SB nº SU-8 : Editorial Changes for EMV® 2000 (Spec Change)

Specifications Updates Bulletin no. 08, December 2002 Version 2.0 Editorial Changes to EMV 2000 - Version 2.0 The following table identifies editorial errors in the current EMV 2000 specifications. The corrected text is indicated in bold and underline. Date November 2002 March 2002 March 2002 March 2002 March 2002 March 2002 March 2002 March 2002 March 2002 March 2002 March 2002 March 2002 November 2002 Book 1 1 1 1 1 1 1 1 1 1 1 1 1 Section The whole document Abbreviations 1.1.1 1.1.3 1.3.1 1.3.1 1.4.4 1.4.7 2.1.2 2.1.3.1 2.1.3.2 2.1.4 4.3 Change Throughout the whole document replace "ISO 8859" with "ISO/IEC 8859" Add to the list of Abbreviations: ASI = Application Selection Indicator Replace “ISO/IEC DIS 7816-1” by “ISO/IEC 7816-1” Replace “ISO/IEC DIS 7816-2” by “ISO/IEC 7816-2” Replace “ISO/IEC DIS 7816-1” by “ISO/IEC 7816-1” Replace “ISO/IEC DIS 7816-2” by “ISO/IEC 7816-2” Delete footnote number 4 at the bottom of

0. Replace “ISO/IEC DIS 7816-1” by “ISO/IEC 7816-1” Delete footnote number 5 at the bottom of

4. In the 5th Bullet point, replace “(time T1 in Figure 6)” with “(time t1 in Figure 6)”. In the 6th Bullet point, replace “(time T1’ in Figure 7)” with “(time t1' in Figure 7)”. Replace “in Book 3, ICC Credit/Debit Application Specification for Payment Systems” with “in Book 3, Application Specification” In the first bullet, replace '… if it rejecting…" with " if it is rejecting".

Date March 2002 March 2002 March 2002 March 2002 March 2002 March 2002 March 2002 Book 1 1 1 1 1 2 2 November 2002 3 March 2002 3 March 2002 3 March 2002 3 March 2002 3 Section 4.3.3.1 5.2.4.2.2 8.3.2 8.3.2 8.3.3 Change TA1 parameter: In the first bullet under 'Terminal Behaviour', the value for F in the brackets is incorrect - it is the value for FI that is given, not the value for F as stated. Replace "F=1" with "F=372". Replace the two references to “section 4.3.3.6” to read “section 4.3.3.10”. Change the first sentence from: “If a terminal chooses to support the Payment System directory,…” to read: “If a terminal chooses to support application selection using the Payment System Directory method,…” At the end of step 5, change the section number from 8.4 to 8.3.4. At the end of step 5, change the section number from 8.4 to 8.3.4.

7.2 Annex A A1.4 Replace reference to “Table 16” with reference to “Table 21”. In the final paragraph, correct the spelling of “ssgnificant” to “significant”. The whole document Table of Figures 1.2 2.3.5 2.3.5 Throughout the whole document replace "ISO 8859" with "ISO/IEC 8859" Replace “Figure II- 7” with “Figure D-1” Replace “Figure II- 8” with “Figure D-2” In the 4th paragraph, change “Table A-1 and Table A-2 in Annex A describes the mapping…” to read: “Table A-1 and Table A-2 in Annex A describe the mapping…” In Table I - 5 change “GENERATE APPLICATION CRYPTOGRM” to read “GENERATE APPLICATION CRYPTOGRAM”. In Table I - 5 change “PIN CHANGE/UNVBLOCK” to read “PIN CHANGE/UNBLOCK”.

Date November 2002 Book 3 March 2002 3 Section 2.3.5 2.5.12.2 Change Replace the text under Table I-5 with the following: The following convention is used in the table: X = Allowed response code, for which a dedicated action shall be taken or which has a special meaning for an EMV compliant application. The meaning of the action is explained in section 6. If during the transaction processing as described in Part II, the card returns another value for SW1 SW2 than specified in Table I - 5, and no other action is indicated elsewhere in this Specification, the transaction shall be terminated. An example is that the transaction would be terminated if the application reads records in a file that contains four records and the card returns SW1 SW2 = '6400' in response to the READ RECORD command for record 5 instead of SW1 SW2 = '6A83'. When using transmission protocol T=1, for all commands having Le = '00', the successful execution of the command is coded by '90 00' or '61 La'. However, for readability, both response codes are referenced throughout the text as '90 00' only. If during the processing of the GET DATA command, defined in section 2.5.7, the card returns an error condition, the terminal shall proceed as indicated in Section 6.6.3 (for terminal velocity checking) or in Book 4 section 2.3.4.1 (for cardholder verification processing). If during the processing of an issuer script command, as defined in section 6.10, the card returns a warning condition (SW1 SW2 = '62XX' or '63xx'), the terminal shall continue with the next command from the Issuer Script (if any). Table I-24, fifth row – change table reference number from “I-33” to “I-25”

