FUJ00001884 - Fujitsu Services Report: Post Office Ltd to Fujitsu Services EMV Retail PIN Pad Reference Data Interface Specification (V.1.0)

Evidence on official site

Fujitsu Services

Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Versi 1.0
COMMERCIAL IN CONFIDENCE Date: 22/04/04

FUJ00001884
FUJ00001884

Document Title:
Document Type:
Release:

Abstract:

Document Status:
Originator & Dept:
Contributors:

Internal Distribution:

External Distribution:

Approval Authorities:

Post Office Ltd to Fujitsu Services EMV Retail PIN Pad
Reference Data Interface Specification

Interface Specification
S70

This document is the interface specification between Post
Office Limited and Fujitsu Services for delivery of PIN Pad
Reference Data for EMV Retail

Approved
Duncan MacDonald
Dave Johns, Trevor Leahy, Chris Bailey, Peter Lucas

Chris Bailey; Aileen Davis; Tony Drahota; David P Harrison;
Tony Heath; Mike Jenkins; David Johns; Nick Lawman; Trevor
Leahy; Peter Lucas; Jez Murray; Mik Peach; Steve Probert;
John Shepherd; Mark Taylor; David Wilcox; Roger York

Post Office Ltd

Name

Position Signature Date

Reardon Mare

Post Office Ltd

David Johns

Design Manager, APDU

David Wilcox

Customer Service, RDT

Tony Drahota

Director, RASD

© 2004 Fujitsu Services

COMMERCIAL IN CONFIDENCE Page: 1 of 33
Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0

COMMERCIAL IN CONFIDENCE Date: 22/04/04

FUJ00001884
FUJ00001884

0.0 Document Control
0.1 Document History

Version No. I Date Reason for Issue Associated
CP/PinICL

0.1 02/03/04 Initial Version

0.2 11/03/04 Amended in response to comments

0.3 18/03/04 Amended in response to further information from

Hypercom
0.4 14/04/04 Amended in response to formal review comments
1.0 22/04/04 For Approval

0.2 Review Details

Review Comments by:

Review Comments to: I Duncan MacDonald

Mandatory Review Authority Name
Post Office Limited Bob.Bootht
Tan.Senior.
Keith.Fowler
Fujitsu Services — Business Requirements Mike Jenkins
Fujitsu Services — Application Design David Johns, Chris Bailey, Trevor Leahy
Fujitsu Services — Customer Service David Wilcox; Aileen Davis; Jez Murray;

John Shepherd

Fujitsu Services — System Support Centre Mik Peach

Optional Review / Issued for Information

Fujitsu Services — Design Tony Heath; Peter Lucas

Fujitsu Services - Development Nick Lawman; David P Harrison; Roger York

( * ) = Reviewers that returned comments

0.3 Associated Documents

Ref I Reference Version Title Source

1. I AS/DPR/009 S70 Design Proposal (EMV, TDES, NBE I Fujitsu

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 2 of 33
FUJ00001884

FUJ00001884
Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0
COMMERCIAL IN CONFIDENCE Date: 22/04/04
Replacement) Services
BD/CDE/001 EMV - Banking and Retail Conceptual Post Office
Design Ltd
CS/IFS/001 Reference Data Change Catalogue Fujitsu
Services
CS/IFS/010 Reference Data Change Catalogue — Fujitsu
Network Banking Appendix Services
BP/IFS/010 Application Interface Specification Post Office
Reference Data to Pathway for CSR+ Ltd
(including Network Banking changes)
BP/IFS/O11 AIS Data to Pathway Type B Reference I Post Office
Data for CSR+ Ltd
RD/CSD/002 Reference Data Rules and Values Post Office
Ltd
NB/SPE/009 Network Banking RDS Rules and Values I Post Office
Ltd
NB/REQ/003 EMV Retail — User Interface Design Fujitsu
Proposal Services

0.4 Abbreviations/Definitions

Unless a specific version is referred to above, reference should be made to the current
approved versions of the documents.

