Definit ion

    1 8 1b Mag-stripe mode supported

    0b Mag-stripe mode not supported

    7 RFU (0b)

    6 1b EMV mode supported0b EMV mode not supported

    5 1b EMV contact chip supported0b EMV contact chip not supported

    4 1b Offline-only reader0b Online capable reader

    3 1b Online PIN supported0b Online PIN not supported

    2 1b Signature supported0b Signature not supported

    1 RFU (0b)

    Note: Readers compliant to this specification must set TTQ byte 1bit 1 to 0b.

    2 8 1b Online cryptogram required

    0b Online cryptogram not required7 1b CVM required

    0b CVM not required

    6 1b (Contact Chip) Offline PIN supported0b (Contact Chip) Offline PIN not supported

    5-1 RFU (00000b)

    3 8 1b Issuer Update Processing supported0b Issuer Update Processing not supported

    7 1b Consumer Device CVM supported0b Consumer Device CVM not supported

    6-1 RFU (000000b)

    4 8-1 RFU (00000000b)

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    39/124

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    40/124

    5 POS System Architecture EMV Contactless Book A5.8 Entry Point Processing Archi tecture & Genl Rqmts v2.2

    Page 28 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    5.8 Entry Point Processing

    Entry Point is responsible for processing the configuration data, the discovery andselection of a mutually supported contactless application, activation of theappropriate kernel, and handling of the Outcome when the kernel finishes (includingprocessing selected Outcome parameters and passing the Outcome to the reader).

    Under exception conditions, Entry Point may return an Outcome to the reader as aresult of its own processing.

    The mechanism to select an application is designed around the presence of aProximity Payment System Environment (PPSE) in the card. This allows Entry Point

    to obtain all the available brands and applications with a single command and tomake an immediate choice based on priority and kernel availability.

    The use of additional proprietary selection methods is not precluded but is outside ofthe scope of this specification. Users of such methods should be aware of thepotential negative impact on performance introduced by any increase in the numberof commands. The method also must deal with the complexity of managing prioritiesamongst all available brands and applications.

    5.8.1 Starting Conditions

    For environments in which the field is normally off, Entry Point will not be started for anew transaction before the POS system knows that the card has been removed fromthe field (e.g. by using a removal procedure) and the normal start conditions (such asamount entry) have been fulfilled. This is typically the situation for EMV modeenvironments.

    For environments in which the field is normally on, Entry Point will be started for anew transaction before the POS system knows that the card has been removed fromthe field (e.g. by using a removal procedure). This is typically the situation formag-stripe mode environments. It does not however preclude that merchant

    interaction might be required to turn on the field, perhaps for power saving in batterypowered devices.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    41/124

    EMV Contactless Book A 5 POS System Architecture Ar ch it ectur e & Genl Rqmts v2.2 5.8 Ent ry Point Pro cessi ng

    June 2012 Page 29 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    Entry Point may start at any of several start locations, depending on the environmentand, if it is being restarted within a transaction, depending on the characteristics ofthe first Final Outcome.

    Start AStart A is normally used for a new transaction in an EMV mode acceptanceenvironment where the field is off between transactions and the amount isvariable and determined (e.g. by merchant entry) before the transaction can start.When starting at Start A , configuration data supplied by the POS System isprocessed for each supported Combination to produce the Entry PointPre-Processing Indicators.

    Start B

    Start B is normally used for a new transaction in a mag-stripe mode acceptanceenvironment where the field is on between transactions and the amount is fixedor not needed for the contactless processing. When starting at Start B , there isno Pre-Processing and the Entry Point Pre-Processing Indicators have fixedvalues.

    Environments with a fixed amount (e.g. a vending machine with identically pricedgoods) that may normally have the field off between transactions do not needPre-Processing and can use Start B .

    Start B can be also used when Entry Point is restarted within a transaction, either

    after an online request or if a card is to be re-presented (e.g. mobile device withconfirmation code).

    Start C and Start D

    Start C is used when Entry Point is restarted within a transaction in order toattempt a different Combination {AID Kernel ID}.

