Acquiring Card Payments – Ilya Dubinsky

The standard actually speaks of “DF Name” rather than application ID, but from practical point of view the terms are interchangeable. The FID is a 2-byte value which can be thought of as a reference to physical location of the dedicated file. For instance, the master file always has FID of 0x3F00, the first dedicated file immediately beneath it has a FID of 0x7F01 and so the forth so a terminal needs to know the exact structure and order of the DF tree on the card to be able to reference it correctly.

That requires a certain level of knowledge of card internals complicating interoperability. In contrast to it, the AID or DF name is a byte string of up to 16 bytes which does not depend on the application location in the chip file system. To better understand the difference between the two reference methods, consider the task of invoking a browser from within a program on a personal computer to navigate to a website.

Knowing the full path to the browser executable is one way of launching it, but it requires some knowledge regarding browsers deployed on the particular machine as well as their executable locations and filenames. That is similar to referencing a dedicated file using FID or an FID path. Alternatively, many operating systems provide URL handlers and a program could invoke a generic URL handler and pass the web page address to it leaving it to the OS to locate and launch the correct browser.

The AID can be either registered or proprietary. Its format and registration process are defined in ISO/IEC 7814-5. Obviously, the proprietary AID can be of arbitrary format occupying anywhere between 1 to 16 bytes. A registered AID consists of two parts: the registered application provider identifier (RID) and the proprietary application identifier extension (PIX). The rationale behind that is as follows: first, to avoid AIDs colliding each application provider is assigned an RID by a registering entity.

Then the application provider can optionally use the PIX to identify individual applications. The structure of a standard compliant AID is shown in figure 5.2. Figure 5.2: ISO/IEC 7814-5 compliant AID CAT denotes registration category. It is a 4-bit field with all possible values listed in the ISO/IEC 7816-5 standard. Two of those are worth mentioning here: A for international registration and D for national registration.

In the case of international registration, the RID consists of a 4-bit registration category indicator, with A coded as 1010 and the identifier itself consisting of 9 BCD digits spanning 36 bits. The PIX that can optionally follow the RID can be anywhere between 0 to 11 bytes (in whole bytes).

Taylor & Francis Group 6000 Broken Sound Parkway NW, Suite 300 Boca Raton, FL 33487-2742 © 2019 by Taylor & Francis Group, LLC CRC Press is an imprint of Taylor & Francis Group, an Informa business No claim to original U.S. Government works Printed on acid-free paper International Standard Book Number-13: 978-0-3673-4284-5 (Hardback) This book contains information obtained from authentic and highly regarded sources. Reasonable efforts have been made to publish reliable data and information, but the author and publisher cannot assume responsibility for the validity of all materials or the consequences of their use.

The authors and publishers have attempted to trace the copyright holders of all material reproduced in this publication and apologize to copyright holders if permission to publish in this form has not been obtained. If any copyright material has not been acknowledged please write and let us know so we may rectify in any future reprint. Except as permitted under U.S. Copyright Law, no part of this book may be reprinted, reproduced, transmitted, or utilized in any form by any electronic, mechanical, or other means, now known or hereafter invented, including photocopying, microfilming, and recording, or in any information storage or retrieval system, without written permission from the publishers.

For permission to photocopy or use material electronically from this work, please access www.copyright.com (http://www.copyright.com/) or contact the Copyright Clearance Center, Inc. (CCC), 222 Rosewood Drive, Danvers, MA 01923, 978-750-8400. CCC is a not-for-profit organization that provides licenses and registration for a variety of users. For organizations that have been granted a photocopy license by the CCC, a separate system of payment has been arranged. Trademark Notice: Product or corporate names may be trademarks or registered trademarks, and are used only for identification and explanation without intent to infringe.

Visit the Taylor & Francis Web site at http://www.taylorandfrancis.com and the CRC Press Web site at http://www.crcpress.com 1kitap1.com/en To my father.

This is a short excerpt from the opening of “” by Unknown, quoted for review and introduction purposes. All rights belong to the copyright holders.

Book Information

• Unique ID: 13f2c68b98dfa553
• File Extension: .pdf
• File Size: 5,911,195 bytes (5.637 MB)
• Title: –
• Author: Unknown
• ISBN: 9780367342845, 0000000000
• Pages: 319
• Language: English (en)

Reading & Word Statistics

• Estimated Reading Time: 408.96 minutes
• Total Words: 81,793
• Total Characters: 508,153
• Average Words per Page: 256.4
• Average Characters per Page: 1592.96

Most Frequent Words

card (1021), data (841), terminal (513), transaction (469), key (417), application (374), issuer (340), pin (329), value (324), authentication (284), cardholder (282), payment (270), used (254), see (253), emv (246), code (212), message (197), standard (195), also (192), case (187), kernel (184), scheme (182), number (172), command (171), tag (155), values (154), section (153), verification (151), authorization (150), format (149), transactions (145), online (144), iso (141), schemes (140), offline (139), between (139), keys (138), element (136), secure (133), one (132), two (131), chip (130), requirement (130), entry (127), contains (126), first (126), response (125), set (125), use (124), bit (123), processing (122), length (122), field (121), using (118), contactless (117), cards (116), track (116), pan (114), amount (113), process (112), public (112), acquirer (111), service (109), icc (107), account (102), file (102), security (99), method (97), either (95), network (92), merchant (91), date (90), cvm (90), byte (90), point (89), additional (89), magnetic (88), type (87), full (87), request (87), cvv (86), details (85), block (85), however (85), bytes (85), cryptogram (84), read (83), example (81), contain (81), pci (80), called (80), part (79), stripe (79), means (78), second (78), requirements (78), encryption (78), sent (77), list (76), access (75).

PDF Download