Abbreviation I Definition

AID Application Identifier

AIS Application Interface Specification

CVM Cardholder Verification Method
DDOL Dynamic Data Authentication Object List

EMV Europay MasterCard Visa Standard for Financial Smart Cards
EPOSS Electronic Point of Sale Service

FI Financial Institution

FS Fujitsu Services

HFT Hypercom Financial Terminal (PIN Pad)

ICC Integrated Chip Card

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 3 of 33
FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0
COMMERCIAL IN CONFIDENCE Date: 22/04/04
IS Interface Specification
TIN Issuer Identification Number
MSR Magnetic Stripe Read
MID Merchant Identifier
OBC Operational Business Change achieved via reference data
PAN Primary Account Number
PIN Personal Identity Number
PIX Proprietary Application Identifier Extension
POL Post Office Ltd
RASD Requirements, Architecture & Strategy Development
RDS. Reference Data System (POL)
RDDS Reference Data Distribution Service (Fujitsu Services)
RDMC Reference Data Management Centre (Fujitsu Services)
RDT Reference Data Team (Fujitsu Services)
RID Registered Application Provider Identifier
TID Terminal Identifier

TDOL Transaction Certificate Data Object List

Type A Reference Data delivered by Post Office Ltd through the main reference
data interface [Ref 5]

Type C Reference Data prepared in attribute grammar format by Fujitsu Services -
normally consisting of software parameters, transaction scripting
parameters etc but sometimes containing some business content supplied
by Post Office Ltd, for example in Desktop buttons and, at S70, PIN Pad
reference data

0.5 Changes in this Version

Version Changes

0.1 Initial Version

0.2 Amended in response to comments

0.3 Amended in response to further information from Hypercom

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 4 of 33
Fujitsu Services

Post Office Ltd to Fujitsu Services Interface Ref:
Specification for EMV Retail PIN Pad Reference
Data

Version:

COMMERCIAL IN CONFIDENCE Date:

RD/IFS/037

1.0
22/04/04

FUJ00001884
FUJ00001884

0.4

Amended in response to formal review comments

1.0

For Approval

0.6 Changes Expected

None

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE

Page: 5 of 33
FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0

COMMERCIAL IN CONFIDENCE Date: 22/04/04

0.7 Table of Contents

1. INTRODUCTION...

2.

3. HYPERCOM PIN PAD REFERENCE DAT.

3.1 DATA TABLES
3.2 DATA TABLE

3.2.1 Overview.
3.2.2 Table Relat

3.3. CHANGE CONTROL...
4. OBC EVENTS.

LATIONSHI

5. PIN PAD REFERENCE DATA DELIVERY UNDER OBC.

S.1 DELIVERY PROC!
5.2 DEFINITION OF DATA TY!
5.3 DATA DEFINITIO!

5.3.1. OBC Definitior
5.3.2 PIN Pad Data

APPENDIX A.

PIN PAD REFERENCE DATA OUTSIDE OBC.

GENERAL DATA.
ACQUIRER
PED MESSAGES.

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 6 of 33
FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0

COMMERCIAL IN CONFIDENCE Date: 22/04/04

1. Introduction

This document is the interface specification (IS) between Post Office Limited and
Fujitsu Services for the delivery of EMV PIN Pad reference data for Retail.

The document production has been authorised under Change Work Package 172.
Other related change documents are

e CRO00113 — Provision of support from FS in the Development of an ‘AIS’ for
Type C reference data for Banking II

e CP3657 — Development of ‘AIS’ for Type C reference data for EMV

Retail PIN Pad reference data is divided into two parts for the purposes of change
management: -

e Reference data that is agreed as part of the EMV implementation at S70 and
that is not considered to be subject to subsequent business change. It may be
changed only through a change request.

e Reference data that is subject to regular business change and, therefore,
changes to it must be supported under the operational business change (OBC)
process.

This document is concerned primarily with defining the scope, format and delivery
process for the reference data changes that are supported by OBC.

For completeness, Appendix A of the document defines the PIN Pad reference data
that is outside the scope of OBC.

2. Scope

The document defines the reference data that is to be supplied by Post office Limited
to support the Hypercom Financial Terminal (HFT) for Retail.

The document consists of
e Section 3 provides an overview of Hypercom PIN Pad reference data.

e Section 4 identifies the new OBC events and provides estimates of volumes for
each event.

e Section 5 defines the PIN Pad reference data to be supplied by Post Office Ltd
under OBC.

e Appendix A defines the PIN pad reference data that is out of scope for OBC.