    Start D is used when Entry Point is restarted within a transaction in order toprocess data provided in response to an online request, for risk managementpurposes.

    When starting at Start C or Start D , Entry Point provides the kernel with theoriginal Entry Point Pre-Processing Indicators.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    42/124

    5 POS System Architecture EMV Contactless Book A5.8 Entry Point Processing Archi tecture & Genl Rqmts v2.2

    Page 30 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    5.8.2 Application Selection and Kernel Activation

    The selection mechanism is designed around the use of a PPSE. For multi-brandacceptance, this allows Entry Point to obtain all the available brands and applications

    with a single command and to make an immediate choice based on priority andkernel availability.

    A PPSE response returned by a card contains one or more File Control Information(FCI) data elements forming a list of products supported by the card, the kernel theywill run with, and their priority relative to one another.

    Entry Point compares the ADF Names and Kernel Identifiers with the transaction typespecific set of Combinations of AIDs and kernels that it supports for the giventransaction type. The result is a list of Combinations, prioritised according to priorityvalue or (for equal priority matches) by their order in the FCI list. AIDs and ADF

    Names can be obtained from the relevant payment system.Existing cards that are already deployed do not have a Kernel Identifier in the FCIdata; Entry Point reads absence of a Kernel Identifier as existing application. Thetype of existing application is determined from the AID. The current mapping is asfollows:

    Kernel 1 for JCB AIDs and some cards with Visa AIDs

    Kernel 2 for MasterCard AIDs

    Kernel 3 for Visa AIDs

    Kernel 4 for American Express AIDsExceptions to the above may occur if Entry Point has a specific setting for the linkagebetween a product and a kernel.

    In the final selection, Entry Point picks the Combination with the highest priority,sends the SELECT AID command with the AID of this Combination, and hands overprocessing to the selected kernel. The Entry Point Pre-Processing Indicators for therelevant Combination are made available to the selected kernel.

    Note that this flexible approach allows for a specific card to include multiple DirectoryEntries pointing to the same kernel for different ADF Names, or conversely pointingto different kernels for the same ADF Name.

    5.8.3 User Interface Request

    During Entry Point processing, if Entry Point wishes to inform the cardholder aboutthe progress of the transaction, Entry Point may send a User Interface Request andexpects the reader to process this request.

    The request will contain a combination of the data listed in Table 7-1 on page 50.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    43/124

    EMV Contactless Book A 5 POS System Architecture Ar ch it ectur e & Genl Rqmts v2.2 5.9 Kernel Pr oc ess ing

    June 2012 Page 31 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    5.9 Kernel Processing

    Once activated, a kernel continues the dialogue with the card using the necessarycommand/response exchanges and might call for a User Interface Request(e.g. Remove Card) from the reader. On completion the kernel provides anOutcome to Entry Point and the Outcome is processed according to the guidelines inChapter 8.

    5.9.1 User Interface Request

    During kernel processing, if a kernel wishes to inform the cardholder about theprogress of the transaction, the kernel may send a User Interface Request andexpects the reader to process this request.

    The request will contain a combination of the data listed in Table 7-1 on page 50.

    5.9.2 Processing Data Exchange

    Data Exchange provides a flexible communication mechanism between terminal andkernel. It allows the kernel to send data to and request data from the terminal. Usingthe Data Exchange mechanism, the kernel can take the initiative to request a servicefrom the terminal (e.g. for hot file/exception list checking) and will do so by requesting

    a Data Exchange.If the terminal is able to service the request, it will return a Data Exchange with therequested data. This mechanism allows the terminal to exercise a level of control onthe kernel and may influence the kernels interaction with the card by virtue of itsability to update the current transaction data.

    The data or service that is requested is context specific and may vary with the kerneland the AID currently in use. Implementations must take care that data is exchangedwith the correct kernel while it is active.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    44/124

    5 POS System Architecture EMV Contactless Book A5.9 Kernel Processing Archi tecture & Genl Rqmts v2.2

    Page 32 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    5.9.3 CVM Selection and Cardholder Verification

    During kernel processing, the kernel will determine from the acceptance environmentand issuer settings in the card whether a cardholder verification is needed for the

    transaction. Methods that may be supported are online PIN and signature offlinePIN is not suitable due to the card in field timing issues.

