Verify a PIN at the Card Issuer Using the Diebold Method

Command:

Verify a PIN using the Diebold algorithm and generate Auth Para at the Card Issuer.

Notes:

The command enables a Card Issuer to recover an encrypted PIN block sent by the Acquirer.

 

Field

Length & Type

Details

COMMAND MESSAGE

Message header

m A

(Subsequently returned to the Host unchanged).

Command code

2 A

Value QS.

Source zone PIN key

16H or
1A+32H or 1A+48H

ZPK s  encrypted under LMK pair 06-07.

Destination zone PIN key

16H or
1A+32H or 1A+48H

ZPK d  encrypted under LMK pair 06-07.

PIN verification key

16 H

PVK encrypted under LMK pair 14-15.

AB

16 H

  

CD

16 H

  

STAN

6 N

  

CATID

16 H

Representing the 64 bit field.

AT

12 H

  

Index flag

1 A

Value K.

Index pointer

3 H

Points at Diebold table.

Algorithm number

2 H

Diebold algorithm required.

PIN block

16 H

  

PIN block format code

2 N

One of the valid format codes.

Account number

12 N

  

Validation data

20 H

Note: This must be the full 20-hexadecimal character field, exactly as it is to be used.

Offset

4 N

  

End message delimiter

1 C

Optional. Must be present if a message trailer is present. Value X’19.

Message trailer

n A

Optional. Maximum length 32 characters.

 

 

 


 

Field

Length & Type

Details

RESPONSE MESSAGE

Message header

n A

Returned to the Host unchanged.

Response code

2 A

Value QT.

  

2 N

00 : No errors

01 : PIN verification

10 : ZPKs parity error

11 : ZPKd or PVK parity error

12 : No keys loaded in user storage

13 : LMK error; report to supervisor

15 : Error in input data

20 : PIN block does not contain valid values

21 : Invalid user storage index

23 : Invalid PIN block format code

24 : PIN is fewer than 4 or more than 12 digits in       length

90 : Communications link parity error

91 : Communications link LRC error

92 : Transparent async data length error

Auth Para

16 H

Auth Para encrypted under a variant of ZPK d (only if there is no error).

End message delimiter

1 C

Present only if present in the command message. Value X’19.

Message trailer

n A

Present only if present in the command message. Maximum length 32 characters.