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 7 of 33
FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0

COMMERCIAL IN CONFIDENCE Date: 22/04/04

3. Hypercom PIN Pad Reference Data
3.1 Data Tables

Hypercom PIN Pad reference data consists of a number of data tables. The full set
of tables is as follows: -

Table Name Description

General This table contains only one entry that defines
data applicable to the Retail application. This
consists of attributes such as country code,
currency terminal capabilities, floor and ceiling
limits

Acquirer This table contains an entry for each acquirer. It
defines attributes such as acquirer identifier,
acquirer facilities, acquirer floor and ceiling limits
Card Scheme This table contains an entry for each card scheme.
It defines attributes such as issuer identifier and
name, card element positions, scheme floor limit
and terminal action codes.

lIN This table contains an entry for each IIN range. It
defines low and high range value, PAN length and
whether the IIN is for debit or credit cards

AID This table contains an entry for each ICC
application that is supported. It defines the
application identifier, application versions
supported and application controls. It contains the
key to each of the application data object tables —
TDOL, DDOL, Additional Data

TDOL This is the Application Transaction Certificate Data
Object List. It contains an entry for each ICC
application that uses TDOLs.

DDOL This is the Application Dynamic Data
Authentication Object List It contains an entry for
each ICC application that uses DDOLs.

Additional Data This table contains lists of additional data tags that
are to be applied to card schemes for the
associated application. It contains an entry for
each ICC application that uses Additional Data.

Public Key This table contains public keys for each registered
application provider (RID)
Public Key Revocation This table contains public key revocations for

registered application provider (RID)

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 8 of 33
FUJ00001884

FUJ00001884
Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0
COMMERCIAL IN CONFIDENCE Date: 22/04/04

Hot card This table contains a list of hot cards — not used
PIN Bypass This table contains a list of countries for which

cards can opt out of PIN entry
EPOS Messages This table contains screen message definitions

and PIN Pad message definitions - not used
PED Messages This table contains PIN entry screen message

definitions.

3.2 Data Table Relationships

3.2.1 Overview

The following data tables are stand-alone with no data relationship to other tables: -

General
PIN Bypass
PED Messages

The Acquirer, Card Scheme and IIN tables are a hierarchy with an Acquirer having
one or more Card Schemes and each Card Scheme having one or more IIN.

RID (Registered Application Provider Identifier) is the ICC application provider and
the owner of all Public Keys for the application. RID is not a data table in its own right -
the RID is the first part of the AID (Application identifier)

Public Keys may be revoked by Public Key Revocations. An AID may have a
supporting TDOL, DDOL and Additional Data

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 9 of 33
FUJ00001884

FUJ00001884
Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0
COMMERCIAL IN CONFIDENCE Date: 22/04/04
3.2.2 Table Relationship Model
General PIN PED
Bypass Message
Acquirer RID Owns Public
Key
se he Is revoked by
Card AID Public Key
Scheme Revocation
Includes Utes
IIN
DDOL TDOL Additional
Data

3.3 Change Control

The following tables are subject to OBC: -

Card Scheme
IIN

AID

TDOL

DDOL
Additional Data
Public Key

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE

Page: 10 of 33
Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Versi 1.0

COMMERCIAL IN CONFIDENCE Date: 22/04/04

FUJ00001884
FUJ00001884

Public Key Revocation
PIN Bypass
The following tables are outside the scope of OBC: -

General
Acquirer
PED Messages

Any changes to these tables must be supported by a change request.

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 11 of 33
Fujitsu Services

Post Office Ltd to Fujitsu Services Interface Ref:

RD/IFS/037

Specification for EMV Retail PIN Pad Reference

Data

COMMERCIAL IN CONFIDENCE

Version: 1.0

Date: 22/04/04

4. OBC Events

The following table identifies OBC events that will involve a change to the PIN Pad
reference data and identifies the PIN pad data tables that are potentially impacted: -

No

Event

Tables Impacted

Y = Impact, P = Potential Impact

1

New Card Scheme

Card Scheme (Y)

TIN (Y)

AID (P)

TDOL (P)

DDOL (P)

Additional Data (P)

Pubic Key (P)

Public Key Revocation (P)
PIN Bypass (P)

Change of Card Scheme Limits /
Processing Rules

Card Scheme (Y)

Termination of Card Scheme

Card Scheme (Y)

TIN (Y)

AID (P)

TDOL (P)

DDOL (P)

Additional Data (P)

Pubic Key (P)

Public Key Revocation (P)
PIN Bypass (P)

New IIN Range

IN (Y)

ala

Change to Existing IIN Range

TIN (Y)

Change of Issuer for an_IIN Range

TIN (Y)

Termination of an ITN Range

TIN (¥)

alata

New Application

AID (Y)

TDOL (P)

DDOL (P)

Additional Data (P)

Pubic Key (P)

Public Key Revocation (P)

Change to Application Controls

AID (Y)

Introduction of Additional Data for an
Application

AID (Y)
Additional Data (Y)

Change to Existing Additional Data for an
Application

Additional Data (Y)