    In some markets it may be that contactless transactions are designated as withoutcardholder verification, but only for transaction amounts below a certain limit,whereas other markets, perhaps with an online PIN infrastructure in place, may allowany amount for contactless transactions, with online PIN above a certain threshold.

    The use of mobile devices allows for the entry of Consumer Device CVM on thehandset as a CVM.

    More information on cardholder verification processing can be found in section 5.5.8.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    45/124

    EMV Contactless Book A Ar ch it ectur e & Genl Rqmts v2.2

    June 2012 Page 33 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    6 Outcomes and Parameters

    An Outcome is the primary instruction from the kernel or Entry Point on howprocessing should be continued. The parameters allow the kernel to indicate choices,such as messages to be displayed and whether the kernel wishes to be restartedafter an online authorisation.

    When a kernel provides an Outcome, control is passed back to Entry Point whichhandles certain parameters immediately, then either processes the Outcome orforwards it to the reader as a Final Outcome.

    6.1 Outcomes

    The following Outcomes are defined:

    Select Next

    Try Again

    Approved

    Declined

    Online Request Try Anot her Interface

    End Application

    Table 6-1 describes the Outcomes and indicates the responsibilities of the kernel,Entry Point, and the reader or terminal for each.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    46/124

    EMV Contactless Book A 6 Outcomes and Parameters Arc hi tect ure & Genl Rqmt s v 2.2 6.1 Outc omes

    June 2012 Page 34 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the

    license agreement between the user and EMVCo found at http://www.emvco.com/specifications.aspx.

    Table 6-1: Out comes

    Outcome Description Kernel Entry Point Reader/ Terminal

    Select Next The kernel has determined that the selectedCombination is unsuitable and the nextCombination (if any) should be tried.

    Creates Outcome,passes to EntryPoint

    Processes Outcome No processing

    Try Again The kernel wishes that a card be presentedagain; this may be a result of an error, such astearing, that could resolve if the transaction isattempted again. It is one way a kernel mayhandle a mobile device that requires aconfirmation code to be entered.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    47/124

    EMV Contactless Book A 6 Outcomes and Parameters Arc hi tect ure & Genl Rqmt s v 2.2 6.1 Outc omes

    June 2012 Page 35 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the

    license agreement between the user and EMVCo found at http://www.emvco.com/specifications.aspx.

    Outcome Description Kernel Entry Point Reader/ Terminal

    App roved The kernel is satisfied that the transaction isacceptable with the selected contactless cardapplication and wants the transaction to beapproved. This is the expected Outcome for asuccessful offline transaction. This might alsooccur following reactivation of a kernel after anonline response.

    Creates Outcome,passes to EntryPoint

    Processesselected Outcomeparameters

    Passes Outcometo reader as aFinal Outcome

    Processes the FinalOutcome

    Declined The kernel has found that the transaction is notacceptable with the selected contactless cardapplication and wants the transaction to bedeclined. This might also occur followingreactivation of a kernel after an online response.

    OnlineRequest

    The transaction requires an online authorisationto determine the approved or declined status. Ifthe kernel wishes to be restarted when theresponse has been received (e.g. to receiveissuer update data), then this is indicated in theparameters.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    48/124

    EMV Contactless Book A 6 Outcomes and Parameters Arc hi tect ure & Genl Rqmt s v 2.2 6.1 Outc omes

    June 2012 Page 36 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the

    license agreement between the user and EMVCo found at http://www.emvco.com/specifications.aspx.

    Outcome Description Kernel Entry Point Reader/ Terminal

    Try AnotherInterface

    Either of the following:

    The kernel is unable to complete thetransaction with the selected contactless cardapplication, but knows from the configurationdata that another interface (e.g. contact ormagnetic-stripe) is available. The kernel

    could indicate a preference for the alternateinterface.

