EMV Certification Library

All levels

• 0.1 The three levels of EMV certificationWho tests what at Level 1, 2 and 3, in which order, and what you get at the end.
• 0.2 EMV data primerBER-TLV, templates, data object lists and the tags you meet in every trace.
• 0.3 GlossaryThe terms and abbreviations of EMV certification, in one line each.

Level 1 — the reader

• 1.1 Contact interface and ATRActivation, reset, the answer to reset byte by byte, and protocol selection.
• 1.2 T=0 transportAPDU cases, procedure bytes, 61xx and 6Cxx, and how EMV commands travel on T=0.
• 1.3 T=1 transportBlocks, chaining, information field sizes, waiting time extension and error recovery.
• 1.4 Contactless Level 1ISO 14443 Type A and B activation, the block protocol and the EMV polling loop.
• 1.5 Level 1 certification in practiceWhat the laboratory measures, the usual failures, and how to prepare samples.

Level 2 — the kernel

• 2.1 The contact transaction, end to endThe twelve steps from application selection to completion, and the data each one uses and sets.
• 2.2 Application selectionPSE and directory, list of AIDs, partial selection, priority, confirmation and retries.
• 2.3 Initiate application processing and reading dataPDOL, GET PROCESSING OPTIONS, AIP and AFL, records, and the data that must be there.
• 2.4 Offline data authenticationSDA, DDA and CDA: the certificate chain, the CAPK, the hashes, and every way they fail.
• 2.5 Processing restrictionsApplication versions, usage control, effective and expiry dates.
• 2.6 Cardholder verificationThe CVM list, conditions, offline and online PIN, signature, no CVM and the CVM results.
• 2.7 Terminal risk managementFloor limit, random selection, velocity checking and the exception file.
• 2.8 Action analysis and cryptogramsTAC and IAC with worked examples, the cryptogram types, CDA requests and what the card may answer.
• 2.9 Online processing, issuer authentication and scriptsThe authorisation exchange, ARPC methods, EXTERNAL AUTHENTICATE and issuer scripts.
• 2.10 Completion and exceptionsThe final cryptogram, unable to go online, declines after approval, card removal and fallback.
• 2.11 Terminal configurationTerminal type and capabilities, action codes, limits, AID tables and CA public keys.
• 2.12 Contactless: Entry PointPre-processing, protocol activation, combination selection, kernel activation and outcomes.
• 2.13 Contactless kernels comparedThe kernels at a glance: who uses which, EMV and mag-stripe modes, fDDA and CDA, CVM.
• 2.14 Level 2 certification in practiceThe ICS, the laboratory session, typical failures and regression after changes.

Level 3 — the terminal

• 3.1 From kernel to certified terminalWhat Level 3 adds over Level 2: application logic, host messages, receipts and brand rules.
• 3.2 Mapping EMV to ISO 8583Field 55, POS entry mode, PAN sequence number, track 2 equivalent data and amounts.
• 3.3 Exceptions the brands testFallback, service codes, reversals, advices, partial approval, referrals and timeouts.
• 3.4 Brand programmes overviewHow terminal integration testing is organised across the payment systems.
• 3.5 Preparing a test sessionConfiguration freeze, logs, receipts, the evidence pack, findings and re-tests.
• 3.6 Reading a failed test logWorked examples: from a laboratory finding to the root cause in the trace.