12

Removal of Additional Data for an

AID (Y)

© 2004 Fujitsu Services

COMMERCIAL IN CONFIDENCE

Page: 12 of 33

FUJ00001884
FUJ00001884

Fujitsu Services

Post Office Ltd to Fujitsu Services Interface Ref:

Specification for EMV Retail PIN Pad Reference

Data

COMMERCIAL IN CONFIDENCE

RD/IFS/037
Version: 1.0
Date: 22/04/04

FUJ00001884
FUJ00001884

Application Additional Data (Y)
13 Introduction of TDOL for an Application I AID (Y)
TDOL (Y)
14 Change to Existing TDOL for an TDOL (Y)
Application
15 Removal of TDOL for an Application AID (Y)
TDOL (Y)
16 Introduction of DDOL for an Application I AID (Y)
DDOL (Y)
17 Change to Existing DDOL for an DDOL (Y)
Application
18 Removal of DDOL for an Application AID (Y)
DDOL (Y)
19 New Application Version AID (Y)
20 Removal of Application Version AID (Y)
21 Removal of Application AID (Y)
22 New Public Key Pubic Key (Y)
23 Removal of Public Key Pubic Key (Y)
24 Revocation of Public Key Public Key Revocation (Y)
25 Removal of Public Key Revocation Public Key Revocation (Y)
26 Addition of PIN Bypass Countr PIN Bypass (Y)
27 Removal of PIN Bypass Country PIN Bypass (Y)

© 2004 Fujitsu Services

COMMERCIAL IN CONFIDENCE

Page: 13 of 33
FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0
COMMERCIAL IN CONFIDENCE Date: 22/04/04
The annual volume of change is estimated as follow: -
Annual
Event Volume
1 New Card Scheme 1
2 Change of Card Scheme Limits / Processing Rules 1
3 Termination of Card Scheme 1
4 New IIN Range 4
5 Change to Existing ITN Range 2
6 Change of Issuer for an_IIN Range 2
7 Termination of an IIN Range 2
8 New Application 1
9 Change to Application Controls 0.5
10 Introduction of Additional Data for an Application 0.5
11 Change to Existing Additional Data for an 0.5
Application
12 Removal of Additional Data for an Application 0.5
13 Introduction of TDOL for an Application 0.5
14 Change to Existing TDOL for an Application 0.5
15 Removal of TDOL for an Application 0.5
16 Introduction of DDOL for an Application 0.5
17 Change to Existing DDOL for an Application 0.5
18 Removal of DDOL for an Application 0.5
19 New Application Version 0.5
20 Removal of Application Version 0.5
21 New Public Keys 2
22 Removal of Public Keys 2
23 Revocation of Public Keys 2
24 Addition of PIN Bypass Country 1
25 Removal of PIN Bypass Countr 1

The new OBC events are to be added to the OBC catalogue Ref [3] and [4]

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE

Page: 14 of 33
FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0

COMMERCIAL IN CONFIDENCE Date: 22/04/04

5. PIN Pad Reference Data Delivery under OBC

5.1 Delivery Process

Based on the estimated low volume of change the cost of developing an automated
interface between Post Office Ltd and Fujitsu services is not considered justified.
Instead, Post Office Ltd will provide details of PIN Pad reference data changes to
Fujitsu Services in document form.

Post Office Ltd will provide Fujitsu Services with advance notification of an OBC -
meeting the appropriate lead times as required for the actual OBC event. Post Office
Ltd will liaise with the Financial Institution(s) (Fl) to obtain documentation of the
required reference data changes. Post Office Ltd will then supplement the FI
documentation with documentation of any further data definition that is required to
provide the complete set of PIN Pad reference data to support the OBC. The
documentation will specify the OBC reference that the reference data change applies
to and will provide complete details, as defined in this interface specification, of all
reference data table entries that are new, changed or are to be deleted.

The full change documentation will then be delivered to the Fujitsu Services
Reference Data Team (RDT). The document will be emailed to RDT.
5.2. Definition of Data Types

The following table defines the data types used within the Hypercom PIN Pad
reference data for field format definitions: -

Data Type I Description
AN Alphanumeric ASCII characters including space
N Numeric ASCH characters.
HEX Hexadecimal — some PIN Pad reference data (e.g.

