VIS_140_Updates

VIS 1.4.0 Corrections Published 1 November 2001 Visa Public 1 Updated 30 November 2003 Integrated Circuit Card Specification (VIS) 1.4.0 Corrections This document provides corrections to VIS 1.4.0. The following columns are in the corrections table: This document provides corrections to VIS 1.4.0. The following columns are in the corrections table: · Date—This column indicates the date when the applied change to the document was approved for posting to visa.com. Items dated Oct. 2001 have been applied to VIS 1.4.0 and are listed in a separate table following the table of items dated November 2001 and after. Items dated November 2001 and later have not been incorporated into VIS 1.4.0 published hard copy or electronic documents. · Volume—This column indicates the appropriate volume of VIS where the correction is needed. · Chapter/Page—This column details the chapter and page of the change. · Location—This column assists you in locating the specific area on the page that requires a correction. · Description—This column describes the correction. · Effective Date / Update Type — This column will be used for changes dated July 2003 or later to describe the type of update: - Change (Mandatory, Conditional, Optional) - Addition (Mandatory, Conditional, Optional) - Clarification If the type is Change/Addition a date will indicate when the change/addition is effective from a Visa Card Testing Perspective. For new cards to be tested: - Mandatory changes must be in place by the effective date. - Conditional changes must be in place by the effective date if the condition is met. - Testing will be available for the optional changes as of the effective date. VIS 1.4.0 Corrections Published 1 November 2001 Visa Public 2 Updated 30 November 2003 Date Vol. Chapter/ Page Location Description Effective Date / Update Type Nov. 2003 All Impacts Summary 1.6.2.1 Card Impacts - Mandatory Cumulative Amounts are no longer incremented for offline declines. Online Authorization Indicator is not reset after an offline approval. Testing for VIS 1.3.2 is no longer supported. VIS 1.4.0 behavior is required for both of the data elements listed above. Change - Mandatory 02/01/04 Nov. 2003 All Impacts Summary 1.6.2.2 Card Impacts – Optional Second to last bullet should be moved to 1.6.2.1 and the following sentence added. ‘Support for this bit is Conditional and must be supported in all cards that support Issuer Script Processing.’ Change – Conditional (if Issuer Script Processing supported) 02/01/04 Dec. 2002 All 1-13 Add section 1.7.4 with title Other Documents Add document: Federal Information Processing Standards Publication (FIPS) 46-3, 1999 October 25 May 2002 All Combined DDA/AC Generation (CDA) has been modified by EMV since VIS was published. CDA functionality, if implemented, shall be supported according the latest EMV requirements. See EMV Specifications Updates Bulletins #6 and #9 and #13 May 2002 All 1-10 Section 1.7.1 Update ISO 639 reference as follows in accordance with EMV Specifications Updates Bulletin # 5. ISO/FDIS 639-1: 2001 Codes for the Representation of Names and Languages (Alpha-2 code) May 2002 Appl. 2-9 Table 2-2 Last function on page In the Terminal Support Column, (across from the first bullet in the function column, ‘No CVM Required’) Replace Mandatory (EMV) with Optional (EMV) with Operating Regulation Exceptions (VIS) May 2002 Appl. 2-11 Last Item – PIN CHANGE/ UNBLOCK In the Terminal Support Column, ‘Performed at special issuer-controlled devices’ should be re-located in the column and appear next to PIN Change rather than Unblocking PIN May 2002 Appl. 6-3 Section 6.1.2.2 first paragraph Final sentence should say ‘The Visa CA returns an Issuer PK Certificate for each Visa CA Public Key that is equal to or longer than . . .’ VIS 1.4.0 Corrections Published 1 November 2001 Visa Public 3 Updated 30 November 2003 Date Vol. Chapter/ Page Location Description Effective Date / Update Type Begin Card Changes Nov. 2003 Card 1-1 Last paragraph Replace the last paragraph with: VIS is based on EMV and complies with all requirements in the EMV Specifications and in the EMV Bulletins published on the EMVCo website. The two specifications and any updates reflected in EMV Bulletins or the VIS Updates List should be used together for reference and development purposes. EMV General Bulletin 11 is a migration schedule, which describes terminals supporting 3 volts only being deployed as of Quarter 2, 2009. In order to ensure interoperability, cards will be required to support 3 volts as well as 5 volts beginning in July of 2004. Rules for support are outlined in EMV Specifications Updates Bulletin no. 07. VIS builds on the EMV requirements in order to support the Visa payment service rules. To facilitate understanding of the differences between these two specifications, please refer to Chapter 2, Processing Overview. Change – Mandatory 7/01/04 May 2002 Card 2-10 Under PIN CHANGE/ UNBLOCK Unblocking PINñ should be Conditional if Offline PIN supported, not Optional. Jul. 2003 Card 3-2 Table 3-1 Row 1 Add the following note at the end of the Description for the Application Identifier (AID): The AID is used in two different ways 1. AID (Tag 4F) is used if Directory Selection is supported. 