MasterCard / EMV Tags - Detail Definition - emv

I'm working on a project that requires me to parse the EMV data tags that I receive from a MasterCard purchase transaction. I'm using the EMV V4.3 Books from EMVCo and have access to the MasterCard documentation via MasterCard Connect.
I need to find the official documentation that details the definition of each tag.
For example: Tag 9F10 (Issuer Application Data).
Byte 1 represents the Key Derivation Index
Byte 2 represents the Crypto Version Number
Byte 3 to Byte 8 represents the Card Verification Results
The EMVCo books detail some of the tags but not all. Can anyone point me to the correct documentation to use?
Much appreciated
Regards,
Dev

Download M/Chip Requirements—For Contact and Contactless • 29 September 2016 and then read section Appendix B Analysis of DE 55
This has list of mandatory and optional tags you will receive in a MasterCard online transaction and has detailed explanation of tags, its data, and sub elements. It also has explanation for each Bit wherever applicable. Enjoy!!

You can find a complete list of all EMV tags her:
https://www.eftlab.com/knowledge-base/145-emv-nfc-tags/

Related

Difference between EMV tags and ISO 8583 Data Elements

Just wanted to know what the difference between EMV tags and data elements is
For example EMV books specify PAN to be contained in 5A tag however ISO 8583 mentions PAN to be present in DE2 element
Does that mean that these Data Elements are nothing but a collection of these emv specified tags ?
For example DE2 contains the 5A tag?
Both are specifications. ISO8583 deals with the request response messages between different institutions, as per ISO. Each payment schema( eg. Visa, MasterCard, .. ) have their own implementation of ISO8583 which is to be followed when sending/receiving messages to/from them.
EMV is a consortium of payment schemes, and it has specification as to how chip and terminal should communicate with each other, 3D secure, QR code specifications etc. So mostly dealing the acquirer side.

9F1D is it a configuraiton or derived from other config

When checking a payment app static config I found something I consider a divergence.
<ttq>A2000000</ttq>
<term_caps>E06808</term_caps>
<txn_tag_data>9f1d082CB8000000000000</txn_tag_data>
which is sent to kernel during a CTLS transaction as:
9F3303E06808 -> SET 004000 (Byte 2 Bit 7) Enciphered PIN for online verification
9F6604A2000000 -> NOT SET 040000 (Byte 1 Bit 3) Online PIN supported
9f1D082CB8000000000000 -> NOT SET (Byte 1 Bit 7) Enciphered PIN verified online (Contactless)
I couldn't find the information in EMV books if the tags must be consistent.
If enciphered online PIN is set in terminal capabilities shouldn't it be also set in TTQ and 9F1D?
These tags referred to different card schemes. Up to your terminal config if you need to enable/disable Online PIN with different card schemes requirements and between EMV Contact and Contactless capabilities.
Tag 0x9F66 used by some Card schemes. It is not always Terminal Transaction Qualifiers (TTQ). The meaning is different per scheme Kernel and not always used.
Check details in EMV Contactless Specifications for Payment Systems books.
Tag 0x9F1D Terminal Risk Management Data defined in EMV Contactless Specifications for Payment Systems, Book C-2, Kernel 2 which is MasterCard's PayPass.
It needs to be configured on terminal application at least for MasterCard Contactless related kernel initialization.
In the MTIP 2.0 Build 260 Test plan (current as of 2021) MasterCard also add EMV Contact cases MTIP65.* when terminal need to return this Tag value to the card for EMV Contact transaction withing CDOL1 data.

How to get positive response for GETCHALLENGE request in EMV? [duplicate]

This question already has an answer here:
GETCHALLENGE issue(6D00) in EMV for MasterCard
(1 answer)
Closed 5 years ago.
In the case of GETCHALLENGE Request (0084000000), we are getting the positive response in the case of VISA\DEBIT card, but for AMEX and MASTERCARD we are getting the response as 6D00 (Instruction code not supported or invalid).
Not all instructions are supported by all card products. Different card products also support different transaction types, off the top of my head (so take my answer with a grain of salt) get challenge should online be necessary for offline transactions with asymmetric crypto where the terminal needs to identify itself to the card. It's possible (though not likely nowadays) that the card doesn't have a crypto coprocessor capable of handling this, so that code path is disabled. It's also possible that the MC and Amex EMV scheme specifics require a different transaction flow and you're not fulfilling the prerequisites for get challenge.
Without konw the sequence of commands you're sending to the card and the profile on the card, it's difficult to provide more information than the 6D00 is already providing.