    Entry Point was unable to identify acontactless card application that couldcomplete the transaction and returns controlto the POS System, which might attempt adifferent interface.

    May createOutcome and passit to Entry Point

    Either of the following:

    Receives Outcomefrom kernel,processes selectedOutcomeparameters, and

    passes Outcometo reader as aFinal Outcome

    Under exceptionconditions, createsOutcome andpasses it to reader

    Processes the FinalOutcome

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    49/124

    EMV Contactless Book A 6 Outcomes and Parameters Arc hi tect ure & Genl Rqmt s v 2.2 6.1 Outc omes

    June 2012 Page 37 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the

    license agreement between the user and EMVCo found at http://www.emvco.com/specifications.aspx.

    Outcome Description Kernel Entry Point Reader/ Terminal

    End App li cati on

    Any of the following:

    The kernel has completed processing andrequires no further action.

    The kernel wished to restart after the cardhas been removed. It is one way a kernelmay handle a mobile device that requires aconfirmation code to be entered.

    The kernel experienced an application error,such as missing data, that will not resolve ifthe transaction is attempted again with thesame selected contactless card application.

    Entry Point was unable to identify acontactless card application that couldcomplete the transaction with the current cardand wants the POS System to direct thecardholder to present another card.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    50/124

    6 Outcomes and Parameters EMV Contactless Book A6.2 Outcome Parameters Archi tecture & Genl Rqmts v2.2

    Page 38 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    6.2 Outcome Parameters

    Each Outcome has a list of mandatory parameters: Start

    Online Response Data

    CVM

    UI Request on Outcome Present

    UI Request on Restart Present

    Data Record Present

    Discretionary Data Present Alternate Interface Preference

    Receipt

    Field Off Request

    Removal Timeout

    The parameters indicate the kernels expectations of Entry Point, the reader, and theterminal (or Entry Points expectations of the reader and the terminal). These includeuser interface needs, and if and where Entry Point processing should be restarted,

    for example, after an online authorisation. It is expected that kernels will beconfigured such that they will only make requests that are supported by theenvironment.

    The Outcome Parameters are defined in Table 6-2.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    51/124

    EMV Contactless Book A 6 Outcomes and Parameters Arc hi tect ure & Genl Rqmt s v 2.2 6.2 Outcom e Paramet ers

    June 2012 Page 39 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the

    license agreement between the user and EMVCo found at http://www.emvco.com/specifications.aspx.

    Table 6-2: Outco me Parameters

    Outcome Parameter Description Values Meaning of Value

    Start Indicates whether Entry Point shouldbe restarted after the Outcome hasbeen processed, and which EntryPoint start location should be used.

    Typically used in conjunction with anonline request and allows for issuerrisk management via a variety ofapproaches, such as a secondpresentment or present and hold.

    It may also be used to allow cardremoval to be confirmed, before akernel is restarted.

    A Restart Entry Point from Pre-Processing. This valueis included for completeness, there being no knownuse with the current version of the specifications.

    B Restart Entry Point from Protocol Activation. If thesame card is present, the same kernel will beselected.

    Used by Online Request for two presentments.

    Used by End Application to confirm cardremoval before restart.

    Used by Try Again , which is processed by EntryPoint.

    C Restart Entry Point from Combination Selection.Currently only used by Select Next processedinternally by Entry Point.

    D Restart Entry Point from Kernel Activation. The same

    kernel will be selected. There will be no removalprocedure and the field will stay on. Used by OnlineRequest for present and hold.

    N/A Do not restart Entry Point.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    52/124

    EMV Contactless Book A 6 Outcomes and Parameters Arc hi tect ure & Genl Rqmt s v 2.2 6.2 Outcom e Paramet ers

    June 2012 Page 40 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the

    license agreement between the user and EMVCo found at http://www.emvco.com/specifications.aspx.

    Outcome Parameter Description Values Meaning of Value

    Online ResponseData

    Conditions whether the kernel shouldbe restarted based on the presenceof data in the online response.