2. Dedicated File (DF) Name (TAG ‘84’), part of the response to SELECT when an Application Definition File is selected contains the AID. Clarification Dec. 2002 Card 3-2 Table 3-1 999910 Proprietary ATM is not permitted going forward and should be deleted from the list of supported Visa PIXs. Dec. 2002 Card 3-11 Section 3.5 Note Add the following sentence: Single account cards shall not require cardholder confirmation. Nov. 2003 Card 3-11 Section 3.5 Note Add the following sentence: On a multi-payment card, the primary application (account which corresponds to the account encoded on the magnetic stripe) shall not require cardholder confirmation. Change - Mandatory 02/01/04 VIS 1.4.0 Corrections Published 1 November 2001 Visa Public 4 Updated 30 November 2003 Date Vol. Chapter/ Page Location Description Effective Date / Update Type Aug. 2002 Card 3-13 Figure 3-3 On the terminal side, in the first decision diamond, replace ‘More AIDs on list?’ with ‘More applications to select?’ Aug. 2002 Card 6-8 Table 6-2 Add to bulleted list of recommended inclusions for signature generations: · SDA Tag List (9F4A – if present) May 2002 Card 7-5 Table 7-3 Add the following note after the table: In Application Usage Control, the indicators for Valid for Domestic Goods and Valid for Domestic Services must be the same setting. Valid for International Goods and Valid for International Services must be the same setting. Dec. 2002 Card 8-12 Second sub- bullet under 3rd bullet Insert the following sentence before the Iast sentence in the paragraph: If the application is blocked by this method the card shall respond to GENERATE AC (Application Cryptogram) with an AAC. Dec. 2002 Card Chapter 12 Visa recently provided the ability for the card application to return offline amounts in the Issuer Discretionary Data portion of the Issuer Application Data. For vendors that wish to implement this functionality, a specification will be made available through your regional representatives. The contents of this document will be included in the next version of VIS, in Chapter 12 of the card volume. Aug. 2002 Card 13-7 Section 13.3 The second to last line of the last paragraph should say Issuer Application Data rather than Issuer Discretionary Data. Jul. 2003 Card 13-11 Section 13.6.2 Byte 1 Bit 6 of the Application Default Action (ADA) is reserved for future use and the associated functionality is no longer supported. The last sub-bullets under each main bullet (Card Approves, Card Declines) should be removed. Clarification May 2002 Card 13-13 Section 13.6.2.1 In step 3b add a bullet saying ‘If VLP is supported, set the VLP Available Funds to the VLP Funds Limit’ VIS 1.4.0 Corrections Published 1 November 2001 Visa Public 5 Updated 30 November 2003 Date Vol. Chapter/ Page Location Description Effective Date / Update Type Nov. 2003 Card 13-17 Add Section 13.7.1.6 as a new section. Velocity Checking for Consecutive Transaction International Upper Limit This check is optional for the card and determines if the limit set for the maximum number of consecutive offline international transactions (determined by currency or country in the card application) has been exceeded. The card shall perform this check if the Consecutive Transaction International Upper Limit and either the Consecutive Transaction Counter (International) or the Consecutive Transaction Counter (International-Country) are present in an internal file. If the number of consecutive offline international transactions plus 1 is greater than the Consecutive Transaction International Upper Limit, the card shall: · Set the Exceeded Velocity Checking Counters bit to “1” in the CVR · Set the Offline Decline Requested by Card indicator to “1” to indicate that an AAC should be returned after completion of card risk management. Addition – Optional 07/01/04 (see updated description for details) Jul. 2003 Card 13-21 Figure 13-3 Byte 1 Bit 6 of the Application Default Action (ADA) is reserved for future use and the associated