Public Keys) is in Binary. However, it is to be
delivered in HEX and then converted to Binary
prior to loading to the PIN Pad. Character set is 0-
9,A-F

DATE Date and time in format © DD/MON/CCYY
HH24:MI:SS

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 15 of 33
Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref:
Specification for EMV Retail PIN Pad Reference
Data
Version:
COMMERCIAL IN CONFIDENCE Date:

RD/IFS/037

1.0
22/04/04

FUJ00001884
FUJ00001884

5.3 Data Definition
5.3.1 OBC Definition

An OBC header document identifies the OBC change, specifies the effective date of

the change and identifies the PIN Pad data tables that are affected by the change.

Data? Y orN

Field Name Description Format
(Size)

OBC Ref Operational Business Change AN(20)
Reference

OBC Effective Date The date on which the OBC change is DATE
to become effective

Card Scheme Impact Is there a change to the Card Scheme AN(1)
Data? Y orN

IIN Impact Is there a change to the IIN Data? Y AN(1)
or N

AID Impact Is there a change to the AID Data? Y AN(1)
orN

TDOL Impact Is there a change to the TDOL Data ? AN(1)
Y orN

DDOL Impact Is there a change to the DDOL Data ? AN(1)
Y orN

Additional Data Impact I Is there a change to the Additional AN(1)
Data? Y orN

Public Key Impact Is there a change to the Public Key AN(1)
Data? Y or N

Public Key Revocation Is there a change to the Public Key AN(1)

Impact Revocation Data? Y or N

PIN Bypass Impact Ts there a change to the PIN Bypass AN(1)

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE

Page: 16 of 33
FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0
COMMERCIAL IN CONFIDENCE Date: 22/04/04

5.3.2. PIN Pad Data Definition by Table

5.3.2.1 Card Scheme Table

This table contains an entry for each issuer card scheme for each acquirer. Because
the table contains attributes that are at the POL RDS bank card level, the table entries
will correspond to Bank Card within the POL RDS system rather than to Issuer
Scheme. Initial volume estimate is 5 entries. Maximum volume is 99 entries.

The OBC documentation will provide details of all table entries that are to be created,
amended or deleted.

Field Name Description Format I Comments
(Size)
Action Create, Amend or AN(1)_ I Set to C, Aor D
Delete
Issuer Id Unique Issuer Identifier N(3) Set to POL RDS
Bank_card_id for
Issuer
Issuer Name Name of issuer AN(16) I Set to abbreviated
POL RDS
Bank_card_name for
Issuer
Issue Number Position Position of start sentinel N(2) Not used — set to Zero
to Issue Number
Issue Number Length Length of Issue Number N() Not used — set to Zero
Start Date Position Position of start sentinel N(2) I Not used — set to Zero
to Start Date
Start Date Format Format of Start Date AN(1)_ I Not used — set to ‘M’
(MMYY or YYMM) (MMYY)
Service Code Checking Service Code checking N() Not used — set to Zero
requirement
Expiry Date Position Expiry Date checking N(2) I Not used — set to 20
requirement and Expiry (No Expiry Date)
Date position
Facilities Code APACS Facilities Code N(3) Set to 7 (Payment
Authorisation, Cheque
Guarantee and Cash
Advance)
Acquirer ID Unique Identifier of N(2) Set to I for Streamline

© 2004 Fujitsu Services

COMMERCIAL IN CONFIDENCE

Page: 17 of 33
Fujitsu Services

Post Office Ltd to Fujitsu Services Interface

Ref:

Specification for EMV Retail PIN Pad Reference

Data

COMMERCIAL IN CONFIDENCE

Version:

Date:

FUJ00001884
FUJ00001884

RD/IFS/037

1.0
22/04/04

Acquirer

Floor Limit / Luhn Check

Floor limit and Luhn
check requirements

N()

Set to 2 (Floor Limit
and Luhn Check not
operative)

Floor Limit

Floor Limit

N(2)

Set to Zero

Terminal Action Codes —
Denial

Specifies the acquirer’s
conditions that cause
the denial of a
transaction without
attempt to go online

HEX(10)

Terminal Action Codes —
Online

Specifies the acquirer’s
conditions that cause a
transaction to be
transmitted online

HEX(10)

Terminal Action Codes —
Default

Specifies the acquirer’s
conditions that cause a
transaction to be
rejected if it might have
been approved online,
but the terminal is
unable to process the
transaction online

HEX(10)

Target Percentage

Target percentage used
in terminal risk
management for random
transaction selection

N(2)

Set to Zero

Maximum Target
Percentage

Maximum target
percentage used in
terminal risk
management for random
transaction selection

NQ)

Set to Zero

Threshold Value

Threshold value used in
terminal risk
management for random
transaction selection

N(12)

Set to Zero

Card Scheme Control
Byte

Card Security Check

HEX(2)

Set to ‘08’ for
Mastercard and to
“00° for all others

© 2004 Fujitsu Services

COMMERCIAL IN CONFIDENCE

Page: 18 of 33
FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0

COMMERCIAL IN CONFIDENCE Date: 22/04/04

5.3.2.2 IIN Table

This table is a child table of the Card Scheme. It contains an entry for each IIN range
for each card scheme — defining low and high range value, PAN length and whether
the IIN is for debit or credit cards. The table entry level corresponds to IIN Range
within the POL RDS system. Initial volume estimate is 75 entries. Maximum volume is
150 entries.

