PCI Watch

Tracking changes across the Payment Card Industry

SB n° 288: Update to Contact EMV Book 3

v1.0 Specification Bulletins
Contact Acceptance Device

EMV® Specification Bulletin No. 288 First Edition April 2023 Update to Contact EMV Book 3 Correction of inconsistency regarding data objects retrievable with Get Data command.

Applicability

This Specification Bulletin applies to:

  • EMV® Integrated Circuit Card Specifications for Payment Systems Book 3 - Application Specification, Version 4.4, October 2022

Related Documents

  • None Effective Date ⚫ January 2024

Description

Sections 6.5.7.1 and 6.5.7.2 of Book 3 specify the data objects that the terminal can retrieve with the Get Data command. The specified data objects include Biometric Try Counters Template (tag 'BF4C') and Preferred Attempts Template (tag 'BF4D'). However, they are not included in the specified data objects in Section 7.3. This bulletin is published to add the two data objects to Section 7.3 to align the descriptions in the specification. Details of Changes In Section 7.3, replace Table 32 with the following table: Tag '9F36' '9F17' '9F13' '9F4F' 'BF4C' 'BF4D' Value Application Transaction Counter (ATC) PIN Try Counter Last Online ATC Register Log Format Biometric Try Counters Template Preferred Attempts Template Presence M O O O O O Table 32: Data Objects Retrievable by GET DATA Command

countries.

Legal Notice

The EMV® Specifications are provided “AS IS” without warranties of any kind, and EMVCo neither assumes nor accepts any liability for any errors or omissions contained in these Specifications. EMVCO DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT, AS TO THESE SPECIFICATIONS. EMVCo makes no representations or warranties with respect to intellectual property rights of any third parties in or in relation to the Specifications. EMVCo undertakes no responsibility to determine whether any implementation of the EMV® Specifications may violate, infringe, or otherwise exercise the patent, copyright, trademark, trade secret, know-how, or other intellectual property rights of third parties, and thus any person who implements any part of the EMV® Specifications should consult an intellectual property attorney before any such implementation. Without limiting the foregoing, the Specifications may provide for the use of public key encryption and other technology, which may be the subject matter of patents in several countries. Any party seeking to implement these Specifications is solely responsible for determining whether its activities require a license to any such technology, including for patents on public key encryption technology. EMVCo shall not be liable under any theory for any party’s infringement of any intellectual property rights in connection with the EMV® Specifications

countries.