IBM 2 Computer Hardware User Manual


 
Encrypted_PIN_Verify CCA Release 2.54
Encrypted_PIN_Verify (CSNBPVR)
Platform/
Product
OS/2 AIX Win NT/
2000
OS/400
IBM 4758-2/23 X X X X
The Encrypted_PIN_Verify verb extracts a trial PIN (T-PIN) from an encrypted
PIN-block and verifies this value by comparing it to an account PIN (A-PIN)
calculated by using the specified PIN-calculation method. Certain PIN-calculation
methods modify the value of the A-PIN with the clear offset (O-PIN) value prior to
the comparison. The verb also supports derived Unique Key Per Transaction
(UKPT) PIN-block encryption (ANSI X9.24) for decrypting the input PIN block.
Supported PIN-block formats:
IBM 3624
ISO-0 (equivalent to ANSI X9.8, VISA-1, and ECI-1 formats).
ISO-1 (same as the ECI-4 format)
ISO-2.
Supported PIN-calculation methods:
IBM 3624 PIN
IBM 3624 PIN Offset
IBM German Bank Pool Institution PIN
VISA-PVV
Interbank PIN.
To use this verb, specify:
Processing choices using rule-array keywords:
A PIN-calculation method
Optionally, a PIN-extraction method
Optionally, unique-key-per-transaction processing (UKPT) with the
UKPTIPIN keyword
An input PIN-block decrypting key, or the base key used to derive the
PIN-block enciphering key.
A PIN-verifying key to be used to calculate the PIN.
A PIN profile for the input PIN-block, which for UKPT processing must be
extended with the current key sequence number (CKSN). See “PIN Profile” on
page 8-10, “Current Key Serial Number” on page 8-11, and “UKPT Calculation
Methods” on page E-13.
When using the ISO-0 block format, a PAN to be used in extracting the PIN.
See “Personal Account Number (PAN)” on page 8-13.
The PIN block that contains the PIN to be verified.
The length of the PIN to be checked if you specify the IBM-PIN or the
IBM-PINO calculation methods in the rule array.
In the data array: a decimalization table, account validation data, and for certain
calculation methods, an offset value
8-42 IBM 4758 CCA Basic Services, Release 2.54, February 2005