SB nº SU-42 : Voice Referrals (Spec Change)

Specification Update Bulletin No. 42 First Edition October 2005 Voice Referrals This bulletin defines changes to the ways that voice referrals are initiated and handled to better reflect the current situation in the field. This Bulletin has immediate effect. Products will be tested against the requirements of this bulletin commencing January 15th, 2006.

Applicability

This Specification Update Bulletin applies to:

• EMV Integrated Circuit Card Specifications for Payment Systems Version 4.1, all Books

Related Documents

• Type Approval Bulletin 38 - Terminal Level 2 Test Cases v2.0 & v3.5 - Voice Referrals (bulletin published on Dec 19th)

Description

The Payment Systems do not allow cards to request voice referrals by generating the Application Authorisation Referral (AAR) cryptogram type, and it is thus unused in the field. Providing support for AARs places an unnecessary burden on terminals and unduly complicates the flow of some cryptographic processes, such as CDA. It is therefore proposed to completely remove the AAR cryptogram type from the EMV Specifications. If a card returns this now RFU cryptogram type, the terminal will treat this as a logic error in the ICC, and behave according to the requirements in Book 3, section 9.3. Further, it is recognised that the way that Issuer-initiated voice referrals are handled at the point of sale may vary from market to market. Whilst support for Issuer initiated voice referrals will continue to be mandatory at attended terminals, the way that that support may be provided will be made more flexible.

Proposed Specification Change Notice Please make the following changes to the EMV Specifications. Book Section Page Change 1 3 9 Delete the definition for ‘Application Authorisation Referral’. Delete the second bullet ‘Application Authorisation Referral’ from the definition for ‘Application Cryptogram’. 1 4.1 19 Delete the abbreviation for AAR. 1 Index 173 Delete the entries for AAR and Application Authorisation Referral. 2 Tables xi Delete the words ‘or AAR’ from the caption for Table 20. 2 3 11 Delete the definition for ‘Application Authorisation Referral’. Delete the second bullet ‘Application Authorisation Referral’ from the definition for ‘Application Cryptogram’. 2 4.1 21 Delete the abbreviation for AAR. 2 6.6.1, step 3 72 Delete the words ‘or an Application Authorisation Referral (AAR)’ from the first sentence of step 3. 2 6.6.1, Table 20 72 Delete the words ‘or AAR’ from the ‘Value’ column of the row for tag ‘9F26’ and from the table’s caption. 2 6.6.2 72 Delete the fourth paragraph which begins ‘If the ICC has responded with an AAR...’. 2 Figure 3 76 Delete the words ‘or AAR’ from the right hand exit from the ‘ICC response’ decision diamond at the bottom of the flow chart. 2 Figure 4 77 Delete the ‘AAR’ exit from the right of the ‘GEN AC response’ decision diamond at the top of the flow chart, together with the associated processing (i.e. the ‘Signed Dyn. Applic. Data in Response?’ decision diamond, the ‘Perform referral processing’ action box and their associated arrows.). Delete ‘, AAR’ from the exit at the right of the ‘GEN AC response’ decision diamond in the middle of the flow chart. 2 8 85 Delete ‘, AAR,’ from the list of cryptogram types in parentheses in the first sentence. 2 Index 161 Delete the entries for AAR and Application Authorisation Referral. 3 Figures xiii Replace the caption for Figure 8 with ‘Deleted by SU Bulletin 42’ and delete the associated page number 3 3 9 Delete the definition for ‘Application Authorisation Referral’. Delete the second bullet ‘Application Authorisation Referral’ from the definition for ‘Application Cryptogram’.

3 4.1 19 Delete the abbreviation for AAR. 3 6.5.5.1, Table 10 Delete the ‘Application Authorisation Referral’ row from Table 10 3 6.5.5.4, Table 14 59 Replace the ‘AAR’ entry in the ‘Meaning’ column with ‘RFU’. Replace the ‘Reason/advice/referral code’ entry in the Meaning’ column with ‘Reason/advice code’. 3 9 87 Replace ‘Figure 7 and Figure 8 depict’ form the third sentence and replace it with Figure 7 depicts’. Delete the last sentence of the first paragraph. 3 9, Figure 7 88 Delete the ‘Refer’ exits from the two ‘Card decision’ decision diamonds near the centre of the flow chart, together with the associated processing (i.e. the ‘Card responds with AAR’ & ‘Referral processing (see next Figure)’ action boxes and their associated arrows.) 3 9, Figure 8 89 Delete Figure 8 and replace it with ‘Deleted by SU Bulletin 42’. 3 9.3 91 Delete the third bullet ‘AAR’ in the second paragraph. In the third sentence of the fourth paragraph, add the words ‘or with a cryptogram of an undefined type, ’ 3 9.3.1 92 Delete ‘ an AAR,’ from the first and second bullets. Delete the third paragraph which begins ‘If the ICC responds with an AAR...’. 3 10.8, Purpose 115 Delete ‘or request a referral’ from the sentence. 3 10.8, Description 115 Delete the third bullet ‘Request a referral’. Delete ‘ an AAR,’ from the second paragraph. 3 Part V – Common 182 Delete the first sentence which begins ‘The CCD-compliant application shall not...’. Core Definitions, 6.5.5.1. 3 Part V – Common 195 Delete the second paragraph which begins ‘The CCD-compliant application shall not...’. Core Definitions, 9.3. 3 Part V – Common 195 Delete section 9.3.1. Core Definitions, 9.3.1.

Part V – Common 196 Delete the first paragraph which begins ‘The CCD-compliant application shall not...’. Core Definitions, 10.8. 3 Index 209 Delete the entries for AAR and Application Authorisation Referral. 4 3 11 Delete the definition for ‘Application Authorisation Referral’. Delete the second bullet ‘Application Authorisation Referral’ from the definition for ‘Application Cryptogram’. 4 4.1 21 Delete the abbreviation for AAR. 4 6.3.7, Table 2 49 Delete the table row with ‘Referral’ in the ‘If the card indicates:’ column. 4 6.5.2 53 Delete ‘by the card or’ from the first sentence of the first paragraph. Delete the second sentence of the first paragraph. Replace ‘displaying the appropriate message when the card or’ in the first sentence of the second paragraph (in parentheses) with ‘alerting the attendant when the’. Delete ‘go online, ’ from the last sentence of the second paragraph. 4 6.5.2.1 53 Delete the heading and replace it with ‘Deleted by SU Bulletin 42’. Delete the body text. 4 6.5.2.2 54 Modify the end of the first sentence of the first paragraph to read ‘... shall either display the ‘CALL YOUR BANK’ message to the attendant, or shall alert the attendant in some other way that the Issuer has requested a voice referral.’. Replace ‘shall’ with ‘should’ in the second sentence of the first paragraph. Replace ‘shall’ with ‘should’ in the third sentence of the first paragraph. 4 6.5.6 55 Replace ‘AACs, and AARs’ with ‘and AACs’ in the final sentence. 4 Annex A, A6, 120 Delete the two rows from the table with ‘Approval (after card-initiated referral)’ and ‘Decline (after card-initiated referral)’ in Table 34 the ‘Authorisation Response Code’ column. 4 Index 135 Delete the entries for AAR and Application Authorisation Referral.