functionality is no longer supported. Delete decision box in center page ‘ADA bit for if IA mandatory & no ARPC decline txn =1’, the ‘Y’ and ‘N’ arrows, and Card Decline results off page connector. Extend the arrow from the ‘Set Issuer Auth. Failure Indicator to 1’ to the Card Approval off page connector. Clarification May 2002 Card 13-22 Figure 13-2 Part 3 of 5 Below the large box (center page) titled ‘Reset to zeros’, add a box that says ‘Set the VLP Available Funds to the VLP Funds Limit’ VIS 1.4.0 Corrections Published 1 November 2001 Visa Public 6 Updated 30 November 2003 Date Vol. Chapter/ Page Location Description Effective Date / Update Type Nov. 2003 Card 15-2 Section 15-1 The first paragraph is reworded as follows: Visa and MasterCard support a common personalization methodology defined in the EMV Card Personalization Specification (on EMVCo website). Visa requirements to support Common Personalization in VSDC applications are defined in Common Personalization, Technical Requirements for VSDC currently available through Visa Regional Offices. These requirements are now part of the VIS 1.4.0 specification and will added to the Visa website in the Q1 2004 timeframe. The second paragraph first line is amended as follows: The intended audience for this documentation is designers of EMV Compliant financial applications including VSDC. Addition – Optional 02/01/04 Jul. 2003 Card A-3 Table A-1 For Application Currency Code (Tag 9F51) add ‘VLP or’ after ‘If’ under Requirement column. Clarification Aug. 2002 Card A-4 Table A-1 Define Application Default Action byte 1 bit 6 as RFU Declining a transaction if Issuer Authentication is Mandatory and no ARPC received is no longer permitted. VIS 1.4.0 Corrections Published 1 November 2001 Visa Public 7 Updated 30 November 2003 Date Vol. Chapter/ Page Location Description Effective Date / Update Type Nov. 2003 Card A-4 Table A-1 Application Default Action is modified as follows: F b 32 L 4 Byte 2 Bit - 1 = Do not reset VLP Available Funds during GEN AC. VLP Available Funds is reset to VLP Funds Limit during Issuer Script Processing if PUT DATA to VLP Available Funds Limit is successful. Support for the functionality associated with these bits is optional. This functionality may be required in some markets or for some programs. Byte 2 Bit 2: 1=Do not reset Cumulative Total Transaction Amount (CTTA) to zero during GEN AC. CTTA is reset to zero during Issuer Script Processing if PUT DATA to Cumulative Total Transaction Amount Limit is successful. Support for the functionality associated with these bits is optional. This functionality may be required in some markets or for some programs. Byte 3 Bit 8: 1= Do not include offline approved transactions in the transaction log. Byte 3 Bit 7: 1= Do not include online approved transactions in the transaction log. Byte 3 Bit 6: 1= Include declined transactions in the transaction log. Support for functionality associated with the bits described above is optional if transaction logging is supported. Change – Mandatory change of length to 4. The functionality associated with all bits defined here is Optional. (see updated description for detail) 07/01/04 Jul. 2003 Card A-6 Table A-1 Application Identifier (AID) tag 4F, the requirement column should say ‘C’ indicating conditional and the condition ‘If PSE supported” should be added. Clarification VIS 1.4.0 Corrections Published 1 November 2001 Visa Public 8 Updated 30 November 2003 Date Vol. Chapter/ Page Location Description Effective Date / Update Type Nov. 2003 Card A-9 Table A-1 In Application Transaction Counter (ATC) row, add the following sentence in the Values column: If the ATC reaches its maximum value, the application shall be permanently blocked. · UNBLOCK APPLICATION is disabled · Linked applications are also permanently blocked · Recommended response to GPO when ATC reaches maximum is ‘6985’ which permits another application to be selected. · Response to GENERATE AC is ‘6985’ Change – Mandatory (see description for detail) 07/01/04 Nov. 2003 Card A-9 Table A-1 Add a new row for ‘Available Offline Spending Amount’ F n 12 Tag 9F5D L 6 O Optional The amount remaining on the card to be spent offline. This amount is obtained by subtracting the Cumulative Total Transaction Amount from the Cumulative Total, Transaction Amount Limit. Addition – Optional 02/01/04 Nov. 2003 Card A-16 Table A-1 Add new row for ‘Consecutive Transaction International Upper Limit’ F b 8 Tag 9F5E L 1 REQUIREMENT C If international velocity check upper limit is to be performed DESCRIPTION Issuer specified preference for the maximum number of consecutive