EmvFAQ.docx

EmvFAQ.docx

《EmvFAQ.docx》由会员分享，可在线阅读，更多相关《EmvFAQ.docx（33页珍藏版）》请在冰豆网上搜索。

EmvFAQ

General

1.WhatisEMVCo,andwhatisitsrole?

2.WhoarethemembersofEMVCo?

3.WhataretherolesoftheInternationalPaymentSystems?

4.WhodoIcontactwithqueriesregardinginterpretationandapplicationoftheEMVspecifications?

5.IsthereanEMVCohelp-lineIcancall?

6.WhatisthepurposeofthemailingregistrationfacilityandhowcanIregister?

7.HowaretheEMVstandardsmaintained?

8.HowdotheEMVspecificationsfitinwithotherinternationalstandards?

9.WhatdoestheEMVCoapprovalactivitycover?

10.DoesEMVCosupportchipcardmigration?

11.HowdoesEMVCoseekinputfromtheusercommunity?

12.HowdoIregisterachangeinmyCompanyNamewithEMVCo?

13.WhatrestrictionsapplywithrespecttouseoftheEMVTrademark?

1.WhatisEMVCo,andwhatisitsrole?

EMVCo,LLC,wasformedinFebruary1999byEuropayInternational,MasterCardInternationalandVisaInternationaltomanage,maintainandenhancetheEMV™IntegratedCircuitCardSpecificationsforPaymentSystems.

EMVCo'sprimaryroleistomanage,maintainandenhancetheEMVIntegratedCircuitCardSpecificationswiththeobjectiveoftoensureensuringinteroperabilityandacceptanceofpaymentsystemintegratedcircuitcardsonaworldwidebasis.

EMVCoisalsoresponsiblefortypeapprovalprocesses,whichincludeterminalcompliancetesting,aswellasCommonCoreDefinitions（CCD）andCommonPaymentApplication（CPA）cardcompliancetesting.ThesetestingprocessesensureasingleterminalandcardapprovalatalevelthatwillallowcrosspaymentsysteminteroperabilitythroughcompliancewiththeEMVspecifications.

2.WhoarethemembersofEMVCo?

ThecurrentmembersofEMVCoareAmericanExpress,JCB,MasterCard,andVisa.EachoftheseorganizationsownsanequalshareofEMVCoandhasrepresentativesintheEMVCoorganizationatthemanagementandworkinggrouplevels.

3.WhataretherolesoftheInternationalPaymentSystems?

EachpaymentsystemmemberparticipatesinEMVCoactivitiesonanequalbasis.Eachactivityisassignedtoworkinggroupsinwhichallthemembershaverepresentatives.Alldecisionsaremadeonaconsensusbasisamongthememberorganizations.

4.WhodoIcontactwithqueriesregardinginterpretationandapplicationoftheEMVspecifications?

AllqueriesregardinginterpretationandapplicationoftheEMVspecificationsshouldbedirectedthroughthe"ContactUs"facility,whichisavailableontheEMVCowebsite-.

5.IsthereanEMVCohelp-lineIcancall?

EMVConeitheroperatesahelp-linefacilitynorprovidesdirectcontactinformation.AllquestionstoEMVCoshouldbesubmittedusingthe"ContactUS"'facilityavailableontheEMVCowebsite-

6.WhatisthepurposeofthemailingregistrationfacilityandhowcanIregister?

TheEMVCoMailingListregistrationfacilityensuresthatyoureceiveautomaticnoticeswhenanynewinformation,suchasSpecificationUpdatesorWhat'sNewitemsarebeenpostedonthewebsite.Toregister,enteryourcontactinformationviathe'MailRegistration'facility,whichisavailableontheEMVCowebsite-

7.HowaretheEMVstandardsmaintained?

SincetheEMV’96Version3.1.1release,EMVCohaspublishedEMV2000Version4.0inDecember2000and,mostrecently,Version4.1inMay2004.Inadditiontoperiodicallypublishingupdatedversionsofthespecifications,EMVCoissuesclarifications,correctionsand/orchangestothespecificationsandcommunicatestheseviabulletins,errataandapplicationnotesontheEMVCowebsite.

8.HowdotheEMVspecificationsfitinwithotherinternationalstandards?

TheEMVSpecificationsarebuiltupontheexistingISO7816seriesofstandardsforIntegratedCircuitCardswithContacts.

TheISO7816standardsweredevelopedbyaninter-industrygroupandcontainvariousoptionsapplicabletomultiplesectors.TheEMVCoSpecificationscontainaselectionofoptionstakenfromtheISO7816standardsthatarerelevantforthefinancialsector.

Throughpaymentsystemsrepresentatives,EMVCopromotesandendeavorstoharmonizethestandardizationworkbyactivelycontributingtotheISOstandardsdraftingprocessinordertoensureongoingcompatibilitybetweentheISOstandardsandtheEMVspecifications.

9.WhatdoestheEMVCoapprovalactivitycover?

EMVCohascompiledandpublishedasettestrequirementsandtestcasesfortheterminal-to-chipcardinterface（level1）andforthepaymentapplication（Level2）.Furthermore,EMVCohasaccreditedlaboratoriestoprovidetestingservicestoterminalvendorsandapplicationproviders.AttheconclusionoftheapprovalprocessEMVCoissuesaLetterofApprovalandlistsapprovedproductsontheEMVCowebsite.

10.DoesEMVCosupportchipcardmigration?