The OBC documentation will provide details of all table entries that are to be created,
amended or deleted.

Field Name Description Format I Comments
Action Create, Amend or AN(1) I Set toC, Aor D
Delete
IIN Id Unique identifier for IIN N(3) Set to POL RDS
IIN_Id
Issuer Id Unique Issuer Identifier N(3) Set to POL RDS

Bank_card_id for
Issuer. Must exist as
an Issuer Id in the
Card Scheme table

IIN Low Lowest IIN Range N(10) Set to POL RDS
Prefix TIN_start_value
IIN High Highest ITN Range N(10) I Set to POL RDS
Prefix IIN_END_ value
PAN Length Length of PAN N(2) Set to POL RDS
Element_length for
Bank Card Element
PAN
Debit / Credit IIN Range I Whether debit or credit AN(1)_ I Set to D (Debit)
card?

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 19 of 33
Fujitsu Services

Post Office Ltd to Fujitsu Services Interface Ref:

Specification for EMV Retail PIN Pad Reference

Data

COMMERCIAL IN CONFIDENCE

FUJ00001884
FUJ00001884

RD/IFS/037

Version: 1.0

Date:

22/04/04

5.3.2.3 AID Table

This table defines the ICC applications that are supported. It defines the application
versions supported and application controls. Initial volume estimate is 5 entries.
Maximum volume is 10 entries.

The OBC documentation will provide details of all table entries that are to be created,

amended or deleted.

numbers — up to 10 with
each defined in 4 HEX
characters

Field Name Description Format I Comments
Action Create, Amend or AN(1)_ I Set toC, Aor D
Delete
AID Application Identifier. AN(16)
The first 10 characters
is the RID
AID Length Length of AID N(2)
Control Bitmap indicating HEX(2)
optional features
supported by the AID
Number of Application Number of versions N(2)
Versions following (0 to 10)
Application Versions Application version HEX(40)

© 2004 Fujitsu Services

COMMERCIAL IN CONFIDENCE

Page: 20 of 33
Fujitsu Services

Post Office Ltd to Fujitsu Services Interface Ref:

Specification for EMV Retail PIN Pad Reference

Data

COMMERCIAL IN CONFIDENCE

FUJ00001884
FUJ00001884

RD/IFS/037

Version: 1.0

Date:

22/04/04

5.3.2.4 TDOL Table

This is the Application Transaction Certificate Data Object List used for card
authentication. Initial volume estimate is 5 entries. Maximum volume is 10 entries.

The OBC documentation will provide details of all table entries that are to be created,

amended or deleted.

Field Name Description Format I Comments
Action Create, Amend or AN(1)_ I Set toC, A or D
Delete
AID Application Identifier. AN(16)
The first 10 characters
is the RID
TDOL Length Length of TDOL data N(3)
object list in characters
(Not HEX) (1 to 252)
TDOL Data object list HEX(S504)

© 2004 Fujitsu Services

COMMERCIAL IN CONFIDENCE

Page: 21 of 33
Fujitsu Services

Post Office Ltd to Fujitsu Services Interface Ref:

Specification for EMV Retail PIN Pad Reference

Data

COMMERCIAL IN CONFIDENCE

FUJ00001884
FUJ00001884

RD/IFS/037

Version: 1.0

Date:

22/04/04

5.3.2.5 DDOL Table

This is the Application Dynamic Data Authentication Object List used for card
authentication. Initial volume estimate is 5 entries. Maximum volume is 10 entries.

The OBC documentation will provide details of all table entries that are to be created,

amended or deleted.

