PCI Watch

Tracking changes across the Payment Card Industry

SB n° 284: Contact - Clarification for Procedure Byte use

v1.0 Specification Bulletins
Contact Card

EMV® Specification Bulletin No. 284 First Edition March 2023 Contact – Clarification for Procedure Byte Use This Specification Bulletin defines when an ICC is prohibited from sending a '60', INS, or �𝑰𝑰�𝑰�𝑰�𝑰�𝑰 procedure byte.

Applicability

This Specification Bulletin applies to:

  • EMV® Level 1 Specifications for Payment Systems, EMV Contact Interface Specification, Version 1.0, October 2022.

Related Documents

  • INTERNATIONAL STANDARD, ISO/IEC 7816-3, Identification cards — Integrated circuit cards — Part 3: Cards with contacts — Electrical interface and transmission protocols, Third edition, 200611-01

Description

The using of the '60', INS, and �I�N��S� procedure bytes between ICC data and a status word or '61' procedure byte is prohibited. For cards: Requirements The changes (new requirements) in this bulletin EMV Contact Interface Specification version 1.0 The changes (new requirements) in this bulletin Date for application Approved cards due for renewal: from January 2026 New card approvals: until end December 2023 New card approvals: from January 2024 Specification Changes A new clause is added to the end of section 9.2.2.3.1. 9.2.2.3.1 Procedure Byte … In all cases, after the action has taken place the TTL shall wait for a further procedure byte or status. ICC shall not send a '60', INS, nor �I�N��S� procedure byte between a data byte from the ICC and the first status byte SW1 or '61' procedure byte.

countries.

Legal Notice

The EMV® Specifications are provided “AS IS” without warranties of any kind, and EMVCo neither assumes nor accepts any liability for any errors or omissions contained in these Specifications. EMVCO DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT, AS TO THESE SPECIFICATIONS. EMVCo makes no representations or warranties with respect to intellectual property rights of any third parties in or in relation to the Specifications. EMVCo undertakes no responsibility to determine whether any implementation of the EMV® Specifications may violate, infringe, or otherwise exercise the patent, copyright, trademark, trade secret, know-how, or other intellectual property rights of third parties, and thus any person who implements any part of the EMV® Specifications should consult an intellectual property attorney before any such implementation. Without limiting the foregoing, the Specifications may provide for the use of public key encryption and other technology, which may be the subject matter of patents in several countries. Any party seeking to implement these Specifications is solely responsible for determining whether its activities require a license to any such technology, including for patents on public key encryption technology. EMVCo shall not be liable under any theory for any party’s infringement of any intellectual property rights in connection with the EMV® Specifications

countries.