PCI Watch

Tracking changes across the Payment Card Industry

SB nº AN-25 : Issuer Application Data coding for CCD-compliant and Non CCD-compliant Applications (Clarification)

v1.0 Specification Bulletins

Application Note N° 25 First Edition January 2005 This Application Note clarifies that Issuer Application Data from an application that is not compliant with the Common Core Definitions (CCD) should be coded in a way that prevents the application from being mistakenly identified as a CCD-compliant application. Issuer Application Data coding for CCD-compliant and Non CCD-compliant Applications

Applicability

This Application Note applies to:

  • EMV Integrated Circuit Card Specifications for Payment Systems, Book 3 Application Specification, Version 4.1, May 2004

Related Documents

  • None This Application Note restates the criteria for identification of CCD-compliant applications and recommends that issuers code non-CCD-compliant applications so that they do not satisfy these criteria. EMV Version 4.1 Book 3 Part V Common Core

Definitions

Section C7 states that: "The CCD-compliant application shall have an Issuer Application Data (IAD) field of fixed length, 32 bytes long, with the following attributes:

  • Byte 1 shall be set to '0F'.
  • Byte 2 shall be the Common Core Identifier (CCI).
  • Byte 17 shall be set to '0F.'" To prevent an application that is non CCD-compliant from erroneously being identified as a CCD-compliant application, the IAD should be coded so that it does not satisfy the IAD requirements for CCD-compliant applications. Specification Clarification Notice In the next release of the EMV Specifications the following note will be added to the Description column of the entry for Issuer Application Data of EMV Integrated Circuit Card Specifications for Payment Systems, Book 3 Application Specification, Annex A, section A1, Table 33 Data Elements Dictionary: ‘Note: For CCD-compliant applications, Annex C, section C7 defines the specific coding of the Issuer Application Data (IAD). To avoid potential conflicts with CCD-compliant applications, it is strongly recommended that the IAD data element in an application that is not CCD-compliant should not use the coding for a CCD-compliant application.’ (Annex C, section C7 is introduced as a result of the Common Core Definitions in Part V of Book 3.)