PCI Watch

Tracking changes across the Payment Card Industry

SB nº SU-51 : Online-only terminals (Spec Change)

v1.0 Specification Bulletins

Specification Update Bulletin No. 51 First Edition July 2006 Online-only terminals This bulletin clarifies the definition of an online-only terminal, and introduces new allowable behaviour for such terminals when performing TAC/IAC processing.

Applicability

This Specification Update Bulletin applies to:

  • EMV Integrated Circuit Card Specifications for Payment Systems Version 4.1 Books 3 and 4

Related Documents

This Specification Update should be read in conjunction with:

  • Type Approval Bulletin 44 - Terminal Level 2 Test Cases v4.1.a - Online Only Terminals

Description

A variety of online-only terminals exist in the field ranging from attended POS to ATMs, and the various types often have somewhat different behaviours, especially with respect to Terminal Action Analysis. As a result of queries received about such terminals, this bulletin clarifies the definition of an online-only terminal, and also defines some changes to Terminal Action Analysis to better accommodate the usual behaviour of certain types of online-only terminals, especially ATMs. Proposed Specification Change Notice 1. Add the following note to Book 3, section 9, Figure 7 against the TAC/IAC-Default decision diamond ‘Online-only terminals may optionally skip TAC/IAC Default processing, in which case processing continues with ‘Terminal requests AAC’ 2. Insert the following sentence as a new fifth sentence in Book 3, Section 10.7, ‘Description:...’, 9th paragraph which begins, ‘If the Issuer Action Code – Online is not present...’. ‘For an online-only terminal, if it has not already decided to reject the transaction as described above, it shall continue transaction processing online, and shall issue a GENERATE AC command requesting an ARQC from the card.’

3. Insert the following sentence as a new final sentence in Book 3, Section 10.7, ‘Description:...’, 9th paragraph which begins, ‘If the Issuer Action Code – Online is not present...’. ‘Otherwise, the terminal shall issue a GENERATE AC command requesting a TC from the ICC.’ 4. Insert the following two sentences as new fourth and fifth sentences in Book 3, Section 10.7, ‘Description:...’, 10th paragraph which begins, ‘If the Issuer Action Code – Default does not exist...’. ‘In the event that an online-only terminal was unable to successfully go online, it may optionally skip TAC/IAC Default processing (shown in Figure 7 for a transaction that was not completed on-line) +. If an online-only terminal does skip TAC/IAC Default processing, it shall request an AAC with the second GENERATE AC command.’ Also, add the following sentence as a footnote to the first new sentence above. The footnote position is indicated by +. + Note that if an online-only terminal is unable to successfully go online and TAC/IAC Default processing is optionally performed, this could result in a TC being requested with the second GENERATE AC command (depending upon the TAC/IAC Default settings). 5. Replace the definition of the term ‘Online only’ in Book 4, Section 5.1, Table 1 with: ‘The transaction can normally only be approved in real time by transmission of an authorisation request message.’