Derive a PIN Using the Diebold Method

Command:

Generate a PIN using the Diebold method.

Notes:

Requires the Diebold table to be in user storage.

 

Field

Length & Type

Details

COMMAND MESSAGE

Message header

m A

(Subsequently returned to the Host unchanged).

Command code

2 A

Value GA.

Index flag

1 A

Value K.

Table pointer

3 H

The value of the base location of the Diebold table.

Algorithm number

2 H

The number of the Diebold algorithm required.

Offset

4 N

For a derived PIN, this is 0000. Otherwise, an offset can be used.

Account number

12 N

The 12 right-most digits of the account number, excluding the check digit.

Validation data

16 A

User-defined data consisting of hexadecimal characters and the character N, which indicates to the HSM where to insert the last 5 digits of the account number. The data must be right-justified and padded with F.

End message delimiter

1 C

Optional. Must be present if a message trailer is present. Value X’19.

Message trailer

n A

Optional. Maximum length 32 characters.

 RESPONSE MESSAGE

Message header

n A

Returned to the Host unchanged.

Response code

2 A

Value GB.

Error code

2 N

00 : No errors

12 : No table loaded in user storage

13 : LMK error; report to supervisor

15 : Error in input data

21 : Invalid user storage index

PIN

L N or LH

The derived PIN encrypted under LMK pair 02-03.

End message delimiter

1 C

Present only if present in the command message. Value X’19.

Message trailer

n A

Present only if present in the command message. Maximum length 32 characters.