Field Name Description Format I Comments
Action Create, Amend or AN(1)_ I Set toC, A or D
Delete
AID Application Identifier. AN(16)
The first 10 characters
is the RID
DDOL Length Length of DDOL data N(3)
object list in characters
(Not HEX) (1 to 252)
DDOL Data object list HEX(S504)

© 2004 Fujitsu Services

COMMERCIAL IN CONFIDENCE

Page: 22 of 33
FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0

COMMERCIAL IN CONFIDENCE Date: 22/04/04

5.3.2.6 Additional Data Table

This table contains application additional data tags. Initial volume estimate is 1 entry.
Maximum volume is 10 entries.

The OBC documentation will provide details of all table entries that are to be created,
amended or deleted.

Field Name Description Format I Comments
Action Create, Amend or AN(1)_ I Set toC, A or D
Delete
AID Application Identifier. AN(16)
The first 10 characters
is the RID
Length Length of additional N(3)
data tags in characters
(Not HEX) (1 to 128)
Tag Definitions Additional data tags HEX(256)
definitions

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 23 of 33
FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0

COMMERCIAL IN CONFIDENCE Date: 22/04/04

5.3.2.7 Public Key Table

This table contains public keys for each registered application provider (RID). Initial
volume estimate is 30 entries. Maximum volume is 60 entries.

The OBC documentation will provide details of all table entries that are to be created,
amended or deleted.

Field Name Description Format I Comments
Action Create, Amend or AN(1)_ I Set toC, A or D
Delete
Key Index Index of Public Key HEX(2)
Key Length Length of Public Key (1 N(3)
to 248)
Key Certification Authority I HEX(496)
Public Key
RID Registered Application AN(10)
Provider Identifier
Exponent Certification Authority HEX(2)
Public Key Exponent
value
Hash Calculated Hash Value HEX(40)
Expiry Date Expiry date in format AN(6)
YYMMDD

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 24 of 33
Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref:

Specification for EMV Retail PIN Pad Reference

Data

COMMERCIAL IN CONFIDENCE

Versi
Date:

FUJ00001884
FUJ00001884

RD/IFS/037

1.0
22/04/04

5.3.2.8 Public Key Revocation

This table contains public key revocations for registered application provider (RID).
Initial volume estimate is zero. Maximum volume is 60 entries.

The OBC documentation will provide details of all table entries that are to be created,

amended or deleted.

Field Name Description Format I Comments
Action Create, Amend or AN(1)_ I Set toC, A or D
Delete
RID Registered Application AN(10)
Provider Identifier
Key Index Index of Public Key HEX(2)
Serial Number Certificate serial number I HEX(6)
of the issuer public ke

© 2004 Fujitsu Services

COMMERCIAL IN CONFIDENCE

Page: 25 of 33
FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0

COMMERCIAL IN CONFIDENCE Date: 22/04/04

5.3.2.9 PIN Bypass by Country Table

This table provides the ‘opt out of PIN entry’ facility to UK and foreign cards in order to
cater for countries that are in the transition phase from magnetic stripe and signature
to chip and PIN. Initial volume estimate is 1 entry. Maximum volume is 999 entries.

The OBC documentation will provide details of all table entries that are to be created,
amended or deleted.

Field Name Description Format I Comments

Action Create, Amend or AN(1)_ I Set to C, A or D
Delete

Country Code Numeric Country Code N(3) Set to 826 for UK

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 26 of 33
Fujitsu Services Post Office Ltd to Fujitsu Services Interface
Specification for EMV Retail PIN Pad Reference

Data

COMMERCIAL IN CONFIDENCE

Ref: RD/IFS/037

Version: 1.0
Date: 22/04/04

FUJ00001884
FUJ00001884

Appendix A

PIN Pad Reference Data outside OBC

General Data

This table contains only one entry that defines data applicable to the Retail
application. This consists of attributes such as country code, currency terminal
capabilities, floor and ceiling limits

and security
capabilities of the
terminal

Field Name Description Format I Values
(Size)
Terminal Identifier I Unique identifier for AN(8) Set to ‘1’ (static
each merchant device value - not
significant)
Application Version I OTA application AN(2) I Set to ‘I’ (static
Number version number value — not
significant)
Terminal Country Country location N(3) Set to 826 (United
Code Kingdom)
Transaction Currency supported N(3) Set to 826 (Sterling)
Currency Code
Transaction Currency Symbol HEX(2) I Set to ‘9C’ (£)
Currency Symbol
Transaction Position of Decimal N(1) Set to 2
Currency Exponent I Place
Transaction Decimal Place HEX(2) I Set to “2E” (decimal
Currency Character point)
Placeholder
Merchant Category I Merchant type AN(2) I Set to “01”
Code
Merchant Identity Unique identifier for AN(15) I Set to ‘1’ (static
merchant location value - not
significant)
Terminal Indicates the card HEX(6) I Specified by EMV
Capabilities data input, CVM, Level 2 certification

