SB n° 222 EMV® 3-D Secure SDK—Device Information Data

EMV^® Specification Bulletin No. 222 v1 August 2019 EMV 3-D Secure SDK—Device Information Data Version 1.3 This Specification Bulletin No. 222 v1 provides updates, clarifications and errata incorporated into EMV 3-D Secure SDK—Device Information Data Version 1.1, including SB 205 v1, and SB 213 v1.

Applicability

This Specification Bulletin applies to:

• EMV 3-D Secure SDK—Device Information Data Version 1.3 Updates are provided in the order in which they appear in the specification. Deleted text is identified using strikethrough, and red font is used to identify changed text. Unedited text is provided only for context.

Effective Date

August 2019

countries.

Contents EMV 3-D Secure SDK—Device Information Data Version 1.3. Table 1. 2. 2. Table 2. 2. 2. Table 2.

countries.

August 2019 v1 Chapter 1 Introduction 1.5 Data Version Number Table 1.2 Data Version Numbers Data Version Number Protocol Version 1.3 2.1.0 2.2.0 Active Status Chapter 2 Device Information Parameters 2.1 Data Version The device identification parameters that are described in this document constitute Data Version 1.1 1.3.

2.2 Minimum Supported Platform Versions Table 2.1 Minimum Supported Platform Version Platform Minimum Version Windows 10 Mobile 10 2.4 Common Device Identification Parameters Available in All Mobile Platforms In addition to the platform-specific device parameters discussed later in this document, Table 2.2 lists the device parameters that shall be collected from all mobile platforms (Android, iOS and Windows) for Device ID validation and risk analysis. For Platform Provider-specific parameters, refer to section 2.8.

2.8 Platform Provider-specific Parameters Table 2.6 provides information about the device parameters that shall be collected by the 3DS SDK for risk analysis by the ACS. If providing platform provider-specific parameters, the parameters defined in sections 2.4, 2.5, 2.6 and 2.7 shall not be provided. Table 2.6 Platform Provider-specific Parameters Identifier Parameter

Description

Permissions D001 Platform Platform that the device is using. Not applicable D002 Device Model Platform-defined device model. No permissions required

countries.

Identifier Parameter D003 OS Name D005 Locale D006 Time zone D008 D021 Screen Resolution DeviceId D022 DeviceType Description Permissions Platform defined OS name. No permissions required Device locale set by the user. No permissions required User selected or platform provisioned time zone for the user’s device rendering the 3DS challenge. Expressed in UTC. No permissions required Pixel width and pixel height, i.e., 1080x1920. No permissions required Unique and immutable identifier linked to a device that is consistent across 3DS transactions for the specific user device. For example:

• Hardware Device ID
• Platform calculated device fingerprint Not applicable Constant that indicates the device type. Not applicable Valid Values:
• 01 = Desktop
• 02 = TV connected
• 03 = Tablet/Mobile
• 04 = Headless/Voice
• 05 = Wearable
• 06 = IOT
• 99 = Other countries. Identifier Parameter Description Permissions D023 InputType List of cardholder input methods enabled on the device. Valid values:
• 01 = Physical Keyboard
• 02 = Touch Keyboard
• 03 = TV connected Onscreen Keyboard
• 04 = Voice Activated
• 05 = Gesture Activated
• 99 = Other Not applicable D024 OutputType List of output methods enabled on the device: Valid values:
• 01 = Display
• 02 = Audio
• 03 = Monochrome Display
• 99 = Other Not applicable D025 LogoPreferenceColour Preferred network and issuer logo colour preference. Valid values:
• 01 = Full Colour
• 02 = Monochrome White
• 03 = Monochrome Black
• 99 = Other No permissions required D026 UserID Identifier of the transacting user’s platform Account ID. This identifier is a unique immutable hash of the users account identifier for the given platform. Note: cardholders may have more than one account on a given platform. No permissions required but privacy policy requirements may exist countries. Identifier Parameter D027 Languages D028 OriginatingDeviceID Description Permissions Gets the set of languages preferred by the user, in the order of preference. No permissions required The device identifier of the device where the transaction started before it was transferred to another device or method for/to complete authentication. For example:
• Hardware Device ID
• Platform calculated device fingerprint Not applicable countries.

Legal Notice

The EMV^® Specifications are provided "AS IS" without warranties of any kind, and EMVCo neither assumes nor accepts any liability for any errors or omissions contained in these Specifications. EMVCO DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT, AS TO THESE SPECIFICATIONS. EMVCo makes no representations or warranties with respect to intellectual property rights of any third parties in or in relation to the Specifications. EMVCo undertakes no responsibility to determine whether any implementation of the EMV^® Specifications may violate, infringe, or otherwise exercise the patent, copyright, trademark, trade secret, know-how, or other intellectual property rights of third parties, and thus any person who implements any part of the EMV^® Specifications should consult an intellectual property attorney before any such implementation. Without limiting the foregoing, the Specifications may provide for the use of public key encryption and other technology, which may be the subject matter of patents in several countries. Any party seeking to implement these Specifications is solely responsible for determining whether its activities require a license to any such technology, including for patents on public key encryption technology. EMVCo shall not be liable under any theory for any party’s infringement of any intellectual property rights in connection with the EMV^® Specifications

countries.