SB nº 267: Clarification on Handling of Unknown ICC Data and Track 1 Discretionary Data

EMV^® Specification Bulletin No. 267 First Edition April 2022 Clarification on Handling of Unknown ICC Data and Track 1 Discretionary Data This Specification Bulletin clarifies the conditions of execution for primitive ICC Data that is not within the templates as designed in the data dictionary, and the handling of incorrectly formatted Track 1 Discretionary Data (tag ‘9F1F’).

Applicability

This Specification Bulletin applies to:

• EMV Integrated Circuit Card Specifications for Payment Systems, Book 3 – Application Specification, Version 4.3, November 2011

Related Documents

• None

Effective Date

• 1 January 2023

Description

This document proposes changes to section 7.5 in the above-mentioned specification, in order to clarify the processing of some of the data objects. Specification Changes Change fourth paragraph of section 7.5 as follows: During a transaction the terminal shall ignore any data object coming from the ICC which is designated in the EMV data elements dictionary (Table 33 in Annex A) as terminal-sourced or issuer-sourced. The data elements dictionary defines data as being sourced from any of three places: the ICC, the terminal or the issuer. If the terminal receives a primitive data element that is not within the templates as designated in the data dictionary, the terminal should consider that data as unknown and should ignore it. Add Track 1 Discretionary Data (tag ‘9F1F’) to the list under fifth paragraph of section 7.5:

• Cardholder Name ('5F20')
• Cardholder Name Extended ('9F0B')
• Issuer URL ('5F50')
• Log Entry ('9F4D') countries.
• Log Format ('9F4F')
• Track 1 Discretionary Data ('9F1F') countries.

Legal Notice

The EMV^® Specifications are provided "AS IS" without warranties of any kind, and EMVCo neither assumes nor accepts any liability for any errors or omissions contained in these Specifications. EMVCO DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT, AS TO THESE SPECIFICATIONS. EMVCo makes no representations or warranties with respect to intellectual property rights of any third parties in or in relation to the Specifications. EMVCo undertakes no responsibility to determine whether any implementation of the EMV^® Specifications may violate, infringe, or otherwise exercise the patent, copyright, trademark, trade secret, know-how, or other intellectual property rights of third parties, and thus any person who implements any part of the EMV^® Specifications should consult an intellectual property attorney before any such implementation. Without limiting the foregoing, the Specifications may provide for the use of public key encryption and other technology, which may be the subject matter of patents in several countries. Any party seeking to implement these Specifications is solely responsible for determining whether its activities require a license to any such technology, including for patents on public key encryption technology. EMVCo shall not be liable under any theory for any party’s infringement of any intellectual property rights in connection with the EMV^® Specifications

countries.