Date March 2002 Book 3 March 2002 3 November 2002 3 March 2002 3 November 2002 3 March 2002 3 November 2002 3 Section 2.5.12.2 3.3 4 4.2 5 6.5 6.6 Change Second table on

(format of the PIN block) replace the value-field description of the following rows: Row 1: change to “4 bit binary number with value of 0010 (hex '2')” Row 2: change to “4 bit binary number with permissible values of 0010 to 1100 (hex '4' to 'C')” Row 3: change to “4 bit binary number with permissible values of 0000 to 1001 (hex '0' to '9')” Row 5: change to “4 bit binary number with a value of 1111 (hex 'F')” Replace the words “as described in” at the end of the first sentence with “as described in section 2.5.8” Delete the second sentence of the first paragraph and replace it with “The terminal shall attempt to execute those functions that the ICC supports according to the conditions of execution for the function.” In the first sentence replace “Figure II- 8” with “Figure II- 1” In the last sentence add the words “Figure D- 2” after “Annex D”. In figure II-2, replace the reference to Figure 6 with "Figure II-3". On

, in the second paragraph, change the reference to “Annex A” to read “Annex C.3” In the first sentence of the section 'Conditions of Execution' replace 'supported' by "…to be performed…" Insert a new note at the end of the section 'Conditions of Execution' to read: “Note: To better control local risk management, terminals may perform terminal risk management even when the ‘Terminal risk management is to be performed’ bit is set to '0' in the Application Interchange Profile.”

Date March 2002 March 2002 March 2002 March 2002 March 2002 March 2002 March 2002 March 2002 March 2002 March 2002 Book 3 3 3 3 3 3 3 3 3 3 Section 6.6.2 6.6.2 Annex A, Table A1 Annex A, Table A1 Annex A, Table A1 Annex A, Table A-2 Annex B, B.1 Annex B B.1 Annex B, B1.1 Annex C Table C - 4 Change In the second paragraph, change: “If this random number is less than or equal to the Target Percentage to be Used for Random Selection,…” to read: “If this random number is less than or equal to the Target Percentage to be used for Random Selection,…” In the third paragraph, change: "Target Percentage to be Used for Random Selection…" to "Target Percentage to be used for Random Selection…" and change "Maximum Target Percentage to be Used for Biased Random Selection …" to read: "Maximum Target Percentage to be used for Biased Random Selection …" Change Application Reference Currency Exponent (

) Format column from "N 1" to "n 1" Change the Template for Issuer URL from ‘A5’ to ‘BF0C’. Change the description of Transaction Certificate (TC) Hash Value to read: “Result of a hash function specified in Book 2, Annex B 3.1” Move the entry for Issuer URL so that it follows the entry for Transaction Currency Exponent. Change Template from ‘A5’ to ‘BF0C’. In first bullet, change Table C-1 to Table B-1 In the second bullet, last sentence replace: “… is coded on one, two or three bytes” with “… is coded on one or two bytes.” At end of first sentence, change Table C-1 to Table B-1. In second paragraph, change Table C-2 to Table B-2. Add a header to Table C - 4 as follows: “Byte 2 (Rightmost): Cardholder Verification Method (CVM) Condition Codes”

Date March 2002 March 2002 March 2002 Book 3 3 3 Section Annex C, C.5 Annex D Annex D D.2.1.1 Change Delete the 7th row of table for Byte 1 coding (bit b3), i.e.: x x x x x 0 x x RFU Renumber existing “Figure II- 7” as “Figure D- 1” Renumber existing “Figure II- 8” as “Figure D- 2” November 2002 4 The whole document Throughout the whole document replace "ISO 8859" with "ISO/IEC 8859" March 2002 4

Introduction

Last paragraph, replace “different situations which…” with “different situations that…” November 2002 4 2.3.5 Replace the first paragraph by: "In addition to the terminal risk management functions described in Book 3 Application Specification and regardless of the coding of the card’s Application Interchange Profile bit setting for 'Terminal Risk Management is to be performed', a terminal may support an exception file per application March 2002 4 2.5.1 and 3.1 Change “a key pad” to “a keypad”. March 2002 4 Annex C Replace tag ‘BF10’ by tag ‘9F10’. March 2002 4 Annex C Delete tag ‘9F28’; all application cryptograms (AAC, ARQC, TC and AAR) are identified by tag ‘9F26’ March 2002 4 Annex C Delete tag ‘9F29’, all application cryptograms (AAC, ARQC, TC and AAR) are identified by tag ‘9F26’ March 2002 4 Annex D2.1 Change “The power supply should complies with…” to read “The power supply should comply with….”.