Search
183 articles found
HSM & Security
KEK (Key Encryption Key) is an encryption key used to encrypt the DEK (Data Encryption Key) and decrypt the encrypted DEK. The relationship between KEK and DEK: in encryption systems, keys are managed in a layered structure.
Online & Authorization
A contactless transaction is a fast, secure payment made without direct contact between the card and the POS terminal (without reading the chip or magnetic stripe). Can every card be used for contactless payments? For a transaction to be contactless…
Security
A Secure Card Reader for PIN (SCRP) is a multi-function card reader that turns any iOS, Android or Windows device into a payment terminal able to accept chip and contactless payments with PIN.
Laws & Regulations
A rule-based method has been adopted for setting the maximum interest rates on credit card transactions, using a reference rate based on banks' weighted average deposit rates plus 55 basis points. This post summarizes the method and the rates effective 1 November 2020.
ISO 8583
F45 (TRACK-1 DAT) carries the Track 1 data of the card in ISO 7813 format, including field separators and start and end sentinels but excluding the LRC character. It is 76 characters long.
Payment Systems
In payment or cash withdrawal transactions, the TR QR Code is generated by the POS or ATM. The card issuing bank must build its systems to read and act on this code. Errors usually stem from mishandling the long and short QR code flows, which are explained here.
Payment Institutions & E-Money
The “Review Report on Financial Technologies in Payment Services”, prepared after a study launched on 9 November 2020 to assess Türkiye's payments fintech ecosystem and its effects on competition, has been published.
HSM & Security
Non-face-to-face transactions in which the cardholder authorizes the merchant to store card data, and the merchant uses that stored data to carry out the transaction, are called Credential-on-File (CoF) transactions.
Merchant & POS
CAVV and AAV are verification codes used in 3D Secure transactions to ensure transaction integrity and security. CAVV is used by Visa, while AAV is used by Mastercard.
Payment Systems
Digitalization keeps changing the speed and shape of payments. AI-based payment agents pay on their own within user-defined limits and rules, completing transactions without the user initiating any action. This post explains how they work and what to watch for.
Security
“Software-based Mobile Payment Security Requirements” is a document published by EMVCo in April 2020 to guide payment application developers in building secure payment applications. This post summarizes its purpose and who it concerns.
Credit Card
CPV stands for Card Personalization Validation. It is Mastercard's term for the set of recommendations and instructions defined for the card personalization process. The equivalent for Visa is called GPR (Global Personalization Requirements).