智能卡可以在什么基础上拒绝终端(POS/ATM)要求的交易?
当终端将生成AC-1发送或生成AC-2命令到智能卡时,该卡可以批准终端请求的加密图类型,也可以通过在响应生成AC的响应中与AAC(00)响应交易来拒绝交易。 我的问题是,任何人都可以在什么基础上给我一些实时场景或示例,该卡是通过响应终端要求的AAC(00)来拒绝交易的?
When the Terminal sends Generate AC-1 or Generate AC-2 Command to the smart card, the card can either approve the cryptogram type requested by the terminal or can decline the transaction by responding with AAC(00) in the response to Generate AC.
My question is, can anyone give me some real-time scenarios or examples on what basis the Card declines the transaction by responding with AAC(00) requested by the Terminal?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
如果该卡需要在线授权并且终端无法上网,则该卡将拒绝交易。
该过程是一般卡风险管理步骤的一部分,另一个示例,终端可以要求TC离线完成交易,但该卡以ARQC响应,因为它需要在线授权。
If the card requires an online authorization and the terminal is unable to go online, the card will decline the transaction.
The process is part of the general Card Risk Management step where, another example, a terminal could request a TC to complete the transaction offline but the card responds with an ARQC because it wants an online authorization.
可能有几个原因。实时场景是“在实时环境中使用测试卡”,反之亦然。第一和第二交流用作卡与发行人之间的检查。
我刚刚搜索了很长时间的问题,该卡不断计算AAC而不是TC。最终,我发现PAN序列编号是在2个字节中发送的,其中有1个。当然,发行人使用了第一个字节,这是错误的。 PAN序列编号与其他一些字段一起加密,这很难找到。
因此,如果您有问题,请检查ARCQ计算中使用的所有字段。
There can be several reasons. A real time scenario is 'using a test card in a live environment' or visa versa. The 1st and 2nd AC's are used as a check between the card and the issuer.
I just searched a long time for an issue, where the card constantly calculated an AAC instead of a TC. Finally I discovered that the PAN sequence number was sent in 2 bytes, where 1 was expected. And of course the issuer used the first byte, which was the wrong one. The PAN Sequence number is, together with some other fields, encrypted, which made it hard to find.
So, if you have an issue, check all the fields used within the ARCQ calculations.