EMV® 3-D Secure UI Data Elements—ACS Impact Notice

EMV^® 3-D Secure UI Data Elements—ACS

Impact

Notice May 2020 EMV 3-D Secure UI Data Elements—ACS Impact Notice

Legal Notice

Legal Notice

of 5 This document summarizes EMVCo’s present plans for evaluation services and related policies and is subject to change by EMVCo at any time. This document does not create any binding obligations upon EMVCo or any third party regarding the subject matter of this document, which obligations will exist, if at all, only to the extent set forth in separate written agreements executed by EMVCo or such third parties. In the absence of such a written agreement, no product provider, test laboratory or any other third party should rely on this document, and EMVCo shall not be liable for any such reliance. No product provider, test laboratory or other third party may refer to a product, service or facility as EMVCo approved, in form or in substance, nor otherwise state or imply that EMVCo (or any agent of EMVCo) has in whole or part approved a product provider, test laboratory or other third party or its products, services, or facilities, except to the extent and subject to the terms, conditions and restrictions expressly set forth in a written agreement with EMVCo, or in an approval letter, compliance certificate or similar document issued by EMVCo. All other references to EMVCo approval are strictly prohibited by EMVCo. Under no circumstances should EMVCo approvals, when granted, be construed to imply any endorsement or warranty regarding the security, functionality, quality, or performance of any particular product or service, and no party shall state or imply anything to the contrary. EMVCo specifically disclaims any and all representations and warranties with respect to products that have received evaluations or approvals, and to the evaluation process generally, including, without limitation, any implied warranties of merchantability, fitness for purpose or noninfringement. All warranties, rights and remedies relating to products and services that have undergone evaluation by EMVCo are provided solely by the parties selling or otherwise providing such products or services, and not by EMVCo, and EMVCo will have no liability whatsoever in connection with such products and services. This document is provided "AS IS" without warranties of any kind, and EMVCo neither assumes nor accepts any liability for any errors or omissions contained in this document. EMVCO DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT, AS TO THIS DOCUMENT. EMVCo makes no representations or warranties with respect to intellectual property rights of any third parties in or in relation to this document. EMVCo undertakes no responsibility to determine whether any implementation of this document may violate, infringe, or otherwise exercise the patent, copyright, trademark, trade secret, know-how, or other intellectual property rights of third parties, and thus any person who implements any part of this document should consult an intellectual property attorney before any such implementation. Without limiting the foregoing, this document may provide for the use of public key encryption and other technology, which may be the subject matter of patents in several countries. Any party seeking to implement this document is solely responsible for determining whether its activities require a license to any such technology, including for patents on public key encryption technology. EMVCo shall not be liable under any theory for any party's infringement of any intellectual property rights in connection with this document. EMV 3-D Secure UI Data Elements—ACS Impact Notice Contents

of 5 Contents

Introduction

Supporting Documentation Preamble Clarification

countries. EMV 3-D Secure UI Data Elements—ACS Impact Notice Introduction Introduction

of 5 This document provides clarification and the immediate action that an ACS must make to comply with the updated UI Data Element table as published in SB 204v6 and SB 214 v2. Supporting Documentation This clarification applies to the following

• SB 204 v6 EMV^® 3-D Secure 2.1.0 Updates, Clarifications & Errata (released February 2020)
• SB 214 v2 EMV^® 3-D Secure 2.2.0 Updates, Clarifications & Errata (released February 2020) Preamble
• The UI Data Elements table referenced in this document is Table A.17 in version 2.1.0 of the EMV^® 3-D Secure Protocol and Core Functions Specification and Table A.18 in version 2.2.0. For purposes of this communication, the table is referenced as the UI Data Elements table.
• The UI Data Elements table of the EMV^® 3-D Secure Protocol and Core Functions Specification identifies the presence (optional or mandatory) and the position of the user interface data elements in the Native UI templates during a challenge.
• This document refers to Req 387 of the core specification. Req 387 as currently written is included here for reference: [Req 387] Only include the mandatory and the optional ACS-chosen UI data elements supported for the selected ACS UI Type as defined in Table A.18 (v2.1.0 Table A.17). countries. EMV 3-D Secure UI Data Elements—ACS Impact Notice Clarification Clarification of 5 An ACS v2.1.0 and v2.2.0, that is not updated for compliance with [Req] 387 (see Preamble) of the core specification, could receive an error message and therefore prematurely end the challenge when the ACS interacts with an SDK that is in compliance with SB 204v6 and SB 214v2. Specifically, failure to comply with the presence conditions of the following UI data elements will cause an SDK error response:
• Challenge Information Header
• Challenge Information Label
• Challenge Information Text To avoid an error response from the SDK during the challenge, all ACSs must ensure compliance with: Requirement 387
• UI Data Elements table
• Version 2.1.0—Table A.17 UI Data Elements
• Version 2.2.0—Table A.18 UI Data Elements countries.