Search
172 articles found
Merchant & POS
In EMV-based debit card transactions, PIN verification is decisive for both security and liability. What happens when a card that only supports online PIN is sent to the issuer without a PIN, and the issuer approves it? Who owns the risk?
Payment Systems
Online PIN is verified by the card-issuing institution through the message itself, while Offline PIN is verified on the chip. This article explains the difference and when PIN bypass is allowed.
Merchant & POS
A PIN pad lets cardholders safely enter their PIN during POS transactions and lets contactless cards be tapped to transfer card data to the POS. Here is how it works.
EMV
The Pin Change/Unblock command is used after card issuance to let the issuer remove a card's PIN block, or instantly change the reference PIN and remove its block, as well.
Merchant & POS
Chip&Pin, introduced in Turkey on March 31, 2006, is a payment method that greatly reduces the risks of card copying and loss or theft fraud. The chip on the card reduces copying risk, while the 4-digit PIN prevents unauthorized use of a lost card.
Credit Card
The PIN Try Counter is a value stored on the card's chip showing the number of remaining offline PIN attempts. Each incorrect offline PIN entry decreases it by 1, and it resets when the correct PIN is entered.
Credit Card
Nearly all transactions where credit and debit cards are used physically require a PIN. The PIN represents the cardholder's identity. Here is what happens if a customer enters the wrong PIN too many times and how the card is restored.
Credit Card
The PIN Try Count is the maximum number of failed offline PIN verifications that can be made with the card. Banks usually keep both the consecutive wrong PIN count and the maximum wrong PIN count.
Security
Published by the PCI SSC, Software-based PIN Entry on COTS (SPoC) is a standard that provides a software-based approach for protecting PIN entry on commercial off-the-shelf devices such as smartphones and tablets.
Credit Card
PVKI is the abbreviation for PIN Verification Key Index. It is located within the card's Track 1 and Track 2 data and is used in PVV calculation. It can take values from 1 to 6, usually defaulting to 1.
HSM & Security
ZPK, also known as the PIN Protection Key, is a data encryption key that is distributed automatically and used to encrypt PINs. It is also referred to as the 'Working Key'. This key allows PIN information to be carried securely across the network.
Credit Card
PVK (Pin Verification Key) is a key held on the HSM, used in PIN generation and verification, and therefore to confirm that a PIN is correct. On a shared network it is encrypted under TMK or ZMK; on a local network it is encrypted under one of the LMK pairs.