offline international transactions allowed before the transaction is declined offline if it cannot be processed online. Addition – Conditional (if this upper limit check is supported) 02/01/04 VIS 1.4.0 Corrections Published 1 November 2001 Visa Public 9 Updated 30 November 2003 Date Vol. Chapter/ Page Location Description Effective Date / Update Type Aug. 2002 Card A-24 Table A-1 ICC Manufacturer is required (R) not mandatory (M) Aug. 2002 Card A-26 Table A-1 IC Embedding Data is required (R) not mandatory (M) Aug. 2002 Card A-27, A- 28 and A- 29 Table A-1 All data elements listed on these pages are required (R) not mandatory (M) Aug. 2002 Card A-30 Table A-1 IC Serial Number and IC Type are required (R) not mandatory (M) Jul. 2003 Card A-31 Table A-1 Issuer Application Data Replace last paragraph under description column with: In this version of VIS, Issuer Discretionary Data can only be guaranteed to be present in certain national markets. Its presence is not guaranteed in international interchange. Clarification Jul. 2003 Card A-35 Table A-1 For Language Preference change description after the initial comma as follows: ‘each represented by 2 lower case alphabetical characters according to ISO 639.’ Clarification Jul. 2003 Card A-38 Table A-1 Second row, PIN Try Counter - Replace the first sentence under Values with ‘Initial Value is personalized to an Issuer defined value’ Third row, PIN Try Limit – add under Values ‘Initial Value is set to the value personalized in the PIN Try Counter. Clarification Aug. 2002 Card A-42 Table A-1 Unique DEA Key A and Unique DEA Key B are required (R) not mandatory (M). Nov. 2003 Card A-46 Table A-2 For Application Currency Code (Tag 9F51) add 33 (VLP Supported) to list of Conditions Change – Conditional (if VLP supported) 02/01/04 Jul. 2003 Card A-46 Table A-2 Application Currency Exponent is Optional NOT Conditional. Clarification Jul. 2003 Card A-47 Table A-2 Application Interchange Profile is Required NOT Mandatory. Clarification VIS 1.4.0 Corrections Published 1 November 2001 Visa Public 10 Updated 30 November 2003 Date Vol. Chapter/ Page Location Description Effective Date / Update Type Nov. 2003 Card A-47 Table A-2 Add row for ‘Available Offline Spending Amount’ Tag 9F5D Mand/Cond/Opt O Update N Retrieve GET DATA NOTE: The card shall not allow GET DATA for this tag unless it is included in the personalization file with a value of ‘01’. If this tag is personalized with a value of ‘02’ the card shall allow GET DATA for this Tag, but only after a PIN has been entered and successfully verified. Addition – Optional 02/01/04 Jul. 2003 Card A-47 Table A-2 First row AID, the Mand/Cond/Opt column should say ‘C’ indicating conditional and condition ‘11’ Directory Method supported should be added in the conditions column. Clarification Nov. 2003 Card A-49 Table A-2 Add Row for ‘Consecutive Transaction International Upper Limit’ Tag 9F5E Mand/Cond/Opt C Conditions 34 Update PUT DATA Retrieve GET DATA Addition – Conditional (if this upper limit check is supported) 02/01/04 May 2002 Card A-50 Table A-2 The second Item ‘Cumulative Total Transaction Amount-Dual Currency’ is modified as follows: The column Mand/Cond/Opt should be ‘C’ not ‘C3’. The column Conditions should be 3 and ‘Backup or default to 9F75’ should be moved to the Backup Required column and the N in that column should be deleted. Dec. 2002 Card A-50 A-60 Table A-2 and A-4 Corrected tag for Directory Definition File Name (DDF) to be 9D Dec. 2002 Card A-57 Table A-2 The capability to return the VLP Available Funds in the GENERATE AC response is optional. VIS 1.4.0 Corrections Published 1 November 2001 Visa Public 11 Updated 30 November 2003 Date Vol. Chapter/ Page Location Description Effective Date / Update Type Nov. 2003 Card A-59 Table A-3 Add a row for Code 34 with Description ‘If Consecutive Transaction International Upper Limit is supported’ Change – Conditional (if this upper limit check is supported) 02/01/04 Nov. 2003 Card A-63 Table A-4 Add tag 9F5D ‘Available Offline Spending Amount’ after tag 9F5C Change – Optional Nov. 2003 Card A-63 Table A-4 Add tag 9F5E ‘Consecutive Transaction International Upper Limit’ after tag 9F5C Addition – Conditional (if this upper limit check is supported) Feb. 2002 Card C11 Section C.11.1 Step 1 and Step 5 text & figure C.11.2 Step 1 and Step 4 text and figure VIS 1.4.0 was incorrectly modified. The Unique DEA Key A is used to create the block of data to be XORed with the PIN Block. May 2002 Card D-2 Section D.1 Paragraph following first set of bullets. Place the following sentence at the end of the paragraph. Visa rese