    EMV Data The kernel restart should occur only if the EMV TLVdata Tag '91', '71', and/or '72' is present in the onlineresponse. (If the kernel wishes to be restarted onlyfor issuer risk management, but no issuer updatedata is returned, then there is no point in restartingthe kernel.)

    Any The kernel restart should occur regardless of thepresence of any online response data. Used, forexample, for present and hold.

    N/A Not applicable.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    53/124

    EMV Contactless Book A 6 Outcomes and Parameters Arc hi tect ure & Genl Rqmt s v 2.2 6.2 Outcom e Paramet ers

    June 2012 Page 41 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the

    license agreement between the user and EMVCo found at http://www.emvco.com/specifications.aspx.

    Outcome Parameter Description Values Meaning of Value

    CVM The kernel may request cardholderverification or may indicate that CVMhas already occurred.

    Online PIN The kernel requests that an online transactionincludes a PIN (having determined that online PIN issupported).

    ConfirmationCode Verified

    The kernel indicates that the consumer hassuccessfully completed a CVM on their consumerdevice (e.g. confirmation code entry on a mobile

    phone).ObtainSignature

    The kernel requests that a signature be obtainedfrom the cardholder. The terminal may print a receiptwith a signature entry line, or the terminal may haveother means, such as electronic signature capture.

    No CVM The kernel indicates that no cardholder verification isrequired for this transaction.

    N/A The kernel indicates no CVM preference. A CVMmay or may not be required as a result ofacceptance rules applied by the POS System.

    UI Request onOutcome Present

    Either the kernel or Entry Point mayinclude a User Interface Request to

    be acted upon as the outcome isprocessed.

    Yes

    No

    The User Interface Request defined in section 7.1may be used to indicate a message/status to be

    presented to the cardholder.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    54/124

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    55/124

    EMV Contactless Book A 6 Outcomes and Parameters Arc hi tect ure & Genl Rqmt s v 2.2 6.2 Outcom e Paramet ers

    June 2012 Page 43 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials) shall be permitted only pursuant to the terms and conditions of the

    license agreement between the user and EMVCo found at http://www.emvco.com/specifications.aspx.

    Outcome Parameter Description Values Meaning of Value

    Receipt The kernel indicates whether areceipt is to be printed.

    Yes Print a receipt.

    N/A The kernel has no preference. A receipt may or maynot be required as a result of acceptance rulesapplied by the POS System.

    Note: If the value of the CVM parameter is ObtainSignature, then the terminal may choose to obtain itby means of a receipt with signature entry line,regardless of the value of this parameter.

    Field Off Request The kernel indicates whether toturn off the field (without cardremoval procedure). The hold timewill delay the processing of the nextchange to the field until it haselapsed.

    hold time value Any value (including zero) indicates that the field isto be turned off. The hold time is in units of 100ms.

    N/A No change to the field is requested.

    Removal Timeout The kernel indicates whether atimeout function should be startedwith the time specified.

    time value For an Online Request Outcome, the kernel mayinstruct the terminal to start a timeout function and, ifthe timeout occurs, to prompt the user to remove thecard. When the online response is received (or if theterminal was unable to go online), the result of the

    timeout will be available to the kernel when it isrestarted.

    The parameter value indicates the time setting forthe timeout function, in units of 100ms.

    The default is zero (no timer).

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    56/124

    6 Outcomes and Parameters EMV Contactless Book A6.3 Outcome Processing Archi tecture & Genl Rqmts v2.2

    Page 44 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    6.3 Outcome Processing

    In order to complete the transaction and arrive at the correct start for the followingnew transaction, the POS System must process each kind of Outcome as describedbelow. The requirements listed are allocated to the reader and terminal according tothe architectural overview described in Chapter 5, but the separation between thetwo may differ between implementations and it is not important which entity performsthe actions, provided that the overall POS System fulfils all the requirements.

    Table 6-3 describes POS System processing for a first Final Outcome. Table 6-4describes POS System processing for a second Final Outcome; that is, one thatfollows an Online Request Outcome.

    Table 6-3: First Final Outcome

    First FinalOutcome

    POS System Processing

    Approved The terminal considers the transaction disposition asapproved.

