IBM 2 Computer Hardware User Manual


 
CCA Release 2.54
Create encrypted PIN blocks for transmission
Generate institution-assigned PINs
Generate an offset or a VISA PIN-validation value (PVV)
Create encrypted PIN blocks for a PIN-verification database
Change the PIN-block encrypting key or the PIN-block format
Verify PINs.
Normally, a customer inserts a magnetic-stripe card and enters a PIN (a trial PIN)
into an automated teller machine to identify himself. The automated teller machine
does the following:
Obtains account information and other information from the magnetic stripe on
the card
Formats the trial PIN into a PIN block and encrypts the PIN block
Sends the information from the card, the encrypted PIN block, and other data in
a message to a host program for verification.
To verify a PIN, a program normally uses one of the following two methods:
PIN-calculation method. In this method, the program calls the PIN verification
verb that decrypts the trial PIN block, extracts the trial PIN from the PIN block,
re-calculates the account-number-based PIN, adjusts this value with any offset,
compares the resulting value to the trial PIN, and returns the results of the
comparison.
PIN database method. In this method, the encrypted PIN-block that contains
the correct customer-PIN is stored in a PIN-verification database. Upon receipt
of an encrypted trial-PIN block, the program calls a verb to translate (decipher,
then encipher) the trial PIN block to the format and key used for the encrypted
PIN-block in the PIN-verification database. The two encrypted PIN-blocks can
then be compared for equality.
In general, a PIN can be assigned by an institution or selected by a customer.
Some PIN-calculation methods use the institution-assigned or customer-selected
PIN to calculate another value that is stored on the magnetic stripe of the
account-holder's card or in a data base and that is used in the PIN-verification
process.
Chapter 8. Financial Services Support Verbs 8-3