EMVCoisnotinvolvedinpromotionofchipmigration.Chipmigrationstrategiesaretheresponsibilityoftheindividualcardschemes.

11.HowdoesEMVCoseekinputfromtheusercommunity?

EMVCoutilizesacommentfacilityonitswebsitewhichisopentothepublictosubmitsuggestionsforimprovementtothespecifications,reportanyissuesidentified,orposeanyquestions.

Inaddition,EMVCoholdssemi-annualAdvisors’meetings,consistingofseniorrepresentativesfromcountriesimplementingchipcardsolutions,tosolicitfeedback,promotediscussion,andshareexperiences.

ThegoaloftheAdvisorsistoprovideaforumtodevelopacommonunderstandingforglobalacceptanceofchipcardsissuedbythefinancialservicesindustry.Whileadvisoryincapacity,itdoesprovideanessentialcommunicationlinktotheEMVSpecificationsdevelopmentprocess.

Anycountrythatis"chip-active"andpromotestheEMVchipcardspecificationscanrequesttoberepresentedontheAdvisors’group.

12.HowdoIregisterachangeinmyCompanyNamewithEMVCo?

IfacompanywithexistingEMVCoapprovedproductschangesitsname,thenamechangewilltransferallapprovalsissuedundertheoldcompanynametothenewone.Thefollowingprocedureisrequiredtoaccommodatethechangerequest:

1.Thecontactpersonassociatedwiththeoldcompanynameisrequiredtoprovideinwritingtheauthorizationofthetransfer.ThisistobeawrittenletteronofficialcompanyletterheadandsenttoEMVCoattheaddressbelow.Ifthecontactpersonisnolongeremployedatthecompany,thenanewcontactmustbeappointed.Theinformationrequiredisthefollowing:

oOldCompanyName

oExistingRegistrationNumber（Thiswillremainunchangedforthenewcompanyname）

oTypeApprovalLevel（1or2）

oNewCompanyName（withAddress,Contact,PhoneandFaxnumbers）

2.Anewcontractmustbecompletedunderthenewcompanyname.SeetheformssectionontheEMVCowebsite.

13.WhatrestrictionsapplywithrespecttouseoftheEMVTrademark?

BelowisabriefoverviewofEMVCo'spolicyasitrelatestoitstwotrademarks.ThesemarksconsistoftheEMV（tm）wordmarkandtheEMVCologo.PleasereviewtheentireEMVCoMarkUsageGuidelinesbeforeusingeitheroftheEMVCotrademarks.

EMV（tm）WORDMARK

ThetrademarkrelatedtotheEMVIntegratedCircuitCard,Terminal,ApplicationandSecuritySpecificationsforPaymentSystemsistheEMV（tm）wordmark,whichisusedwhenreferenceismadetotheEMVspecifications.

EMVCoLLCwillmonitortheuseofthismarkaspartofanon-goingprocess,andwilltakewhateverstepsarenecessarytoensurethattherearenoimproperorillegalusesoftheEMV（tm）trademark.Notethatanyuseofthetrademarkalsorequirestheusertoproperlyattributeownership,forexample:

\"EMV（tm）isatrademarkownedbyEMVCoLLC.\"

AnytimethatacompanyoranyotherentityreferstoEMV（tm）,itmustbeformattedexactlyasshownhere,andnotincludeparentheses,commasoranyothermodification.Thetrademarkdenotationsymbol\"TM\"shouldappearatleastonceineachpieceoftextpage,typicallyafterthefirstuseofthemarkonthefirstpageoftext.

WheretheEMV（tm）wordmarkisusedbyanybodyotherthanEMVCoLLC,itsuseshallneverimplyauthorizationorendorsementbyEMVCoLLC,norwillitimplythattheunauthorizeduserhasobtainedEMVCoapprovalforanyofitsproducts.AnyclaimthataparticularproductisapprovedbyEMVCo,canbeverifiedbyrequestingtheEMVColetterofapprovalassociatedwiththeproductfromthevendorand/orbycheckingtheapprovedproductlistontheEMVCowebsiteat.

EMVCoLOGO

TheEMVCoLogoisadesignmarkforexclusiveusebyEMVCoLLCandmaynotbeusedbyanybodyotherthanEMVCoinconnectionwiththeEMV（tm）specifications,supplementaryspecifications,aproductorimplementationsupportingit,orforanyreasonwhatsoever.WheretheEMVCoLogoisusedbyanybodyotherthanEMVCoLLC,itsuseshallneverimplyauthorizationorendorsementbyEMVCoLLC,norwillitimplythattheunauthorizeduserhasobtainedEMVCoapprovalforanyofitsproducts.

Security

1.Forhowlongareexistingkeylengthslikelytobeused?

2.Whatistheprocessforreviewingthelifespanofkeylengths?

3.DoesEMVusex.509publickeycertificates?

4.WhatistheEMVCopositiononellipticcurvesorotheralternativecryptography?

5.WherecanIfindotherdocumentationthatwillhelpmeunderstandthesecurityissuesrelatingtoEMV?

1.Forhowlongareexistingkeylengthslikelytobeused?

AttheendofeachyearEMVComakesrecommendationstothePaymentsSystemsregardingexpirydatesofPaymentSystempublickeys.TheserecommendationsarepublishedinEMVCoNoticeBulletinsthatareavailablefromtheBulletins/NoticessectionoftheEMVCowebsite.

2.Whatistheprocessforreviewingthelifespanofkeylengths?

EveryyearEMVCoexecutesareviewofthesecurityofRSA.Basedonthat,arecommendatio