    The terminal advises the cardholder of the transactionoutcome.

    If a receipt is required, the terminal prints it, with a signatureline if CVM signature requested in the Outcome (or thesignature might be obtained by other means such aselectronic capture).

    The terminal prepares a clearing record using the data recordprovided with the Outcome.

    Once the above steps are complete, the POS Systemcontinues processing at Requirements New TransactionPreparation and Start on page 57.

    Declined The terminal considers the transaction disposition asdeclined.

    The terminal advises the cardholder of the transactionoutcome.

    Once complete, continue with Requirements NewTransaction Preparation and Start on page 57.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    57/124

    EMV Contactless Book A 6 Outcomes and Parameters Ar ch it ectur e & Gen l Rqmt s v2.2 6.3 Outcome Pro cessing

    June 2012 Page 45 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    First FinalOutcome

    POS System Processing

    OnlineRequest

    The POS System advises the cardholder that an onlinetransaction is in progress. An initial message to thecardholder might have been displayed as a result of thekernel including a User Interface Request with the Outcome.If a PIN CVM is required, then the message directs thecardholder to enter the PIN.

    The terminal initiates an online authorisation request, usingthe data record provided with the Outcome. If the CVM isonline PIN, then the terminal processes and submits theencrypted online PIN.

    The terminal receives the online response or might determine

    that the request was unable to go online.

    If the Start parameter was any value other than N/A, then:

    The terminal makes available the transaction dispositionin the online response together with all of the EMV TLVdata elements present.

    The reader reactivates Entry Point by continuing withRequirements Online Response Restart on page 62.

    The terminal determines the transaction disposition, based on

    the online response indication (with Unable To Go Online adecline).

    The terminal advises the cardholder of the transactionoutcome.

    If a receipt is required the terminal prints it, with a signatureline if CVM signature requested in the Outcome (or thesignature might be obtained by other means such aselectronic capture).

    The terminal prepares a clearing record if transaction

    disposition is approved.

    Once complete, continue with Requirements NewTransaction Preparation and Start on page 57.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    58/124

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    59/124

    EMV Contactless Book A 6 Outcomes and Parameters Ar ch it ectur e & Gen l Rqmt s v2.2 6.3 Outcome Pro cessing

    June 2012 Page 47 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement between the user and EMVCofound at http://www.emvco.com/specifications.aspx.

    Table 6-4: Second Final Outc ome (Following an Online Request)

    Second FinalOutcome

    POS System Processing

    Approved (only relevant for retained Outcome parameter Start = D)

    The terminal determines the transaction disposition asapproved.

    The POS System advises the cardholder of the transactionoutcome.

    If a receipt is required the terminal shall print it, with asignature line if CVM signature requested in the Outcome(or the signature might be obtained by other means such aselectronic capture).

    The terminal prepares a clearing record.

    Once complete, continue with Requirements NewTransaction Preparation and Start on page 57.

    Declined (only relevant for retained Outcome parameter Start = D)

    The terminal determines the transaction disposition asdeclined. (This overrules an approved in the onlineresponse).

    The POS System advises the cardholder of the transactionoutcome.

    Once complete, continue with Requirements NewTransaction Preparation and Start on page 57.

    OnlineRequest

    Not applicable.

    Try AnotherInterface

    Not applicable.

    End Appl ication

    The terminal determines the transaction disposition accordingto the online response indication.

    The POS System advises the cardholder of the situation.

    The terminal continues according to its environment andacceptance rules.

    Once complete, continue with Requirements NewTransaction Preparation and Start on page 57.

  • 8/10/2019 A Architecture and General Rqmts v2.2 201206290810078

    60/124

    6 Outcomes and Parameters EMV Contactless Book A6.3 Outcome Processing Archi tecture & Genl Rqmts v2.2

    Page 48 June 2012 2011-2012 EMVCo, LLC (EMVCo). All rights reserved. Any and all uses of the EMV Specifications (Materials)

    shall be permitted only pursuant to the terms and conditions of the license agreement be