© 2004 Fujitsu Services

COMMERCIAL IN CONFIDENCE

Page: 27 of 33
FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref:

Specification for EMV Retail PIN Pad Reference

RD/IFS/037

Data

COMMERCIAL IN CONFIDENCE

Version: 1.0

Date: 22/04/04

Additional Terminal I Indicates transaction I HEX(10) I Specified by EMV
Capabilities type, terminal data Level 2 certification
input, terminal data
output capabilities
Terminal Type Indicates the N(2) Set to 22 (Offline
environment of the with Online
terminal, its capabilities)
communications
capability, and its
operational control
Additional Operator card HEX(2) I Set to “01”
Hardware reader or (Customer Card
Definition Customer card Reader)
reader
Terminal Floor Terminal floor limit N(12) Set to Zero
Limit (in lowest
denomination)
Terminal Ceiling Terminal ceiling N(12) Set to 9999999
Limit limit (in lowest
denomination)
Unsolicited Card Action on AN(1) Set to “S” (Store
Read unsolicited card read track data in buffer)
EMV Version Version of EMV NC) Set to 2 (Version
application 4.0)
MSR Level Level of magnetic N() Set to 0 (Application
stripe reader usage in EPOS)
Card Misreads Number of card N() Set to 3
insertion attempts
allowed before
falling back to MSR
EMV Level 2 Test EMV Level 2 Type HEX(2) I Set to “08” (Stops

Approval Test
Requirements

quick method for
checking of pre-valid
/ expired cards)

© 2004 Fujitsu Services

COMMERCIAL IN CONFIDENCE

Page: 28 of 33
FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Versi 1.0
COMMERCIAL IN CONFIDENCE Date: 22/04/04

Acquirer

This table contains an entry for each acquirer — defining such as the acquirer name
and merchant identity, acquirer floor and ceiling limits, risk check controls and
excluded card ranges.

Field Name Description Format I Values
(Size)
Acquirer Id Unique Identifier of N(2) Set to 1 (Streamline)
Acquirer
Acquirer Name Name of Acquirer AN(16) I Set to ‘Streamline’
Merchant Identity Unique Merchant AN(15) I Set to ‘1’ (static
Identifier for value - not
Acquirer significant)
Facilities Code APACS Facilities N(3) Set to 7 (Payment
Code Authorisation,
Cheque Guarantee
and Cash Advance)
Floor Limit Floor limit and Luhn N(1) Set to 2 = Floor
Indicator check requirements Limit and Luhn
Check not operative
Pre-Comms Floor Pre communication N(12) Set to Zero
Limit floor limit
Post-Comms Floor I Raised floor limit N(12) Set to Zero
Limit imposed if
communications
attempt fails
Cash Pre-Comms Pre communication N(12) I Set to Zero
Floor Limit floor limit on cash
component of
transaction
Cash Ceiling Limit I Maximum value for N(12) Set to Zero
cash component of
transaction

© 2004 Fujitsu Services

COMMERCIAL IN CONFIDENCE

Page: 29 of 33

FUJ00001884
FUJ00001884

Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Version: 1.0
COMMERCIAL IN CONFIDENCE Date: 22/04/04
Offline Count Force online N(2) Set to Zero
authorisation when
number of
transactions greater
than count
Ceiling Limit Check I Ceiling limit check N(1) Set to Zero (Ignore)
required
Ceiling Limit Value I Maximum value (in N(12) Set to Zero
pence)
Exclusion Band Lower boundary of N(12) Set to Zero
lower Limit exclusion limit
Exclusion Band. Upper boundary of N(12) I Set to Zero
Upper Limit exclusion limit
Excluded Card PAN ranges not to AN(20) I Not used
Ranges be included
Cash Advance Limit I Maximum amount of N(12) Set to Zero

cash that can be
obtained

© 2004 Fujitsu Services

COMMERCIAL IN CONFIDENCE

Page: 30 of 33
Fujitsu Services Post Office Ltd to Fujitsu Services Interface Ref: RD/IFS/037
Specification for EMV Retail PIN Pad Reference
Data
Versi 1.0

COMMERCIAL IN CONFIDENCE Date: 22/04/04

FUJ00001884
FUJ00001884

PED Messages

This table contains PIN entry screen message definitions.
The content of this table is defined in REF [9].

© 2004 Fujitsu Services COMMERCIAL IN CONFIDENCE Page: 31 of 33