SB nº SU-21 : Clarification of Actions During Offline Enciphered PIN processing (Spec Change)

Specification Update: Bulletin No. 21 November 2003 Clarification of Actions During Offline Enciphered PIN Processing This bulletin applies to EMV 2000 Integrated Circuit Card Specifications for Payment Systems Version 4.0 Book 2, Sections 7.1 and 7.2. It clarifies the terminal action when processing is unsuccessful during Offline Enciphered PIN processing. Please make the following change to EMV 2000 Integrated Circuit Card Specifications for Payment Systems Version 4.0, Book 2, Section 7.1 Keys and Certificates: On

Step 3, after "then PIN encipherment has failed", add "and the Offline Enciphered PIN CVM has failed." Please make the following changes to EMV 2000 Integrated Circuit Card Specifications for Payment Systems Version 4.0, Book 2, Section 7.2 PIN Encipherment and Verification: On

Step 2 after "The terminal issues a GET CHALLENGE command to the ICC to obtain an 8-byte unpredictable number from the ICC", add "When the response to the GET CHALLENGE command is anything other than an 8 byte data value with SW1 SW2 = 9000, then the terminal shall consider that the Offline Enciphered PIN CVM has failed." On

for Steps 7, 8, and 9 after "PIN Verification has failed.", add a footnote saying "When PIN verification fails, the ICC shall return the status word of 63Cx as described in Book 3 Section 2.5.12.5. If the terminal attempts another PIN verification, it returns to step 1 of this section."