How do I tell if a product is prime eligible in the Amazon Product Advertising API?

Been using the API for about a week now and I can't seem to figure out how to access this data in ItemSearch.
The attribute IsEligibleForPrime tells you whether the Article is for Amazon Prime or not. It is delivered with the Response Group OfferListings
http://docs.aws.amazon.com/AWSECommerceService/latest/DG/CHAP_response_elements.html#IsEligibleForPrime
If you perform an ItemSearch the ResponseGroup will contain IsEligibleForSuperSaverShipping which will tell you if it is Prime eligible.

What is the official name for a credit card's 3 digit code? [closed]

Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 12 years ago.
Improve this question
I am working on a payment form. What is that 3-digit code on the back of the card called? I can't find a consistent reference as to what to call it.
It is called the Card Security Code (CSC) according to Wikipedia, but has also been known as other things, such as the Card Verification Value (CVV) or Card Verfication Code (CVC).
The second code, and the most cited, is CVV2 or CVC2. This CSC (also known as a CCID or Credit Card ID) is often asked for by merchants for them to secure "card not present" transactions occurring over the Internet, by mail, fax or over the phone. In many countries in Western Europe, due to increased attempts at card fraud, it is now mandatory to provide this code when the cardholder is not present in person.
Because this seems to be known by multiple names, and its name doesn't seem to be printed on the card itself, you'll probably (unfortunately) still need to tell your users how to find the code - ie by describing it as the "3 digit code on back of card".
2018 update
The situation has not improved, and is now worse - there are even more different names now. However, you can if you like use different terms depending on the card type:
"CVC2" or "Card Validation Code" – MasterCard
"CVV2" or "Card Verification Value 2" – Visa
"CSC" or "Card Security Code" – American Express
Note that some American Express and Discover cards use a 4-digit code on the front of the card. See the above linked Wikipedia article for more.
You can't find a consistent reference because it seems to go by at least six different names!
Card Security Code
Card Verification Value (CVV or CV2)
Card Verification Value Code (CVVC)
Card Verification Code (CVC)
Verification Code (V-Code or V Code)
Card Code Verification (CCV)
It's got a number of names. Most likely you've heard it as either Card Security Code (CSC) or Card Verification Value (CVV).
Card Security Code
From Wikipedia,
The Card Security Code is located on the back of MasterCard, Visa and Discover credit or debit cards and is typically a separate group of 3 digits to the right of the signature strip.
On American Express cards, the Card Security Code is a printed (NOT embossed) group of four digits on the front towards the right.
The Card Security Code (CSC), sometimes called Card Verification Value (CVV or CV2), Card Verification Value Code (CVVC), Card Verification Code (CVC), Verification Code (V-Code or V Code), or Card Code Verification (CCV)[1] is a security feature for credit or debit card transactions, giving increased protection against credit card fraud.
There are actually several types of security codes:
* The first code, called CVC1 or CVV1, is encoded on the magnetic stripe of the card and used for transactions in person.
* The second code, and the most cited, is CVV2 or CVC2. This CSC (also known as a CCID or Credit Card ID) is often asked for by merchants for them to secure "card not present" transactions occurring over the Internet, by mail, fax or over the phone. In many countries in Western Europe, due to increased attempts at card fraud, it is now mandatory to provide this code when the cardholder is not present in person.
* Contactless Card and Chip cards may supply their own codes generated electronically, such as iCVV or Dynamic CVV.
The CVC should not be confused with the standard card account number appearing in embossed or printed digits. (The standard card number undergoes a separate validation algorithm called the Luhn algorithm which serves to determine whether a given card's number is appropriate.)
The CVC should not be confused with PIN codes such as MasterCard SecureCode or Visa Verified by Visa. These codes are not printed or embedded in the card but are entered at the time of transaction using a keypad.