DDOL is the list of data the card needs when the DDA method is used during Data Authentication.
If the DDOL is not present in the card's data, the terminal may also keep a default DDOL list (Default Dynamic Data Authentication Data Object List) that can be used instead.
The terminal uses DOL processing rules to format the requested data, and then sends it to the card in the Internal Authenticate command.
To implement DDA (Dynamic Data Authentication), the DDOL must include the Unpredictable Number (Tag 9F37) data object, a random number generated by the terminal for each new EMV session.
After receiving the INTERNAL AUTHENTICATE command, the card
creates a digital signature using the byte string value coming from the terminal together with other data on the card.
This signature is referred to on the card as the Signed Dynamic Application Data object,
identified by Tag 9F4B.
The card sends this signature back to the terminal, where it is verified against the original copy of the ICC public key.
If the verification passes, the terminal accepts that the card is genuine.
